{"vulnerability": "CVE-2026-77087", "sightings": [{"uuid": "50cee068-07f8-4f88-b4f1-411cf5e81bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmtcp7bps2j", "content": "CVE-2026-77087 - paperclip\nThe Paperclip library in versions before 0.3.1 does not verify the web request\u2019s host name when it runs in its default \u2018local trusted\u2019 setting. This lets a malicious web page\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#paperclip #paperclipai #CVE #infosec", "creation_timestamp": "2026-08-21T22:40:06.026608Z"}, {"uuid": "aa3e5865-dac8-4c0c-adbe-9ec2b8aed645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnoou4nyc24", "content": "CVE-2026-77087\nIf you run Paperclip versions earlier than 0.3.1 on a local machine, it does not check the web address it receives. This lets a malicious web page cause the program to run commands you did not intend,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T06:50:04.924657Z"}, {"uuid": "07acc8c1-689a-4f71-88c7-47df65f827bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtm4yhm7ea26", "content": "\ud83d\udd34 CVE-2026-77087 - Critical (9.6)\n\nPaperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing att...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-77087/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T16:00:41.351209Z"}, {"uuid": "c2e997b0-063e-4029-80f9-38f37617991c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5ij7ehq2e", "content": "\ud83d\udea8 CVE-2026-77087 \u2014 CVSS 9.4 CRITICAL\n\nPaperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77087\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:09:37.875756Z"}, {"uuid": "ed2a3840-aacb-4e27-b45e-522e803b66a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eo3udgc5hduu4", "content": "CVE-2026-77087 - Paperclip before 0.3.1 Remote Code Execution via DNS Rebinding\nCVE ID : CVE-2026-77087\n \n Published : Aug. 21, 2026, 3:16 p.m. | 40\u00a0minutes ago\n \n Description : Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attac...", "creation_timestamp": "2026-08-21T16:23:35.333627Z"}, {"uuid": "31442e25-fc1b-47f5-8668-6f06a919f2a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtmanhhbvm2o", "content": "CVE-2026-77087 - Critical RCE in Paperclip <0.3.1 via DNS rebinding. Host header validation flaw allows authenticated API abuse. CVSS 9.6. No patch yet - update when available. #CVE #infosec #Paperclip\n\nhttps://www.valtersit.com/cve/CVE-2026-77087/", "creation_timestamp": "2026-08-21T17:06:05.314842Z"}, {"uuid": "7fe926f0-8a3f-4cc5-ae1f-63ff3ce58938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77087", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117134587680465778", "content": "CVE-2026-77087 - Critical RCE in Paperclip <0.3.1 via DNS rebinding. Host header validation flaw allows authenticated API abuse. CVSS 9.6. No patch yet - update when available. #CVE #infosec #Paperclip\nhttps://www.valtersit.com/cve/CVE-2026-77087/", "creation_timestamp": "2026-08-21T17:06:36.765349Z"}]}