{"vulnerability": "cve-2025-71389", "sightings": [{"uuid": "079ad6ad-f2cf-4f95-a04f-b9476240bc3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71389", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrdurrtxmt2v", "content": "CVE-2025-71389 - cal.diy\nAn attacker can send a special request to your Cal.com server without needing a password, and execute code on your server. This could allow them to access sensitive information or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#caldiy #calcom #CVE #infosec", "creation_timestamp": "2026-07-23T22:22:05.473848Z"}, {"uuid": "6e32c419-adcb-41a8-87e8-8505d8960f37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71389", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdwyjh62x2a", "content": "\ud83d\udd34 CVE-2025-71389 - Critical (10)\n\nCal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution beca...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-71389/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T23:01:38.234521Z"}]}