{"vulnerability": "cve-2026-14440", "sightings": [{"uuid": "9124c79f-4bb4-457a-8b3a-8fdd18e55ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmsckanzm2k", "content": "CVE-2026-14440 - Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records\nCVE ID : CVE-2026-14440\n \n Published : July 1, 2026, 10:35 p.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : Description:\n\n\n\n\nTo issue and renew TLS certificates o...", "creation_timestamp": "2026-07-02T00:41:20.402582Z"}, {"uuid": "c6ab9d80-6f47-43cd-bf4b-85121f1d4260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpods3piie27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14440 \u0432 Cloudflare: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/DB63B140-6706-4C6F-B5B0-4FECBBDB038B", "creation_timestamp": "2026-07-02T15:26:54.733662Z"}, {"uuid": "6cf8c096-71fa-4d76-b6ba-eec62edbc6d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7sdapjc2j", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14440 \u0432 Cloudflare: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1084A1FA-DEB3-4B91-8E6F-C80B891A4855", "creation_timestamp": "2026-07-03T09:20:47.226459Z"}, {"uuid": "8964130d-7a2e-4e6e-ab77-4b1e9d832975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/david-osipov.vision/post/3mq4ydbfzrs2n", "content": "My first CVE is public: CVE-2026-14440!\n\nCloudflare Universal SSL / CAA / RFC 8657.\n\nNot a breach, not one-click. But it shows how default certificate automation can override stricter domain-owner controls.\n\nFound & reported by me.\n\nnvd.nist.gov/vuln/detail/...", "creation_timestamp": "2026-07-08T11:11:55.552397Z"}, {"uuid": "452951b6-6c84-4808-824d-bd7df04a0810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/david-osipov.vision/post/3mq4ydjzqzk2n", "content": "My first CVE is public: CVE-2026-14440!\n\nCloudflare Universal SSL / CAA / RFC 8657.\n\nNot a breach, not one-click. But it shows how default certificate automation can override stricter domain-owner controls.\n\nFound & reported by me.\n\nnvd.nist.gov/vuln/detail/...", "creation_timestamp": "2026-07-08T11:11:56.012047Z"}, {"uuid": "fbda6c45-ec3c-4ae6-8d5a-a7590c2e745e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/david-osipov.vision/post/3mq4ydjzrys2n", "content": "My first CVE is public: CVE-2026-14440!\n\nCloudflare Universal SSL / CAA / RFC 8657.\n\nNot a breach, not one-click. But it shows how default certificate automation can override stricter domain-owner controls.\n\nFound & reported by me.\n\nnvd.nist.gov/vuln/detail/...", "creation_timestamp": "2026-07-08T11:11:56.456773Z"}, {"uuid": "4e3e60c4-8e29-491d-8a9b-47f2cf8d3210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mq7f6d5kyc2p", "content": "\ud83d\udd12 CVE-2026-14440: Cloudflare Universal SSL CAA records supersede user CAA\n\nA vulnerability (CVE-2026-14440) in Cloudflare's Universal SSL feature causes its automatically managed CA...\n\nhttps://tinyurl.com/28eoa32e #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-07-09T10:06:54.661341Z"}, {"uuid": "0fccc108-d6c0-472b-a78b-2aea08e24271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mqbsvbppz72k", "content": "CVE-2026-14440: Cloudflare Universal SSL y los registros CAA\n\n\u00bfTu dominio en Cloudflare Universal SSL est\u00e1 expuesto? Verific\u00e1 tus registros CAA en 5 minutos y fren\u00e1 la emisi\u00f3n de certificados fraudulentos por CVE-2...\n\n#cve202614440 #cloudflare #universalssl #registroscaa #rfc8657", "creation_timestamp": "2026-07-10T09:17:50.140494Z"}, {"uuid": "663a2cdd-0517-486a-bea6-2837fe740269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mqsc5xnqsk2a", "content": "[NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding \u2014 CVE-2026-14440 assigned 163 days after public no-CVE disclosure\n\nPosted by NotCVE Advisories on Jul 15---------------------------------------------------------------------------- \nNotCV\u2026\n#hackernews #news", "creation_timestamp": "2026-07-16T22:33:37.118655Z"}, {"uuid": "a7cdd494-0db6-4395-8a0f-210b5c6b4a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://david-osipov.vision/en/blog/cybersecurity/cloudflare-ssl-mitm-flaw-2026/", "content": "", "creation_timestamp": "2026-07-17T20:23:22.433117Z"}, {"uuid": "f204a7e4-2bf2-41b7-8605-1d0c749db0e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://vulnerability.circl.lu/comment/8df693d3-38e3-4ee0-b4a5-e8d95d54dac9", "content": "", "creation_timestamp": "2026-07-17T20:29:56.261584Z"}, {"uuid": "80f27bf9-6d34-4a88-b8bc-6f9fe182aefb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://david-osipov.vision/ru/blog/cybersecurity/cloudflare-ssl-mitm-flaw-2026/", "content": "", "creation_timestamp": "2026-07-18T10:02:42.319820Z"}, {"uuid": "d4ff7b65-76dd-41db-b538-9a6c449a010c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://community.cloudflare.com/t/critical-security-gap-cloudflare-must-fully-support-rfc-8657-caa/", "content": "", "creation_timestamp": "2026-07-18T10:03:35.591662Z"}, {"uuid": "da4f4bb4-83ed-4144-90f0-fd3578664994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://community.cloudflare.com/t/universal-ssl-exposes-domains-to-bgp-leaks-re-venezuela-analysis/879930", "content": "", "creation_timestamp": "2026-07-18T10:03:51.109804Z"}, {"uuid": "1d3d3111-20a9-43ad-91fd-046dcba1c70b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://zenodo.org/records/18330221", "content": "", "creation_timestamp": "2026-07-18T10:04:01.301175Z"}, {"uuid": "100cc962-9f9a-48c8-983d-45d63b0c30a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://zenodo.org/records/21261469", "content": "", "creation_timestamp": "2026-07-18T10:04:24.564152Z"}, {"uuid": "21fbc417-97fb-409c-904b-e3cca81b7721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://doi.org/10.5281/zenodo.18201411", "content": "", "creation_timestamp": "2026-07-18T10:04:39.622458Z"}, {"uuid": "434e7d0a-b2a8-45b2-a83b-bf2c0c68ecf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://www.instagram.com/reel/DaX5IpqRGHG/", "content": "", "creation_timestamp": "2026-07-18T10:05:38.532697Z"}, {"uuid": "7521208c-2024-48df-8894-ee1668cd7f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://www.linkedin.com/posts/david-osipov_cve-cybersecurity-tls-share-7480577048147738624-8_KV", "content": "", "creation_timestamp": "2026-07-18T10:06:04.700433Z"}, {"uuid": "3537991e-010b-47c3-ac9c-73b431529aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://www.facebook.com/share/r/188T1YsMFA/", "content": "", "creation_timestamp": "2026-07-18T10:06:31.750978Z"}, {"uuid": "9f2c51f0-e4c4-4c34-a7d4-12f1e9d3a01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://www.wikidata.org/wiki/Q140402353", "content": "", "creation_timestamp": "2026-07-18T10:06:49.017997Z"}, {"uuid": "f1fbacae-b55f-45c3-a98d-66822b83549e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "http://www.wikidata.org/entity/Q140402353", "content": "", "creation_timestamp": "2026-07-18T10:07:01.117112Z"}, {"uuid": "77ce7a7c-7bc4-48aa-ad35-87fbc6f97c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://ru.wikipedia.org/wiki/\u041e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435:Cloudflare#\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0435_\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435_\u043e_CVE-2026-14440", "content": "", "creation_timestamp": "2026-07-18T10:07:25.233140Z"}, {"uuid": "8e2edad2-86dd-4fbc-adc2-e1a9b21ef44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://en.wikipedia.org/wiki/Talk:Cloudflare", "content": "", "creation_timestamp": "2026-07-18T10:07:53.935453Z"}, {"uuid": "9b09eb29-7e36-4e21-9f89-495d5213eae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mqzc4jmp7q2l", "content": "[NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding \u2014 CVE-2026-14440 assigned 163 days after public no\n\nThis article correctly identifies the potential for weakened account binding, but it focuses heavily on a theoretical risk rather than demonstrating e\u2026", "creation_timestamp": "2026-07-19T17:21:26.564819Z"}, {"uuid": "e8b9bf91-d003-4347-ab71-9e78780a8c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://www.reddit.com/r/cybersecurity/comments/1v1i16a/cloudflares_caa_flaw_looks_impractical_for/", "content": "", "creation_timestamp": "2026-07-20T14:24:09.397077Z"}]}