{"vulnerability": "cve-2026-1537", "sightings": [{"uuid": "a0cf0afc-faa2-4294-ac19-7a2c3cc0a4e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15378", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqbvpddyrq2r", "content": "CVE-2026-15378 - red hat openshift ai (rhoai)\nThe Guardrails-detectors component allows attackers to access sensitive information and read critical data from a system. This is a serious risk because it could expose\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-07-10T10:08:04.447604Z"}, {"uuid": "3c66f7da-cd94-4542-88c0-dd615dad80ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15378", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116895214843907721", "content": "Red Hat OpenShift AI hit by CRITICAL SSRF (CVE-2026-15378): guardrails-detectors flaw allows remote attackers to access cloud metadata, K8s API, and secrets via crafted XSD. Monitor for exploitation & restrict egress. https://radar.offseq.com/threat/cve-2026-15378-server-side-request-forgery-ssrf-in-6764a44d8dfc74c1 #OffSeq #CVE202615378 #RedHat #Infosec", "creation_timestamp": "2026-07-10T10:30:26.532349Z"}, {"uuid": "0c6fe51b-feef-47fe-8785-c172bf5e68fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15378", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqbwxefz3c2d", "content": "CVE-2026-15378: CRITICAL SSRF in Red Hat OpenShift AI via guardrails-detectors. Remote attackers can access internal data & secrets. Review controls & monitor activity. https://radar.offseq.com/threat/cve-2026-15378-server-side-request-forgery-ssrf-in-6764a44d8dfc74c1 #OffSeq #RedHat #CVE202615378", "creation_timestamp": "2026-07-10T10:30:28.434034Z"}, {"uuid": "bf15c50d-4f64-484f-9150-025374635ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15378", "type": "seen", "source": "https://bsky.app/profile/cybercod.bsky.social/post/3mqbxmq2tao2u", "content": "Thanks for flagging this! CVE-2026-15378 is definitely a priority for RHOAI users. Always check the official Red Hat Security Advisory (RHSA) for the specific patch and mitigation steps. Stay secure!", "creation_timestamp": "2026-07-10T10:42:24.938003Z"}, {"uuid": "9750f4a1-6673-4ab1-a7a5-480ce6c694d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15378", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqc3w4yo4x2q", "content": "CVE-2026-15378 - Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)\nCVE ID : CVE-2026-15378\n \n Published : July 10, 2026, 10:16 a.m. | 1\u00a0hour, 32\u00a0minutes ago\n \n Description : A flaw was found in the `guardrails-...", "creation_timestamp": "2026-07-10T11:59:15.395883Z"}, {"uuid": "caab6334-c844-462d-a9d6-9c35c85ddde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15378", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcanm67ve26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15378 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 guardrails-detectors: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/699F6C1C-0548-457E-9174-143AF000CFCD", "creation_timestamp": "2026-07-10T13:23:57.819423Z"}, {"uuid": "28d24fa3-8db4-4733-aae6-7e986e058032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15374", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd62hzrn727", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15374 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Eleveo Call Recording: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E23E9068-9BA9-483F-AE2F-4805CBF259FF", "creation_timestamp": "2026-07-10T22:10:08.224762Z"}, {"uuid": "345adb49-b435-4672-a15c-6e392518ff16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15373", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd6penuac2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15373 \u0432 Eleveo Call Recording Software: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8992AC33-FB97-4AD7-9E4B-E8271078B35F", "creation_timestamp": "2026-07-10T22:21:49.235404Z"}, {"uuid": "470d2a37-6576-4f75-9eb0-46437ffc1e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15374", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd7n572pl2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15374 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Eleveo Call Recording: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1FAC2A68-D7A9-4446-9F72-4DAB908A9DE3", "creation_timestamp": "2026-07-10T22:38:28.159879Z"}, {"uuid": "76369ec7-2293-4daf-af4a-ae31e69e1ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15376", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdalbcr6n2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15376 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Eleveo Call Recording: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A3AB4ABA-9218-4A58-9019-2FD1D71C3C1D", "creation_timestamp": "2026-07-10T22:55:19.326438Z"}, {"uuid": "da4657cd-af15-44e2-bf7f-8aaa179739da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15377", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdalv4kgn2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15377 \u0432 Eleveo Call Recording Software: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/C320C44A-F306-4FBC-B694-F4C465CCD196", "creation_timestamp": "2026-07-10T22:55:40.148190Z"}, {"uuid": "9574a9fd-4c49-47e9-a568-1c424051841f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15373", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdevow4gb2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15373 \u0432 Eleveo Call Recording Software: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/740C3B68-B1E7-4B45-B383-FC82FBEDEE26", "creation_timestamp": "2026-07-11T00:12:43.746013Z"}, {"uuid": "5c8f4365-6752-45b6-b185-b7e2ff9c9eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15375", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdexrohb62w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15375 \u0432 Eleveo Call Recording Software: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/40E6BC39-8AAF-4961-9F94-7751D599169D", "creation_timestamp": "2026-07-11T00:13:54.152602Z"}, {"uuid": "ae8a50a2-8782-479e-9f61-87b396f675c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15376", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdeyn7bjf2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15376 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Eleveo Call Recording: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9725F53C-33EB-4062-B164-13419DC6AF9E", "creation_timestamp": "2026-07-11T00:14:22.824510Z"}, {"uuid": "c5c48d80-6705-41bd-b336-6ee03a21e1b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15374", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdf2zgcke2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15374 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Eleveo Call Recording: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/09B38F18-5746-405A-BEFE-C473DD471BA5", "creation_timestamp": "2026-07-11T00:15:42.706302Z"}, {"uuid": "780152de-e1ea-4095-9cf5-839fcdcae88f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15377", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdf6d2id22c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15377 \u0432 Eleveo Call Recording Software: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A9204080-A824-46AD-B62A-CCED0C5E4F4C", "creation_timestamp": "2026-07-11T00:17:33.533171Z"}, {"uuid": "27604c69-c96e-46e4-b261-c7401494cbd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15373", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdgqlsyb62e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15373 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Eleveo Call Recording: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A5B803F6-1C76-42B4-9D4F-67D5FBDCA083", "creation_timestamp": "2026-07-11T00:45:40.598121Z"}, {"uuid": "c966fc10-f710-48bf-be18-b67cfde2058a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15378", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhgzjsxjf2a", "content": "\ud83d\udd34 CVE-2026-15378 - Critical (9.3)\n\nA flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote atta...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15378/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-12T15:01:19.641665Z"}, {"uuid": "38d992a9-32f1-435b-915a-12262f59d104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15378", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqrivg5pqt24", "content": "CVE-2026-15378 is a blind SSRF in Red Hat OpenShift AI. The guardrails-detectors flaw exposes cloud credentials and Kubernetes secrets.\n\n#OpenShiftAI #CVE202615378 #SSRF #RedHat #Kubernetes", "creation_timestamp": "2026-07-16T15:01:26.393598Z"}, {"uuid": "f9e3f018-ceaf-4546-b378-8e69e28943c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15379", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqtb5v3lia25", "content": "CVE-2026-15379 - Arbitrary File Read as SYSTEM in Symantec ITMS\nCVE ID : CVE-2026-15379\n \n Published : July 17, 2026, 6:47 a.m. | 49\u00a0minutes ago\n \n Description : The Altiris WMI provider exposes a class (AltirisAgent_Stream) that allows any local standard user to read the cont...", "creation_timestamp": "2026-07-17T07:48:19.519789Z"}, {"uuid": "213f08bc-853f-4596-b0c0-da9670e8b59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15370", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr5lqxtnyr2i", "content": "CVE-2026-15370 - Libssh: libssh: stack buffer overflow in sftp server longname construction\nCVE ID : CVE-2026-15370\n \n Published : July 21, 2026, 9:16 a.m. | 28\u00a0minutes ago\n \n Description : A flaw was found in libssh. During SFTP server directory listing, the longname field is...", "creation_timestamp": "2026-07-21T10:24:34.802722Z"}]}