{"vulnerability": "cve-2026-1564", "sightings": [{"uuid": "22f7a8a1-7b58-4d1b-87e6-2c5ff5663cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1564", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkvtn2oj62t", "content": "", "creation_timestamp": "2026-04-15T22:08:06.995289Z"}, {"uuid": "87228040-4665-46a9-87ec-0d26b6e21a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15643", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqna5acr362r", "content": "CVE-2026-15643 - awslabs.healthlake-mcp-server\nA security flaw in the AWS HealthLake MCP Server allows an attacker to steal sensitive credentials. This could enable unauthorized access to AWS resources. To fix this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aws #CVE #infosec", "creation_timestamp": "2026-07-14T22:14:05.969336Z"}, {"uuid": "a8784821-ed61-4c8b-8b12-2773f738a6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15643", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mqp7hgmo632m", "content": "CVE-2026-15643 - AWS HealthLake MCP Server SSRF via Unvalidated Pagination URL (2026-054-AWS) #patchmanagement", "creation_timestamp": "2026-07-15T17:07:13.452655Z"}, {"uuid": "e68ceecf-9455-4d47-b4ed-5fe1f886bf35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15642", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrksopm3nq2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15642 \u0432 Devolutions Server: \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/2D684270-7CC4-4E85-9743-26B14E874FC9", "creation_timestamp": "2026-07-26T16:33:11.964840Z"}, {"uuid": "71860d72-546d-4368-a325-344a26255713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15641", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrksq6cdem2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-15641 \u0432 Devolutions Server: \u0443\u0433\u0440\u043e\u0437\u0430 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E7D3BD97-AFFE-4B28-9D2B-95CC26D89459", "creation_timestamp": "2026-07-26T16:34:00.979020Z"}, {"uuid": "08aef77a-f6df-4f35-844b-f8a0a8da5458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15641", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrktkxj77j23", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05d1\u05d7\u05d5\u05e1\u05df \u05e9\u05dc Devolutions Server - CVE-2026-15641\n\n\n\nhttps://khesef.xyz/posts/B2CD06DC-FD33-47E1-A17B-4E57EE7B3507", "creation_timestamp": "2026-07-26T16:49:00.000889Z"}, {"uuid": "62155c77-6992-44e1-97ea-6ac43980d084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15640", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5nvvpu2odugbx", "content": "CVE-2026-15640 - Authentication Bypass via SAML Response Manipulation\nCVE ID : CVE-2026-15640\n \n Published : Sept. 16, 2026, 12:17 a.m. | 15\u00a0minutes ago\n \n Description : Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.\n ...", "creation_timestamp": "2026-09-16T01:19:54.337255Z"}, {"uuid": "d38d69cf-a5d5-47af-821b-cc9570b8cba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15640", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvlyiczaap24", "content": "CRITICAL: Delinea Secret Server (On-Prem, v10.5.0 \u2013 12.1.3) suffers auth bypass via SAML spoofing (CVE-2026-15640). No fix yet \u2014 monitor for abnormal logins. https://radar.offseq.com/threat/cve-2026-15640-cwe-290-authentication-bypass-by-spoofing-in-delinea-secret-server-on-prem-e1dc96081cdc3445 ...", "creation_timestamp": "2026-09-16T01:30:27.267527Z"}, {"uuid": "9cf54925-73d9-463c-8f81-049492aab9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15640", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmbcymmf62b", "content": "\ud83d\udea8 CVE-2026-15640 \u2014 CVSS 9.5 CRITICAL\n\nUnder certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-15640\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T04:08:31.081841Z"}, {"uuid": "61292ba6-9ab1-46f7-8aea-c0f02b2c2e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15640", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmpwpenrb2j", "content": "CVE-2026-15640 - secret server (on-prem)\nIf your on\u2011premises Secret Server trusts SAML authentication, an attacker could craft a valid SAML response that lets them log in as another user. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#secretserver #delinea #CVE #infosec", "creation_timestamp": "2026-09-16T08:30:04.850323Z"}, {"uuid": "508dab88-3c1f-45b0-bebd-cc51048253ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15640", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117281144842260353", "content": "Go hack more Secret Server shit.\nhttps://delinea.com/security-advisories\n\nAuthentication Bypass via SAML Response Manipulation - CVE-2026-15640\nReflected Cross-Site Scripting - CVE-2026-15639\nCryptographic Padding Oracle - CVE-2026-15638", "creation_timestamp": "2026-09-16T14:17:31.005149Z"}]}