{"vulnerability": "cve-2026-1814", "sightings": [{"uuid": "a83e2f3a-dc77-4f52-a0ab-9e49303d4524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1814", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/rapid7-security-advisory-av26-108", "content": "", "creation_timestamp": "2026-02-10T19:29:41.000000Z"}, {"uuid": "06712fb4-b545-413c-afe0-d9981c0dc30d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18140", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrva7bpwl72o", "content": "\ud83d\udfe0 CVE-2026-18140 - High (7.5)\n\nUncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18140/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T20:01:44.509322Z"}, {"uuid": "e1447af5-e5f0-402e-94f9-c18a41beccc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18141", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxgkpctbz2n", "content": "\ud83d\udfe0 CVE-2026-18141 - High (8.2)\n\nA flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansibl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18141/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-31T17:00:49.674546Z"}, {"uuid": "fcee25f9-8d32-4f2b-8e0f-f3855a5894dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1814", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/84239", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-1814\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pbrass\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-14 16:48:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploit for CVE-2026-1814\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-14T17:00:04.000000Z"}, {"uuid": "1404f2a6-2bdb-4175-b51b-a1696253fe32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1814", "type": "seen", "source": "Telegram/pxejltfM6t0bOCIPs7C1JhjfACvEO7Gy-x7DlZhJbRtGeV0", "content": "", "creation_timestamp": "2026-05-14T21:00:04.000000Z"}, {"uuid": "cc23ec73-edc6-4215-bc1a-d5b2a0375989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18146", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt2rcc3eej2p", "content": "CVE-2026-18146 fluentform (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-14T18:16:09.342225Z"}, {"uuid": "af995e9b-84fc-4c10-8204-e1b97089d18a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18149", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mupi6ljdq22w", "content": "\ud83d\udea8 Moderate-severity security fix in undici (7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-18149: undici vulnerable to Denial of Service via orphaned RetryHandler response body\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T17:24:08.635422Z"}, {"uuid": "e59c3bd3-e926-4eb1-9f4b-fe3c5a306252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18147", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gvpjw73fbh6bz", "content": "CVE-2026-18147 - Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url\nCVE ID : CVE-2026-18147\n \n Published : Sept. 9, 2026, 4:39 p.m. | 20\u00a0minutes ago\n \n Description : A flaw was found in FreeIPA. An unauthenticated remo...", "creation_timestamp": "2026-09-09T17:30:50.818328Z"}, {"uuid": "59b26601-2c7d-44a5-8ff0-73dc1ff5733b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18147", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mv4gji5m542r", "content": "FreeIPA Web UI\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u30ea\u30bb\u30c3\u30c8\u30da\u30fc\u30b8\u306bDOM XSS\u8106\u5f31\u6027\u3002\u8a8d\u8a3c\u306a\u3057\u306e\u9060\u9694\u653b\u6483\u8005\u304c\u7d30\u5de5\u3057\u305f\u30ea\u30f3\u30af\u3067\u7ba1\u7406\u8005\u6a29\u9650\u3092\u596a\u53d6\u3059\u308b\u53ef\u80fd\u6027\u3002\nCVE-2026-18147 CVSS 8.1 | HIGH", "creation_timestamp": "2026-09-09T20:59:01.795633Z"}, {"uuid": "a31a163c-d138-4fdc-9a1d-34f74a555f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwfqrnvqe42n", "content": "\ud83d\udea8 BREAKING\n\nA stranger with no login can upload a PHP file and run it on your WooCommerce store.\n\nRequest a Quote for WooCommerce (through 2.9.2) has a critical file-upload flaw, and there is no patch yet.\n\nDisable the popup quote form now. (CVE-2026-18143)", "creation_timestamp": "2026-09-26T07:21:43.652610Z"}, {"uuid": "2d0e93a9-4f28-447d-b1d2-c9cdfdff226d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwfrb4pkm22d", "content": "\ud83d\udd34 CVE-2026-18143 - Critical (9.8)\n\nThe Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18143/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T07:30:22.679856Z"}, {"uuid": "f2b78bd9-d765-4625-8c60-da30e53986b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18143", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117336167086081177", "content": "CVE-2026-18143 | CRITICAL unrestricted file upload in Addify Request a Quote for WooCommerce (<=2.9.2). Unauth attackers can achieve RCE. Disable public quote rule/multi-page popup or restrict uploads. https://radar.offseq.com/threat/cve-2026-18143-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-addify-request-a-quote-for-1e9c37910ddb8c12 #OffSeq #WordPress #Vuln #RCE", "creation_timestamp": "2026-09-26T07:30:23.672156Z"}, {"uuid": "99b7347a-fdc9-43e4-9b6a-33af2313624d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18143", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwfrba2qas2q", "content": "Addify Request a Quote for WooCommerce (<=2.9.2) hit by CRITICAL CVE-2026-18143: unrestricted file upload enables unauth RCE. Disable public quote/multi-page popup or limit uploads. https://radar.offseq.com/threat/cve-2026-18143-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-addify-re...", "creation_timestamp": "2026-09-26T07:30:25.758462Z"}, {"uuid": "6d2f6b03-fccc-4079-ba45-0787c23df6e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwftcstqhi24", "content": "\ud83d\udea8 CVE-2026-18143 \u2014 CVSS 9.8 CRITICAL\n\nThe Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all vers...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-18143\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T08:07:06.242100Z"}, {"uuid": "aaaec915-9f73-4a45-8d43-797131f3caa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwg63jwtto2y", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cRequest a Quote for WooCommerce\u300d\u306e\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\uff082.9.2\u307e\u3067\uff09\u3067\u3001\u30d5\u30a1\u30a4\u30eb\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304cPHP\u30d5\u2026\nCVE-2026-18143 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-26T11:19:52.981830Z"}, {"uuid": "25bd2c4c-5aed-48a4-b0b1-48d24c26c07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "https://t.me/GithubRedTeam/103410", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-18143\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 08:00:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload in Addify Request a Quote for WooCommerce \u2264 2.9.2 via public AJAX afrfq_submit_quote_via_popup \u2014 unsafe move_uploaded_file() with attacker-controlled .php filenames into web-accessible RFQ temp storage (popup quote flow required). CVSS 9.8. Python check/exploit PoC \u2192 pocbit.org/pocs/cve-2026-18143\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T09:00:09.000000Z"}, {"uuid": "1a39ce2f-137f-4782-b24f-3f681ccdc0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103410", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-18143\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 08:00:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated arbitrary file upload in Addify Request a Quote for WooCommerce \u2264 2.9.2 via public AJAX afrfq_submit_quote_via_popup \u2014 unsafe move_uploaded_file() with attacker-controlled .php filenames into web-accessible RFQ temp storage (popup quote flow required). CVSS 9.8. Python check/exploit PoC \u2192 pocbit.org/pocs/cve-2026-18143\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-26T09:00:09.000000Z"}, {"uuid": "9425bdb4-bcf8-4186-8dfa-aff237fd5c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwh7msd5pa2o", "content": "CVE-2026-18143 - request a quote for woocommerce\nThe Request a Quote for WooCommerce plugin for WordPress (versions up to 2.9.2) lets people who are not logged in upload files through a popup form. Because the upload\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#addify #CVE #infosec", "creation_timestamp": "2026-09-26T21:20:05.354064Z"}, {"uuid": "b2dc586d-c574-427a-adfc-28cd4beaf233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwhjpizzjj2v", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-18143: The Request a Quote for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including\u2026\nCVSS 9.8 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-18143\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-27T00:20:33.958037Z"}, {"uuid": "99ed7fea-86be-4310-857e-7ed9ba10fc09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18143", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwinhcvh7f2a", "content": "WooCommerce Request a Quote plugin \u22642.9.2: CVE-2026-18143, CVSS 9.8 arbitrary file upload. Patch to 2.9.3 now\u2026 https://0daynews.com/articles/2026-09-27-woocommerce-request-quote-cve-2026-18143-file-upload/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3743", "creation_timestamp": "2026-09-27T11:00:14.265863Z"}, {"uuid": "9423cbae-e936-4b3d-8b77-c74c336b78f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18149", "type": "seen", "source": "https://gist.github.com/alon710/7e27dd642f9867b84b33f236871de4c5", "content": "# CVE-2026-18149: CVE-2026-18149: Unresolved Response Body Hang in Undici RetryHandler\n\n> **CVSS Score:** 5.9\n> **Published:** 2026-09-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-18149\n\n## Summary\nA resource management vulnerability in the Undici HTTP client (CWE-772) occurs when the retry interceptor receives a partial body payload followed by a non-retryable response error on a subsequent connection attempt, resulting in orphaned streams and potential Denial of Service (DoS).\n\n## TL;DR\nAn unmitigated resource leak in undici's RetryHandler causes application-level hangs and Denial of Service when handling aborted responses followed by non-retryable errors.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-772\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 5.9 (Medium)\n- **EPSS Score**: 0.0036 (0.36%)\n- **Impact**: Denial of Service (DoS)\n- **Exploit Status**: Proof-of-Concept (PoC) available\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- Node.js applications using Undici HTTP client within 7.x and 8.x version branches.\n- **undici**: >= 7.11.0 < 7.29.1 (Fixed in: `7.29.1`)\n- **undici**: >= 8.0.0 < 8.10.2 (Fixed in: `8.10.2`)\n\n## Mitigation\n\n- Disable retry middleware configurations when interacting with untrusted or external APIs.\n- Implement client-side request timeout wrappers using AbortSignal to prevent indefinite stream hangs.\n- Enforce API gateways or reverse proxies to normalize and sanitize broken TCP connections before they reach application-level clients.\n\n**Remediation Steps:**\n1. Identify all projects and packages containing dependencies on Undici via `npm ls undici`.\n2. Upgrade Undici to version 7.29.1 or 8.10.2 depending on the respective release branch.\n3. Validate the patch behavior by deploying the reproduction test suite in target environments.\n\n## References\n\n- [GitHub Security Advisory GHSA-pmjh-fq2x-6v4x](https://github.com/nodejs/undici/security/advisories/GHSA-pmjh-fq2x-6v4x)\n- [NVD CVE-2026-18149 Details](https://nvd.nist.gov/vuln/detail/CVE-2026-18149)\n- [CVE.org CVE-2026-18149](https://www.cve.org/CVERecord?id=CVE-2026-18149)\n- [OpenJS Foundation Security Advisories](https://cna.openjsf.org/security-advisories.html)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-18149) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-29T23:30:32.000000Z"}, {"uuid": "39f50a0a-6a43-4ab8-853c-4e85abdf878c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103828", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-18143\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ghannyxploit404\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 04:40:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nsingle PoC for CVE-2026-18143 Unauth AFU (Arbitrary File Upload)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-30T05:00:07.000000Z"}, {"uuid": "0630431c-0bee-4b0c-aef7-e13c963bce83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18149", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mwqcb7c76i2q", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-18149 impacts undici in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/710\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-09-30T12:01:15.169296Z"}, {"uuid": "c86410c9-aeb3-4d4c-beab-996a0ba30c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18145", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-watchguard-2", "content": "", "creation_timestamp": "2026-09-30T02:32:02.000000Z"}, {"uuid": "3da9bc1d-74ab-4d61-80ae-5f998c24231c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "Telegram/hVzfzjG8HX7XkYPzE6lD345G0zvEviIj5TgMsHDl6OFau3k", "content": "", "creation_timestamp": "2026-09-30T15:00:07.000000Z"}, {"uuid": "f9d3e710-2fcb-41df-935d-628632be45f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "Telegram/exVAhrP1-AAubpKYl6FaYOVvUMj-EWVwuiZhrcEaPgn_YiI", "content": "", "creation_timestamp": "2026-09-30T11:00:16.000000Z"}, {"uuid": "5b8ea8ae-98d4-4136-964c-bbf1841d7239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "seen", "source": "Telegram/xYupCOiSFluxoRtEIIOqRNM-7ebwlq042DjZCiLHA-8Nahg", "content": "", "creation_timestamp": "2026-09-29T09:00:05.000000Z"}, {"uuid": "4cfaf1ea-fb82-4d1c-b8b3-72fedff829ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "published-proof-of-concept", "source": "Telegram/exVAhrP1-AAubpKYl6FaYOVvUMj-EWVwuiZhrcEaPgn_YiI", "content": "", "creation_timestamp": "2026-09-30T11:00:16.000000Z"}, {"uuid": "b07a81fa-ece9-4e2a-b43c-8cf90e9f0fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "published-proof-of-concept", "source": "Telegram/hVzfzjG8HX7XkYPzE6lD345G0zvEviIj5TgMsHDl6OFau3k", "content": "", "creation_timestamp": "2026-09-30T15:00:07.000000Z"}, {"uuid": "cc238eb4-d9e7-4aa9-b9e6-e2b63469d22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18143", "type": "published-proof-of-concept", "source": "Telegram/xYupCOiSFluxoRtEIIOqRNM-7ebwlq042DjZCiLHA-8Nahg", "content": "", "creation_timestamp": "2026-09-29T09:00:05.000000Z"}, {"uuid": "9b7d93e0-d67d-44c2-9777-9ee0bc185c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-18140", "type": "seen", "source": "https://gist.github.com/alon710/5749b97520bb81c62a30e2ec8149d3bb", "content": "# CVE-2026-18140: CVE-2026-18140: Uncontrolled Recursion in aws-smithy-json Token Skipping Path\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-10-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-18140\n\n## Summary\nCVE-2026-18140 is a denial-of-service vulnerability in the Amazon aws-smithy-json Rust crate. Under-validation of recursion depth within the unknown-key skipping path allows a remote, unauthenticated attacker to cause stack exhaustion and process aborts by sending deeply nested JSON arrays.\n\n## TL;DR\nA stack overflow vulnerability in the aws-smithy-json token-skipping function allows unauthenticated remote attackers to crash Smithy-rs generated servers via deeply nested JSON payloads.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **Vulnerability Type**: Uncontrolled Recursion (CWE-674)\n- **Impact**: Denial of Service (Process Abort)\n- **CVSS v3.1 Score**: 7.5 (High)\n- **EPSS Score**: 0.00431 (Percentile: 35.02%)\n- **Exploit Status**: Proof of Concept Only\n- **CISA KEV Status**: Not Listed\n- **Affected Components**: rust-runtime/aws-smithy-json/src/deserialize/token.rs\n\n## Affected Systems\n\n- aws-smithy-json Rust runtime crate\n- smithy-rs framework generated servers\n- **aws-smithy-json**: >= 0.32.0, <= 0.62.6 (Fixed in: `0.62.7`)\n\n## Mitigation\n\n- Update the aws-smithy-json dependency in your Cargo lock file to version 0.62.7 or higher.\n- Limit payload sizes at the reverse proxy or Web Application Firewall (WAF) layer.\n- Inspect incoming JSON arrays to block excessive consecutive nesting syntax (such as repeating brackets).\n\n**Remediation Steps:**\n1. Navigate to the project directory containing your Cargo.toml file.\n2. Run 'cargo update -p aws-smithy-json' to fetch the latest non-vulnerable version.\n3. Verify the Cargo.lock file ensures aws-smithy-json resolves to version 0.62.7 or higher.\n4. Recompile your application using 'cargo build --release' to embed the updated parsing logic.\n5. Deploy the patched executable into production environments.\n\n## References\n\n- [Patch Commit: Convert skip_inner to Iterative Pattern](https://github.com/smithy-lang/smithy-rs/commit/8f0882046c467981ba5b4fd91a10befa96bd262f)\n- [GitHub PR #4685: Replace Recursion with Iterative Model](https://github.com/smithy-lang/smithy-rs/pull/4685)\n- [AWS Security Bulletin 2026-067-aws](https://aws.amazon.com/security/security-bulletins/2026-067-aws/)\n- [GitHub Security Advisory GHSA-8ffr-xgwf-xj56](https://github.com/smithy-lang/smithy-rs/security/advisories/GHSA-8ffr-xgwf-xj56)\n- [Crates.io Package Release: aws-smithy-json 0.62.7](https://crates.io/crates/aws-smithy-json/0.62.7)\n- [NVD - CVE-2026-18140 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-18140)\n- [Wiz Vulnerability Database Profile](https://www.wiz.io/vulnerability-database/cve/cve-2026-18140)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-18140) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-10-03T12:30:31.000000Z"}]}