{"vulnerability": "cve-2026-3990", "sightings": [{"uuid": "84a1dfac-cc14-46c1-9e93-10a08177944d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3990", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgtyzcctf42x", "content": "", "creation_timestamp": "2026-03-12T08:43:19.291677Z"}, {"uuid": "0df6efcb-b1f6-4b8e-b4d7-ff06e060e062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39906", "type": "published-proof-of-concept", "source": "Telegram/70ang71mEb6lYSNq2VZHiuuV7i7KfipPcLMkKo_Gk9-znXQ", "content": "", "creation_timestamp": "2026-04-14T23:22:29.000000Z"}, {"uuid": "566d7448-56b7-411e-9469-07546e7aa9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39907", "type": "published-proof-of-concept", "source": "Telegram/70ang71mEb6lYSNq2VZHiuuV7i7KfipPcLMkKo_Gk9-znXQ", "content": "", "creation_timestamp": "2026-04-14T23:22:29.000000Z"}, {"uuid": "7a004126-3deb-4697-a89b-8067f842ef51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39909", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmughnpos2j", "content": "CVE-2026-39909 - llama.cpp\nThe llama.cpp software that runs language models can be tricked into executing malicious code from anyone on the network, even if they are not logged in. An attacker can send\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#llamacpp #ggmlorg #CVE #infosec", "creation_timestamp": "2026-08-21T23:00:05.727474Z"}, {"uuid": "6a15b71f-9c1b-4feb-9972-70ad8d494e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39909", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnpapzpi62j", "content": "CVE-2026-39909\nThe llama.cpp program\u2019s remote control feature can be tricked into using memory that has already been released. An attacker on the network can send specially crafted requests and take control of the server,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T07:00:04.078463Z"}, {"uuid": "f7030df2-1312-4b9e-b3e8-d2a6c8c95fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39909", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnxmwudoc2y", "content": "CVE-2026-39909 - llama.cpp\nThe llama.cpp software before a certain update can be tricked into running code from anywhere on the network. An attacker can send specially crafted messages that cause\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#llamacpp #debian #Debian14 #CVE #infosec", "creation_timestamp": "2026-08-22T09:30:04.443603Z"}, {"uuid": "1d16f9cb-3a15-4275-b697-2bca3f0294c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39909", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmdnsier222", "content": "\ud83d\udfe0 CVE-2026-39909 - High (8.1)\n\nllama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUT...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-39909/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T17:59:59.301458Z"}, {"uuid": "387f4eb7-a0d1-498e-b3a4-1e3b3a7c3147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39903", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdad5ewbv2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-39903 \u0432 Simple Machines Forum: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B88ECDF9-039E-4A38-A220-67E410072E0A", "creation_timestamp": "2026-07-10T22:50:46.431262Z"}, {"uuid": "42ba1ee0-a7a4-4217-b6c4-89bbd394164a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39903", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdf7jzsx32y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-39903 \u0432 Simple Machines Forum: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9F4F3F2C-D95B-406D-9157-4C8D45536782", "creation_timestamp": "2026-07-11T00:18:14.659275Z"}, {"uuid": "395ad59b-2f64-4200-9472-ec46def1ab15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39909", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtme52infc2p", "content": "\ud83d\udea8 CVE-2026-39909 \u2014 CVSS 9.2 CRITICAL\n\nllama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUTE handler ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-39909\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T18:08:30.688157Z"}, {"uuid": "7ef09464-349f-43b9-b00c-58574262c5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39902", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99731", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39902\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kx00007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-26 03:48:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n5th RCE OS Command Injection on Data Input\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T00:00:10.948196Z"}, {"uuid": "94c76a3d-2320-4779-9116-da6778bea3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39902", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99731", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-39902\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kx00007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-26 03:48:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n5th RCE OS Command Injection on Data Input\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-26T05:00:03.674799Z"}]}