{"vulnerability": "cve-2026-5817", "sightings": [{"uuid": "13eaf0d9-dd13-4eee-8c13-e82d1b39a617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58179", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mru4hhitrt2s", "content": "CVE-2026-58179 - trafficserver\nThe Apache HTTP Server on Debian Linux may allow an attacker to execute malicious code on a server by sending a specially crafted HTTP request. This could lead\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#trafficserver #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-07-30T09:22:04.553077Z"}, {"uuid": "22d059e6-a4ba-466c-8948-d71d62361cd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58179", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mruulwzo4u2k", "content": "CVE-2026-58179 - trafficserver\nApache Traffic Server versions 8.0.0 through 10.1.3 have a bug that can cause the program to crash. This is a serious issue because it can allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#trafficserver #canonical #Ubuntu1604LTS #CVE #infosec", "creation_timestamp": "2026-07-30T16:34:03.832554Z"}, {"uuid": "bab31267-44af-4243-912a-7df6423e71d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58179", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mryf3kjh5y2v", "content": "\ud83d\udccc CVE-2026-58179 - The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution input.\n\nThis issue affects Apache Traffic Server: from... https://www.cyberhub.blog/cves/CVE-2026-58179", "creation_timestamp": "2026-08-01T02:07:06.970944Z"}, {"uuid": "d1c14235-f7d8-4093-a7d4-c5aff57b239d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58177", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mryigttluu2r", "content": "\ud83d\udccc CVE-2026-58177 - The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors.\n\nThis issue affects Apache Traffic Ser... https://www.cyberhub.blog/cves/CVE-2026-58177", "creation_timestamp": "2026-08-01T03:07:07.017904Z"}, {"uuid": "c24c62eb-6e64-473e-8a88-ec0ab892580d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58175", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ms4b57ta672v", "content": "\ud83d\udccc CVE-2026-58175 - Apache Traffic Server leaks memory when handling HostDB SRV records.\n\nThis issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 t... https://www.cyberhub.blog/cves/CVE-2026-58175", "creation_timestamp": "2026-08-02T15:07:07.115212Z"}, {"uuid": "30b818b8-dbef-4b0f-877f-07c3f5e1a63f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58178", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mryu6dkplb2v", "content": "\ud83d\udccc CVE-2026-58178 - The Apache Traffic Server ESI plugin can recurse without bound and fetch attacker-controlled URLs.\n\nThis issue affects Apache Traffic Server: from 8.0... https://www.cyberhub.blog/cves/CVE-2026-58178", "creation_timestamp": "2026-08-01T06:37:06.341477Z"}, {"uuid": "ab28025d-4537-4c2a-adb6-d5ced766345c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5817", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3hreejc2q", "content": "\ud83d\udd17 CVE : CVE-2026-5817, CVE-2026-5843", "creation_timestamp": "2026-05-20T14:10:26.661671Z"}, {"uuid": "1d9f63ad-53ed-491a-80bf-4e1ff930d50a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5817", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxukvbeu2i", "content": "CVE-2026-5817 - Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends\nCVE ID : CVE-2026-5817\n \n Published : May 22, 2026, 7:24 p.m. | 56\u00a0minutes ago\n \n Description : The vllm-metal inference backend in Docker Model ...", "creation_timestamp": "2026-05-22T22:21:59.708934Z"}, {"uuid": "5642bce9-dbf5-4273-82c8-7dab5079a4d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5817", "type": "seen", "source": "Telegram/FSqoCpfRs5tcSkyHH0m-SqR_qPkUVgdaXVm9URZm7_nuGsY", "content": "", "creation_timestamp": "2026-05-22T23:00:13.000000Z"}, {"uuid": "6eeb9bbe-0ade-4e81-a1d4-5c7633fba236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5817", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnbaq2w2f324", "content": "\ud83d\udccc CVE-2026-5817 - The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs w... https://www.cyberhub.blog/cves/CVE-2026-5817", "creation_timestamp": "2026-06-01T23:37:06.197873Z"}, {"uuid": "d040322c-9962-46f4-9019-4156d2c55b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58171", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpjkzcp3tf2u", "content": "CVE-2026-58171 - Vibe-Trading\nCVE ID : CVE-2026-58171\n \n Published : June 30, 2026, 3:54 p.m. | 1\u00a0hour, 51\u00a0minutes ago\n \n Description : Vibe-Trading before 0.1.10 constructs the swarm run directory by joining a caller-supplied run identifier onto the runs base directory withou...", "creation_timestamp": "2026-06-30T17:52:54.540048Z"}, {"uuid": "983187d6-b43e-4dc2-a848-683f68ff04b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58176", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlccebvu23", "content": "CVE-2026-58176 - RuoYi-Vue-Plus - Missing Authorization on Workflow Task Management Endpoints\nCVE ID : CVE-2026-58176\n \n Published : June 30, 2026, 3:56 p.m. | 1\u00a0hour, 50\u00a0minutes ago\n \n Description : RuoYi-Vue-Plus through 5.6.2, fixed in commit 88d03d9, exposes workflow task ...", "creation_timestamp": "2026-06-30T17:57:56.292941Z"}, {"uuid": "182eb997-aebf-483e-a83d-d781b052400d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58174", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpjln3piyx2z", "content": "CVE-2026-58174 - Hermes WebUI\nCVE ID : CVE-2026-58174\n \n Published : June 30, 2026, 3:55 p.m. | 1\u00a0hour, 50\u00a0minutes ago\n \n Description : Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object ...", "creation_timestamp": "2026-06-30T18:03:58.463690Z"}, {"uuid": "11d29c5b-c860-4ecb-af38-f9628a09d71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58170", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpjmmnwag72v", "content": "CVE-2026-58170 - Vibe-Trading\nCVE ID : CVE-2026-58170\n \n Published : June 30, 2026, 3:53 p.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the broker proposals directory...", "creation_timestamp": "2026-06-30T18:21:37.650493Z"}, {"uuid": "1cdf066a-f0af-40d3-a2de-08e7ee6ccc6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58173", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpjny6diht2p", "content": "CVE-2026-58173 - Vibe-Trading\nCVE ID : CVE-2026-58173\n \n Published : June 30, 2026, 3:55 p.m. | 1\u00a0hour, 50\u00a0minutes ago\n \n Description : Vibe-Trading before 0.1.10 contains a path traversal vulnerability that allows attackers to write files outside the intended memory root dire...", "creation_timestamp": "2026-06-30T18:45:57.644244Z"}, {"uuid": "9896f158-57bc-4c99-8ec5-8e6f7b3745c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58172", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpjob4rvau2u", "content": "CVE-2026-58172 - Ocelot - IP Allow/Block List Bypass for WebSocket Upgrade Requests\nCVE ID : CVE-2026-58172\n \n Published : June 30, 2026, 3:54 p.m. | 1\u00a0hour, 51\u00a0minutes ago\n \n Description : Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vuln...", "creation_timestamp": "2026-06-30T18:50:58.071448Z"}, {"uuid": "32952501-6e3b-4775-b87c-fc115cb2c530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58172", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpk4daew322l", "content": "CVE-2026-58172 - Critical security bypass in Ocelot \u226424.1.0. Denied clients exploit WebSocket upgrades to bypass IP restrictions, reaching downstream services. CVSS 9.1. No patch available; apply commit f156fd4 or restrict WebSocket access....\n\nhttps://www.valtersit.com/cve/CVE-2026-58172/", "creation_timestamp": "2026-06-30T23:02:41.412840Z"}, {"uuid": "5b5cacb8-a0cf-4a5c-a1b6-6fa62ffb5881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58171", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndtlgxfx26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-58171 \u0432 Vibe-Trading: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5FC78C91-FE38-49B5-A89D-D13044CF2710", "creation_timestamp": "2026-07-02T05:55:05.120569Z"}, {"uuid": "a0defd4f-bf95-465a-a13a-d62bc569a533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58170", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpne2eai7z2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-58170 \u0432 Vibe-Trading: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D108DB9F-B230-4BF8-AFB7-8C47416BA31E", "creation_timestamp": "2026-07-02T05:58:52.399011Z"}, {"uuid": "646601be-33eb-4328-badc-aae997ed6dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58174", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnei2e2a52k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-58174 \u0432 Hermes WebUI: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/21857AA1-2B64-4265-8B64-8D977B904A3A", "creation_timestamp": "2026-07-02T06:06:31.772067Z"}, {"uuid": "a89286ea-c2a7-40ee-9c6a-e17f5fc96b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58179", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrrszuuitx2z", "content": "CVE-2026-58179\nApache Traffic Server versions 8.0.0 through 10.1.3 contain a bug that can cause the server to crash. This can happen when the server processes certain user input, which can be a security risk. To fix the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-29T11:28:04.605840Z"}]}