{"vulnerability": "cve-2026-5924", "sightings": [{"uuid": "6e4711f6-aada-4e4f-91ac-d70984754755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59247", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrzjafqkzk2f", "content": "CVE-2026-59247\nA Gleam user may download a tampered package if their connection is intercepted. This can happen if a malicious actor is between your Gleam process and the internet, and can modify the data being sent. To stay\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-01T12:54:04.555996Z"}, {"uuid": "2bb4c27d-a639-4d3d-9a8c-86d6d9e62555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96656", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-59243_exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 20:21:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T22:00:04.550609Z"}, {"uuid": "f5c49965-6e7b-4d27-b951-16891dcb957d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "seen", "source": "Telegram/rJSqz12D-kpQyCOJVo_dGQ5YtXruuuT1_BANzgPusZ6YAnQ", "content": "", "creation_timestamp": "2026-08-05T01:00:03.455289Z"}, {"uuid": "07ad9251-eef3-436c-8bc4-83038e9d0289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "published-proof-of-concept", "source": "Telegram/rJSqz12D-kpQyCOJVo_dGQ5YtXruuuT1_BANzgPusZ6YAnQ", "content": "", "creation_timestamp": "2026-08-06T00:01:00.838113Z"}, {"uuid": "63d32d5a-a369-42f9-bb5c-598613da9a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msfbhzftyz2y", "content": "\ud83d\udccc CVE-2026-59243 - The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decoding the ID token, so an attacker able to present a forged or ... https://www.cyberhub.blog/cves/CVE-2026-59243", "creation_timestamp": "2026-08-06T05:07:07.098491Z"}, {"uuid": "70b1888e-3cf4-4d11-846f-dec937d0265c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59245", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkb4bifd22w", "content": "CVE-2026-59245 - Apache Airflow FAB provider: FAB auth manager: a DAG named \"DAGs\" hijacks the global all-DAGs permission (access_control privilege escalation via resource_name() collision)\nCVE ID : CVE-2026-59245\n \n Published : July 13, 2026, 4:16 p.m. | 1\u00a0hour, 13\u00a0minutes ag...", "creation_timestamp": "2026-07-13T17:53:27.909896Z"}, {"uuid": "5b33ee11-999f-4e0e-a7a8-16f5176c94c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59245", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqkcm5c5tr2t", "content": "CVE-2026-59245: Apache Airflow FAB provider: FAB auth manager: a DAG named \"DAGs\" hijacks the global all-DAGs permission (access_control privilege escalation via resource_name() collision)", "creation_timestamp": "2026-07-13T18:20:14.049121Z"}, {"uuid": "6617bd52-59a9-465e-be8e-050d4f4a0333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59246", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5vzj3ce24", "content": "CVE-2026-59246 - Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memory\nCVE ID : CVE-2026-59246\n \n Published : July 14, 2026, 9:16 a.m. | 2\u00a0hours, 14\u00a0minutes ago\n \n Description : Allocation of resources without limits vulnerab...", "creation_timestamp": "2026-07-14T12:01:36.497912Z"}, {"uuid": "05d3a76d-8775-47ab-bc56-632b9eee340b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59246", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2lqpopwi2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-59246: \u043a\u0430\u043a \u043d\u0443\u043b\u0435\u0432\u044b\u0435 HTTP/2 CONTINUATION \u0444\u0440\u0435\u0439\u043c\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0438\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\n\n\n\nhttps://kripta.biz/posts/4CACB655-B980-4844-8ACA-8B44A273DA2B", "creation_timestamp": "2026-07-20T05:46:28.125642Z"}, {"uuid": "7c259711-e88c-48df-a7aa-09fbe97c3e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59246", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2lrcv5pa2y", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea CVE-2026-59246: \u05db\u05d9\u05e6\u05d3 \u05d6\u05e8\u05d9\u05de\u05ea HTTP/2 CONTINUATION \u05dc\u05dc\u05d0 \u05d2\u05d5\u05d3\u05dc \u05d9\u05db\u05d5\u05dc\u05d4 \u05dc\u05d2\u05e8\u05d5\u05dd \u05dc\u05d3\u05d9\u05d5\u05e1 \u05e9\u05dc \u05d6\u05d9\u05db\u05e8\u05d5\u05df\n\n\n\nhttps://khesef.xyz/posts/F04AACDD-4159-4081-90BB-9979B28433B0", "creation_timestamp": "2026-07-20T05:46:47.137420Z"}, {"uuid": "0ac7293f-4850-4138-bd20-fe43f5a09b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mro4hrp7s727", "content": "CVE-2026-59240 - IDOR in Prospero Flow CRM allows deletion of other users' notifications\nCVE ID : CVE-2026-59240\n \n Published : July 27, 2026, 10:17 p.m. | 1\u00a0hour, 38\u00a0minutes ago\n \n Description : The vulnerability involves an Insecure Direct Object Reference (IDOR) in the `Del...", "creation_timestamp": "2026-07-28T00:06:16.294379Z"}, {"uuid": "c72f8793-9633-4ab5-8ba2-6f0fd114bbef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpb5kx43v2d", "content": "CVE-2026-59243: Apache Airflow FAB provider: FAB auth manager: JWT signature verification disabled by default for Azure AD OAuth (`verify_signature` defaults to `False`)", "creation_timestamp": "2026-07-28T11:02:41.750894Z"}, {"uuid": "ec04388b-ecc8-43a5-89d3-c161f060b238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpfl753522x", "content": "CVE-2026-59248 - Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS\nCVE ID : CVE-2026-59248\n \n Published : July 28, 2026, 10:16 a.m. | 23\u00a0minutes ago\n \n Description : Allocation of resources without limits vulnerability in ninenines cowlib a...", "creation_timestamp": "2026-07-28T12:21:54.578606Z"}, {"uuid": "159e1a60-423e-43d2-af27-885b1ac99aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-59243", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrseoxjskc2i", "content": "CVE-2026-59243 - apache airflow fab provider\nThe Apache Airflow FAB provider allows attackers to log in as any user, including administrators, by presenting a fake login token. This affects deployments using\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-29T16:44:06.148457Z"}]}