{"vulnerability": "cve-2026-6173", "sightings": [{"uuid": "a37215ed-0fec-480a-ab3e-c1626678f160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61736", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqp2zvftsc2w", "content": "CVE-2026-61736 - lightrag\nA security issue in LightRAG allows malicious websites to make requests to LightRAG's API on behalf of authenticated users, potentially stealing or deleting sensitive data. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lightrag #hkuds #CVE #infosec", "creation_timestamp": "2026-07-15T15:48:04.257567Z"}, {"uuid": "cac90cde-d804-4449-9ebd-13462f6db36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61736", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp3qmrswz2h", "content": "\ud83d\udd34 CVE-2026-61736 - Critical (9.3)\n\nLightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, the server defa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-61736/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T16:00:47.877679Z"}, {"uuid": "4a7c0eab-80cd-4b5f-9b15-6ecc01c2e6ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-61736", "type": "published-proof-of-concept", "source": "https://github.com/HKUDS/LightRAG/security/advisories/GHSA-6x6h-qqr7-855w", "content": "", "creation_timestamp": "2026-07-20T22:35:18.828901Z"}, {"uuid": "44598ae2-fa1b-4a57-87c9-7dccae238622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61736", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-61736.yaml", "content": "", "creation_timestamp": "2026-09-14T21:00:05.202087Z"}, {"uuid": "3ef59739-8210-4a0b-b707-ab217b482ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61732", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbv73z56e25", "content": "CVE-2026-61732 - decepticon\nVersions of Decepticon (including the core and SDK packages) older than 1.1.17 pass web\u2011page data to an AI engine without cleaning special markers. A malicious actor can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#decepticon #bittersecurity #CVE #infosec", "creation_timestamp": "2026-09-24T18:30:10.084611Z"}, {"uuid": "b7c99eaa-6c98-4399-9ea4-26d5f0a91ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61732", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwbxprtqol2v", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-61732: Decepticon is an autonomous hacking agent for red teams\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-61732\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-24T19:15:17.350478Z"}, {"uuid": "06f91ed9-163e-4293-bdfa-3446a90ba0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61732", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwc2ntizks2q", "content": "\ud83d\udea8 CVE-2026-61732 \u2014 CVSS 10 CRITICAL\n\nDecepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results \u2014 ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-61732\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-24T20:07:52.765174Z"}, {"uuid": "dcf77496-c464-49c9-8a2d-937557aa6912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61732", "type": "seen", "source": "Telegram/7GNnqmv7ZdPg7QLWL60eVt3b44pjSw_GS68UUpuiTX3oD9k", "content": "", "creation_timestamp": "2026-09-25T15:00:07.000000Z"}, {"uuid": "dbecf5af-1812-4d63-bc69-2cbd2dad90aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61732", "type": "seen", "source": "Telegram/AEwUmxTHfjK52gcCzirRg3eKj4ECkiyGcn3Hrgzjr8KwPNw", "content": "", "creation_timestamp": "2026-09-25T11:00:13.000000Z"}, {"uuid": "be77ba0a-b3cb-465e-a8dc-e2d8b2f0c2d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61732", "type": "published-proof-of-concept", "source": "Telegram/AEwUmxTHfjK52gcCzirRg3eKj4ECkiyGcn3Hrgzjr8KwPNw", "content": "", "creation_timestamp": "2026-09-25T11:00:13.000000Z"}, {"uuid": "203d27fc-bd13-4c99-87f2-d1a859989693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61732", "type": "published-proof-of-concept", "source": "Telegram/7GNnqmv7ZdPg7QLWL60eVt3b44pjSw_GS68UUpuiTX3oD9k", "content": "", "creation_timestamp": "2026-09-25T15:00:07.000000Z"}]}