{"vulnerability": "cve-2026-6237", "sightings": [{"uuid": "046e2140-2638-48e6-a573-d932a56fbd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrx3gewobb2y", "content": "Four OpenAM vulnerabilities are fixed in 16.1.2. CVE-2026-62379 (CVSS 9.8) allows unauthenticated remote code execution; CVE-2026-62261 scores 9.9.\n\n#OpenAM #RCE #IAM #CVE202662379", "creation_timestamp": "2026-07-31T13:41:33.592809Z"}, {"uuid": "2f10766b-14ef-4e6b-86a3-2d8b1f37ce79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3cv2epxz367pg", "content": "CVE-2026-62377 - libheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110)\nCVE ID : CVE-2026-62377\n \n Published : Aug. 18, 2026, 9:22 p.m. | 9\u00a0minutes ago\n \n Description : libheif is a HEIF and AVIF file format de...", "creation_timestamp": "2026-08-18T23:00:56.935858Z"}, {"uuid": "a7a2df0f-d1ce-4907-8e30-c904a7783100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpbjey2z52o", "content": "CVE-2026-62378 - console\nA vulnerability in the RustFS Console's PDF preview feature allows an attacker to inject malicious code into the management interface, potentially stealing sensitive administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#console #rustfs #CVE #infosec", "creation_timestamp": "2026-07-15T17:44:06.326274Z"}, {"uuid": "e6a616bb-aa8e-4614-acbe-d82615cd5d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpcg2jm3y2e", "content": "\ud83d\udd34 CVE-2026-62378 - Critical (9)\n\nRustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 unt...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62378/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T18:00:09.309708Z"}, {"uuid": "f5a0ff31-5469-4889-9ca7-dc55e623a7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpghuqeib22", "content": "CVE-2026-62378 - RustFS Console: Critical Stored XSS in Preview Modal leading to Administrative Account Takeover\nCVE ID : CVE-2026-62378\n \n Published : July 15, 2026, 5:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : RustFS Console is a web management console for the RustFS ...", "creation_timestamp": "2026-07-15T19:12:44.767996Z"}, {"uuid": "97071e75-9ade-42da-927f-0ae4c5c41234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqvfrawsdq2s", "content": "CVE-2026-62378\nThe RustFS Console allows attackers to inject malicious code into PDF files, potentially stealing administrator credentials. This issue affects versions 0.1.7 to 0.1.10 of the RustFS Console. To protect your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-18T04:16:04.152094Z"}, {"uuid": "ecd6c118-b0da-4d36-ae10-9030c6c44507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtu46sqzmk23", "content": "\u300cOpenAM\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\n\n\u300cOpenAM\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3082\u5224\u660e\u3057\u3066\u304a\u308a\u3001\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u3067\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670820\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3068\u306a\u308b\u300cOpenAM 16.1.2\u300d\u3092\u516c\u958b\u3002\u4f9d\u5b58\u95a2\u4fc2\u306b\u3042\u308b\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u88fd\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u8106\u5f31\u6027\u3092\u542b\u3081\u3001\u3042\u308f\u305b\u306618\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3057\u305f\u3002\n\n\u300cCVE-2026-62379\u300d\u306f\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u8a8d\u8a3c\u306b\u7528\u3044\u308b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u3002\u300cXML\u300d\u3067\u6307\u5b9a\u3055\u308c\u305f\u4efb\u610f\u306eJava\u30af\u30e9\u30b9\u3092\u691c\u8a3c\u3059\u308b...", "creation_timestamp": "2026-08-24T20:07:37.104240Z"}, {"uuid": "0aec4a50-332a-472b-b3ec-d8e715f2075c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrgbkqdtsk2i", "content": "CVE-2026-62379 - org.openidentityplatform.openam:openam-core\nA security flaw in OpenAM allows an attacker to run code on the server without logging in. This affects all OpenAM versions up to 16.1.1. To fix this, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#Java #CVE #infosec", "creation_timestamp": "2026-07-24T21:16:05.736601Z"}, {"uuid": "7aa2de40-edb2-44c3-b584-07bf08a18367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/roguelogics.bsky.social/post/3mrpzd6lcjb2p", "content": "Two critical OpenAM vulnerabilities demand attention: CVE-2026-62379 and CVE-2026-62263. Both are unauthenticated and pose serious risks. Patch your OpenAM instances immediately #OpenAM #CyberSecurity #VulnerabilityAlert", "creation_timestamp": "2026-07-28T18:15:20.036724Z"}, {"uuid": "2709d827-6d0e-421c-859d-35d1e8dca44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvklnd2dat2g", "content": "\ud83d\udea8 CVE-2026-62379 \u2014 CVSS 9.8 CRITICAL\n\nOpen Access Management (OpenAM) is an access management solution. Prior to 16.1.2, the pre-authentication /...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62379\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T12:07:55.623135Z"}]}