{"vulnerability": "cve-2026-6310", "sightings": [{"uuid": "5f6c570b-8d2f-4cc2-b8dc-5115d24bee73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6310", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjksqevtfj2z", "content": "", "creation_timestamp": "2026-04-15T21:12:34.758367Z"}, {"uuid": "bf13c90d-809d-4257-bbb0-1c49f7546552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6310", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260416", "content": "", "creation_timestamp": "2026-04-15T18:00:00.000000Z"}, {"uuid": "9b165105-8ad6-430d-826a-182d57cc28c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6310", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260420", "content": "", "creation_timestamp": "2026-04-19T20:00:00.000000Z"}, {"uuid": "233122b6-b6c5-4773-9f55-c39526ecb805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6310", "type": "published-proof-of-concept", "source": "Telegram/0zmBng2ph0j5-h51LqidOz9H-G3O8PUZqZfxER_d38YEET8", "content": "", "creation_timestamp": "2026-04-15T23:26:54.000000Z"}, {"uuid": "7ff5e77c-1f68-4b05-9425-2d7ce2130522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6310", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnpipcrvml2b", "content": "\ud83d\udccc CVE-2026-6310 - Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perf... https://www.cyberhub.blog/cves/CVE-2026-6310", "creation_timestamp": "2026-06-07T15:37:07.037261Z"}, {"uuid": "c07a9691-de67-49f1-ba87-a05e84868265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6310", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mnpipdflti2x", "content": "\ud83d\udccc CVE-2026-6310 - Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perf... https://www.potatohub.blog/cves/CVE-2026-6310", "creation_timestamp": "2026-06-07T15:37:07.801657Z"}, {"uuid": "14f947ba-6a79-4fb6-a6e7-823b8604af8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63101", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquhyemnbm2s", "content": "CVE-2026-63101 - Open Event Server 1.19.1 Unauthenticated Member Roster Export via CSV Export Endpoint\nCVE ID : CVE-2026-63101\n \n Published : July 17, 2026, 5:17 p.m. | 24\u00a0minutes ago\n \n Description : Open Event Server through 1.19.1 contains a missing authentication vulnerabi...", "creation_timestamp": "2026-07-17T19:23:10.647180Z"}, {"uuid": "c0dd12e9-6a18-47e1-b288-3c269da622bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63101", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqy7ggzcb72m", "content": "\ud83d\udfe0 CVE-2026-63101 - High (7.5)\n\nOpen Event Server through 1.19.1 contains a missing authentication vulnerability that allows unau...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63101/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T07:00:38.453390Z"}, {"uuid": "ea392e0d-caf3-45fd-bd65-80ac4852c9ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63108", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr43i5ubog2q", "content": "\ud83d\udfe0 CVE-2026-63108 - High (8.8)\n\nRoo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute fe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63108/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T20:00:40.158291Z"}, {"uuid": "5b71d640-d5eb-4764-b6c8-fc8d41ad12ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63108", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4bbgq76c2i", "content": "CVE-2026-63108 - Roo Code 3.54.0 Command Injection via Parameter Expansion Parsing\nCVE ID : CVE-2026-63108\n \n Published : July 20, 2026, 7:17 p.m. | 25\u00a0minutes ago\n \n Description : Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute f...", "creation_timestamp": "2026-07-20T21:44:16.535407Z"}, {"uuid": "c10c595d-1401-4de4-af59-ea2a6fdc2152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63107", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr4g2l2kq52l", "content": "CVE-2026-63107 - SSRF in Limesurvey. Authenticated users can abuse Host header in REST API to access internal services and cloud metadata. CVSS 7.7. No patch yet - restrict network access and monitor for abuse. #CVE #Limesurvey #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-63107/", "creation_timestamp": "2026-07-20T23:09:54.979081Z"}, {"uuid": "356c645f-81d1-4d1e-9c42-802b5dae2717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63107", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116954824349658240", "content": "CVE-2026-63107 - SSRF in Limesurvey. Authenticated users can abuse Host header in REST API to access internal services and cloud metadata. CVSS 7.7. No patch yet - restrict network access and monitor for abuse. #CVE #Limesurvey #infosec\nhttps://www.valtersit.com/cve/CVE-2026-63107/", "creation_timestamp": "2026-07-20T23:09:55.262169Z"}]}