{"vulnerability": "cve-2026-63767", "sightings": [{"uuid": "e7e9e24f-00f5-42c4-a0e0-22ff1cb9d688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63767", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr46ajg2e22s", "content": "CVE-2026-63767\nThe ktransformers library, up to version 0.6.3, can be exploited by attackers to execute arbitrary commands on a server. This can happen when a malicious pickle payload is sent to the server, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-20T20:50:04.808319Z"}, {"uuid": "20c9cacf-23c1-42bd-8d48-c3cc9986f94b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63767", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4fltadqn2u", "content": "\ud83d\udd34 CVE-2026-63767 - Critical (9.8)\n\nktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserial...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63767/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T23:01:40.621806Z"}, {"uuid": "0fb5fc51-10eb-4d93-941d-b347f6b1903d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63767", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mr5ruurlhz26", "content": "CVE-2026-63767 - Critical RCE in Ktransformers. Unauthenticated pickle deserialization via ZMQ ROUTER socket. CVSS 9.8. No patch available - immediately isolate affected systems. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-63767/", "creation_timestamp": "2026-07-21T12:14:08.601378Z"}]}