{"vulnerability": "cve-2026-67331", "sightings": [{"uuid": "589aa36c-e344-443d-832a-3f1a9a6dfc91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67331", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2b3iwxgv2a", "content": "\ud83d\udfe0 CVE-2026-67331 - High (8.3)\n\nbetter-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM provi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67331/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T20:00:50.265172Z"}, {"uuid": "0eb7b964-87f5-42ac-9e3a-07595d221b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67331", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2i54ja5f2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67331 \u0432 better-auth SCIM: \u043a\u0430\u043a \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e bypass \u0438 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435\n\n\n\nhttps://kripta.biz/posts/227FC676-4398-4AB5-9910-E792E6B3AEDF", "creation_timestamp": "2026-08-01T22:07:00.083169Z"}, {"uuid": "ed84634a-2182-47ba-a1d2-866e30991c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67331", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2lkr5ys22p", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05e4\u05e8\u05e6\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-better-auth SCIM: \u05de\u05d4 \u05e2\u05d5\u05de\u05d3 \u05de\u05d0\u05d7\u05d5\u05e8\u05d9 CVE-2026-67331 \u05d5\u05d0\u05d9\u05da \u05dc\u05d4\u05d2\u05df \u05e2\u05dc \u05d4\u05de\u05e2\u05e8\u05db\u05ea \u05e9\u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/12CF6E8A-668D-4F6C-8C0E-1DFC6C2511CE", "creation_timestamp": "2026-08-01T23:08:19.199100Z"}, {"uuid": "9a8f17a8-eb2d-4e3d-ba1e-3612f872da9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67331", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lkskyy62l", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67331 \u0432 better-auth SCIM: \u0443\u0433\u0440\u043e\u0437\u044b \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/7204ADBB-27AE-4411-8766-A41776C11A2E", "creation_timestamp": "2026-08-01T23:08:20.332361Z"}, {"uuid": "3130577d-5b89-44db-a931-d5a422ff3956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67331", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117026536615147442", "content": "CVE-2026-67331 - Critical auth flaw in Better-Auth SCIM. Unbound providers let attackers steal tokens, hijack SCIM API access. CVSS 8.3. Unpatched - update immediately if affected. #CVE #infosec #BetterAuth\nhttps://www.valtersit.com/cve/CVE-2026-67331/", "creation_timestamp": "2026-08-02T15:07:19.388260Z"}]}