{"vulnerability": "cve-2026-67595", "sightings": [{"uuid": "d3c6d07c-6d98-4f5a-a373-7097b9b67d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "published-proof-of-concept", "source": "Telegram/LkH85X-JUMEtHWq9ccTX7RdLtAYJyJlmaTWlNzBdkhBs1mA", "content": "", "creation_timestamp": "2026-08-03T02:13:57.092525Z"}, {"uuid": "d994f91c-d52e-42d1-8d58-36ecb7fdba59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "published-proof-of-concept", "source": "Telegram/LkH85X-JUMEtHWq9ccTX7RdLtAYJyJlmaTWlNzBdkhBs1mA", "content": "", "creation_timestamp": "2026-08-02T06:08:45.838987Z"}, {"uuid": "063c281c-5aa8-4583-8d95-d222893bf493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mryn35w7dr2h", "content": "CVE-2026-67595\nVaahCMS versions 2.0.0 through 2.3.4 contain a security risk in their OTP email feature. If a user with JavaScript enabled receives a malicious email, it can secretly install a keylogger and capture sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-01T04:30:03.717269Z"}, {"uuid": "d5d1df99-0fcd-4b00-a404-3b4f6b4643c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrsz5fry6g2u", "content": "CVE-2026-67595\nVaahCMS versions 2.0.0 to 2.3.4 have a security flaw in their email system that could allow hackers to steal passwords from users who open a malicious email in their browser. This means that anyone using these\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-29T22:50:15.033621Z"}, {"uuid": "94e1651c-d4cc-4637-a821-3cba24f0f840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67595", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrt52dd6wg2c", "content": "\ud83d\udfe0 CVE-2026-67595 - High (8.1)\n\nVaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67595/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T23:59:57.894861Z"}, {"uuid": "eb8ed76d-1ab8-4b12-b453-9318f1d5c763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67595", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrt53khbxv2t", "content": "VaahCMS 2.0.0 \u2013 2.3.4 hit by CRITICAL vuln: OTP email templates contain malicious JS enabling code execution, keylogging, & C2. Avoid JS-enabled email rendering. Await vendor patch. https://radar.offseq.com/threat/cve-2026-67595-embedded-malicious-code-in-webreinvent-vaahcms-94fc0638a0fe22eb #Off...", "creation_timestamp": "2026-07-30T00:00:38.645654Z"}]}