{"vulnerability": "cve-2026-6762", "sightings": [{"uuid": "490e8597-06e6-4eb3-bdc0-b267fd6dd5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6762", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mk2fobkx3t2w", "content": "", "creation_timestamp": "2026-04-22T02:01:22.321055Z"}, {"uuid": "b4c47a5e-d7b4-4a80-ab0f-4ca8eaee1c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6762", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260422", "content": "", "creation_timestamp": "2026-04-21T20:00:00.000000Z"}, {"uuid": "b55851e9-4ef1-460c-8ca7-66d7f0320967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67620", "type": "seen", "source": "https://t.me/GithubRedTeam/96659", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #POC #CVE #metadata\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67620-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 22:05:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67620 - Flowise SSRF via incomplete cloud-metadata deny-list (Oracle OCI 192.0.0.192 + Alibaba 100.100.100.200 bypass the DEFAULT_DENY_LIST)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T23:00:02.935239Z"}, {"uuid": "fc55f7b0-9cd6-442c-a4fd-d58e806ac54d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67620", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96659", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #POC #CVE #metadata\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-67620-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 22:05:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-67620 - Flowise SSRF via incomplete cloud-metadata deny-list (Oracle OCI 192.0.0.192 + Alibaba 100.100.100.200 bypass the DEFAULT_DENY_LIST)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:08.672693Z"}, {"uuid": "ccc679f0-8daf-49c5-abf2-a6c2c6eb629f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67620", "type": "seen", "source": "Telegram/8aloBXQPHHfouGKf0EgG60bQLDnPnRmnq1pCP7sMVPUrMUc", "content": "", "creation_timestamp": "2026-08-05T05:00:10.071417Z"}, {"uuid": "d47f678e-aaa1-4836-93d3-148ffb90a027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67623", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jze72nb5aends", "content": "CVE-2026-67623 - Mistral Vibe\nCVE ID : CVE-2026-67623\n \n Published : Aug. 5, 2026, 1:27 p.m. | 22\u00a0minutes ago\n \n Description : Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious...", "creation_timestamp": "2026-08-05T14:15:01.846888Z"}, {"uuid": "488e3d83-07ec-434f-b8b4-05d65b33eee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67620", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mslkb5qij32h", "content": "\ud83d\udfe0 CVE-2026-67620 - High (7.7)\n\nFlowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard impl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67620/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T17:02:26.712283Z"}, {"uuid": "00a9fec8-c0aa-4ec9-bf48-99cba9e7b356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67620", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mslqir7d3525", "content": "Flowise v3.1.4\u306eSSRF\u8106\u5f31\u6027\u3002HTTP\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306eDEFAULT_DENY_LIST\u306b\u3001Oracle/Alibaba\u306e\u30e1\u30bf\u30c7\u30fc\u30bf\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u304c\u6b20\u843d\u3002\u8a8d\u8a3c\u3055\u308c\u305f\u653b\u6483\u8005\u306f\u3001arbit\u2026\nCVE-2026-67620 CVSS 7.7 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-67620", "creation_timestamp": "2026-08-08T18:51:56.746770Z"}, {"uuid": "a7dc6645-ad4b-4e4a-9e1f-8affd7eba8da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67621", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msnxea4z4f2u", "content": "\ud83d\udfe0 CVE-2026-67621 - High (7.6)\n\nFlowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated wo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67621/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-09T16:00:00.217228Z"}, {"uuid": "c4092984-0a08-4594-9f69-d52d27ddb741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67622", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msnxegt2qg2h", "content": "\ud83d\udd34 CVE-2026-67622 - Critical (9.9)\n\nFlowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI As...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67622/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-09T16:00:07.611821Z"}, {"uuid": "9b35fc8f-6311-4317-9f88-ffb9bea9a0ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67620", "type": "published-proof-of-concept", "source": "Telegram/8aloBXQPHHfouGKf0EgG60bQLDnPnRmnq1pCP7sMVPUrMUc", "content": "", "creation_timestamp": "2026-08-06T00:00:48.419359Z"}]}