{"vulnerability": "cve-2026-6850", "sightings": [{"uuid": "c0a22749-e8e4-4337-a437-cdd4674e04a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68500", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvgu5cuil2l", "content": "\ud83d\udfe0 CVE-2026-68500 - High (7.5)\n\nSylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8,...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-68500/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T22:00:46.736070Z"}, {"uuid": "22c8c4d7-2c5e-4626-9267-c371713154ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68502", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvgudm3vn23", "content": "\ud83d\udd34 CVE-2026-68502 - Critical (9.8)\n\nLazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-68502/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T22:00:53.386115Z"}, {"uuid": "e12d7fc8-98a5-49e5-9b45-d53d4d956a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68503", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvguk22nq2w", "content": "\ud83d\udd34 CVE-2026-68503 - Critical (9.8)\n\nLazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-68503/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T22:01:00.056225Z"}, {"uuid": "1e6340ac-82d2-4384-8073-02360efb520f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68502", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrvh244ih32q", "content": "CVE-2026-68502\nLazyOwn's C2 framework has a security flaw that allows unauthorized access to execute code on a remote server. This could allow an attacker to take control of the server and potentially steal sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T22:04:06.283871Z"}, {"uuid": "1ff8524b-4b75-43c5-8c6a-b150c7220e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68503", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrvh5n5atl23", "content": "CVE-2026-68503\nThe LazyOwn framework, used for cybersecurity testing, sends default login credentials to its control dashboard in a way that's easily accessible to attackers. This means that anyone who knows the default\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T22:06:04.978082Z"}, {"uuid": "d4816c22-1d78-4c1b-a4e8-ab1bd47d5f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68503", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g5sfaip5r2pu7", "content": "CVE-2026-68503 - LazyOwn: Default C2 Operator Credentials Enable Administrative Access to C2 Dashboard\nCVE ID : CVE-2026-68503\n \n Published : July 30, 2026, 9:18 p.m. | 26\u00a0minutes ago\n \n Description : LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations fr...", "creation_timestamp": "2026-07-30T23:02:16.999334Z"}, {"uuid": "f5876bf8-ff13-44de-84e2-5818d13ef96e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68502", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jgmzm2shv2fqj", "content": "CVE-2026-68502 - LazyOwn: Unauthenticated Socket.IO `input` Event Reaches LazyOwn Command Dispatcher \u2014 Unauthenticated RCE\nCVE ID : CVE-2026-68502\n \n Published : July 30, 2026, 9:18 p.m. | 26\u00a0minutes ago\n \n Description : LazyOwn RedTeam/APT Framework is an AI-powered C2 and re...", "creation_timestamp": "2026-07-30T23:04:15.851599Z"}, {"uuid": "ffb925a5-f7b2-445d-8aa6-f65b261f85ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68502", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwxyh4xtv2v", "content": "CVE-2026-68502\nThe LazyOwn framework's C2 process has a security flaw that allows attackers to execute code without being authenticated. This means that if someone gains access to the C2 process, they can potentially take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:40:04.682017Z"}, {"uuid": "b0f5256b-3e28-4ffa-8a5c-a98d9403c7cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68503", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwxyibz5n22", "content": "CVE-2026-68503\nLazyOwn, a remote management tool, had default credentials that were not changed. This meant that anyone who knew the default credentials could access the tool's dashboard with administrator-level access. The\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:40:05.395359Z"}, {"uuid": "bc9115e1-4d0c-4de7-888b-40ab32625887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68508", "type": "seen", "source": "https://gist.github.com/alon710/fe62230d534aaa9446cebd76e965c0c0", "content": "# CVE-2026-68508: CVE-2026-68508: Arbitrary Code Execution via Unsafe Dynamic Instantiation in Hydra Core\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-68508\n\n## Summary\nCVE-2026-68508 is a high-severity arbitrary code execution vulnerability in facebookresearch/hydra (hydra-core) prior to version 1.3.4. The vulnerability exists within the dynamic instantiation system hydra.utils.instantiate(), which resolves and executes arbitrary Python callables from configuration files. An attacker capable of submitting untrusted configurations can achieve arbitrary code execution in the context of the consuming process.\n\n## TL;DR\nA vulnerability in hydra-core before 1.3.4 allows unauthenticated arbitrary code execution via crafted configuration files processed by the unsafe dynamic object instantiation utility.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94 / CWE-470\n- **Attack Vector**: Local (AV:L)\n- **CVSS Score**: 7.8 (High)\n- **Exploit Status**: PoC\n- **CISA KEV Status**: Not Listed\n- **Ransomware Use**: No Known Association\n\n## Affected Systems\n\n- facebookresearch/hydra (hydra-core)\n- **hydra-core**: < 1.3.4 (Fixed in: `1.3.4`)\n\n## Mitigation\n\n- Upgrade hydra-core to version 1.3.4 or higher to enforce target blocklisting\n- Configure HYDRA_INSTANTIATE_ALLOWLIST_OVERRIDE for required targets\n- Implement application-level safe loader wrappers to validate target paths\n- Migrate to the default-deny allowlist architecture of Hydra 1.4+\n\n**Remediation Steps:**\n1. Update requirements.txt or dependency lockfiles to require hydra-core>=1.3.4\n2. Locate applications utilizing hydra.utils.instantiate() on external files\n3. Implement verification boundaries on configuration metadata parsed from third-party hubs\n\n## References\n\n- [GitHub Security Advisory GHSA-2cp2-2r3c-7p7r](https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-2cp2-2r3c-7p7r)\n- [CVE-2026-68508 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-68508)\n- [Hydra Issue Tracker #3259](https://github.com/hydra-ecosystem/hydra/issues/3259)\n- [Hydra Pull Request #3261](https://github.com/hydra-ecosystem/hydra/pull/3261)\n- [Palo Alto Networks Unit 42 Analysis](https://unit42.paloaltonetworks.com/rce-vulnerabilities-in-ai-python-libraries/)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-68508) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-21T23:32:10.351674Z"}, {"uuid": "07fd9033-cb5d-4f3e-bf4c-ce2dadceb63d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68508", "type": "seen", "source": "https://gist.github.com/alon710/fe62230d534aaa9446cebd76e965c0c0", "content": "# CVE-2026-68508: CVE-2026-68508: Arbitrary Code Execution via Unsafe Dynamic Instantiation in Hydra Core\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-68508\n\n## Summary\nCVE-2026-68508 is a high-severity arbitrary code execution vulnerability in facebookresearch/hydra (hydra-core) prior to version 1.3.4. The vulnerability exists within the dynamic instantiation system hydra.utils.instantiate(), which resolves and executes arbitrary Python callables from configuration files. An attacker capable of submitting untrusted configurations can achieve arbitrary code execution in the context of the consuming process.\n\n## TL;DR\nA vulnerability in hydra-core before 1.3.4 allows unauthenticated arbitrary code execution via crafted configuration files processed by the unsafe dynamic object instantiation utility.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94 / CWE-470\n- **Attack Vector**: Local (AV:L)\n- **CVSS Score**: 7.8 (High)\n- **Exploit Status**: PoC\n- **CISA KEV Status**: Not Listed\n- **Ransomware Use**: No Known Association\n\n## Affected Systems\n\n- facebookresearch/hydra (hydra-core)\n- **hydra-core**: < 1.3.4 (Fixed in: `1.3.4`)\n\n## Mitigation\n\n- Upgrade hydra-core to version 1.3.4 or higher to enforce target blocklisting\n- Configure HYDRA_INSTANTIATE_ALLOWLIST_OVERRIDE for required targets\n- Implement application-level safe loader wrappers to validate target paths\n- Migrate to the default-deny allowlist architecture of Hydra 1.4+\n\n**Remediation Steps:**\n1. Update requirements.txt or dependency lockfiles to require hydra-core>=1.3.4\n2. Locate applications utilizing hydra.utils.instantiate() on external files\n3. Implement verification boundaries on configuration metadata parsed from third-party hubs\n\n## References\n\n- [GitHub Security Advisory GHSA-2cp2-2r3c-7p7r](https://github.com/hydra-ecosystem/hydra/security/advisories/GHSA-2cp2-2r3c-7p7r)\n- [CVE-2026-68508 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-68508)\n- [Hydra Issue Tracker #3259](https://github.com/hydra-ecosystem/hydra/issues/3259)\n- [Hydra Pull Request #3261](https://github.com/hydra-ecosystem/hydra/pull/3261)\n- [Palo Alto Networks Unit 42 Analysis](https://unit42.paloaltonetworks.com/rce-vulnerabilities-in-ai-python-libraries/)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-68508) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T00:00:23.438979Z"}, {"uuid": "dc53e260-5c06-44ca-acb0-f417ddb76627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-68508", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmxu3xlo22r", "content": "\ud83d\udfe0 CVE-2026-68508 - High (7.8)\n\nHydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-68508/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T00:01:24.674073Z"}, {"uuid": "8794c691-abc1-441a-8547-dfa4dfd5c4d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6850", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjfycu6co22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6850 \u0432 Mattermost: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/00E2DFC2-2993-49F9-A793-25CC0E7B4CB0", "creation_timestamp": "2026-07-13T09:48:04.018237Z"}, {"uuid": "0610aa52-f57b-4df6-a6d7-93aaaf7f3714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6850", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqjfycszlv2s", "content": "Mattermost \u5b89\u5168\u6f0f\u6d1e CVE-2026-6850 \u6df1\u5ea6\u89e3\u6790:\u5f71\u54cd\u7248\u672c\u53ca\u4fee\u590d\u5efa\u8bae\n\n\n\nhttps://qian.cx/posts/EFF635EE-5F27-4387-8B65-D54E00DF68F8", "creation_timestamp": "2026-07-13T09:48:06.562685Z"}, {"uuid": "eae8248b-6ef1-4b15-a6ad-08f48a8bb85a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6850", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjfgfdc4x26", "content": "CVE-2026-6850 - Crafted message attachment causes client-side denial of service via markdown parser regex backtracking in Mattermost\nCVE ID : CVE-2026-6850\n \n Published : July 13, 2026, 8:13 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Mattermost versions 11.7.x <= 11.7.2...", "creation_timestamp": "2026-07-13T09:38:05.377491Z"}, {"uuid": "345c040b-c0ef-483c-b666-d1a43717d2e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6850", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqketbxa732x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6850 \u0432 Mattermost: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/238809DB-3959-441E-B79D-35D15C4850CC", "creation_timestamp": "2026-07-13T19:00:01.443125Z"}, {"uuid": "ba06c7b5-02cc-4003-98ca-d52d789c4938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6850", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqketfqqbq2m", "content": "Mattermost \u5b89\u5168\u6f0f\u6d1e CVE-2026-6850 \u8be6\u89e3:\u5f71\u54cd\u7248\u672c\u53ca\u4fee\u590d\u5efa\u8bae\n\n\n\nhttps://qian.cx/posts/52B3C9EA-1AC1-4968-B148-E1BE34CF4B25", "creation_timestamp": "2026-07-13T19:00:05.326311Z"}, {"uuid": "1e3638a2-9ade-499d-b598-de2443474eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6850", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkzc6xazm2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6850 \u0432 Mattermost: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/CEB23FBC-2852-45FB-95C8-175D0C6A8AB3", "creation_timestamp": "2026-07-14T01:06:17.200406Z"}, {"uuid": "2079e23a-9d2a-4aea-b9c7-c7d0ecddac23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6850", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqr2rc7sk2y", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e9\u05d4 \u05d1\u05de\u05d8\u05e8\u05d5\u05e1\u05d8 - CVE-2026-6850 - \u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da?\n\n\n\nhttps://khesef.xyz/posts/802241F3-D8B5-481F-9790-6EFBA0F4F408", "creation_timestamp": "2026-07-16T07:54:55.510439Z"}, {"uuid": "33d0fdf8-a254-47de-9c87-1447a9a806e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6850", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrr7ozna2q", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1\u05de\u05d8\u05e8\u05d5\u05e1\u05d8: CVE-2026-6850 - \u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da?\n\n\n\nhttps://khesef.xyz/posts/7BAF2841-C78F-4505-BEFC-1FC363DE4620", "creation_timestamp": "2026-07-16T08:07:28.932845Z"}, {"uuid": "4defac17-1c48-4038-908e-1686d77d23e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6850", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqs6m6hbc2z", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05de\u05e2\u05e8\u05db\u05ea Mattermost - CVE-2026-6850\n\n\n\nhttps://khesef.xyz/posts/C677EAC7-4AA4-4D96-8F36-7F00726F6B94", "creation_timestamp": "2026-07-16T08:14:58.443337Z"}]}