{"vulnerability": "cve-2026-71290", "sightings": [{"uuid": "56a6cc9f-4460-4802-90f7-c10e55eb1a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71290", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtebn73vsd26", "content": "CVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1)", "creation_timestamp": "2026-08-18T13:02:32.711849Z"}, {"uuid": "d54ad314-fae4-4d2c-b3c4-87aec6369f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71290", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvwq7ghwx2p", "content": "CVE-2026-71290 - apache httpcomponents client\nUsing Apache HttpComponents Client 5.4 or newer with an async HttpClient can allow an attacker to pretend to be a trusted server. This can happen if the attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachefoundation #CVE #infosec", "creation_timestamp": "2026-08-12T20:10:05.759890Z"}, {"uuid": "cbc245a3-8e40-485b-9252-89b073f92818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71290", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtflxf32vw2f", "content": "CVE-2026-71290\uff1aApache HttpClient\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u304c\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u508d\u53d7\u304a\u3088\u3073\u6539\u3056\u3093\u3067\u304d\u308b\uff08CVSS 9.1\uff09 \n\nCVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1)  #DailyCyberSecurity (Aug 18)\n\nsecurityonline.info/apache-httpc...", "creation_timestamp": "2026-08-19T01:39:51.603277Z"}, {"uuid": "508306ee-b8b3-414a-8fd0-0e513538bd42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71290", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxyo5sadu2p", "content": "CVE-2026-71290 - httpcomponents-client\nApache HttpComponents Client versions 5.4 and newer have a security issue that allows an attacker to pretend to be a trusted server. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#httpcomponentsclient #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-13T15:50:04.206495Z"}]}