{"vulnerability": "cve-2026-7186", "sightings": [{"uuid": "83fd0778-b205-4552-84dc-f44225808b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71862", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmh3jxhuc2z", "content": "\ud83d\udfe0 CVE-2026-71862 - High (7.5)\n\nCheckmate is an open-source, self-hosted tool designed to track and monitor server hardware, upti...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-71862/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T19:01:20.882235Z"}, {"uuid": "b3d03d75-ebc3-42f6-b4fb-e4566b8a9018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7186", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mns24udqm22y", "content": "CVE-2026-7186 - Fix stored XSS in URL dashboard widget via dangerous URI schemes\nCVE ID : CVE-2026-7186\n \n Published : June 8, 2026, 1:16 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2.4.0p31...", "creation_timestamp": "2026-06-08T15:54:14.671355Z"}, {"uuid": "cca2a9c2-8ed1-4a1b-ac41-0c47d09fdaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtodehz5so2c", "content": "CVE-2026-71865\nIf you use Orval versions before 8.21.0 to generate client code, a specially crafted query parameter name can cause malicious JavaScript to run when the generated files are loaded. This can affect developers,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T13:00:04.509000Z"}, {"uuid": "44f12c1b-e869-4e2c-96ba-f2f9fc3fd706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71868", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtodeittsz2e", "content": "CVE-2026-71868\nThe Orval tool that builds TypeScript client libraries can insert unchecked JavaScript into the generated files when an enum default contains a template string. When those files are loaded, the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T13:00:05.426816Z"}, {"uuid": "a486a1d0-e50e-4631-ab89-22e1bd2ba434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71864", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjyw5mu625", "content": "\ud83d\udea8 CVE-2026-71864 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71864\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:10:14.786522Z"}, {"uuid": "fd2deed0-d6b2-48e9-b5d1-8305b51dd0c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71867", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjzq365h23", "content": "\ud83d\udea8 CVE-2026-71867 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71867\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:10:41.826302Z"}, {"uuid": "762ab0be-b533-41ee-8cd9-304667ec7996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71865", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjz7ezrk25", "content": "\ud83d\udea8 CVE-2026-71865 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71865\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:10:24.459888Z"}, {"uuid": "14157414-3268-4b9b-8ba6-c542c8637585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71866", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjzhs6lx2e", "content": "\ud83d\udea8 CVE-2026-71866 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. F...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71866\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:10:33.115660Z"}, {"uuid": "48f24943-bb86-4224-a6fb-d04090677d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71868", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjzz2h252c", "content": "\ud83d\udea8 CVE-2026-71868 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71868\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:10:51.182013Z"}, {"uuid": "7f7bc007-41b6-4096-af35-4d6c46b065a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71869", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthk2b3kuc2u", "content": "\ud83d\udea8 CVE-2026-71869 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-71869\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:10:59.673589Z"}, {"uuid": "d658149c-b023-48e8-a331-73076668466c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71867", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthu2hdlev23", "content": "CVE-2026-71867 - orval\nOrval, a tool for generating JavaScript clients, has a security issue that allows attackers to execute code in your development environment. This can happen if you're using an outdated\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-19T23:10:04.068661Z"}, {"uuid": "8657586d-516a-4c00-bd7b-f59051fee8da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71864", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthwtxsbkf24", "content": "CVE-2026-71864 - orval\nA security issue in Orval's generated code could allow attackers to execute code on a developer's machine. This happens when a header parameter name contains a double quote, which can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-20T00:00:07.739079Z"}, {"uuid": "78e49fab-2fcf-4371-b343-e3dd7a0e0a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71865", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthxfqpygz23", "content": "CVE-2026-71865 - orval\nA security issue in Orval allows attackers to inject malicious JavaScript code when using certain query parameters. This can lead to code execution in the developer, CI, or application\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-20T00:10:04.882965Z"}, {"uuid": "ce490492-56ba-4be3-a68c-eb8ba17882fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71866", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthxfrxthy25", "content": "CVE-2026-71866 - orval\nOrval, a tool for generating JavaScript clients, had a bug in versions 8.19.0 to 8.21.0. This bug allowed attackers to inject malicious code into generated clients. The issue is fixed\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-20T00:10:05.442748Z"}, {"uuid": "5423c561-c483-4eac-a4aa-50e58266b1c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71867", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mthxx5j3vx23", "content": "Orval Turns Your Build Into a Petty Crime Scene, Naturally\nPANIC 66% | Lag 0.0h | CVE-2026-71867 affects Orval and allows untrusted code execution in the development environment thro\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-20T00:19:48.461285Z"}, {"uuid": "2bd58a3a-08fc-46b5-821d-44271ae1e6a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71868", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthxxncdfc2b", "content": "CVE-2026-71868 - orval\nA security issue in Orval's type-safe JavaScript client generation allows attackers to execute malicious code in development environments. This issue affects Orval versions prior to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-20T00:20:04.251408Z"}, {"uuid": "1c8c9751-08e4-4fd1-ba69-19c4d440fc6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71869", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthxxotjuz2u", "content": "CVE-2026-71869 - orval\nOrval, a tool used to generate TypeScript clients from API specs, had a security flaw that allowed attackers to inject malicious code. This could lead to code execution on a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-20T00:20:05.739325Z"}]}