{"vulnerability": "cve-2026-7366", "sightings": [{"uuid": "b3c50e81-d0a3-4c71-b79f-432a0c03be37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73663", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4rrnxe7j2y", "content": "CVE-2026-73663\nThe FreePBX missedcall module in certain versions can allow an attacker to inject malicious code into the system, potentially taking control of administrator accounts and gaining unauthorized access to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-15T13:30:04.034865Z"}, {"uuid": "07bb5163-620e-4a84-b322-0cace5a6f865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73660", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4ul2dfij2c", "content": "CVE-2026-73660\nFreePBX's Text-To-Speech module has a security flaw that allows authorized administrators to run malicious commands on the system. This can happen if the system hasn't been updated to version 16.0.6 or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-15T14:20:03.693677Z"}, {"uuid": "4ae96bdd-88df-440e-8b2a-f8dc5cf615d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73669", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hi7gjwjvodaob", "content": "CVE-2026-73669 - Philips Hue Bridge Pro MQTT broker missing authentication\nCVE ID : CVE-2026-73669\n \n Published : Aug. 13, 2026, 8:17 p.m. | 17\u00a0minutes ago\n \n Description : The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker (v2.0.22) that listens on all...", "creation_timestamp": "2026-08-13T20:55:17.850957Z"}, {"uuid": "5cb250c8-1eb9-4591-bc31-20951a51e3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73663", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msyozht35o25", "content": "CVE-2026-73663 - missedcall\nFreePBX's missed call module has a security flaw that allows an attacker to inject malicious SQL code. This could lead to unauthorized access to the system and potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#missedcall #freepbx #CVE #infosec", "creation_timestamp": "2026-08-13T22:30:05.808914Z"}, {"uuid": "a65ccbca-f3a5-4068-a16d-da56b93efeb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73665", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msyplcd4lu2y", "content": "CVE-2026-73665 - ucp\nFreePBX users with UCP Node server exposed to the internet should update to version 17.0.9 to prevent unauthorized access. An attacker could execute arbitrary system commands, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ucp #freepbx #CVE #infosec", "creation_timestamp": "2026-08-13T22:40:04.476573Z"}, {"uuid": "446b91bd-b2f5-40e1-bd34-6c1dbc762383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73666", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msyqqjkxsx2b", "content": "\ud83d\udfe0 CVE-2026-73666 - High (8.2)\n\nOpenChoreo is a developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.1, the OpenChor...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73666/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-13T23:00:54.072195Z"}, {"uuid": "37a330a0-ccc5-42ac-80f7-a5ab658a2a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73667", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msyu3a5ow32z", "content": "\ud83d\udfe0 CVE-2026-73667 - High (8.8)\n\nOpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73667/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T00:00:35.137546Z"}, {"uuid": "9045f4a8-cb6b-4eb0-ab2d-a3550ce82cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73667", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msywtior6n25", "content": "OpenChoreo Bleeds Out While Everyone Pretends This Was a Strategy\nPANIC 78% | Lag 0.0h | CVE-2026-73667 is a high-severity vulnerability in OpenChoreo, a Kubernetes developer platform, affe\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-14T00:49:55.259417Z"}, {"uuid": "20a6f342-2ee9-45f2-ad2a-f0d3b36b4009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73667", "type": "seen", "source": "https://gist.github.com/alon710/b029bbe534cb811529fb1bfee50ed025", "content": "# CVE-2026-73667: CVE-2026-73667: Remote Code Execution via OS Command Injection in OpenChoreo Workflow Plane\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-73667\n\n## Summary\nAn authenticated remote code execution vulnerability exists in the OpenChoreo developer platform's Workflow Plane templates. The flaw occurs due to server-side string interpolation of workflow parameters into inline shell scripts and insecure shell parameter expansion. This allows low-privileged attackers to execute arbitrary shell commands inside privileged containers, leading to potential host privilege escalation.\n\n## TL;DR\nAuthenticated OS command injection in OpenChoreo workflow templates allows execution of arbitrary commands with container root privileges.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-78\n- **Attack Vector**: Network (AV:N)\n- **CVSS Base Score**: 8.8\n- **Privileges Required**: Low (PR:L)\n- **Exploit Status**: Proof of Concept (PoC)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- OpenChoreo Workflow Plane\n- OpenChoreo Argo Workflows Integration\n- **OpenChoreo**: < 1.0.4 (Fixed in: `1.0.4`)\n- **OpenChoreo**: >= 1.1.0, < 1.1.4 (Fixed in: `1.1.4`)\n- **OpenChoreo**: >= 1.2.0-rc.1, < 1.2.0-rc.2 (Fixed in: `1.2.0-rc.2`)\n\n## Mitigation\n\n- Map workflow parameters to container environment variables instead of using raw string interpolation in inline shell scripts.\n- Utilize double-quoted variable expansion inside shell scripts to prevent token splitting and injection.\n- Enforce host-user namespace isolation ('hostUsers: false') for privileged workflow pods.\n- Employ base64-encoding to safely pass complex parameter vectors to inner loop parsing structures.\n\n**Remediation Steps:**\n1. Upgrade OpenChoreo deployments to version 1.0.4, 1.1.4, 1.2.0-rc.2, or higher.\n2. Audit custom workflow templates in use to ensure no legacy server-side interpolation placeholders exist inside inline command scripts.\n3. Enable Kubernetes Pod Security Standards or Gatekeeper policies to enforce 'hostUsers: false' on privileged workloads.\n\n## References\n\n- [GHSA-2mw5-23gm-pccq Advisory](https://github.com/openchoreo/openchoreo/security/advisories/GHSA-2mw5-23gm-pccq)\n- [NVD - CVE-2026-73667](https://nvd.nist.gov/vuln/detail/CVE-2026-73667)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-73667)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-73667) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T00:32:06.611331Z"}, {"uuid": "c0853049-531c-4f99-8f09-593599e39b0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73668", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mviyw2ztjn2r", "content": "CVE-2026-73668 - apache syncope\nIn certain versions of Apache Syncope, an administrator who has rights in one area could use the REST interface to see the full configuration of connectors\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachesyncope #apachefoundation #CVE #infosec", "creation_timestamp": "2026-09-14T21:00:09.232815Z"}]}