{"vulnerability": "cve-2026-7584", "sightings": [{"uuid": "0de447b8-04dd-44b4-8ae0-35d04b3d955c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75847", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7pvs4t4e5e2fq", "content": "CVE-2026-75847 - Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail\nCVE ID : CVE-2026-75847\n \n Published : Aug. 30, 2026, 1:20 a.m. | 48\u00a0minutes ago\n \n Description : Cleartext Storage of Sensitive Information vulnerability in ash-project a...", "creation_timestamp": "2026-08-30T02:20:46.703110Z"}, {"uuid": "19c38bf3-d72e-45a3-86a1-2391f2f964ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkrpo63qp62o", "content": "CVE-2026-7584 - Arbitrary Code Execution via Unsafe Deserialization in LabOne Q\nCVE ID : CVE-2026-7584\n \n Published : May 1, 2026, 7:21 a.m. | 57\u00a0minutes ago\n \n Description : The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynamically import...", "creation_timestamp": "2026-05-01T08:31:29.088133Z"}, {"uuid": "4bc674af-ae01-4373-a924-66aa33b199ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7584", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mkrrbz4wxu2p", "content": "Zurich Instruments LabOne Q hit by HIGH-severity vuln: CVE-2026-7584 allows code execution via crafted experiment files. No patch \u2014 open files only from trusted sources! https://radar.offseq.com/threat/cve-2026-7584-cwe-502-deserialization-of-untrusted-3a9a6f64 #OffSeq #Vulnerability #Cybersecurity", "creation_timestamp": "2026-05-01T09:00:29.855246Z"}, {"uuid": "e388a2fd-9e97-437f-83a3-6304e8382270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7584", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116498499284009437", "content": "\ud83d\udd12 HIGH-severity in Zurich Instruments LabOne Q (2.41.0, 26.4.0b1): CVE-2026-7584 enables arbitrary code exec via malicious experiment files. No patch yet \u2014 open files only from trusted sources. Monitor vendor updates. https://radar.offseq.com/threat/cve-2026-7584-cwe-502-deserialization-of-untrusted-3a9a6f64 #OffSeq #Vulnerability #Infosec #LabOneQ", "creation_timestamp": "2026-05-01T09:00:33.285741Z"}, {"uuid": "8ef27b7c-95f0-4ca5-a588-4a173fa942a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75846", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mteae5u7gz26", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-75846](https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-vv82-qvpf-rjwv)\n...\nhttps://github.com/ArcadeData/arcadedb/security/advisories/GHSA-vv82-qvpf-rjwv #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-08-18T12:39:35.163385Z"}, {"uuid": "f9ac2c64-f841-4b0b-9e8d-bcda1bf6fcc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75840", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mteaghlijh2t", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-75840](https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-wx28-2265-f788)\n...\nhttps://github.com/ArcadeData/arcadedb/security/advisories/GHSA-wx28-2265-f788 #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-08-18T12:40:52.578311Z"}, {"uuid": "9fa4a40b-1b09-4d6d-9d59-ebe3b968a8ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75843", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtefcudxoh25", "content": "\ud83d\udea8 CVE-2026-75843 \u2014 CVSS 9.4 CRITICAL\n\nArcadeDB before 26.8.1 fails to bind the authenticated principal on the gRPC transaction executor thread in...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75843\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T14:08:20.368455Z"}, {"uuid": "923831c4-20b7-4d9d-8033-aaec5f597eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mte6pgeyfk2j", "content": "CVE-2026-75843 - arcadedb\nArcadeDB users before version 26.8.1 are at risk of attackers creating server-wide admin accounts. This is a serious issue because it allows unauthorized access to sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#arcadedb #arcadedata #CVE #infosec", "creation_timestamp": "2026-08-18T12:10:08.295817Z"}]}