{"vulnerability": "cve-2026-7585", "sightings": [{"uuid": "9b941c7d-6f0b-48ed-b75f-21f2a1903b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75851", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mte7bb543m2p", "content": "CVE-2026-75851 - arcadedb\nIf you use ArcadeDB, a user with limited access can potentially gain full control over your database if they submit a special type of command. This is a serious issue because it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#arcadedb #arcadedata #CVE #infosec", "creation_timestamp": "2026-08-18T12:20:04.456300Z"}, {"uuid": "0e6a75a5-3203-42d6-8a98-b23ad30393d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75852", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mte7bcrakz2u", "content": "CVE-2026-75852 - arcadedb\nArcadeDB's MongoDB plugin before version 26.8.1 is vulnerable to unauthorized access. An attacker can issue database commands without proper authentication, which could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#arcadedb #arcadedata #CVE #infosec", "creation_timestamp": "2026-08-18T12:20:05.962074Z"}, {"uuid": "d682d960-0964-4227-be63-60adea6d3926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75852", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fu7vddkxv5wio", "content": "CVE-2026-75852 - ArcadeDB MongoDB wire protocol authentication bypass cross-database\nCVE ID : CVE-2026-75852\n \n Published : Aug. 18, 2026, 11:19 a.m. | 53\u00a0minutes ago\n \n Description : ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the M...", "creation_timestamp": "2026-08-18T12:21:24.889888Z"}, {"uuid": "f6a5f803-cbcc-4d03-a96b-c340e3bd176d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75851", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jmjnx7jcsbs5x", "content": "CVE-2026-75851 - ArcadeDB before 26.8.1 Authentication Bypass via Async Command\nCVE ID : CVE-2026-75851\n \n Published : Aug. 18, 2026, 11:19 a.m. | 53\u00a0minutes ago\n \n Description : ArcadeDB server (com.arcadedb:arcadedb-server) in versions 26.7.3 and earlier fails to propagate t...", "creation_timestamp": "2026-08-18T12:27:24.594000Z"}, {"uuid": "c26822b0-f6a6-44ad-ac87-9fab43f27396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75854", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mte7t5pkch2e", "content": "CVE-2026-75854 - arcadedb\nOld versions of ArcadeDB's Redis plugin do not require a password, allowing unauthorized users to view, modify, and delete data stored in the database. This is a serious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#arcadedb #arcadedata #CVE #infosec", "creation_timestamp": "2026-08-18T12:30:04.758828Z"}, {"uuid": "b4b528a2-9c85-4ee3-9e1f-0df3afc05d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75853", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5mp254ojityul", "content": "CVE-2026-75853 - ArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-Database\nCVE ID : CVE-2026-75853\n \n Published : Aug. 18, 2026, 11:19 a.m. | 53\u00a0minutes ago\n \n Description : ArcadeDB's Gremlin wire-protocol plugin (com.arcadedb:arcadedb-gremlin) in versions <= 26.7...", "creation_timestamp": "2026-08-18T12:33:25.005845Z"}, {"uuid": "b8ad6995-f6f9-487e-923b-f47d8d768ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75852", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mteabuvri52e", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-75852](https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-fq9c-x968-g278)\n...\nhttps://github.com/ArcadeData/arcadedb/security/advisories/GHSA-fq9c-x968-g278 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-08-18T12:38:18.894874Z"}, {"uuid": "6cbfa13e-eb1d-42e5-bc3c-cbc475185db3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75855", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4slx2a7pbugb5", "content": "CVE-2026-75855 - ArcadeDB before 26.8.1 Path Traversal via create/drop database\nCVE ID : CVE-2026-75855\n \n Published : Aug. 18, 2026, 11:19 a.m. | 53\u00a0minutes ago\n \n Description : ArcadeDB versions before 26.8.1 fail to sanitize database names in the POST /api/v1/server endpoin...", "creation_timestamp": "2026-08-18T12:39:25.699992Z"}, {"uuid": "aae701da-7eab-42e5-b418-de7aa0868e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75854", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2x3kjmj4r44oj", "content": "CVE-2026-75854 - ArcadeDB Redis Wire-Protocol Plugin Missing Authentication\nCVE ID : CVE-2026-75854\n \n Published : Aug. 18, 2026, 11:19 a.m. | 53\u00a0minutes ago\n \n Description : ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-proto...", "creation_timestamp": "2026-08-18T12:41:25.178854Z"}, {"uuid": "65c5281c-2a95-4df5-8001-cc070964793e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75851", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtebk3ksfg2z", "content": "\ud83d\udd34 CVE-2026-75851 - Critical (9.9)\n\nArcadeDB server (com.arcadedb:arcadedb-server) in versions 26.7.3 and earlier fails to propagate ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75851/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T13:00:50.971241Z"}, {"uuid": "51115eca-4026-4380-bc13-6a4fc77e346e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75852", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtebkddvfv22", "content": "\ud83d\udd34 CVE-2026-75852 - Critical (9.8)\n\nArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the Mongo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75852/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T13:00:56.792506Z"}, {"uuid": "5bcb4987-a977-4df8-96a6-93341d9b6ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75853", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtebkkadn72r", "content": "\ud83d\udfe0 CVE-2026-75853 - High (8.8)\n\nArcadeDB's Gremlin wire-protocol plugin (com.arcadedb:arcadedb-gremlin) in versions <= 26.7.3 ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75853/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T13:01:09.822657Z"}, {"uuid": "d68bae90-b6ac-4ad6-9b49-a34c5e522f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75851", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtefd524aa2c", "content": "\ud83d\udea8 CVE-2026-75851 \u2014 CVSS 9.4 CRITICAL\n\nArcadeDB server (com.arcadedb:arcadedb-server) in versions 26.7.3 and earlier fails to propagate the authen...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75851\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T14:08:29.381143Z"}, {"uuid": "1e063f0c-e8ae-4a55-83c1-29ef4ec53260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75852", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtefdgcoai2y", "content": "\ud83d\udea8 CVE-2026-75852 \u2014 CVSS 9.3 CRITICAL\n\nArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-pr...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75852\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T14:08:39.265548Z"}, {"uuid": "f4451608-e3ce-439e-9f2a-33358d7e56eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75854", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtefdp3rt32p", "content": "\ud83d\udea8 CVE-2026-75854 \u2014 CVSS 9.3 CRITICAL\n\nArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-protocol p...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75854\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T14:08:48.358159Z"}, {"uuid": "f79204ff-062e-4431-8868-91e90e7c8fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75856", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtessolmhk2f", "content": "\ud83d\udea8 CVE-2026-75856 \u2014 CVSS 9.2 CRITICAL\n\nCodeWhale before 0.8.64 contains a server-side request forgery bypass vulnerability in DNS pinning logic th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75856\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T18:09:49.896711Z"}, {"uuid": "b3f95230-8d9a-415b-8da4-4b22a188e21d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75856", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtetezieuk2m", "content": "CVE-2026-75856 - codewhale\nCodeWhale, a software used for certain tasks, contains a security flaw that allows attackers to access internal IP addresses. This can happen when an attacker manipulates the way\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#codewhale #hmbown #CVE #infosec", "creation_timestamp": "2026-08-18T18:20:11.681228Z"}, {"uuid": "e8a17fa6-f0e9-40ad-8a92-277ef874b1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75854", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117116398789961703", "content": "CVE-2026-75854: ArcadeDB <26.8.1 has a CRITICAL Redis plugin vuln (CVSS 9.3). Missing auth lets attackers run any command & access/modify/delete all DB data. Restrict Redis port access & monitor for fixes. https://radar.offseq.com/threat/cve-2026-75854-missing-authentication-for-critical-function-in-arcadedata-arcadedb-033f47986cfb9941 #OffSeq #Vuln #ArcadeDB #Infosec", "creation_timestamp": "2026-08-18T12:00:26.116817Z"}, {"uuid": "0ee1a4bb-d9a1-4b22-b799-0aff2155c9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-75854", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mte666epzm2n", "content": "ArcadeDB <26.8.1: CRITICAL Redis plugin flaw (CVSS 9.3). No auth \u2014 attackers can control DBs. Restrict Redis port access & watch for patches. https://radar.offseq.com/threat/cve-2026-75854-missing-authentication-for-critical-function-in-arcadedata-arcadedb-033f47986cfb9941 #OffSeq #Vulnerability ...", "creation_timestamp": "2026-08-18T12:00:27.278450Z"}, {"uuid": "455164c9-e3f2-4c32-84ca-53694ac59e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-75856", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-6v2g-fpxh-pmmh", "content": "", "creation_timestamp": "2026-09-04T20:35:09.085696Z"}, {"uuid": "26fa9414-3c68-46f2-9fbe-ac7ce7f55b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-75857", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-g29h-pfmp-qp9r", "content": "", "creation_timestamp": "2026-09-04T20:35:15.458975Z"}, {"uuid": "7b694775-4ebd-4428-ae23-d3f2a7c94cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75858", "type": "seen", "source": "https://gist.github.com/alon710/c7af24523c00756cedb6917806c4592c", "content": "# CVE-2026-75858: CVE-2026-75858: Silent Remote Code Execution via Approval Bypass in CodeWhale Interactive Tools\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-09-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-75858\n\n## Summary\nCVE-2026-75858 is a critical authorization bypass vulnerability in CodeWhale's interactive execution tools, allowing silent, unprompted execution of model-supplied Python and shell commands on the host machine. The defect affects versions between 0.8.41 and 0.8.64, bypassing any configured approval policies via indirect prompt injection.\n\n## TL;DR\nA logical flaw in CodeWhale's tool engine allows local and remote code execution by bypassing the '--approval-policy' via 'rlm_eval' and 'exec_shell_interact' tools.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Local (User-assisted)\n- **CVSS v3.1 Score**: 7.8 (High)\n- **CVSS v4.0 Score**: 8.5 (High)\n- **EPSS Score**: 0.00267 (18.59th percentile)\n- **Exploit Status**: PoC available\n- **Impact**: Arbitrary Code Execution\n\n## Affected Systems\n\n- CodeWhale AI Agent Workspace\n- codewhale-tui Rust Crate\n- codewhale Rust Crate\n- **codewhale-tui**: >= 0.8.41, < 0.8.64 (Fixed in: `0.8.64`)\n- **codewhale**: >= 0.8.41, < 0.8.64 (Fixed in: `0.8.64`)\n\n## Mitigation\n\n- Upgrade codewhale and codewhale-tui to version 0.8.64 or higher.\n- Sandbox execution workspaces inside isolated Docker containers.\n- Restrict the agent's outbound network connections to external domains.\n\n**Remediation Steps:**\n1. Run 'cargo update -p codewhale-tui' to pull the patched version (>= 0.8.64).\n2. Restart any running instances of the CodeWhale terminal user interface (TUI).\n3. Implement endpoint process auditing policies to track child processes of the CodeWhale agent.\n\n## References\n\n- [NVD CVE-2026-75858 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-75858)\n- [GitHub Security Advisory GHSA-wrj3-vj8c-784f](https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-wrj3-vj8c-784f)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/codewhale-rlm-eval-before-remote-code-execution)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75858) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-04T20:32:55.554794Z"}, {"uuid": "08cff793-3145-44cd-8b8e-05deefa73391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-75858", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-wrj3-vj8c-784f", "content": "", "creation_timestamp": "2026-09-04T20:35:04.843969Z"}, {"uuid": "4e578e5d-4c8a-4185-a540-54bc62da5d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-75859", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-62f5-cp2p-vq95", "content": "", "creation_timestamp": "2026-09-04T20:35:17.594119Z"}, {"uuid": "f9a87ab1-5ae8-497e-b969-eed16010eafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75856", "type": "seen", "source": "https://gist.github.com/alon710/e9c9321eb429f1e237680df95cb576b8", "content": "# CVE-2026-75856: CVE-2026-75856: Server-Side Request Forgery (SSRF) Bypass via DNS Resolution TOCTOU in CodeWhale\n\n> **CVSS Score:** 9.2\n> **Published:** 2026-09-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-75856\n\n## Summary\nA critical Server-Side Request Forgery (SSRF) bypass vulnerability exists in CodeWhale before version 0.8.64 (and version 0.8.41 in the 0.8.x branch) due to a Time-of-Check to Time-of-Use (TOCTOU) bug in its DNS pre-flight validation mechanism. By returning a temporary resolution failure during validation and subsequently resolving to restricted IPs during HTTP execution, attackers can bypass security rules.\n\n## TL;DR\nA Time-of-Check to Time-of-Use (TOCTOU) flaw in CodeWhale's DNS validation logic allows unauthenticated attackers to bypass SSRF protections by intentionally failing the initial DNS resolution and resolving to a restricted IP during the subsequent HTTP request.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918: Server-Side Request Forgery (SSRF)\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 9.2 (Critical)\n- **EPSS Score**: 0.0037 (Percentile: 30.08%)\n- **Impact**: High Confidentiality Breach\n- **Exploit Status**: Proof-of-Concept in tests; no weaponized exploits\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- CodeWhale\n- **CodeWhale**: >= 0.8.5, < 0.8.41 (Fixed in: `0.8.41`)\n- **CodeWhale**: >= 0.8.41, < 0.8.64 (Fixed in: `0.8.64`)\n\n## Mitigation\n\n- Upgrade CodeWhale instances to version 0.8.64 or 0.8.41 (legacy branch) immediately.\n- Implement egress firewall rules to block outbound connections from the application server to RFC 1918 ranges and the link-local address 169.254.169.254.\n- Configure container runtime networks to isolate CodeWhale from local or loopback system ports.\n\n**Remediation Steps:**\n1. Identify all deployment instances of CodeWhale below version 0.8.64.\n2. Pull the latest Docker image or update the cargo dependency to CodeWhale >= 0.8.64.\n3. Restart the application services and verify the fix by running the unresolvable hostname unit test.\n\n## References\n\n- [NVD CVE-2026-75856 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-75856)\n- [CVE Org Authoritative Record](https://www.cve.org/CVERecord?id=CVE-2026-75856)\n- [Official Security Advisory (GHSA)](https://github.com/Hmbown/CodeWhale/security/advisories/GHSA-6v2g-fpxh-pmmh)\n- [Patch Commit on GitHub](https://github.com/Hmbown/CodeWhale/commit/26de44a8bd5051f8f944ea60b2c37ae1d2b7d25e)\n- [VulnCheck Third-Party Advisory](https://www.vulncheck.com/advisories/codewhale-before-ssrf-bypass-via-dns-pinning-toctou)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75856) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-05T14:31:44.532904Z"}]}