{"vulnerability": "cve-2026-7593", "sightings": [{"uuid": "d420d1ee-322d-4b96-9fb4-2f04df269862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmtulyctt2f", "content": "CVE-2026-75932 - jet admin\nIf you use Jet Admin, a bad actor can create a fake app, attach it to your company\u2019s custom web address, and change the login settings so visitors are sent to the attacker\u2019s site. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jetadmin #CVE #infosec", "creation_timestamp": "2026-08-21T22:50:05.808852Z"}, {"uuid": "cfb73561-e1aa-42e1-b696-3ea21a1adda5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75935", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7pb5qyqpsi44k", "content": "CVE-2026-75935 - Memory-amplification denial of service via declared-length preallocation in Amazon ion-java\nCVE ID : CVE-2026-75935\n \n Published : 18 ao\u00fbt 2026 19:33 | 15\u00a0minutes ago\n \n Description : Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion...", "creation_timestamp": "2026-08-18T20:42:51.661659Z"}, {"uuid": "df604eb3-5a42-458c-ae22-6e3920962672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75936", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dridjv7wdtbcm", "content": "CVE-2026-75936 - Memory-amplification denial of service via GZIP decompression bomb in Amazon ion-java\nCVE ID : CVE-2026-75936\n \n Published : 18 ao\u00fbt 2026 19:34 | 14\u00a0minutes ago\n \n Description : Improper handling of highly compressed data in the GZIP auto-decompression handler...", "creation_timestamp": "2026-08-18T20:44:51.474534Z"}, {"uuid": "347a0d34-2587-42b3-bd22-4e08a60e883d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75935", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf4eh7nmj26", "content": "\ud83d\udfe0 CVE-2026-75935 - High (7.5)\n\nUncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 m...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75935/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T21:00:51.007153Z"}, {"uuid": "693df2b7-7c49-4bc0-ae2b-dfe3e84c4433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75936", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf4enwne42z", "content": "\ud83d\udfe0 CVE-2026-75936 - High (7.5)\n\nImproper handling of highly compressed data in the GZIP auto-decompression handler in Amazon ion-...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75936/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T21:00:57.525063Z"}, {"uuid": "6845d51d-2c9d-402b-9156-6e1105547ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75935", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mtjvanxjn72z", "content": "CVE-2026-75935 &amp; CVE-2026-75936 - Issue with Amazon ion-java - Memory-amplification denial of service #patchmanagement", "creation_timestamp": "2026-08-20T18:36:45.083507Z"}, {"uuid": "26e1e094-d277-4bea-8df4-5ffab3d5e4a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75936", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mtjvanxjn72z", "content": "CVE-2026-75935 &amp; CVE-2026-75936 - Issue with Amazon ion-java - Memory-amplification denial of service #patchmanagement", "creation_timestamp": "2026-08-20T18:36:45.145126Z"}, {"uuid": "0cc0227a-fe58-4f45-864f-681a5cf050d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmaesgokc27", "content": "\ud83d\udfe0 CVE-2026-75932 - High (8.6)\n\nJet Admin allows an attacker to create a malicious app and connect it to a target user's custom d...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-75932/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T17:01:15.913592Z"}, {"uuid": "cab1408f-0576-42af-a2c0-7fc22d613f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtme4rxn3l24", "content": "\ud83d\udea8 CVE-2026-75932 \u2014 CVSS 9.2 CRITICAL\n\nJet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-75932\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T18:08:20.872202Z"}, {"uuid": "438d9cbe-28ed-4c5b-9bed-d11c01756213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/h5iruv45segyg", "content": "CVE-2026-75933 - Jet Admin Stored XSS\nCVE ID : CVE-2026-75933\n \n Published : Aug. 21, 2026, 4:18 p.m. | 15\u00a0minutes ago\n \n Description : Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed...", "creation_timestamp": "2026-08-21T18:12:39.277056Z"}, {"uuid": "6e2fa736-5b77-46d3-9c40-ff28d804aee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dmnssp4m4odck", "content": "CVE-2026-75932 - Jet Admin tenant isolation failure\nCVE ID : CVE-2026-75932\n \n Published : Aug. 21, 2026, 4:18 p.m. | 15\u00a0minutes ago\n \n Description : Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication...", "creation_timestamp": "2026-08-21T18:14:38.703177Z"}, {"uuid": "a326f42f-e672-4f9b-9810-a4f8ce924807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtoh3yjfxs2x", "content": "CVE-2026-75932 - Critical Jet Admin vuln: malicious app can hijack custom domain &amp; steal OAuth secrets. CVSS 8.6. Unpatched \u2014 audit configs &amp; block app creation. #CVE #JetAdmin #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-75932/", "creation_timestamp": "2026-08-22T14:06:54.863469Z"}, {"uuid": "a1d7dbae-83f0-47d5-939f-eb80fef2fe95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117139546630123057", "content": "CVE-2026-75932 - Critical Jet Admin vuln: malicious app can hijack custom domain &amp; steal OAuth secrets. CVSS 8.6. Unpatched \u2014 audit configs &amp; block app creation. #CVE #JetAdmin #infosec\nhttps://www.valtersit.com/cve/CVE-2026-75932/", "creation_timestamp": "2026-08-22T14:07:18.759563Z"}, {"uuid": "bdd41fab-788a-423d-957b-83023ea793a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-75930", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-75930", "content": "", "creation_timestamp": "2026-08-25T08:15:15.578894Z"}, {"uuid": "e904f324-feb3-490a-b83e-b9cbd2592da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75931", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mtsyrka2pk2b", "content": "\ud83d\udea8 High-severity security fix in fast-uri 2.4.5, 3.1.6, and 4.1.3 just released!\n\nPatches CVE-2026-75931. Host confusion via skipped IDN canonicalization on scheme-relative references.\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-08-24T09:33:52.741894Z"}, {"uuid": "0f176f5a-3b1d-47d1-8a72-9cedc5a1b92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75933", "type": "seen", "source": "https://t.me/hacking_Attack/191879", "content": "CISA Advisory: VA-26-232-02Continue reading on Medium \u00bb (https://medium.com/@melkhaligy77/cve-2026-75932-cve-2026-75933-jet-admin-tenant-isolation-failure-and-stored-xss-8b8ae68e1737?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:04.579138Z"}, {"uuid": "0db3e12d-d39c-47cb-8adc-9afab180cffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "seen", "source": "https://t.me/hacking_Attack/191874", "content": "CVE-2026-75932 &amp; CVE-2026-75933: Jet Admin Tenant Isolation Failure and Stored XSS\n\nCISA Advisory: VA-26-232-02Continue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-01T20:00:04.149504Z"}, {"uuid": "5ebff2ae-88a0-4f54-bccf-e8fc150a15ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75933", "type": "seen", "source": "https://t.me/hacking_Attack/191874", "content": "CVE-2026-75932 &amp; CVE-2026-75933: Jet Admin Tenant Isolation Failure and Stored XSS\n\nCISA Advisory: VA-26-232-02Continue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-01T20:00:04.192990Z"}, {"uuid": "565ed50a-74cc-48e6-8e1c-21bd1998a1dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/191877", "content": "CVE-2026-75932 &amp; CVE-2026-75933: Jet Admin Tenant Isolation Failure and Stored XSS\nhttps://medium.com/@melkhaligy77/cve-2026-75932-cve-2026-75933-jet-admin-tenant-isolation-failure-and-stored-xss-8b8ae68e1737?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:04.324558Z"}, {"uuid": "b8e1361e-9f09-4d35-8757-d740b04851bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75933", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/191877", "content": "CVE-2026-75932 &amp; CVE-2026-75933: Jet Admin Tenant Isolation Failure and Stored XSS\nhttps://medium.com/@melkhaligy77/cve-2026-75932-cve-2026-75933-jet-admin-tenant-isolation-failure-and-stored-xss-8b8ae68e1737?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:04.369621Z"}, {"uuid": "a21ce5ff-d514-43e4-8b1f-017a59e4c4da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "seen", "source": "https://t.me/hacking_Attack/191879", "content": "CISA Advisory: VA-26-232-02Continue reading on Medium \u00bb (https://medium.com/@melkhaligy77/cve-2026-75932-cve-2026-75933-jet-admin-tenant-isolation-failure-and-stored-xss-8b8ae68e1737?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:04.538969Z"}, {"uuid": "0a9be8eb-6121-4fde-ac9c-5c79012e19ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "seen", "source": "https://t.me/hacking_Attack/191874", "content": "CVE-2026-75932 &amp; CVE-2026-75933: Jet Admin Tenant Isolation Failure and Stored XSS\n\nCISA Advisory: VA-26-232-02Continue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-02T01:00:26.387998Z"}, {"uuid": "2dbf3603-7bd6-4907-b72b-cb79f41f5057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75933", "type": "seen", "source": "https://t.me/hacking_Attack/191874", "content": "CVE-2026-75932 &amp; CVE-2026-75933: Jet Admin Tenant Isolation Failure and Stored XSS\n\nCISA Advisory: VA-26-232-02Continue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-02T01:00:26.447846Z"}, {"uuid": "327f96d2-d009-4d20-ad31-2fe2913c33a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "seen", "source": "https://t.me/hacking_Attack/191879", "content": "CISA Advisory: VA-26-232-02Continue reading on Medium \u00bb (https://medium.com/@melkhaligy77/cve-2026-75932-cve-2026-75933-jet-admin-tenant-isolation-failure-and-stored-xss-8b8ae68e1737?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:26.907614Z"}, {"uuid": "3f3f540b-ed20-4b1e-9580-b8883b6cca56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75932", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/191877", "content": "CVE-2026-75932 &amp; CVE-2026-75933: Jet Admin Tenant Isolation Failure and Stored XSS\nhttps://medium.com/@melkhaligy77/cve-2026-75932-cve-2026-75933-jet-admin-tenant-isolation-failure-and-stored-xss-8b8ae68e1737?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:26.615682Z"}, {"uuid": "93801c36-4d93-400c-9f8d-237ce876816d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75933", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/191877", "content": "CVE-2026-75932 &amp; CVE-2026-75933: Jet Admin Tenant Isolation Failure and Stored XSS\nhttps://medium.com/@melkhaligy77/cve-2026-75932-cve-2026-75933-jet-admin-tenant-isolation-failure-and-stored-xss-8b8ae68e1737?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:26.671702Z"}, {"uuid": "d95e532e-bc43-44ea-b219-ffa546063701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75933", "type": "seen", "source": "https://t.me/hacking_Attack/191879", "content": "CISA Advisory: VA-26-232-02Continue reading on Medium \u00bb (https://medium.com/@melkhaligy77/cve-2026-75932-cve-2026-75933-jet-admin-tenant-isolation-failure-and-stored-xss-8b8ae68e1737?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:26.963301Z"}, {"uuid": "7cc42082-895e-4077-9dec-d0dae921a7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75931", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mukcg4x6cn2r", "content": "fast-uri, CVE-2026-75931: it only canonicalizes a host to ASCII when the input has an explicit scheme, so resolving a scheme-relative //host/ reference against a scheme-bearing base emits the host verbatim. Re-parsing the resolved URI yields a different host than resolve() returned. #dev", "creation_timestamp": "2026-09-02T15:57:39.814690Z"}, {"uuid": "059bc356-2489-45d4-9070-7abe053ef9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75931", "type": "seen", "source": "https://gist.github.com/alon710/6d6bc08cb0fafac0bb8a8c33b4c587ed", "content": "# CVE-2026-75931: CVE-2026-75931: Host Confusion and SSRF Bypass via Scheme-Relative URIs in fast-uri\n\n&gt; **CVSS Score:** 7.5\n&gt; **Published:** 2026-09-02\n&gt; **Full Report:** https://cvereports.com/reports/CVE-2026-75931\n\n## Summary\nA host confusion vulnerability exists in the fast-uri Node.js library when parsing scheme-relative URI references. Due to inconsistent domain name canonicalization, applications validating resolved hosts can be bypassed by downstream WHATWG-compliant parsers, facilitating Server-Side Request Forgery (SSRF).\n\n## TL;DR\nA discrepancy in host canonicalization within fast-uri allows bypasses of SSRF and access-control filters when handling scheme-relative URI references.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-436 (Interpretation Conflict)\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 7.5 (High)\n- **EPSS Score**: 0.00247 (15.89th percentile)\n- **Impact**: SSRF Filter Bypass / Host Obfuscation\n- **Exploit Status**: PoC / Conceptual\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- fast-uri (Node.js NPM package)\n- **fast-uri**: &gt;= 2.4.2, &lt; 2.4.5 (Fixed in: `2.4.5`)\n- **fast-uri**: &gt;= 3.1.3, &lt; 3.1.6 (Fixed in: `3.1.6`)\n- **fast-uri**: &gt;= 4.0.1, &lt; 4.1.3 (Fixed in: `4.1.3`)\n\n## Mitigation\n\n- Upgrade fast-uri to safe versions (2.4.5, 3.1.6, or 4.1.3)\n- Use native WHATWG URL parser to validate hostnames in security gateways\n- Force package resolutions/overrides for transitive fast-uri dependencies\n\n**Remediation Steps:**\n1. Identify and audit fast-uri versions inside node_modules and package lockfiles\n2. Run npm update fast-uri or yarn upgrade fast-uri to download fixed releases\n3. Implement package overrides or resolutions in package.json to pin secure versions\n4. Add WHATWG URL validation on policy enforcement checks as a defense-in-depth measure\n\n## References\n\n- [NVD Detail CVE-2026-75931](https://nvd.nist.gov/vuln/detail/CVE-2026-75931)\n- [GitHub Security Advisory GHSA-5jgf-p345-68v8](https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8)\n- [Remediation Commit 4e4ebd](https://github.com/fastify/fast-uri/commit/4e4ebd8b245f6ca16e448203559eea3e545453a3)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-75931) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-02T16:31:29.955898Z"}, {"uuid": "a49ee179-9ead-4511-8f52-b26abc37acd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75936", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv4zmdvnk22b", "content": "CVE-2026-85786: DoS via crafted compressed Ion data in Amazon ion-java &lt;1.12.1. Expansion bomb bypasses GZIP opt-out (CVE-2026-75936). CVSS 7.5. Update to 1.12.1 now. https://www.valtersit.com/cve/CVE-2026-85786/ #CVE #infosec #AWS", "creation_timestamp": "2026-09-10T02:40:39.098235Z"}, {"uuid": "8d6c1439-e567-46ed-85c7-09ed7a0ff092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75936", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117244430815419051", "content": "CVE-2026-85786: DoS via crafted compressed Ion data in Amazon ion-java &lt;1.12.1. Expansion bomb bypasses GZIP opt-out (CVE-2026-75936). CVSS 7.5. Update to 1.12.1 now. https://www.valtersit.com/cve/CVE-2026-85786/ #CVE #infosec #AWS", "creation_timestamp": "2026-09-10T02:40:41.934644Z"}]}