{"vulnerability": "cve-2026-76838", "sightings": [{"uuid": "63540585-fb5c-444f-a738-28258a8e6d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76838", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lzangtp4vj27", "content": "CVE-2026-76838 - Hi.Events before 1.11.1-beta Server-Side Request Forgery via Unvalidated Webhook Redirects\nCVE ID : CVE-2026-76838\n \n Published : Aug. 24, 2026, 5:36 p.m. | 27\u00a0minutes ago\n \n Description : Hi.Events validates a webhook destination only when it is registered, n...", "creation_timestamp": "2026-08-24T18:47:24.980392Z"}, {"uuid": "7f3cc094-6516-49d2-b0f2-9d4ffa56abaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76838", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyijzlir27", "content": "\ud83d\udfe0 CVE-2026-76838 - High (8.5)\n\nHi.Events validates a webhook destination only when it is registered, never when it is used. NoIn...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76838/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-24T19:01:29.076320Z"}]}