{"vulnerability": "cve-2026-7684", "sightings": [{"uuid": "c1c15f87-0d4a-4ce9-a143-f47050ff92c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76840", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtti7jp5vh2p", "content": "CVE-2026-76840 - rustdesk\nRustDesk\u2019s Windows clipboard sharing can be tricked by a remote computer into writing more data than it expects, which corrupts the program\u2019s memory. This could cause the application to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rustdesk #CVE #infosec", "creation_timestamp": "2026-08-24T14:10:05.877581Z"}, {"uuid": "1977bc63-dd6b-4e7b-b190-90422c3dd7dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76841", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv32nxjeh2c", "content": "CVE-2026-76841\nXinference versions up to 2.11 automatically trust code from any model it loads, allowing a user with model\u2011upload rights to execute their own Python scripts on the server. This can let an attacker run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:20:03.372720Z"}, {"uuid": "317e7177-d963-4af7-a409-28ab933a9730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76847", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv32okhsi2e", "content": "CVE-2026-76847\nWhen the act tool runs a workflow that uses the upload\u2011artifact or download\u2011artifact actions, it starts a small server that handles those files. Because the server does not verify who is making the request and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:20:04.083336Z"}, {"uuid": "7a29d26e-80d1-4420-bd84-0f68ef5cac81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76844", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mum5duzvtc2z", "content": "CVE-2026-76844 for webpack-dev-middleware was published by VulnCheck without coordinating with the maintainers or the OpenJS Foundation CNA, which holds CNA scope for webpack, and before any fix existed.\n\nThe coordinated advisory and fix are now out\ngithub.com/webpack/webp...", "creation_timestamp": "2026-09-03T09:32:16.953760Z"}]}