{"vulnerability": "cve-2026-77995", "sightings": [{"uuid": "00e5642b-0099-4ba0-ad18-11a019aebc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77995", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117150726686144491", "content": "CVE-2026-77995 (CRITICAL, CVSS 10): miniOrange OAuth Client for Joomla (v1.0.0 \u2013 3.1.9) allows arbitrary account takeover via cookie manipulation. Patch to 3.2.0+ required. https://radar.offseq.com/threat/cve-2026-77995-cwe-639-authorization-bypass-through-user-controlled-key-in-miniorangecom-miniorange-0e8da876ce4c7e51 #OffSeq #Joomla #Vuln #OAuth", "creation_timestamp": "2026-08-24T13:30:28.961241Z"}, {"uuid": "7f6302dc-4193-4a64-8cf5-a214a7f2e711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77995", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mttfyp326q2f", "content": "miniOrange OAuth Client for Joomla (v1.0.0-3.1.9) hit by CRITICAL CVE-2026-77995: attackers can hijack any account, even admin, via cookie manipulation. Update to 3.2.0+ now. https://radar.offseq.com/threat/cve-2026-77995-cwe-639-authorization-bypass-through-user-controlled-key-in-miniorangecom-m...", "creation_timestamp": "2026-08-24T13:30:29.833036Z"}, {"uuid": "9711e559-b7d4-4f9e-a245-dc072ba2764f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77995", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttnsdyjxi2e", "content": "CVE-2026-77995 - miniorange oauth client extension for joomla\nThe miniOrange OAuth Client extension for Joomla (versions before 3.2.0) can be fooled by changing a small piece of data stored in the web browser, allowing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-24T15:50:06.152728Z"}, {"uuid": "ffe19d1f-090d-4eba-85ff-bf9c1bbcda80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77995", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttoskizvp2p", "content": "\ud83d\udea8 CVE-2026-77995 \u2014 CVSS 10 CRITICAL\n\nJoomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0 - The man...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77995\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T16:08:06.946896Z"}, {"uuid": "30990ce6-ebed-40ae-a8ed-ed9c110ae721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77995", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtusc5aguv2l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-69836: 43 interactions\nCVE-2026-73570: 21 interactions\nCVE-2026-19478: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-73570: 15 interactions\nCVE-2026-77995: 6 interactions\nCVE-2026-18963: 4 interactions\n", "creation_timestamp": "2026-08-25T02:43:10.843186Z"}]}