{"vulnerability": "cve-2026-78619", "sightings": [{"uuid": "476781be-1908-4393-868b-ffefcc998d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78619", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/gwzqittmf6hj5", "content": "CVE-2026-78619: Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerically", "creation_timestamp": "2026-08-25T22:12:00.111109Z"}]}