{"vulnerability": "cve-2026-9064", "sightings": [{"uuid": "c01db587-719b-44e9-af38-d39613e0bea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9064", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmbrclrmle2k", "content": "CVE-2026-9064 - 389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)\nCVE ID : CVE-2026-9064\n \n Published : May 20, 2026, 9 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : A flaw was found in 389...", "creation_timestamp": "2026-05-20T11:08:35.611427Z"}, {"uuid": "809876e6-6516-4cb4-aa2f-798c830746b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9064", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3moswlwtg2k2i", "content": "CVE-2026-9064 no 389-ds-base: atacante remoto pode derrubar seu servidor LDAP com uma \u00fanica requisi\u00e7\u00e3o. Rocky Linux 10 afetado.  Saiba mais: -> shorturl.at/90BYG  #RockyLinux", "creation_timestamp": "2026-06-21T17:48:59.487608Z"}, {"uuid": "86211344-0b55-4136-8508-1d970bb25115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mveaefpgmm2w", "content": "CVE-2026-90647 - ase2000 v2 communication test set\nThe ASE2000 V2 Communication Test Set for Windows does not correctly check security certificates when using its secure TLS connection. This weakness lets someone\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kalkitech #CVE #infosec", "creation_timestamp": "2026-09-12T23:30:08.026562Z"}, {"uuid": "054a3661-d44b-43fd-b512-c9854082a2c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90648", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/amjjbwu2chui2", "content": "CVE-2026-90648 - Wabt wasm2c Sandbox Escape Vulnerability\nCVE ID : CVE-2026-90648\n \n Published : Sept. 12, 2026, 11:16 p.m. | 21\u00a0minutes ago\n \n Description : wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platfo...", "creation_timestamp": "2026-09-12T23:55:08.140621Z"}, {"uuid": "e6092d3c-97db-4495-afd6-d3f124b9da20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90647", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117260788422772028", "content": "CVE-2026-90647 (CRITICAL, CVSS 9.1) affects Kalkitech ASE2000 V2 (2.35 \u2013 2.37): improper TLS certificate validation in IEC 60870-5-104 enables MitM attacks. No patch confirmed. Restrict access & monitor. https://radar.offseq.com/threat/cve-2026-90647-cwe-295-improper-certificate-validation-in-kalkitech-ase2000-v2-communication-test-set-2a292ef0f6b1257f #OffSeq #ICS #CVE202690647 #TLS", "creation_timestamp": "2026-09-13T00:00:36.567431Z"}, {"uuid": "8144dd50-fed3-4fee-ac5a-9ce8200303f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90647", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvec2ydp322e", "content": "Kalkitech ASE2000 V2 (2.35-2.37) faces a CRITICAL TLS flaw (CVE-2026-90647, CVSS 9.1): improper cert validation enables MitM. Restrict access & watch for suspicious activity. Patch status pending. https://radar.offseq.com/threat/cve-2026-90647-cwe-295-improper-certificate-validation-in-kalkitech-...", "creation_timestamp": "2026-09-13T00:00:42.553508Z"}, {"uuid": "65687406-7adf-4131-8dfc-e6ddf9db3f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://gist.github.com/ichintu/22032aad19461863ee27dbdb173d32b1", "content": "Published September 12, 2026, **CVE-2026-90647** is a critical (9.1) vulnerability in the Kalkitech ASE2000 V2 Communication Test Set (Windows v2.35\u20132.37) that allows network attackers to bypass TLS certificate validation, enabling Man-in-the-Middle attacks.", "creation_timestamp": "2026-09-13T00:02:48.767486Z"}, {"uuid": "cc9bbea0-8448-4157-96ef-83c55c4cec1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/b57a5lyr5756k", "content": "CVE-2026-90647 - Kalkitech ASE2000 Improper Certificate Validation Vulnerability\nCVE ID : CVE-2026-90647\n \n Published : Sept. 12, 2026, 11:17 p.m. | 21\u00a0minutes ago\n \n Description : ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an imprope...", "creation_timestamp": "2026-09-13T00:07:09.465808Z"}, {"uuid": "a4b50951-e77b-4f88-89d1-746c4047daee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvecgo2p4n2b", "content": "\ud83d\udea8 CVE-2026-90647 \u2014 CVSS 9.1 CRITICAL\n\nASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certifica...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-13T00:07:14.246222Z"}, {"uuid": "80a48381-9a83-49cc-9365-2d1c9434d62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90648", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117262911191284457", "content": "CVE-2026-90648: HIGH severity vuln in wasm2c (WebAssembly wabt <=1.0.41). Unchecked calloc() return enables sandbox escape & code exec if allocation fails \u2014 mainly on 32-bit/memory-limited systems. Patch status pending. https://radar.offseq.com/threat/cve-2026-90648-cwe-252-unchecked-return-value-in-webassembly-wabt-365471fbebafc772 #OffSeq #WebAssembly #CVE202690648", "creation_timestamp": "2026-09-13T09:00:27.452003Z"}, {"uuid": "4b0beed7-b264-475f-8993-99c839cfab40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90648", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvfaacghw725", "content": "WebAssembly wabt <=1.0.41 hit by HIGH severity vuln: unchecked calloc() in wasm2c can enable sandbox escape & code exec on 32-bit or memory-restricted hosts. Mitigate memory pressure, monitor advisories. https://radar.offseq.com/threat/cve-2026-90648-cwe-252-unchecked-return-value-in-webassembly-...", "creation_timestamp": "2026-09-13T09:00:29.380636Z"}]}