{"vulnerability": "cve-2026-9680", "sightings": [{"uuid": "08c8dcde-f149-4c1f-a15a-9fc6451ee521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9680", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpcypa3cy2a", "content": "CVE-2026-9680 - MCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-server\nCVE ID : CVE-2026-9680\n \n Published : July 28, 2026, 9:16 a.m. | 1\u00a0hour, 23\u00a0minutes ago\n \n Description : Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-...", "creation_timestamp": "2026-07-28T11:35:45.948133Z"}, {"uuid": "ac1a934f-03b7-43b8-9dd9-f89ff89df374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96804", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ock5s3tigffo", "content": "CVE-2026-96804 - CVE-2026-96804\nCVE ID : CVE-2026-96804\n \n Published : Sept. 23, 2026, 5:17 p.m. | 43\u00a0minutes ago\n \n Description : MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _load_model...", "creation_timestamp": "2026-09-23T18:43:55.082979Z"}, {"uuid": "76fe9afe-7693-4f18-aa89-4e343cf91233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96809", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxgwu5rem42n", "content": "\ud83d\udea8 CVE-2026-96809 \u2014 CVSS 9.3 CRITICAL\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Multi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-96809\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T12:08:20.207235Z"}, {"uuid": "90dede2a-4fdf-47dc-8fbb-bfe3f21c0a2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-96809", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxi4fdnqa42q", "content": "CVE-2026-96809 - eduadmin booking\nThe EduAdmin Booking plugin for WordPress versions earlier than 6.0.0 can be tricked into running unintended database commands. This allows an attacker to view or change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eduadminbooking #CVE #infosec", "creation_timestamp": "2026-10-09T23:20:05.260643Z"}]}