{"vulnerability": "cve-2026-9697", "sightings": [{"uuid": "de6415b0-0794-445c-8280-386702103eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9697", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3moirewb2xs2g", "content": "\ud83d\udea8 High-severity security fix in undici (7.28.0, 8.5.0) just released!\n\nPatches CVE-2026-9697. undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent.\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-06-17T16:48:56.776729Z"}, {"uuid": "9df3d6f0-530e-4009-82ce-bdcf3ee7dfbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9697", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mojrwgzt3f2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 64 interactions\nCVE-2026-54420: 26 interactions\nCVE-2026-39987: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-9697: 16 interactions\nCVE-2026-50656: 13 interactions\nCVE-2026-42824: 11 interactions\n", "creation_timestamp": "2026-06-18T02:31:23.587466Z"}, {"uuid": "5ca08743-7064-40a3-be91-8b5d89606cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9697", "type": "seen", "source": "https://bsky.app/profile/nodeland.dev/post/3mol72mz6sq2s", "content": "\ud83d\udfe0 High: SOCKS5 TLS bypass (CVE-2026-9697).\nProxyAgent silently dropped `requestTls` over SOCKS5 \u2192 your `ca`, `cert`, `rejectUnauthorized`, `servername` were ignored, falling back to the Mozilla bundle. Cert pinning broke = MITM risk.\nv7/v8. Fixed in 7.28.0 / 8.5.0.", "creation_timestamp": "2026-06-18T15:59:02.862109Z"}, {"uuid": "6763f4b4-dc27-4823-b221-157af8969f79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-9697", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:44:39.683339Z"}, {"uuid": "a0503dd5-f01d-4c1a-8081-99aab28e37e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9697", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk2vnhg5g2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-9697 \u0432 undici: \u043f\u043e\u0447\u0435\u043c\u0443 ProxyAgent \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 requestTls \u0438 \u043a\u0430\u043a \u044d\u0442\u043e \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n\n\nhttps://kripta.biz/posts/AE3C48E7-AC50-4CB5-8EC0-181EFF892B55", "creation_timestamp": "2026-07-13T16:02:22.969000Z"}, {"uuid": "0f89fe55-eeea-4f85-acdc-05ebf5043836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9697", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrhovi7m2w", "content": "\u05d4\u05e9\u05e4\u05e2\u05ea \u05d4\u05e4\u05d2\u05d9\u05e2\u05d4 CVE-2026-9697: \u05db\u05d9\u05e6\u05d3 \u05ea\u05d9\u05e7\u05d5\u05df \u05d7\u05e1\u05e8 \u05d1-undici \u05de\u05e1\u05db\u05df \u05d0\u05ea \u05d4\u05d0\u05d1\u05d8\u05d7\u05d4 \u05e9\u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/6F6ACFD9-4D86-467C-BDA6-626125D7A68D", "creation_timestamp": "2026-07-16T08:02:09.540282Z"}]}