{"uuid": "008fc09c-ee40-4b7a-aafc-5b994f7b9937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54061", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtjsocbdbj2y", "content": "CVE-2026-54061, critical: Dgraph Alpha exposes the external snapshot import RPCs on gRPC port 9080 with no authentication. An unauthenticated client can open StreamExtSnapshot, and the receiver calls Prepare() first, which deletes and replaces the existing store. #dev", "creation_timestamp": "2026-08-20T17:50:42.557465Z"}