{"uuid": "18f52360-1321-43c7-a558-b1688ba0c29c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvt7sl6kwt2n", "content": "CVE-2026-63647 - cordyscrm\nIn versions before 1.7.2, CordysCRM exposed public endpoints that let anyone listen to or interfere with another user's real\u2011time notifications. An unauthenticated person could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cordyscrm #1paneldev #CVE #infosec", "creation_timestamp": "2026-09-18T22:30:05.986338Z"}