{"uuid": "670e1844-d86b-4a23-a1b8-b1639454e914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89086", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbafeozon2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-89086: In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-89086\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T18:52:40.164170Z"}