{"uuid": "7f6302dc-4193-4a64-8cf5-a214a7f2e711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77995", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mttfyp326q2f", "content": "miniOrange OAuth Client for Joomla (v1.0.0-3.1.9) hit by CRITICAL CVE-2026-77995: attackers can hijack any account, even admin, via cookie manipulation. Update to 3.2.0+ now. https://radar.offseq.com/threat/cve-2026-77995-cwe-639-authorization-bypass-through-user-controlled-key-in-miniorangecom-m...", "creation_timestamp": "2026-08-24T13:30:29.833036Z"}