{"uuid": "806e7724-54e4-465f-9fd7-b2c31783b86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64849", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtf2kobzid25", "content": "\ud83e\udd16 CVE-2026-64849 (CVSS 9.3): unauthenticated SSRF in MLflow (<3.15.0) exploited in the wild to exfiltrate cloud credentials. CVE-2026-25895 (CVSS 9.5): path traversal to RCE in FUXA SCADA/HMI, mass scanning.\nhttps://thehackernews.com/2026/08/attackers-exploit-mlflow-ssrf-flaw-to.html", "creation_timestamp": "2026-08-18T20:28:31.184194Z"}