{"uuid": "a013436c-bb4c-4b97-8514-3010552dc37f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86543", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muxpqdzfmn2e", "content": "CRITICAL: knowns-dev knowns <0.30.0 exposes mgmt API without auth \u2014 attackers can create public tunnels. Restrict API access & upgrade to 0.30.0+ as soon as possible. https://radar.offseq.com/threat/cve-2026-86543-missing-authentication-for-critical-function-in-knowns-dev-knowns-3a84bb55b20322bc ...", "creation_timestamp": "2026-09-08T00:00:37.865425Z"}