{"vulnerability": "CVE-2026-100551", "sightings": [{"uuid": "1d95b271-b741-4b00-80a7-81b38a5e3586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100551", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117335813361210337", "content": "CVE-2026-100551: OpenClaw for iOS (>=2026.7.1, <2026.8.11) has a CRITICAL vuln in Control UI WebViews \u2014 TLS pins not enforced. Attackers can steal Gateway creds if they can redirect traffic. Patch to 2026.8.11 ASAP! https://radar.offseq.com/threat/openclaw-for-ios-versions-202671-and-2026811-do-not-enforce-saved-gateway-tls-pins-in-the-control-ui-5ff1fd58a7f58c18 #OffSeq #Vulnerability #iOS #AppSec", "creation_timestamp": "2026-09-26T06:00:26.334009Z"}, {"uuid": "eb63147e-77c1-45ec-8120-1560f02937da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100551", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwfpnr565w26", "content": "\ud83d\udfe0 CVE-2026-100551 - High (8.3)\n\nOpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gateway TLS pins in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100551/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T07:01:38.863630Z"}]}