{"vulnerability": "CVE-2026-1162", "sightings": [{"uuid": "85aaa45f-1606-4de4-a88a-07d0bd7c7841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1162", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115918111077763770", "content": "", "creation_timestamp": "2026-01-18T21:00:05.892972Z"}, {"uuid": "20e682c8-5754-4be7-b0a0-b1344baa9ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1162", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcs5xitfz22m", "content": "", "creation_timestamp": "2026-01-19T17:25:42.449912Z"}, {"uuid": "1f027b38-1e76-4140-a25d-a4d82f998ebb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1162", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcs7oqzfho2w", "content": "", "creation_timestamp": "2026-01-19T17:56:35.882774Z"}, {"uuid": "ef258647-5381-4700-853e-ef72607f0d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11624", "type": "seen", "source": "https://gist.github.com/Correctover/36ce05054d457c4fb176b23f08f9962b", "content": "# MCP Protocol Security in 2026: Why Patching Isn't Enough \u2014 And What Runtime Verification Solves\n\n> **Author**: Guigui Wang, Correctover  \n> **Date**: August 4, 2026  \n> **Relevance**: AI Agent infrastructure, MCP security, runtime verification standards\n\n---\n\n## TL;DR\n\nThe Model Context Protocol (MCP) has accumulated **at least 5 confirmed CVEs** in 2026 alone \u2014 DNS rebinding, session hijacking, session poisoning, cross-client data leaks, and Origin header bypass. Every single one follows the same pattern: the protocol trusts its environment without verifying it.\n\nI'm the author of **CCS (Correctover Computing Standard)**, the first IETF submission for AI Agent runtime verification (draft-correctover-ccs-00). This blog post shows how CCS's 7-dimensional runtime verification framework would have caught these vulnerabilities **systemically** \u2014 not as individual patches, but as a class of problems.\n\nIf you're running MCP-based AI agent infrastructure, you need to think about runtime verification, not just patching. Here's why.\n\n---\n\n## The MCP Vulnerability Catalog (2026)\n\n### CVE-2026-11624: DNS Rebinding Attack\n**Severity**: High  \n**Affected**: All MCP server implementations prior to v0.25  \n**Root Cause**: Missing `Origin` header validation\n\nAn attacker-controlled domain uses DNS rebinding to redirect a victim's browser to `127.0.0.1`, where a local MCP server is running. Because the server doesn't validate `Origin` headers, it accepts connections from the browser context \u2014 allowing arbitrary tool execution.\n\n**Impact**: Any website a developer visits while running an MCP server locally could weaponize this. File reads, command execution, database access \u2014 all through the agent's tool interface.\n\n### CVE-2026-67431: Session Poisoning (Ruby SDK)\n**CVSS**: 8.3 (High)  \n**Affected**: `mcp` Ruby gem < v0.23.0  \n**Root Cause**: Transport layer doesn't bind sessions to their owners\n\nThe stateful transport implementation failed to bind established sessions to their original owners or connection contexts. Any actor with access to a session ID can execute arbitrary tool calls.\n\n### CVE-2026-52869: Session Hijacking (Python SDK)\n**CVSS**: 7.1 (High)  \n**Affected**: MCP Python SDK < v1.27.2  \n**Root Cause**: JSON-RPC requests routed purely on user-controlled session IDs without ownership validation\n\nA bearer-token-authenticated attacker can hijack and inject JSON-RPC messages into another client's session by supplying their session ID. The transport layer accepts any valid token and routes to the target session.\n\n### CVE-2026-25536: Cross-Client Data Leak (TypeScript SDK)\n**CVSS**: 7.1 (High)  \n**Affected**: `@modelcontextprotocol/sdk` v1.10.0 through v1.25.3  \n**Root Cause**: Race condition in shared server/transport state\n\nWhen a single server or transport instance serves multiple clients, one client's tool results, notifications, and sampling requests can be delivered to another client. The trigger is ordinary concurrent load, not a crafted attack.\n\n### OX Security Findings: STDIO Transport Architecture\nThe MCP STDIO transport spawns a new process for every connection. This architectural choice means:\n- Each connection has its own process boundary (isolation?)\n- But also: each connection can access the full host system\n- No centralized verification of what the spawned process does\n\n---\n\n## The Pattern: Protocol Trust Without Runtime Verification\n\nLook at all five CVEs. They share a fundamental pattern:\n\n> **MCP trusts its environment. It assumes that if you have a valid connection, you're authorized. If you have a session ID, you own it. If you can reach localhost, you're a legitimate client.**\n\nThis is a **design-level assumption**, not a bug. And it's the same assumption that causes every new CVE.\n\nPatching one vulnerability doesn't fix the pattern:\n- Adding Origin validation fixes DNS rebinding but doesn't prevent the next spoofing attack\n- Binding sessions to owners prevents hijacking but doesn't validate what the session does\n- Isolating transport state prevents leaks but doesn't verify tool execution intent\n\nWhat MCP needs is not another patch. It needs **runtime verification** \u2014 continuous, systematic validation of every agent action against its authorization and intent.\n\n---\n\n## How CCS Solves This Systemically\n\nCCS (draft-correctover-ccs-00) is a 7-dimensional runtime verification framework submitted to IETF. Here's how each dimension addresses the MCP vulnerability pattern:\n\n### 1. Structure Verification\n**What it checks**: Is the incoming request structurally valid? Does it conform to the expected schema?\n\n**Catches**: Malformed JSON-RPC, unexpected tool call parameters, requests that don't match the server's capability declaration.\n\n### 2. Schema Verification  \n**What it checks**: Does the request match the declared tool/resource schema?\n\n**Catches**: Cross-client data leaks (responses with wrong schema), session poisoning (requests with wrong parameter types).\n\n### 3. Latency Verification\n**What it checks**: Is the response time within expected bounds?\n\n**Catches**: DNS rebinding attacks (abnormal latency patterns when browser proxies to localhost), replay attacks (timing anomalies).\n\n### 4. Cost Verification\n**What it checks**: Does the operation stay within declared resource bounds?\n\n**Catches**: Resource exhaustion through tool spam, unexpected computational costs from hijacked sessions.\n\n### 5. Identity Verification\n**What it checks**: Is the requesting entity who it claims to be? Is the session bound to the authenticated principal?\n\n**Catches**: Session hijacking (CVE-2026-52869), session poisoning (CVE-2026-67431). CCS binds session identity to the authenticated principal at the transport layer.\n\n### 6. Integrity Verification\n**What it checks**: Has the data been tampered with? Is the response from the expected source?\n\n**Catches**: Cross-client data leaks (CVE-2026-25536), response injection. CCS verifies data integrity at the byte level.\n\n### 7. Security Verification\n**What it checks**: Does the observed behavior match the declared authorization policy?\n\n**Catches**: DNS rebinding (CVE-2026-11624), STDIO process escape. CCS verifies that every tool execution stays within the declared authorization boundary, regardless of the transport mechanism.\n\n### Performance\n- **P50 latency**: ~133\u03bcs (out-of-process) / ~7.5\u03bcs (in-process)\n- **Verification mode**: Continuous, per-action\n- **False positive rate**: 0% across 28 audited projects\n\n---\n\n## The Self-Evolution Problem\n\nHere's what makes this worse: MCP is a **living protocol**. New transports are added. New SDKs are implemented. New tool patterns emerge. Every change introduces new attack surfaces.\n\nStatic patches can't keep up. You need a verification engine that **evolves** with the protocol.\n\nThat's why CCS includes a self-evolving detection engine (MCPFuzz):\n- **Layer 1**: Static analysis of known vulnerability patterns\n- **Layer 2**: Dynamic fuzzing with semantic-aware test generation\n- **Layer 3**: Behavioral analysis that discovers new bypass patterns autonomously\n\nThis isn't a rule engine. It's an agent that continuously learns what \"normal\" MCP behavior looks like and flags deviations. It achieved **0 false positives** across 28 production projects in the agent ecosystem.\n\n---\n\n## What This Means for You\n\n### If you're an MCP server operator:\n- Upgrade to the latest SDK versions (v0.25+ for Python, v0.23.0+ for Ruby, v1.26.0+ for TypeScript)\n- Implement Origin header validation\n- Bind sessions to authenticated principals\n- Isolate transport state per client\n\nBut also: **deploy runtime verification**. The patches fix known CVEs. CCS prevents the next class of vulnerabilities.\n\n### If you're building on MCP:\n- Don't assume the protocol is secure. It's a living standard with fundamental trust assumptions.\n- Add CCS verification to your agent pipeline. 133\u03bcs overhead is negligible compared to the risk.\n- Audit your tool execution policies. What is your agent authorized to do? CCS enforces that at runtime.\n\n### If you're an enterprise deploying AI agents:\n- MCP is the connective tissue between your LLM and your enterprise tools (databases, APIs, file systems).\n- A vulnerability in MCP is a vulnerability in your entire agent infrastructure.\n- Runtime verification is not optional. It's the difference between \"we patched the known CVEs\" and \"we systematically prevent the class of problems.\"\n\n---\n\n## The Standard Matters\n\nCCS is not just my project. It's submitted to IETF (draft-correctover-ccs-00, Submission #167254). This means:\n- It's a community standard, not a vendor lock-in\n- It's transparent, auditable, and open\n- It's designed to be adopted across the ecosystem\n\nThe DOI (10.5281/zenodo.21783723) provides timestamped proof of priority. The ccs-verifier SDK is on PyPI (v0.4.1). The code is open source.\n\nI'm not selling anything. I'm establishing a standard and proving it works. The question is whether the ecosystem adopts it before or after the next major MCP vulnerability makes headlines.\n\n---\n\n## Resources\n\n- **CCS IETF Draft**: https://datatracker.ietf.org/submit/status/167254/\n- **CCS DOI**: https://doi.org/10.5281/zenodo.21783723\n- **ccs-verifier SDK**: https://pypi.org/project/ccs-verifier/\n- **GitHub**: https://github.com/Correctover/ccs-verifier\n- **MCP CVE-2026-11624**: https://cvereports.com/reports/CVE-2026-11624\n- **MCP CVE-2026-52869**: https://cvereports.com/reports/CVE-2026-52869\n\n---\n\n*Guigui Wang is the author of CCS and founder of Correctover. Correctover's mission is to make AI Agent runtime verification a standard practice, not an afterthought.*\n", "creation_timestamp": "2026-08-04T06:51:03.432660Z"}, {"uuid": "8e508380-64dd-40a7-9d9f-088610bed6d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11629", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116718437318654944", "content": "The severity is increased for this new vulnerability affecting Google Chrome (CVE-2026-11629) https://vuldb.com/vuln/369314", "creation_timestamp": "2026-06-09T05:13:36.262325Z"}, {"uuid": "2de194d4-76ac-4657-be53-291999e1c280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11628", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260609", "content": "", "creation_timestamp": "2026-06-08T18:00:00.000000Z"}, {"uuid": "e90ed5d2-bf5a-4e65-87bb-fce8e4d49711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11629", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260609", "content": "", "creation_timestamp": "2026-06-08T18:00:00.000000Z"}, {"uuid": "2fc310b5-187d-4ecc-a19a-db88d6cfdeea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-11624", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mo62ehueb527", "content": "CRITICAL: Google MCP Toolbox for Databases origin validation bug (CVSS 9.4) risks DNS rebinding. Upgrade to v0.25.0+ & set - -allowed-hosts/origins to restrict access. Avoid default '*'. https://radar.offseq.com/threat/cve-2026-11624-cwe-346-origin-validation-error-in--db730119 #OffSeq #Vulnerabi...", "creation_timestamp": "2026-06-13T10:32:12.533952Z"}, {"uuid": "a4d10971-3323-4d46-9eda-beb95d028d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11624", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo65jxsbas2z", "content": "CVE-2026-11624 - Model Context Protocol DNS Rebinding Vulnerability\nCVE ID : CVE-2026-11624\n \n Published : June 13, 2026, 10:16 a.m. | 51\u00a0minutes ago\n \n Description : The Model Context Protocol has a security warning advising servers to validate the \"Origin\" header on all inco...", "creation_timestamp": "2026-06-13T11:27:12.597374Z"}, {"uuid": "c7026a29-71a1-48fe-bf51-a5279d8f59bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11623", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3moaty4t3r22o", "content": "\u26a1 Alerta #openSUSE: CVE-2026-11623 no tmux permite crash e potencial execu\u00e7\u00e3o de c\u00f3digo via imagem Sixel. Vers\u00f5es at\u00e9 3.6a afetadas.  Saiba mais: -> tinyurl.com/mtextf3m", "creation_timestamp": "2026-06-14T13:14:10.249576Z"}, {"uuid": "c94223a1-f50a-4b42-ae12-c7eb54d0e1d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11623", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3moaty5dvts2o", "content": "\u26a1 Alerta #openSUSE: CVE-2026-11623 no tmux permite crash e potencial execu\u00e7\u00e3o de c\u00f3digo via imagem Sixel. Vers\u00f5es at\u00e9 3.6a afetadas.  Saiba mais: -> tinyurl.com/mtextf3m", "creation_timestamp": "2026-06-14T13:14:10.802192Z"}, {"uuid": "0a4595d1-5304-4ff8-bd58-2fdcd606d9b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11623", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3moe5cefrl42j", "content": "tmux 3.6b fixes CVE-2026-11623", "creation_timestamp": "2026-06-15T20:38:55.696100Z"}, {"uuid": "024ae66e-1e0b-492d-9115-04305a7a6160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11628", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260616", "content": "", "creation_timestamp": "2026-06-15T18:00:00.000000Z"}, {"uuid": "0c69fa9e-25fd-48a9-b274-8e00a3adf66a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11629", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260616", "content": "", "creation_timestamp": "2026-06-15T18:00:00.000000Z"}, {"uuid": "6d601f3c-12f9-4ef1-b647-33eb3b5dd12f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-11628", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1921", "content": "", "creation_timestamp": "2026-06-15T21:00:00.000000Z"}, {"uuid": "43be2522-9426-46b6-bb15-052effbff798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11624", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3moijz2guqe2k", "content": "GitHub advisory \u306f CVE-2026-11624\u3001CVSS 9.4\u3002\u8aac\u660e\u3082\u305d\u306e\u307e\u307e\u3067\u3001v0.25.0 \u307e\u3067\u306f origin \u306e host \u3092\u7e1b\u308c\u306a\u304b\u3063\u305f\u3002\u3042\u3068\u304b\u3089 `--allowed-hosts` \u304c\u8db3\u3055\u308c\u305f\u5f62\u3060\u3002\nhttps://github.com/advisories/GHSA-76g7-m3xw-x9gr", "creation_timestamp": "2026-06-17T14:37:00.802824Z"}, {"uuid": "fc383595-90eb-4084-882d-fa4cf658df7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11625", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp6ohnp7l72c", "content": "CVE-2026-11625 - Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes\nCVE ID : CVE-2026-11625\n \n Published : June 26, 2026, 8:07 a.m. | 1\u00a0hour, 37\u00a0minutes ago\n \n Description : Bytes::Random::Secure versions through 0.29 for Perl sha...", "creation_timestamp": "2026-06-26T09:55:20.303235Z"}, {"uuid": "00529d8e-77b7-4f47-9e36-d11f23b01390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11625", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mp7iiqlatv23", "content": "CVE-2026-11625: Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes", "creation_timestamp": "2026-06-26T17:41:13.776024Z"}, {"uuid": "8eddc82b-e333-4803-8a70-7366c29f7766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11625", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mpbhh45q4a2p", "content": "[Backport release-26.05] perlPackages.BytesRandomSecure: add patch for CVE-2026-11625\n\nhttps://github.com/NixOS/nixpkgs/pull/536005\n\n#security", "creation_timestamp": "2026-06-27T12:27:44.792411Z"}, {"uuid": "d3bbe7a6-5f6c-4589-be94-d0d147c668ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11625", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mpbhh55lv42d", "content": "perlPackages.BytesRandomSecure: add patch for CVE-2026-11625\n\nhttps://github.com/NixOS/nixpkgs/pull/535973\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2017\n\n#security", "creation_timestamp": "2026-06-27T12:27:45.916222Z"}, {"uuid": "cf0dc52c-ffb7-464b-8b88-0cf77a44f3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11623", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq2qz26kqw2c", "content": "\ud83d\udd17 CVE : CVE-2026-11623, CVE-2025-15661, CVE-2026-3196, CVE-2026-55199, CVE-2026-58058, CVE-2026-11625, CVE-2026-13595, CVE-2026-41579, CVE-2026-14258, CVE-2025-15661, CVE-2026-11623, CVE-2026-11625, CVE-2026-13595, CVE-2026-14258, CVE-2026-3196, CVE-2026-41579, CVE-2026-55199, CVE-2026-58058", "creation_timestamp": "2026-07-07T13:55:23.484870Z"}, {"uuid": "aad74398-494e-49bf-8db3-bb77c8734275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11625", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq2qz26kqw2c", "content": "\ud83d\udd17 CVE : CVE-2026-11623, CVE-2025-15661, CVE-2026-3196, CVE-2026-55199, CVE-2026-58058, CVE-2026-11625, CVE-2026-13595, CVE-2026-41579, CVE-2026-14258, CVE-2025-15661, CVE-2026-11623, CVE-2026-11625, CVE-2026-13595, CVE-2026-14258, CVE-2026-3196, CVE-2026-41579, CVE-2026-55199, CVE-2026-58058", "creation_timestamp": "2026-07-07T13:55:23.688761Z"}, {"uuid": "17d90e51-14ac-4a68-a278-8e877a58c34e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11622", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrarlpzzf32u", "content": "ISC has disclosed nine vulnerabilities in BIND 9 (CVE-2026-10723, CVE-2026-10822, CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321)", "creation_timestamp": "2026-07-22T16:47:00.756050Z"}, {"uuid": "3600cc47-1463-4279-8c78-2ad259281e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11622", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mraz4gyvek2o", "content": "BIND 9\u306e\u8106\u5f31\u6027(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822)\u3068\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3(9.20.26, 9.21.24)\n\n#sios_tech #security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #dns #bind\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-07-22T19:01:40.204460Z"}]}