{"vulnerability": "CVE-2026-14540", "sightings": [{"uuid": "78ac5b85-40a4-401b-ac55-5ad9fb9df225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14540", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eimuhra2zjnpt", "content": "CVE-2026-14540 - Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox\nCVE ID : CVE-2026-14540\n \n Published : July 31, 2026, 2:16 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP...", "creation_timestamp": "2026-07-31T03:54:17.489460Z"}, {"uuid": "ef03e747-ce08-435c-8bff-ec55207e2da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14540", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwygq2jw724", "content": "CVE-2026-14540\nA security issue exists in older versions of Google MCP Toolbox, which can be exploited by an attacker to make unauthorized requests to internal or external sites. This could potentially allow an attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:48:03.338082Z"}, {"uuid": "4511d84f-accc-4750-a1f2-e9dfa1b38342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14540", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mryoodbpnu2r", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 39 interactions\nCVE-2026-63077: 35 interactions\nCVE-2026-16232: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-14540: 3 interactions\nCVE-2026-16232: 3 interactions\nCVE-2026-51371: 3 interactions\n", "creation_timestamp": "2026-08-01T04:58:43.107017Z"}]}