{"vulnerability": "CVE-2026-14541", "sightings": [{"uuid": "1883f44b-3be6-4833-ba32-81a82adc2ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14541", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jjkywoers73sy", "content": "CVE-2026-14541 - Authentication Bypass and Audience Confusion in MCP Toolbox OAuth Provider\nCVE ID : CVE-2026-14541\n \n Published : July 31, 2026, 3:16 a.m. | 29\u00a0minutes ago\n \n Description : An authentication bypass and audience confusion vulnerability exists in the Google OAut...", "creation_timestamp": "2026-07-31T04:00:16.854626Z"}, {"uuid": "bda4ede8-36d5-4050-9e32-6a805e64c367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14541", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwygrbhhl2y", "content": "CVE-2026-14541\nA security issue in Google MCP Toolbox allows unauthorized access to protected tools and data backends using valid Google OAuth tokens. This happens when the toolbox is set up to use Google OAuth without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:48:04.657135Z"}]}