{"vulnerability": "CVE-2026-15704", "sightings": [{"uuid": "d01e976c-ac7f-4aec-8020-6a06a9935963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15704", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrewjtdsfk2r", "content": "CVE-2026-15704 - eclipse basyx go components\nA vulnerability in Eclipse BaSyx Go Components versions 1.0.0 and below allows unauthorized access to protected API routes. This can happen when an attacker adds\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eclipsefoundation #CVE #infosec", "creation_timestamp": "2026-07-24T08:26:04.644850Z"}, {"uuid": "2711a975-a76c-4e16-ab13-902405570600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15704", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116974133641581836", "content": "Eclipse BaSyx Go Components (<=1.0.0) suffer a CRITICAL auth bypass (CVE-2026-15704): ABAC checks can be evaded by adding a trailing slash to API routes. Immediate upgrade to 1.0.1 is required. https://radar.offseq.com/threat/cve-2026-15704-cwe-863-in-eclipse-foundation-eclipse-basyx-go-components-eeb4ef03f595d434 #OffSeq #CVE202615704 #infosec #AppSec", "creation_timestamp": "2026-07-24T09:00:32.001967Z"}, {"uuid": "827133bc-a813-4053-884b-c6e12f7ac43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-15704", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mreyhi2tsl2r", "content": "Eclipse BaSyx Go Components <=1.0.0 hit by CRITICAL auth bypass (CVE-2026-15704). Trailing slash lets attackers evade ABAC and access protected APIs. Upgrade to 1.0.1 ASAP. https://radar.offseq.com/threat/cve-2026-15704-cwe-863-in-eclipse-foundation-eclipse-basyx-go-components-eeb4ef03f595d434 #O...", "creation_timestamp": "2026-07-24T09:00:34.203704Z"}, {"uuid": "1f24a7fb-7a93-47f4-86eb-1aa8b5f430be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15704", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrf7nuygss2v", "content": "ABAC\u30df\u30c9\u30eb\u30a6\u30a7\u30a2\u306e\u4e0d\u5177\u5408\u306b\u3088\u308a\u3001\u672b\u5c3e\u306b\u30b9\u30e9\u30c3\u30b7\u30e5\u304c\u4ed8\u3044\u305f\u30ea\u30af\u30a8\u30b9\u30c8\u304c\u610f\u56f3\u305b\u305a\u8a31\u53ef\u3055\u308c\u3001\u8a8d\u8a3c\u306a\u3057\u306bAPI\u64cd\u4f5c\u304c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-15704 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-07-24T11:09:24.364335Z"}, {"uuid": "930bd9d5-9eb0-4439-b350-65da4d7dfb9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15704", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrfcjkumbr2o", "content": "\ud83d\udd34 CVE-2026-15704 - Critical (9.8)\n\nIn Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled deployments are v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15704/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-24T12:00:41.962030Z"}]}