{"vulnerability": "CVE-2026-18248", "sightings": [{"uuid": "5e763cfb-59ab-4a5d-9be9-f667480acd43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18248", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msadmhleyc2o", "content": "CVE-2026-18248\nA bug in the 6.4.0 version of Fastify AWS Lambda allows an attacker to pretend to be someone they're not by manipulating HTTP headers. This could let them access your system without proper authorization. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-04T06:02:04.724798Z"}, {"uuid": "d7eb9a89-44dd-4b59-a749-3314ef56a692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18248", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms6tyyifgt22", "content": "CVE-2026-18248 - @fastify/aws-lambda\nA vulnerability in version 6.4.0 of Fastify AWS Lambda allows an attacker to fake authentication and access control. This can happen if an application trusts the event data from API\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-03T15:50:05.543708Z"}, {"uuid": "5c4e82db-0f91-464d-88d2-2e1c7fbfc8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18248", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ms7byvyn2b22", "content": "@fastify/aws-lambda 6.4.0\u306b\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306fHTTP\u30d8\u30c3\u30c0\u30fc\u3092\u64cd\u4f5c\u3057\u3066Lambda\u30a4\u30d9\u30f3\u30c8\u3092\u507d\u9020\u3057\u3001\u8a8d\u8a3c\u30fb\u8a8d\u53ef\u3092\u5b8c\u5168\u306b\u30d0\u30a4\u30d1\u30b9\u3057\u3001\u6a29\u9650\u6607\u683c\u304c\u53ef\u80fd\u3002ID\u3084\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306brequ\u2026\nCVE-2026-18248 CVSS 9.1 | CRITICAL", "creation_timestamp": "2026-08-03T20:00:35.069747Z"}, {"uuid": "05f7bcdf-3118-4bda-a9af-fb9f41009da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18248", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-18248", "content": "", "creation_timestamp": "2026-08-03T20:15:09.583887Z"}]}