{"vulnerability": "CVE-2026-53939", "sightings": [{"uuid": "053df17d-069a-4b80-be48-0425c513593b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53939", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv2dkiiiui2w", "content": "\ud83d\udd34 CVE-2026-53939 - Critical (9.1)\n\nOpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). In...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-53939/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T01:00:38.168837Z"}, {"uuid": "ebba4123-b654-4d54-a0eb-d242fb0d24eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53939", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mv2iw73v5i25", "content": "Critical OpenIDC Flaw, and Prague Still Needs a Committee to Notice Fire\nPANIC 86% | Lag 0.0h | OpenIDC/cjose has a critical CVE-2026-53939 flaw rated 9.1. If exploited, it can undermine JOSE hand\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-09T02:36:36.172577Z"}, {"uuid": "a1272263-33bf-4c3f-92c7-d759d3e5f6be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53939", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv2hcjhd722j", "content": "\ud83d\udea8 CVE-2026-53939 \u2014 CVSS 9.1 CRITICAL\n\nOpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). In versions ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-53939\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-09T02:07:42.281086Z"}, {"uuid": "90e134dc-92be-4f82-a6ce-9cf1bf397183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53939", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mv2hcjyziu2c", "content": "\ud83d\udea8 CVE-2026-53939 \u2014 CVSS 9.1 CRITICAL\n\nOpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). In versions ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-53939\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-09T02:07:42.950829Z"}, {"uuid": "cd501f49-8320-46f8-8104-54b056a70ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53939", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3vsykbyn2j", "content": "CVE-2026-53939 - cjose\nVersions 0.6.1 through 0.6.2.5 of the OpenIDC/cjose library create an encryption key made entirely of zeros when using certain AES\u2011CBC\u2011HMAC encryption methods. This lets anyone who\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cjose #openidc #CVE #infosec", "creation_timestamp": "2026-09-09T16:00:07.636795Z"}, {"uuid": "78bc7d78-8b65-450e-bf78-20be64efbdb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53939", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv3zfz3f742p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-53939: OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE)\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-53939\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-09T17:04:26.956134Z"}]}