{"vulnerability": "CVE-2026-57860", "sightings": [{"uuid": "fb0e0fb7-f856-4bca-b675-4ee8ed08cb9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57860", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqugukc3jo2o", "content": "CVE-2026-57860 - ForgeCode Arbitrary Code Execution via Unvetted .mcp.json in Untrusted Repository\nCVE ID : CVE-2026-57860\n \n Published : July 17, 2026, 5:17 p.m. | 24\u00a0minutes ago\n \n Description : ForgeCode (tailcallhq/forgecode), an AI pair-programming CLI, automatically load...", "creation_timestamp": "2026-07-17T19:03:08.511613Z"}, {"uuid": "405a9e91-947e-4da6-b0d2-76a483b43699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57860", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqycskfyak2f", "content": "\ud83d\udfe0 CVE-2026-57860 - High (7.8)\n\nForgeCode (tailcallhq/forgecode), an AI pair-programming CLI, automatically loads and executes th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-57860/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T08:01:06.247944Z"}]}