{"vulnerability": "CVE-2026-6531", "sightings": [{"uuid": "cb47bd18-2303-4f6b-b10a-e3ccc18cbf38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65315", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6vyq5ehk2f", "content": "\ud83d\udfe0 CVE-2026-65315 - High (7.5)\n\nOllama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metada...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65315/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-21T23:00:32.769767Z"}, {"uuid": "280a2b74-d0d9-4609-abce-35e2d54d80c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65317", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6vywsrey23", "content": "\ud83d\udfe0 CVE-2026-65317 - High (8.6)\n\nVerba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65317/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-21T23:00:39.829320Z"}, {"uuid": "3a1527f4-1007-4d65-b4d3-826d527af38f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65318", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6vz5h4fx2w", "content": "\ud83d\udfe0 CVE-2026-65318 - High (8.6)\n\nVerba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulne...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65318/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-21T23:00:46.724308Z"}, {"uuid": "864cd2ff-2fa9-44cb-bb47-ca19a19e3f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65317", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr7bgwhw5z2o", "content": "CVE-2026-65317 - Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass\nCVE ID : CVE-2026-65317\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Verba RAG application version 2.1.3 contains a server...", "creation_timestamp": "2026-07-22T02:25:20.044197Z"}, {"uuid": "ec09162a-0dbb-4d49-9213-5ca9c905c075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65318", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr7bpv536j2o", "content": "CVE-2026-65318 - Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader\nCVE ID : CVE-2026-65318\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Verba RAG application version 2.1.3 contains an...", "creation_timestamp": "2026-07-22T02:30:20.686536Z"}, {"uuid": "f8ecd75a-11c0-429a-b18a-47ff91cc40c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65319", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr7u72hds52f", "content": "\ud83d\udfe0 CVE-2026-65319 - High (7.5)\n\nFeedbin (commit 739884a) contains an unauthenticated information disclosure vulnerability that al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65319/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-22T08:00:57.571439Z"}, {"uuid": "626a9895-e050-467e-be87-fbfc0b139441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65317", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrd3ubuonu2e", "content": "CVE-2026-65317 - verba\nA weakness in Verba RAG application version 2.1.3 allows hackers to trick the server into making unauthorized requests to any website. This could potentially be used to steal sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#verba #weaviate #CVE #infosec", "creation_timestamp": "2026-07-23T14:56:04.620745Z"}]}