{"vulnerability": "CVE-2026-6563", "sightings": [{"uuid": "eb606055-d59c-4cb5-b35c-7c97ebe19058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6563", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116430551736901385", "content": "", "creation_timestamp": "2026-04-19T09:00:30.234950Z"}, {"uuid": "078c4d9e-93f8-452c-89ac-bf9c5573dbd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6563", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjtlp2da3t22", "content": "", "creation_timestamp": "2026-04-19T09:00:32.730808Z"}, {"uuid": "b064cbfe-0d12-4dec-96a1-6c9e8f3654f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjtnlktedl2h", "content": "", "creation_timestamp": "2026-04-19T09:34:22.200347Z"}, {"uuid": "8f04ccef-79b8-4607-9fc5-8399d7146ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6563", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjtozyyo2s2t", "content": "", "creation_timestamp": "2026-04-19T10:00:29.979920Z"}, {"uuid": "2d0eb6bc-ba7d-466c-9ca8-365638be3218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6563", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116431376341743612", "content": "", "creation_timestamp": "2026-04-19T12:31:35.995802Z"}, {"uuid": "12b54222-f636-4b1c-99c5-38accea2826b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6563", "type": "published-proof-of-concept", "source": "Telegram/QXWSAOjdbh3TJ-T8OnpiFifTmuYagr5Irm6UVS8jofPBNEs", "content": "", "creation_timestamp": "2026-04-19T11:15:54.000000Z"}, {"uuid": "5899ffe8-c5a2-4c8a-8015-22c06854c3e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65637", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtydl6w76z2k", "content": "\ud83d\udd17 CVE : CVE-2026-32990, CVE-2026-65182, CVE-2026-65183, CVE-2026-65637, CVE-2026-65905, CVE-2026-65927, CVE-2026-66299, CVE-2026-66422, CVE-2026-68525, CVE-2026-68569, CVE-2026-68763, CVE-2026-73180", "creation_timestamp": "2026-08-26T12:30:27.438169Z"}, {"uuid": "0a43c491-39d5-45fa-ba2d-176d3badc6fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65637", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu37qzb5tq24", "content": "CVE-2026-65637 - tomcat\nCertain 9.x, 10.x, and 11.x versions of Apache Tomcat have an incomplete fix that can let an attacker bypass the check that confirms the server is talking to the correct website. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tomcat #apache #CVE #infosec", "creation_timestamp": "2026-08-27T16:00:08.511449Z"}, {"uuid": "3ba5daf4-3074-4a97-9242-e6c0caeabe7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65637", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/4q2jod4or3iqp", "content": "CVE-2026-65637: Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete", "creation_timestamp": "2026-08-26T00:54:06.956824Z"}, {"uuid": "46137850-c1fa-4a51-9b39-cce9347e889f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65638", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6mgkkl3b2j", "content": "CVE-2026-65638 - configserver security & firewall\nThe ConfigServer Security & Firewall software (including the WebPros version) does not properly clean up URLs it receives, which lets anyone on the internet send a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#webpros #CVE #infosec", "creation_timestamp": "2026-09-10T17:50:05.394950Z"}, {"uuid": "ef340946-e7bc-43c6-9eb5-a8311a922706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65638", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6ni7alcf2n", "content": "\ud83d\udea8 CVE-2026-65638 \u2014 CVSS 9.2 CRITICAL\n\nImproper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote att...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-65638\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T18:08:54.457417Z"}, {"uuid": "bbfdce4e-7986-478a-88a7-316056208fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65639", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6myidjky2t", "content": "CVE-2026-65639 - configserver security & firewall\nThe ConfigServer Security & Firewall tool can be tricked into running system commands with full administrative rights if an attacker controls the allowed/denied IP\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#webpros #CVE #infosec", "creation_timestamp": "2026-09-10T18:00:07.290120Z"}, {"uuid": "1893db72-a75d-423d-8008-68f3b8003505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65638", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mv6ni7tqvq2n", "content": "\ud83d\udea8 CVE-2026-65638 \u2014 CVSS 9.2 CRITICAL\n\nImproper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote att...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-65638\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-09-10T18:08:55.044722Z"}, {"uuid": "5648938d-06e9-4fb9-84cb-69175863d7d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65639", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6nii6aca2p", "content": "\ud83d\udea8 CVE-2026-65639 \u2014 CVSS 9.5 CRITICAL\n\nOS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attack...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-65639\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T18:09:04.112715Z"}, {"uuid": "58c4216e-963b-4875-af7e-f59db993b035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65638", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv6twpryjf2j", "content": "~Cybergcca~\nSix advisories address vulnerabilities; CVE-2026-71362 is reportedly exploited in the wild.\n-\nIOCs: CVE-2026-71362, CVE-2026-67401, CVE-2026-65638\n-\n#CVE202671362 #ThreatIntel #Vulnerabilities", "creation_timestamp": "2026-09-10T20:04:24.163363Z"}, {"uuid": "693e7264-404a-47a7-928f-d5f1ca4b1a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65638", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-908", "content": "", "creation_timestamp": "2026-09-10T20:15:07.958096Z"}, {"uuid": "ebf4b1b3-37ff-4921-bd68-5142e8433609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65639", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-908", "content": "", "creation_timestamp": "2026-09-10T20:15:10.189657Z"}, {"uuid": "36e49cf9-8ab5-419c-9c10-27f184c474d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65639", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv7m7aymh72o", "content": "Two critical CSF plugin vulnerabilities, CVE-2026-65638 and CVE-2026-65639, allow remote code execution. Patch your ConfigServer firewall immediately.\n\n#CSFPlugin #Cybersecurity #CVE202665639 #Vulnerabilities #InfoSec", "creation_timestamp": "2026-09-11T03:18:40.432026Z"}, {"uuid": "2c6840b1-9cfa-4d82-a9cd-d04607dca163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65638", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv7m7aymh72o", "content": "Two critical CSF plugin vulnerabilities, CVE-2026-65638 and CVE-2026-65639, allow remote code execution. Patch your ConfigServer firewall immediately.\n\n#CSFPlugin #Cybersecurity #CVE202665639 #Vulnerabilities #InfoSec", "creation_timestamp": "2026-09-11T03:18:40.364393Z"}, {"uuid": "065757dc-04f5-4247-893a-ad29bdc09f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65639", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-cpanel-whm-and-configserver-security-firewall", "content": "", "creation_timestamp": "2026-09-18T12:45:02.588298Z"}, {"uuid": "b35873b8-b531-4345-831e-89f06dafbba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65638", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-cpanel-whm-and-configserver-security-firewall", "content": "", "creation_timestamp": "2026-09-18T12:45:06.353015Z"}, {"uuid": "7ca69b52-6378-4d76-901b-4852c51f0223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65634", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/erlang-security-advisory-av26-948", "content": "", "creation_timestamp": "2026-09-22T20:15:02.807500Z"}, {"uuid": "951dbbac-ff94-45b8-91e6-8fec34e03334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65634", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117375527804012624", "content": "CVE-2026-65634 Erlang/OTP DoS: crafted OID in TLS handshake triggers unbounded integer growth in the asn1 decoder CVSS 7.5. No patch yet. Limit OID parsing or update as soon as the fix lands. https://www.valtersit.com/cve/CVE-2026-65634/ #CVE #infosec #Erlang", "creation_timestamp": "2026-10-03T06:20:22.057893Z"}]}