{"vulnerability": "CVE-2026-6638", "sightings": [{"uuid": "0d52e420-9d1c-48c3-a808-e539d53ada83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66384", "type": "seen", "source": "Telegram/e-v0GgWzbMmnqcoCNS5uDDkgw7SfuZWmEUeWGpubNw2wZZs", "content": "", "creation_timestamp": "2026-08-29T23:00:07.796319Z"}, {"uuid": "338c9346-1210-408c-bdff-70250ed94d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66384", "type": "seen", "source": "Telegram/e-v0GgWzbMmnqcoCNS5uDDkgw7SfuZWmEUeWGpubNw2wZZs", "content": "", "creation_timestamp": "2026-08-30T00:00:11.624862Z"}, {"uuid": "41628f3f-8628-4460-83f7-fb9a08f1035f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6638", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1996", "content": "", "creation_timestamp": "2026-08-05T08:45:03.577494Z"}, {"uuid": "ffc832a0-e975-4491-acb0-601ee0b4c39a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6638", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/postgresql-multiple-vulnerabilities_20260810", "content": "", "creation_timestamp": "2026-08-10T04:45:28.840717Z"}, {"uuid": "2993cb5a-0009-4dc9-9d32-4501bc1f63a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6638", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpgkznxcc72u", "content": "\ud83d\udd17 CVE : CVE-2026-6473, CVE-2026-6475, CVE-2026-6477, CVE-2026-6637, CVE-2026-6638", "creation_timestamp": "2026-06-29T13:15:07.448116Z"}, {"uuid": "b44c7a9e-6845-40f6-8009-27fcbc29e76e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6638", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0816", "content": "", "creation_timestamp": "2026-07-01T02:45:31.553647Z"}, {"uuid": "b332335d-db2b-4f5b-bd97-3425a034f61d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66384", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mu57mcd4kg2l", "content": "300 Char Blurb for Social Media:\n\ud83d\udea8 Threat Intel: CVE-2026-66384 impacts JFrog Artifactory via path traversal, allowing authenticated file writes outside Docker caches. Review path detection queries, SIEM rules (Splunk, Sentinel, QRadar), and server hardening controls. https://thecybermind.co/jily", "creation_timestamp": "2026-08-28T11:02:48.575107Z"}, {"uuid": "22f4c822-b47c-498e-bbe7-d1642c2d245f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66384", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mu3fm5paxf24", "content": "\ud83d\uded1 CVE-2026-66384\nJFrog Artifactory\nCVSS 5.3 / EPSS 0% / KEV: No\nTL;DR: An authenticated user may write data outside the intended Docker cache path under specifi\u2026\nhttps://cvesentinel.com/report/CVE-2026-66384?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-27T17:44:46.574758Z"}, {"uuid": "32ddb140-7497-44f2-a091-d83ad471fc54", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66384", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d46c9d24-f8e3-4328-8a89-6da9954a94e6", "content": "", "creation_timestamp": "2026-08-27T18:00:02.760465Z"}, {"uuid": "4ec7902b-e519-48b8-878f-ce1b303282f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66384", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4d6oj5ws2e", "content": "CISA KEV Catalog updates include CVE-2023-49105, CVE-2026-53362, and CVE-2026-66384. These actively exploited flaws can fully compromise device security.\n\n#CISAKEV #Cybersecurity #CVE202349105 #CVE202653362 #CVE202666384", "creation_timestamp": "2026-08-28T02:34:06.819019Z"}, {"uuid": "0e0409b4-b2ce-49e7-a2ab-1d33764dedaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66384", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mu4mvrjxwx2d", "content": "CVE-2026-66384 is trending. Hype score 11, currently #3 on cvemon.\n\nAn authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-66384", "creation_timestamp": "2026-08-28T05:28:04.782189Z"}, {"uuid": "5e029133-cf62-4f47-b31a-dee69458f033", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66384", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3e9f5889-5719-43ed-9863-03a1381fa332", "content": "", "creation_timestamp": "2026-08-28T18:00:33.714269Z"}, {"uuid": "76cd870c-9105-402d-960f-3f367d98dfdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66384", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mu423jmm3y2p", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-66384", "creation_timestamp": "2026-08-27T23:51:17.143395Z"}, {"uuid": "5a02d735-7bc5-4889-b197-d63a2296336f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66384", "type": "published-proof-of-concept", "source": "Telegram/e-v0GgWzbMmnqcoCNS5uDDkgw7SfuZWmEUeWGpubNw2wZZs", "content": "", "creation_timestamp": "2026-08-31T00:00:48.037462Z"}, {"uuid": "790bc76c-639a-46f2-bc3e-dfc4b18b3fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66384", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mudz4luy2s24", "content": "\ud83d\udea8 CVE-2026-66384 \u2014 AI agents found a real vulnerability\n\nOpenAI AI agents discovered and exploited a JFrog Artifactory flaw during authorized security research. CVSS: 5.3 \u2014 but it's now in CISA KEV.\n\nstemshop.top/blog/cve-202...\n\n#CVE #AI #CyberSecurity #JFrog #OpenAI #InfoSec", "creation_timestamp": "2026-08-31T03:55:24.136929Z"}, {"uuid": "1893bd36-f10b-4692-a879-00d02151417a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66384", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3muebss3ao62w", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-66384: \u26a0\ufe0f CVE-2026-66384: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.6%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-66384-an-authenticated-user-may-write-data", "creation_timestamp": "2026-08-31T06:30:51.717274Z"}]}