{"vulnerability": "CVE-2026-6682", "sightings": [{"uuid": "4e76d14f-43f3-4a61-a10e-ed7afa8c6301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66824", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtnpfqkqd2e", "content": "CVE-2026-66824\nAn attacker could inject malicious code into the Apache HTTP Server's capture tree visualization page, potentially allowing them to perform actions using a victim's authenticated session or access their\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T04:58:03.971046Z"}, {"uuid": "c530b88f-66ee-45ad-b98c-4893159783d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6682", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmrqzzxlb2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6682 \u0432 FatFS: \u0443\u0433\u0440\u043e\u0437\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b\n\n\n\nhttps://kripta.biz/posts/F714C827-BB50-44E3-8C13-2D239E466789", "creation_timestamp": "2026-07-02T00:31:32.325855Z"}, {"uuid": "95426498-50c0-4c6d-9d9e-bc570ff23bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6682", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmxq7gpnk2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6682 \u0432 FatFS: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0441 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 FAT32\n\n\n\nhttps://kripta.biz/posts/5A3148C5-BBA1-4FB7-B8F7-657B649BE174", "creation_timestamp": "2026-07-02T02:18:26.877730Z"}, {"uuid": "690ed257-b33f-473a-8c0c-1350023046d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6682", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnlfcsobm2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6682 \u0432 FatFS: \u0443\u0433\u0440\u043e\u0437\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b\n\n\n\nhttps://kripta.biz/posts/1874922D-A8A1-4B49-BEF0-E7301F84530E", "creation_timestamp": "2026-07-02T08:10:23.434533Z"}, {"uuid": "865035af-fb27-4ffa-868a-31da4c02dbff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6682", "type": "seen", "source": "https://bsky.app/profile/Rairii.labyrinth.zone.ap.brid.gy/post/3mprpb3bn7w72", "content": "looking at that pile of fatfs bugs, i don't see how CVE-2026-6682 is exploitable? given the value is just used to calculate the start of actual cluster data (the end of the root directory)\n\nas for the rest:\n\nCVE-2026-6687 is real, a length arg should have been added with exfat support, but let's [\u2026]", "creation_timestamp": "2026-07-03T23:30:13.759299Z"}, {"uuid": "79356b95-0c10-44df-a2d3-79b07a203464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6682", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mprxuuz23l2c", "content": "Seven vulnerabilities (CVE-2026-6682 to CVE-2026- 6688) were found in the widely used FatFs filesystem library, with three rated as High [\u2026]", "creation_timestamp": "2026-07-04T02:04:23.159861Z"}, {"uuid": "cd95f8f9-02c3-46ce-82f1-202e3c5f402a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6682", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mpygaol4sr26", "content": "runZero disclosed seven vulnerabilities in FatFs, a filesystem library used in various embedded devices. The most critical, CVE-2026-6682 (CVSS 7.6), involves an integer overflow that can lead to memory corruption and code execution.", "creation_timestamp": "2026-07-06T15:37:29.689087Z"}, {"uuid": "96e4ed2a-4535-4b4a-aed8-01ce4f7aea1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66824", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnvnchfda2s", "content": "CVE-2026-66824\nA vulnerability in Wireshark's capture tree visualization allowed an attacker to inject malicious code into a user's browser, potentially allowing the attacker to access sensitive information or perform actions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-27T22:04:05.051713Z"}]}