{"vulnerability": "CVE-2026-75170", "sightings": [{"uuid": "3cc06dfb-a5ab-49b0-ad9c-6e4a6b4acce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75170", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117256814743157528", "content": "CVE-2026-75170: Unauthenticated XSS in HubCore 14.1.1 via /loginController/doLogin language param. CVSS N/A, no patch yet. Attackers can inject arbitrary JS. Audit exposure and restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75170/ #CVE #infosec #XSS", "creation_timestamp": "2026-09-12T07:10:10.711757Z"}, {"uuid": "8bdbb12d-8f99-40fe-9a50-833da8e006d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75170", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvck5r2qsc2o", "content": "CVE-2026-75170: Unauthenticated XSS in HubCore 14.1.1 via /loginController/doLogin language param. CVSS N/A, no patch yet. Attackers can inject arbitrary JS. Audit exposure and restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75170/ #CVE #infosec #XSS", "creation_timestamp": "2026-09-12T07:20:02.264259Z"}]}