{"vulnerability": "CVE-2026-79696", "sightings": [{"uuid": "22251afd-ab59-4375-bbdb-fb57654a66c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79696", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv3c4gmsk525", "content": "\ud83d\udea8 CVE-2026-79696 \u2014 CVSS 10 CRITICAL\n\nA Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79696\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-09T10:07:29.152073Z"}, {"uuid": "fa6bece6-01f5-40bf-b1ab-450a4b0af9d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79696", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv3dfjwmtp24", "content": "Critical RCE in Google Cloud ADK for Python (v2.0.0 \u2013 2.6.0) \u26a0\ufe0f. Unauth attackers can exploit via crafted test session replay. Patch or update urgently. Google manages remediation for cloud-hosted services. https://radar.offseq.com/threat/cve-2026-79696-cwe-184-incomplete-list-of-disallowed-input...", "creation_timestamp": "2026-09-09T10:30:28.735510Z"}, {"uuid": "5ed5d482-a57e-4c19-b9ce-c8f04b234a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-79696", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117240615810716517", "content": "CVE-2026-79696: Critical code injection (CVSS 10.0) in Google Cloud ADK for Python (2.0.0 \u2013 2.6.0). Unauth RCE possible via crafted session replay in pytest-enabled Cloud Run & GKE. Patch or update now. https://radar.offseq.com/threat/cve-2026-79696-cwe-184-incomplete-list-of-disallowed-inputs-in-google-cloud-agent-development-kit-adk-3b96714136b44311 #OffSeq #CVE #CloudSecurity #Python", "creation_timestamp": "2026-09-09T10:30:49.857371Z"}, {"uuid": "4be88aa9-9664-4a85-a67c-e8edd3125dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ht2klsldv2ehl", "content": "CVE-2026-79696 - Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist\nCVE ID : CVE-2026-79696\n \n Published : Sept. 9, 2026, 9:17 a.m. | 16\u00a0minutes ago\n \n Description : A Code Injection vulnerability in adk web in Google Cloud Agent Developmen...", "creation_timestamp": "2026-09-09T11:10:50.401638Z"}, {"uuid": "15e8c105-fca5-47cb-9ae9-1f7a836ec9bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79696", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4l2hf72b2y", "content": "CVE-2026-79696 - agent development kit (adk) for python\nThe Google Cloud Agent Development Kit for Python (versions 2.0.0\u20112.6.0) can be fooled into executing any code an attacker sends when the testing tool\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#googlecloud #CVE #infosec", "creation_timestamp": "2026-09-09T22:20:06.238731Z"}]}