{"vulnerability": "CVE-2026-82377", "sightings": [{"uuid": "a31dd995-644b-4274-9b78-09ab728e1cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82377", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwkvk2egqw26", "content": "CVE-2026-82377 - apache roller\nApache Roller version 6.1.5 lets anyone who can log in use the old XML\u2011RPC interface to view, change or delete posts that belong to other blogs, because it does\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apacheroller #apachefoundation #CVE #infosec", "creation_timestamp": "2026-09-28T08:30:14.992669Z"}, {"uuid": "4ff44df2-e949-4b8d-b2f6-c2130e77e3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/esx645bycj73o", "content": "CVE-2026-82377 - Apache Roller: Missing weblog authorization in XML-RPC Blogger/MetaWeblog handlers\nCVE ID : CVE-2026-82377\n \n Published : Sept. 28, 2026, 7:45 a.m. | 44\u00a0minutes ago\n \n Description : Missing Authorization in Apache Roller 6.1.5 allows an authenticated user to r...", "creation_timestamp": "2026-09-28T08:58:20.409158Z"}, {"uuid": "6627f97a-9a19-41ea-98f6-c1cf40f493a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82377", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwl2xlhqek2i", "content": "\ud83d\udea8 CVE-2026-82377 \u2014 CVSS 9.9 CRITICAL\n\nMissing Authorization in Apache Roller 6.1.5 allows an authenticated user to read, modify, or delete weblog...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82377\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T10:07:17.825463Z"}]}