{"vulnerability": "CVE-2026-95654", "sightings": [{"uuid": "d011b464-cd7e-4bb9-98c0-f2fdcd0bd779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95654", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4ps5cp2c2t", "content": "CVE-2026-95654 - databasement\nIf you use Databasement version earlier than 1.7.14, an invitation link can be reused after the intended user accepts it. An attacker who obtains that link can later\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#databasement #davidcrty #CVE #infosec", "creation_timestamp": "2026-09-22T17:10:07.554111Z"}, {"uuid": "cbc8e1a7-b05b-485d-9fcd-16c1297302bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95654", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4t4657po2j", "content": "\ud83d\udea8 CVE-2026-95654 \u2014 CVSS 9.1 CRITICAL\n\nDatabasement before 1.7.14 validates invitation tokens only when the acceptance page loads, caching the aut...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-95654\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T18:09:25.141128Z"}]}