{"vulnerability": "cve-2025-66518", "sightings": [{"uuid": "04de5616-8919-4e0f-8f79-7a92ecc839bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66518", "type": "seen", "source": "https://seclists.org/oss-sec/2026/q1/11", "content": "", "creation_timestamp": "2026-01-05T08:56:36.000000Z"}, {"uuid": "82143eb2-bd89-4339-a06f-44ca5c8ad71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66518", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mbpztp25md2e", "content": "", "creation_timestamp": "2026-01-06T03:41:28.414884Z"}, {"uuid": "f045394c-d12f-4db9-8c45-d702bcb83022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66518", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mbsot43nj22p", "content": "", "creation_timestamp": "2026-01-07T05:02:24.249572Z"}, {"uuid": "e4eaf095-aebb-4f7e-a7ce-9ad70ae09acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66518", "type": "published-proof-of-concept", "source": "Telegram/UCM3N0VAiIL0X9q0_5DMaRnnlz6r5GWtUQVOA9u8gPZf080", "content": "", "creation_timestamp": "2026-01-05T10:02:34.000000Z"}, {"uuid": "88981406-d47f-488b-8b43-fb8cb48c257a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66518", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mrwshvixgg23", "content": "\ud83d\udea8 EUVD-2026-51518\n\ud83d\udcca n/a\n\ud83c\udfe2 Apache Software Foundation\n\n\ud83d\udcdd The security fix for CVE-2025-66518 is incomplete.\u00a0Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can byp...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-51518\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-07-31T11:01:21.005282Z"}, {"uuid": "131942ea-ef36-42bc-907f-f8503d794254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-66518", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mujvgkhxfs2j", "content": "\u300cApache Kyuubi\u300d\u306b3\u4ef6\u306e\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\n\u300cApache Spark\u300d\u306a\u3069\u306e\u51e6\u7406\u30a8\u30f3\u30b8\u30f3\u3092\u5229\u7528\u3057\u305fSQL\u51e6\u7406\u3084\u30d0\u30c3\u30c1\u51e6\u7406\u306e\u305f\u3081\u306e\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3092\u63d0\u4f9b\u3059\u308b\u300cApache Kyuubi\u300d\u306b3\u4ef6\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u4fee\u6b63\u7248\u304c\u63d0\u4f9b\u3055\u308c\u3066\u304a\u308a\u3001\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u547c\u3073\u304b\u3051\u3089\u308c\u3066\u3044\u308b\u3002\n\n...\n\n\u300cCVE-2026-62391\u300d\u306f\u3001\u300cCVE-2025-66518\u300d\u306e\u4fee\u6b63\u304c\u4e0d\u5b8c\u5168\u3060\u3063\u305f\u3053\u3068\u306b\u8d77\u56e0\u3057\u3001\u30ed\u30fc\u30ab\u30eb\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u8a31\u53ef\u30ea\u30b9\u30c8\u3092\u56de\u907f\u3067\u304d\u308b\u8106\u5f31\u6027\u3002\u30b5\u30fc\u30d0\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u3084\u30aa\u30fc\u30d7\u30f3\u30d7\u30ed\u30ad\u30b7\u3068\u3057\u3066\u60aa\u7528\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u300cCVE-2026-23904\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002", "creation_timestamp": "2026-09-02T12:05:14.882026Z"}]}