{"vulnerability": "cve-2026-1036", "sightings": [{"uuid": "3ef2a4ad-3faa-417e-a734-6cfc2fb881b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1036", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcy2yppcyk2j", "content": "", "creation_timestamp": "2026-01-22T01:48:39.868051Z"}, {"uuid": "39437a42-97a8-4e39-b125-deb8b54f33e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1036", "type": "seen", "source": "https://gist.github.com/Darkcrai86/f3037271c0fcb972f1d2fe17a1e9521d", "content": "", "creation_timestamp": "2026-01-22T09:22:36.000000Z"}, {"uuid": "686ad2dd-af7d-40f7-859e-2942f22263af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103668", "type": "seen", "source": "https://jvn.jp/en/jp/JVN91153973", "content": "", "creation_timestamp": "2026-10-06T22:00:00.000000Z"}, {"uuid": "e7dbe3cd-e447-4e40-bf81-434c2ea50750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103659", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2brxdehlzuivl", "content": "CVE-2026-103659 - MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes\nCVE ID : CVE-2026-103659\n \n Published : Oct. 1, 2026, 8:33 a.m. | 27\u00a0minutes ago\n \n Description : MISP contains an authorization bypass in the event flattening feat...", "creation_timestamp": "2026-10-01T09:27:22.403235Z"}, {"uuid": "c3269384-481f-429a-831b-26d5150914a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103656", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fkwbcsqwjenis", "content": "CVE-2026-103656\nCVE ID : CVE-2026-103656\n \n Published : Oct. 1, 2026, 8:33 a.m. | 26\u00a0minutes ago\n \n Description : None\n \n Severity: 0.0 | NA\n \n Visit the link for more details, such as CVSS details, affected products, timeline, and more...\n#CVE", "creation_timestamp": "2026-10-01T09:32:21.803832Z"}, {"uuid": "515776a4-0146-43c4-a3c2-f0c5681b1295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103662", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7fsh7nytebxib", "content": "CVE-2026-103662 - MISP Reflected XSS in Taxonomy Tag Confirmation Forms\nCVE ID : CVE-2026-103662\n \n Published : Oct. 1, 2026, 8:48 a.m. | 11\u00a0minutes ago\n \n Description : MISP contains a reflected cross-site scripting (XSS) vulnerability in the legacy taxonomy tag management co...", "creation_timestamp": "2026-10-01T09:44:22.284246Z"}, {"uuid": "6a524b8a-cb35-434d-bd44-c6addeb7b09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103664", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/elldjmbirxayc", "content": "CVE-2026-103664 - MISP Reflected Cross-Site Scripting via Unsanitized Analyst Data Seed Parameter\nCVE ID : CVE-2026-103664\n \n Published : Oct. 1, 2026, 8:55 a.m. | 4\u00a0minutes ago\n \n Description : MISP contains a reflected cross-site scripting (XSS) vulnerability in the analyst ...", "creation_timestamp": "2026-10-01T09:46:22.639232Z"}, {"uuid": "6269c1bb-1bb8-4a6b-8433-7ebdf37ad149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103655", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwsmfezd2e2o", "content": "\ud83d\udea8 CVE-2026-103655 \u2014 CVSS 9.3 CRITICAL\n\nMISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a v...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-103655\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-01T10:07:52.218619Z"}, {"uuid": "07a904ee-0589-4040-a65c-a9b33fe0ce69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-103655", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117365745916061544", "content": "This is an interesting vuln and one that can be a great example of why a sev:CRIT may not be high priority.\nsev:CRIT 9.3 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N\n\nMISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor. Because the system did not record whether a given TOTP period had already been consumed, the same code remained valid for its entire time window (typically 30 seconds). An attacker who captures a legitimate code during a user's login could replay it to authenticate a second session as that user. Preconditions: - The target user has TOTP-based two-factor authentication enabled. - The attacker is in a position to observe or intercept the TOTP code during a legitimate login (e.g., network-level interception, shoulder surfing, or a compromised client). - The replay must occur within the TOTP validity period. Security impact: - Unauthorized account access by replaying a captured one-time code. - Potential compromise of threat-intelligence data and administrative functions accessible to the targeted user. Affected versions: <v2.5.48.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-103655", "creation_timestamp": "2026-10-01T12:52:42.060705Z"}, {"uuid": "ec354c93-de54-4f4a-867a-21fac359b581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103648", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwvrmsitu32e", "content": "\ud83d\udd34 CVE-2026-103648 - Critical (9.1)\n\nPath traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to c...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-103648/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-02T16:19:30.731768Z"}, {"uuid": "b97a8573-67de-40a0-836a-0b29e9a1ffe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103624", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117372251207873007", "content": "A new vulnerability with increased severity was disclosed for Google Chrome (CVE-2026-103624) https://vuldb.com/vuln/413167", "creation_timestamp": "2026-10-02T16:27:03.607536Z"}, {"uuid": "f33b7fa5-cd41-4f15-9279-e77ea3bc7e9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103628", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117372304313052869", "content": "We have just added an important vulnerability affecting Google Chrome (CVE-2026-103628) https://vuldb.com/vuln/413170", "creation_timestamp": "2026-10-02T16:40:33.902645Z"}, {"uuid": "c58e7b23-da98-42bb-84e1-024c581379d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103630", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117372356210661103", "content": "A new vulnerability with increased severity was disclosed for Google Chrome (CVE-2026-103630) https://vuldb.com/vuln/413172", "creation_timestamp": "2026-10-02T16:53:45.687676Z"}, {"uuid": "5aabdc01-2bdb-437d-9c3b-d7bea31464b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103631", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117372409719415103", "content": "A severe vulnerability was disclosed for Google Chrome (CVE-2026-103631) https://vuldb.com/vuln/413173", "creation_timestamp": "2026-10-02T17:07:22.073069Z"}, {"uuid": "7df99e48-0dcd-4126-a473-f9cb225649f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103648", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwvxnu54f32q", "content": "\ud83d\udea8 CVE-2026-103648 \u2014 CVSS 9.1 CRITICAL\n\nPath traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-103648\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T18:07:27.579271Z"}, {"uuid": "d1dbbfad-e730-4f96-82f6-b9f4d90a73db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103628", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwwe2h4cdw2y", "content": "Chrome security update: Chrome 154 fixes 11 flaws, including critical WebGL sandbox escape CVE-2026-103628. Update your browser now.\n\n#Chrome #GoogleChrome #Chrome154 #CVE2026103628 #CVE2026103631 #BrowserSecurity #Vulnerability", "creation_timestamp": "2026-10-02T21:49:14.608112Z"}, {"uuid": "8f1b8be6-8827-4d56-8789-8f0f4ed355c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103628", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwwf2h6dtx24", "content": "\ud83d\udea8 CVE-2026-103628 \u2014 CVSS 9.6 CRITICAL\n\nOut of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-103628\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T22:07:08.673995Z"}, {"uuid": "43b2d96c-0fc3-4346-98d3-f10ee4d678cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103628", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117374808023587810", "content": "Google Chrome published an empty blog post as a security advisory on Thursday afternoon. They filled it out in the past day, but don't make it easy to grasp the severity of their bugs.\nFor example, \"Critical CVE-2026-103628: Out of bounds write in WebGL.\" is actually a CVSSv3.1: 9.6 critical because it allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. You'd have to chase down those details yourself on cve.org or elsewhere. \nhttps://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html\n#google #chrome #CVE", "creation_timestamp": "2026-10-03T09:04:29.299523Z"}, {"uuid": "69867222-47c1-425a-a8db-c9e66fde597c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103648", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104174", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-103648\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EterNullSec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-03 12:17:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-103648 | Path Traversal in image-downloader 4.3.0 | CVSS 9.1 Critical | CWE-22 | By EterNullSec\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-03T13:00:08.000000Z"}, {"uuid": "4b7ea6fa-7d4f-4672-ad09-2b8295819f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103622", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwyl4xkdrq2h", "content": "\ud83d\udfe0 CVE-2026-103622 - High (8.8)\n\nUse after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execut...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-103622/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T19:01:15.603917Z"}, {"uuid": "33cbecd3-4780-4a17-8e17-62936cee2089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103624", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwyl56pzeg2b", "content": "\ud83d\udfe0 CVE-2026-103624 - High (8.3)\n\nUse after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-103624/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T19:01:23.077581Z"}, {"uuid": "a0a82519-6fa5-4947-a841-664aa43e3e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103625", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwylxuqowy2s", "content": "\ud83d\udfe0 CVE-2026-103625 - High (8.8)\n\nType confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-103625/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T19:16:19.896194Z"}, {"uuid": "56f632ce-2aff-4cac-8bcf-32d9b02155ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103626", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwyly3nt3y2a", "content": "\ud83d\udd34 CVE-2026-103626 - Critical (9.6)\n\nIncorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allow...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-103626/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T19:16:26.297679Z"}, {"uuid": "17b15839-4509-42d4-84d5-cac9a523d2bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103628", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwylyciwsy2a", "content": "\ud83d\udd34 CVE-2026-103628 - Critical (9.6)\n\nOut of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-103628/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T19:16:33.183238Z"}, {"uuid": "bab2e164-89ac-406e-882e-28c384e01a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103622", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20261005", "content": "", "creation_timestamp": "2026-10-04T19:00:00.000000Z"}, {"uuid": "4e288c1d-a1df-4a4d-b96c-f41681f7ddb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103623", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20261005", "content": "", "creation_timestamp": "2026-10-04T19:00:00.000000Z"}, {"uuid": "e225629e-3c62-407f-a7ca-282786523f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103624", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20261005", "content": "", "creation_timestamp": "2026-10-04T19:00:00.000000Z"}, {"uuid": "4f8880e3-af7d-48a0-bb33-6e716100992d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103625", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20261005", "content": "", "creation_timestamp": "2026-10-04T19:00:00.000000Z"}, {"uuid": "da94ab01-e36c-4704-a6e5-1a56a123de6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103626", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20261005", "content": "", "creation_timestamp": "2026-10-04T19:00:00.000000Z"}, {"uuid": "8b3392d1-bfe0-457b-935d-6a552c23d287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103627", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20261005", "content": "", "creation_timestamp": "2026-10-04T19:00:00.000000Z"}, {"uuid": "4a0336d4-97dd-40e0-bd34-829124912c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103628", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20261005", "content": "", "creation_timestamp": "2026-10-04T19:00:00.000000Z"}, {"uuid": "f08317c7-c125-4eb1-86ec-a91112db277d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103629", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20261005", "content": "", "creation_timestamp": "2026-10-04T19:00:00.000000Z"}, {"uuid": "d39789e0-c0ce-4e45-b84d-00b9a2cc556d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103630", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20261005", "content": "", "creation_timestamp": "2026-10-04T19:00:00.000000Z"}, {"uuid": "f9071b44-d739-490c-83dc-4bb05a592067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103631", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20261005", "content": "", "creation_timestamp": "2026-10-04T19:00:00.000000Z"}, {"uuid": "52ec4ce6-fda6-4596-ac11-174645094a86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-103621", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20261005", "content": "", "creation_timestamp": "2026-10-04T19:00:00.000000Z"}, {"uuid": "3d8e6d3b-9a01-4a00-9a04-1c25989ec9c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103648", "type": "seen", "source": "Telegram/ELm8PgQpllbXA_VH21iOqLKTsdjbs5AcKNDqc-vEf4a8Tt0", "content": "", "creation_timestamp": "2026-10-03T21:00:05.000000Z"}, {"uuid": "81a1d5f2-54b5-4294-a89a-d00b3766dba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103648", "type": "seen", "source": "Telegram/rmqy4r2ZbbSgIUkJCd_XbrHKxpruNJNPs_qt3HHt61i6SNQ", "content": "", "creation_timestamp": "2026-10-03T15:00:20.000000Z"}, {"uuid": "e8a87660-4364-451f-a570-d7ed64e7c2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103648", "type": "published-proof-of-concept", "source": "Telegram/ELm8PgQpllbXA_VH21iOqLKTsdjbs5AcKNDqc-vEf4a8Tt0", "content": "", "creation_timestamp": "2026-10-03T21:00:05.000000Z"}, {"uuid": "23b772c2-00a6-48fd-829a-0ba49bcf7bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103648", "type": "published-proof-of-concept", "source": "Telegram/rmqy4r2ZbbSgIUkJCd_XbrHKxpruNJNPs_qt3HHt61i6SNQ", "content": "", "creation_timestamp": "2026-10-03T15:00:20.000000Z"}, {"uuid": "e2661e56-2b56-4d82-8a5a-c0960774649d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103628", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx6majupef2r", "content": "\ud83d\udccc CVE-2026-103628 - Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a cra... https://www.cyberhub.blog/cves/CVE-2026-103628", "creation_timestamp": "2026-10-06T04:37:06.711244Z"}, {"uuid": "4091bd96-6289-4fbe-b7e0-d7430facd42c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103622", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx6wcfiyfa2u", "content": "\ud83d\udccc CVE-2026-103622 - Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTM... https://www.cyberhub.blog/cves/CVE-2026-103622", "creation_timestamp": "2026-10-06T07:37:07.544990Z"}, {"uuid": "ec255aa3-3405-49dc-a290-b8df3f74e041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103625", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mx6xxzzkay2u", "content": "\ud83d\udccc CVE-2026-103625 - Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML... https://www.cyberhub.blog/cves/CVE-2026-103625", "creation_timestamp": "2026-10-06T08:07:07.222075Z"}, {"uuid": "14dbbe57-5413-4b35-a554-02bd6883c7c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103684", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mx7du4pkgm2c", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-103684\n\nMissing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Securi...", "creation_timestamp": "2026-10-06T11:39:39.963855Z"}, {"uuid": "2bb6f3d3-de48-47d0-909a-019d49c46212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103668", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gbl6jkkx65mtn", "content": "CVE-2026-103668 - Movable Type SQL Injection Vulnerability\nCVE ID : CVE-2026-103668\n \n Published : Oct. 7, 2026, 10:19 a.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenti...", "creation_timestamp": "2026-10-07T11:55:19.544297Z"}, {"uuid": "2fd189a7-4738-4046-bccc-0c50878ba7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103646", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxefwhwkql24", "content": "CVE-2026-103646 - ultimate multisite\nThe Ultimate Multisite WordPress plugin versions before 2.17.0 can be tricked into signing in a visitor as any existing account simply by submitting the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ultimatemultisite #unknown #CVE #infosec", "creation_timestamp": "2026-10-08T12:00:05.055889Z"}, {"uuid": "2f854c86-a5ee-419b-b353-56a82eb5f339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103692", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxefwjceee22", "content": "CVE-2026-103692 - frontend dashboard\nThe Frontend Dashboard WordPress plugin versions 3.0.0 through 3.0.4 let people who are not logged in run any code on your site, which can give them control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#frontenddashboard #unknown #CVE #infosec", "creation_timestamp": "2026-10-08T12:00:06.392397Z"}, {"uuid": "928faeef-8cd2-44cf-a82a-ab034f83c32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103646", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxegczua5j2n", "content": "\ud83d\udea8 CVE-2026-103646 \u2014 CVSS 9.8 CRITICAL\n\nThe Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out c...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-103646\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-08T12:07:06.851085Z"}, {"uuid": "0b02548a-a421-4e73-aae8-aa097db37b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103646", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mxegd2jsnj25", "content": "\ud83d\udea8 CVE-2026-103646 \u2014 CVSS 9.8 CRITICAL\n\nThe Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out c...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-103646\n\n#CVE #PotatoSecurity #InfoSec", "creation_timestamp": "2026-10-08T12:07:07.391065Z"}, {"uuid": "71e566fe-06a0-45cc-834b-5afd8f28f21c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103692", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxegdcq7zz2n", "content": "\ud83d\udea8 CVE-2026-103692 \u2014 CVSS 9.8 CRITICAL\n\nThe Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-103692\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-08T12:07:15.674788Z"}, {"uuid": "91db267d-839e-41ee-beba-58d2edb0286f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103649", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7yqgyqhb3ca4b", "content": "CVE-2026-103649 - Synchronous Access of Remote Resource without Timeout in hMailServer\nCVE ID : CVE-2026-103649\n \n Published : Oct. 8, 2026, 10:53 a.m. | 34\u00a0minutes ago\n \n Description : Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through...", "creation_timestamp": "2026-10-08T12:13:35.120047Z"}, {"uuid": "2de2375a-80e4-494d-9cf2-c4955d4295ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/a5l2y6obhwhmb", "content": "CVE-2026-103647 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in hMailServer\nCVE ID : CVE-2026-103647\n \n Published : Oct. 8, 2026, 10:53 a.m. | 36\u00a0minutes ago\n \n Description : Cross-site scripting in the webmail of Progressive Robot hMa...", "creation_timestamp": "2026-10-08T12:19:35.486082Z"}, {"uuid": "2318a048-5efe-46fb-a4e9-78c44ccf5849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103663", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxesrrqaop2o", "content": "CVE-2026-103663 - ollama\nThe Ollama service can be tricked into writing a malicious program to system folders because it does not check the file path it receives. If the program can write to the Ollama installation\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ollama #CVE #infosec", "creation_timestamp": "2026-10-08T15:50:08.840589Z"}, {"uuid": "7ddc7816-35e1-4510-b751-08013b271483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103663", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxetqumsho2l", "content": "\ud83d\udea8 CVE-2026-103663 \u2014 CVSS 9.4 CRITICAL\n\nOllama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-103663\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-08T16:07:29.371894Z"}, {"uuid": "5043b743-b908-4467-8d47-55d8d44a81a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-103668", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxfrmkllhs2u", "content": "Movable Type\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u4e0d\u8981\u3067RCE\u306e\u6050\u308c\u2015CVE-2026-96408\u30fbCVE-2026-103668 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "creation_timestamp": "2026-10-09T01:02:00.013346Z"}]}