{"vulnerability": "cve-2026-1369", "sightings": [{"uuid": "cef3487f-5fb7-45fa-9e2f-439cbafee090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13698", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyifa6m562w", "content": "CVE-2026-13698 - OpenVPN Memory Leak Denial of Service\nCVE ID : CVE-2026-13698\n \n Published : July 6, 2026, 3:16 p.m. | 31\u00a0minutes ago\n \n Description : A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attack...", "creation_timestamp": "2026-07-06T16:15:49.394076Z"}, {"uuid": "918f4514-593b-494c-aea8-ec8e26cdd65e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2w5cnpd52v", "content": "CVE-2026-13696 - LDAP Injection in HAVELSAN's Liman MYS\nCVE ID : CVE-2026-13696\n \n Published : July 7, 2026, 12:16 p.m. | 2\u00a0hours, 58\u00a0minutes ago\n \n Description : Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in HAVELSAN Inc...", "creation_timestamp": "2026-07-07T15:27:15.572541Z"}, {"uuid": "8302eded-4c7a-4e8d-836a-af609792690d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13698", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mq7z2rkvbo2o", "content": "New HIGH CVE for OpenVPN: CVE-2026-13698\n\nA memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2 client key to potentially cause a denial of s\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-13698", "creation_timestamp": "2026-07-09T16:02:50.530218Z"}, {"uuid": "edd7345a-0e19-49ba-8414-a2e393a4b7bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13699", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2lc5zd2z2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-13699 \u0432 Databroker 0.6.1: \u0430\u043d\u0430\u043b\u0438\u0437 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n\n\n\nhttps://kripta.biz/posts/87222FCD-0766-445C-A56E-27DF2A01669C", "creation_timestamp": "2026-07-20T05:38:18.947073Z"}, {"uuid": "dac5b5e1-c11e-4b05-92f6-49a82b2411ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13699", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2lcqx6uu2l", "content": "\u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05de\u05e2\u05e8\u05db\u05ea Databroker: CVE-2026-13699 \u05d5\u05d3\u05e8\u05db\u05d9 \u05d4\u05ea\u05de\u05d5\u05d3\u05d3\u05d5\u05ea\n\n\n\nhttps://khesef.xyz/posts/BEE90738-3B21-4DBB-ABBE-02FC24C9A2C1", "creation_timestamp": "2026-07-20T05:38:38.551001Z"}, {"uuid": "08a82dfe-9884-471d-b9f9-55635c4d224b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13694", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr5kag5gbv2e", "content": "CVE-2026-13694 - Bit Form\nCVE ID : CVE-2026-13694\n \n Published : July 21, 2026, 7:16 a.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated transient has expired, allo...", "creation_timestamp": "2026-07-21T09:57:25.745346Z"}, {"uuid": "09f6cc08-c484-4c45-af3e-de9a2f321377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13693", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr5lebm3qu2x", "content": "CVE-2026-13693 - Bit Form\nCVE ID : CVE-2026-13693\n \n Published : July 21, 2026, 7:16 a.m. | 2\u00a0hours, 28\u00a0minutes ago\n \n Description : The Bit Form WordPress plugin before 3.1.0 does not restrict a form file-field value to a safe path before reading the file and attaching it to ...", "creation_timestamp": "2026-07-21T10:17:29.181152Z"}, {"uuid": "882065c8-dd1e-4128-98b3-17f68e5e273a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13697", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mrsefkx66k2c", "content": "\ud83d\udea8 High-severity security fix in undici@7.29.0 and undici@8.9.0 just released!\n\nPatches CVE-2026-13697: cross-user information disclosure and parse-time crash via degenerate private cache directives\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-07-29T16:38:52.617519Z"}, {"uuid": "99592fc7-ad23-4417-b225-f0352a52a013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13697", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrsomyann62v", "content": "undici 7.0.0\uff5e7.28.0, 8.0.0\uff5e8.8.0\u3067\u3001\u4e0d\u6b63\u306aCache-Control\u30d8\u30c3\u30c0\u306b\u3088\u308a\u3001\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u60c5\u5831\uff08Set-Cookie\u7b49\uff09\u304c\u6f0f\u6d29\u3001\u307e\u305f\u306f\u30d7\u30ed\u30bb\u30b9\u304c\u7570\u5e38\u7d42\u4e86\u3059\u308b\u53ef\u80fd\u6027\u2026\nCVE-2026-13697 CVSS 7.4 | HIGH", "creation_timestamp": "2026-07-29T19:41:57.171805Z"}]}