{"vulnerability": "cve-2026-1890", "sightings": [{"uuid": "e97bad05-21be-4dd3-954d-7ca225714748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1890", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxaucihd522", "content": "", "creation_timestamp": "2026-03-26T09:06:52.640441Z"}, {"uuid": "f01ffa48-d8f8-424b-ba2f-7a515f258d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18907", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/iz6wskxiikwcm", "content": "CVE-2026-18907 - PathTravelsal Vulnerability in com.talpa.hibrowser\nCVE ID : CVE-2026-18907\n \n Published : Aug. 5, 2026, 1:47 a.m. | 29\u00a0minutes ago\n \n Description : Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write v...", "creation_timestamp": "2026-08-05T02:42:38.495576Z"}, {"uuid": "67902b08-b458-4d4c-82d2-83a510efaedc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18900", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msd5nfsevf2u", "content": "H3C NX15 V100R017\u3067OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u53ef\u80fd\u3067\u3001\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-18900 CVSS 7.2 | HIGH", "creation_timestamp": "2026-08-05T08:53:13.049523Z"}, {"uuid": "d30df0d6-3ca1-4b19-86cf-fd4b50028d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18901", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msd5oiwmrl2g", "content": "H3C NX15 V100R017\u306eWeb API\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306b\u8106\u5f31\u6027\u3002\u95a2\u6570service.add\u3067\u5371\u967a\u306a\u30eb\u30fc\u30c1\u30f3\u304c\u516c\u958b\u3055\u308c\u308b\u53ef\u80fd\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u60aa\u7528\u3055\u308c\u3046\u308b\u3002\nCVE-2026-18901 CVSS 7.2 | HIGH", "creation_timestamp": "2026-08-05T08:53:50.038840Z"}, {"uuid": "f51a19a6-d060-4d07-8ee0-03e954a458e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18907", "type": "published-proof-of-concept", "source": "Telegram/vuQdXmMeT7ZjueM2JhgohUlB-sFrZ38_VMxRjw40hYCSTaE", "content": "", "creation_timestamp": "2026-08-12T08:00:04.314740Z"}, {"uuid": "400ec872-170d-42cb-a733-894200a4cf78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1890", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-1890.yaml", "content": "", "creation_timestamp": "2026-07-02T15:00:03.208784Z"}, {"uuid": "18b34283-3893-4213-9b5c-fdfd696c5846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18904", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/abvgui7lrgyjm", "content": "CVE-2026-18904 - Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities\nCVE ID : CVE-2026-18904\n \n Published : Aug. 28, 2026, 8:52 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : IBM Langflow OSS 1....", "creation_timestamp": "2026-08-28T22:25:35.165088Z"}, {"uuid": "c7413702-937e-41d3-9526-108deb851b68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18904", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu7ckllxvs2z", "content": "\ud83d\udfe0 CVE-2026-18904 - High (8.2)\n\nIBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive informati...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18904/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T07:00:53.642652Z"}, {"uuid": "c4947855-7a5e-4b7b-baba-ffe1c12f45f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18904", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-nuove-vulnerabilita-in-langflow", "content": "", "creation_timestamp": "2026-08-31T12:45:07.234404Z"}, {"uuid": "5f5ad75f-ad36-41b7-a2ca-264fffdaa6a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18904", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muhp4u3p4u2q", "content": "\ud83d\udccc CVE-2026-18904 - IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive information and inject unauthorized messages due to a namespac... https://www.cyberhub.blog/cves/CVE-2026-18904", "creation_timestamp": "2026-09-01T15:07:07.908425Z"}, {"uuid": "f1457569-03ba-4b49-bf1a-70e4e6684fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18905", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3musetqdmm62s", "content": "\ud83d\udfe0 CVE-2026-18905 - High (7.7)\n\nIBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context Forge could al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18905/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T21:02:21.637759Z"}]}