{"vulnerability": "cve-2026-24009", "sightings": [{"uuid": "46dd49c0-05ae-403d-a0f5-48e504d5e378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mczltxgrze2h", "content": "", "creation_timestamp": "2026-01-22T16:22:54.190966Z"}, {"uuid": "565a4c59-77e8-4419-8c3b-ad7908f9fb66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mczlulagaw23", "content": "", "creation_timestamp": "2026-01-22T16:23:15.055017Z"}, {"uuid": "0bdf2fc2-e378-4dbb-8c65-04a5897818cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczzsofrpr2t", "content": "", "creation_timestamp": "2026-01-22T20:32:42.958351Z"}, {"uuid": "8e057638-c2f6-4924-aca3-128ffc070a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://gist.github.com/alon710/553f80036420883648a8e05762aa083e", "content": "", "creation_timestamp": "2026-01-24T21:22:30.000000Z"}, {"uuid": "6647edfc-d43c-41d7-8c22-438ba327b958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://gist.github.com/alon710/0d9cdf62717d80901cfb58437a588c84", "content": "", "creation_timestamp": "2026-01-24T22:16:49.000000Z"}, {"uuid": "f539c464-df94-41fe-8982-e9517d02a9e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://gist.github.com/alon710/09943518daa9a525ed9c22ccccf2a59f", "content": "", "creation_timestamp": "2026-01-24T22:16:46.000000Z"}, {"uuid": "74ccc8cd-3047-49a2-8060-9e161ff38908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-29T20:00:20.482724Z"}, {"uuid": "b7cab616-4e47-4233-8d6c-775161d8c0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-30T00:00:45.461151Z"}, {"uuid": "5a67dc23-695f-412a-8adc-2ed0803c8182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24009", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-31T00:00:24.348866Z"}]}