{"vulnerability": "cve-2026-3418", "sightings": [{"uuid": "5b790ad2-7de1-4f61-8dde-9ada6e1d5a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34185", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj2mqgrzzd22", "content": "", "creation_timestamp": "2026-04-09T10:42:38.858962Z"}, {"uuid": "3536ca83-bd5a-40e4-9f64-d389a035db8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34184", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj2mzfbq7w2j", "content": "", "creation_timestamp": "2026-04-09T10:47:39.029508Z"}, {"uuid": "6cba0be2-3b56-4737-b5fa-2cf4a7e0ddbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34184", "type": "seen", "source": "https://cert.pl/en/posts/2026/04/CVE-2026-4901/", "content": "", "creation_timestamp": "2026-04-09T03:55:00.000000Z"}, {"uuid": "6cf99b84-5f61-49da-a154-d1e44d70ef88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34185", "type": "seen", "source": "https://cert.pl/en/posts/2026/04/CVE-2026-4901/", "content": "", "creation_timestamp": "2026-04-09T03:55:00.000000Z"}, {"uuid": "4e653296-ec7c-4053-b8d7-2daf917d65c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34186", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjfiwag32l2m", "content": "", "creation_timestamp": "2026-04-13T18:33:35.257850Z"}, {"uuid": "677320f6-d8d6-4e28-84bb-f77f3ba65aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34184", "type": "seen", "source": "Telegram/nE1gVyn8jRx_bZ-OhSUewb4fvVZDT-qjlGTvhk8YiMctdMk", "content": "", "creation_timestamp": "2026-04-09T11:16:38.000000Z"}, {"uuid": "1a7b9707-933b-4156-beeb-1f443962099a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34188", "type": "seen", "source": "Telegram/xbHjqaTQcr8Rt4XSFJk3i5MS3FsWolyHvBAsREEApmBgOgk", "content": "", "creation_timestamp": "2026-04-13T18:01:48.000000Z"}, {"uuid": "a5329fbf-2afb-406b-8e0a-d743cd0d4985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34186", "type": "seen", "source": "Telegram/xbHjqaTQcr8Rt4XSFJk3i5MS3FsWolyHvBAsREEApmBgOgk", "content": "", "creation_timestamp": "2026-04-13T18:01:48.000000Z"}, {"uuid": "f0b96027-668d-48ff-a000-c1f56b6d1f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34185", "type": "seen", "source": "Telegram/nE1gVyn8jRx_bZ-OhSUewb4fvVZDT-qjlGTvhk8YiMctdMk", "content": "", "creation_timestamp": "2026-04-09T11:16:38.000000Z"}, {"uuid": "1c91597b-f537-4ce2-add7-81a0f7e2d544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34182", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/116721189556088584", "content": "New OpenSSL advisory:https://openssl-library.org/news/secadv/20260609.txt                            \n1 high, 5 medium, 12 low severity\nThe high (CVE-2026-45447) was explicitly noted as discovered with help from Claude.\nWhat's more interesting is again the confirmation that vulnerabilities are increasingly identified independently by multiple people:\nCVE-2026-34182 (independently found by 4 different people), CVE-2026-35188 (2), CVE-2026-9076 (2), CVE-2026-34181 (2), CVE-2026-42766 (4).", "creation_timestamp": "2026-06-09T16:53:34.564928Z"}, {"uuid": "72ba76c7-8519-4e04-9b33-2bebc1998c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34181", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/116721189556088584", "content": "New OpenSSL advisory:https://openssl-library.org/news/secadv/20260609.txt                            \n1 high, 5 medium, 12 low severity\nThe high (CVE-2026-45447) was explicitly noted as discovered with help from Claude.\nWhat's more interesting is again the confirmation that vulnerabilities are increasingly identified independently by multiple people:\nCVE-2026-34182 (independently found by 4 different people), CVE-2026-35188 (2), CVE-2026-9076 (2), CVE-2026-34181 (2), CVE-2026-42766 (4).", "creation_timestamp": "2026-06-09T16:53:35.521343Z"}, {"uuid": "c297a3cd-27a3-4864-9dd4-45af39379c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34182", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mnvftlx3qx2t", "content": "6/8\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-45447\n    https://www.cve.org/CVERecord?id=CVE-2026-34182\n    https://www.cve.org/CVERecord?id=CVE-2026-34183\n    https://www.cve.org/CVERecord?id=CVE-2026-42764\n  (* Security fix *)\nx/intel-media-driver-26.2.2-x86_64-1.txz:  Upgraded.", "creation_timestamp": "2026-06-10T00:01:53.079313Z"}, {"uuid": "f8c66c65-e698-4a41-a580-b145af4e2d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mnvftlx3qx2t", "content": "6/8\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-45447\n    https://www.cve.org/CVERecord?id=CVE-2026-34182\n    https://www.cve.org/CVERecord?id=CVE-2026-34183\n    https://www.cve.org/CVERecord?id=CVE-2026-42764\n  (* Security fix *)\nx/intel-media-driver-26.2.2-x86_64-1.txz:  Upgraded.", "creation_timestamp": "2026-06-10T00:01:53.223045Z"}, {"uuid": "4d5e1c54-2e15-406b-9f0e-3acffc5ff802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34182", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mnvftkqgtb2f", "content": "5/8\n\nhttps://openssl-library.org/news/vulnerabilities/#CVE-2026-45447\n    https://openssl-library.org/news/vulnerabilities/#CVE-2026-34182\n    https://openssl-library.org/news/vulnerabilities/#CVE-2026-34183\n    https://openssl-library.org/news/vulnerabilities/#CVE-2026-42764", "creation_timestamp": "2026-06-10T00:01:48.773942Z"}, {"uuid": "01c5d49c-4dfc-48ef-bf85-14a1af786298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mnvftkqgtb2f", "content": "5/8\n\nhttps://openssl-library.org/news/vulnerabilities/#CVE-2026-45447\n    https://openssl-library.org/news/vulnerabilities/#CVE-2026-34182\n    https://openssl-library.org/news/vulnerabilities/#CVE-2026-34183\n    https://openssl-library.org/news/vulnerabilities/#CVE-2026-42764", "creation_timestamp": "2026-06-10T00:01:48.913607Z"}, {"uuid": "8b4a6432-382e-4c88-8296-ea8fa44de2fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-openssl-1", "content": "", "creation_timestamp": "2026-06-10T04:55:50.000000Z"}, {"uuid": "b1bd7c3f-f1e9-4d75-a0ba-395aeb585d25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/openssl-multiple-vulnerabilities_20260611", "content": "", "creation_timestamp": "2026-06-10T20:00:00.000000Z"}, {"uuid": "07acf12f-e3d1-4653-a444-a077a923e863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34181", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/openssl-multiple-vulnerabilities_20260611", "content": "", "creation_timestamp": "2026-06-10T20:00:00.000000Z"}, {"uuid": "134933f7-8654-4723-b218-dc607cc2f309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34182", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/openssl-multiple-vulnerabilities_20260611", "content": "", "creation_timestamp": "2026-06-10T20:00:00.000000Z"}, {"uuid": "3fbd8e3a-a865-465d-a724-e86c950ae54d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/openssl-multiple-vulnerabilities_20260611", "content": "", "creation_timestamp": "2026-06-10T20:00:00.000000Z"}, {"uuid": "3e7ec71c-5140-42b0-9b44-c3a186197382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34182", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mofrmt7cqk2j", "content": "\ud83d\udd17 CVE : CVE-2026-34182, CVE-2026-34182", "creation_timestamp": "2026-06-16T12:15:21.218567Z"}, {"uuid": "f34913ab-3640-47c0-a665-a64c4a4734fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mog7de2nbk24", "content": "OpenSSL no openSUSE: 5 CVEs cr\u00edticas (CVE-2026-45447, CVE-2026-42766, CVE-2026-9076, CVE-2026-7383, CVE-2026-34180).                                            Saiba mais: -> tinyurl.com/mtx3npu9   #openSUSE", "creation_timestamp": "2026-06-16T16:20:37.891142Z"}, {"uuid": "736efc92-e5ef-4f6b-8b2b-9f716f361adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mog7demiks24", "content": "OpenSSL no openSUSE: 5 CVEs cr\u00edticas (CVE-2026-45447, CVE-2026-42766, CVE-2026-9076, CVE-2026-7383, CVE-2026-34180).                                            Saiba mais: -> tinyurl.com/mtx3npu9   #openSUSE", "creation_timestamp": "2026-06-16T16:20:41.206817Z"}, {"uuid": "88d91af8-bb52-4ff0-b7e9-5bfc4e5d925f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mouym7m4of2l", "content": "\ud83d\udd17 CVE : CVE-2026-50519, CVE-2026-34183, CVE-2026-42768, CVE-2026-45446, CVE-2026-9698, CVE-2026-34183, CVE-2026-42768, CVE-2026-45446, CVE-2026-50519, CVE-2026-9698", "creation_timestamp": "2026-06-22T13:30:13.151165Z"}, {"uuid": "3adf3985-d0d2-424f-9b3e-663a357d34f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3moxe3mcjxa2t", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-34180 impacts openssl-fips-provider-latest in 20 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/559\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-06-23T12:01:00.212767Z"}, {"uuid": "6e413655-90a1-4691-aa51-8ba2fa8bc099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34181", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3moxe3nvgtg2g", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-34181 impacts openssl-fips-provider-latest in 20 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/560\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-06-23T12:01:01.713665Z"}, {"uuid": "4dc0a027-4354-4197-8062-a8ec04018ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34182", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3moxe3r4d3r2o", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-34182 impacts openssl-fips-provider-latest in 20 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/561\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-06-23T12:01:05.312629Z"}, {"uuid": "5a207c57-2205-48cc-b400-9886d2c6bfa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3moxe3uqos42j", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-34183 impacts openssl-fips-provider-latest in 20 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/562\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-06-23T12:01:09.040197Z"}, {"uuid": "df64287d-8b49-4685-b70a-c9f3e8a035a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbugoijgk24", "content": "Heap Gracefully: CVE-2026-34180 is a Cyber Exploit Waiting to Happen", "creation_timestamp": "2026-06-27T16:20:09.055212Z"}, {"uuid": "92df831e-c1ee-4a07-bc78-058ff082af72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbugpri4s2t", "content": "CVE-2026-34180: A Cautionary Tale of Overlooked Surveillance Risks", "creation_timestamp": "2026-06-27T16:20:10.131943Z"}, {"uuid": "68dc6992-286a-430c-a6e8-b6fa86bccdbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbugqr3js2b", "content": "Systemic Weakness Exposed: CVE-2026-34180 Highlights Flaws in ASN.1 Governance", "creation_timestamp": "2026-06-27T16:20:11.249079Z"}, {"uuid": "a7598701-0159-4680-9d63-477bf29a9860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbugrnwhm2p", "content": "CVE-2026-34180: More Hype Than Help in ASN.1 Unpacking", "creation_timestamp": "2026-06-27T16:20:12.067850Z"}, {"uuid": "258d025c-6a6e-4a81-88cd-7b6ffa776147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbugscb5o2g", "content": "Dissenting Views on CVE-2026-34180: A Critical Vulnerability or an Overblown Concern?", "creation_timestamp": "2026-06-27T16:20:12.798997Z"}, {"uuid": "366a12ac-93e4-4c27-9534-77d9470350fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbugt5zmc24", "content": "Heap Gracefully: CVE-2026-34180 is a Cyber Exploit Waiting to Happen", "creation_timestamp": "2026-06-27T16:20:13.609961Z"}, {"uuid": "2b9e6cff-ecb2-4ac4-b944-56076304986a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbugtimg22n", "content": "CVE-2026-34180: A Cautionary Tale of Overlooked Surveillance Risks", "creation_timestamp": "2026-06-27T16:20:14.266416Z"}, {"uuid": "6ee8436d-4231-4eba-964c-26a8ca77169c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbugttu2w2g", "content": "Systemic Weakness Exposed: CVE-2026-34180 Highlights Flaws in ASN.1 Governance", "creation_timestamp": "2026-06-27T16:20:14.775364Z"}, {"uuid": "6c100456-5f7f-41fa-b712-9e48cea584d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbukztuj32d", "content": "CVE-2026-34180: More Hype Than Help in ASN.1 Unpacking", "creation_timestamp": "2026-06-27T16:22:35.078596Z"}, {"uuid": "0a643e04-db6e-47e0-a209-6fe1ca0f2124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34180", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbul2clfe2c", "content": "Dissenting Views on CVE-2026-34180: A Critical Vulnerability or an Overblown Concern?", "creation_timestamp": "2026-06-27T16:22:35.778308Z"}, {"uuid": "6c472910-fb6d-40b1-ae23-149ae3e90f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbyvvfp4z2o", "content": "CVE-2026-34183: Another Day, Another Memory Killer \u2013 Act Fast", "creation_timestamp": "2026-06-27T17:40:14.526815Z"}, {"uuid": "f3e73858-d0aa-42a0-9283-f38bccf4c844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbyvwayrp2v", "content": "CVE-2026-34183: Another Day, Another Memory Killer \u2013 Act Fast", "creation_timestamp": "2026-06-27T17:40:15.319403Z"}, {"uuid": "6a7b64e3-f0a1-49f2-bf25-c6f6611a66d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbz3v3m5m2i", "content": "The Path to Memory Exploitation: CVE-2026-34183 Exposes QUIC Vulnerability", "creation_timestamp": "2026-06-27T17:43:35.327473Z"}, {"uuid": "cdc250cf-ff09-4e73-a265-831fde83c822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbz3viq2a2c", "content": "Unraveling CVE-2026-34183: Whose Interests Lie Beneath the QUIC Vulnerability?", "creation_timestamp": "2026-06-27T17:43:35.954395Z"}, {"uuid": "63bab6e0-8b76-4958-83ba-3fbd33ebdfaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbz3vw7hy2v", "content": "CVE-2026-34183: A Critical Wake-up Call for QUIC Protocol Accountability", "creation_timestamp": "2026-06-27T17:43:36.603123Z"}, {"uuid": "748cf596-4a9a-4c8c-a090-f4c8ccd27b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbz3wdj6v2b", "content": "CVE-2026-34183: Panic Over Memory Gremlins or Just Another Buzzword?", "creation_timestamp": "2026-06-27T17:43:37.219311Z"}, {"uuid": "b3586dca-1d31-4f34-838c-b7aa4dcb5fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbz3wzjqb2o", "content": "The Path to Memory Exploitation: CVE-2026-34183 Exposes QUIC Vulnerability", "creation_timestamp": "2026-06-27T17:43:37.831970Z"}, {"uuid": "f09f3d6c-f96b-4a0b-83b4-9f88c0777be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbz3xfz522o", "content": "Unraveling CVE-2026-34183: Whose Interests Lie Beneath the QUIC Vulnerability?", "creation_timestamp": "2026-06-27T17:43:38.446741Z"}, {"uuid": "8a1f22e8-dc1e-4b9e-9bea-e5e4e393d203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbz3xsrxh2d", "content": "CVE-2026-34183: A Critical Wake-up Call for QUIC Protocol Accountability", "creation_timestamp": "2026-06-27T17:43:39.045398Z"}, {"uuid": "56b35b77-1585-4e19-9fed-3a293e6618f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34183", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbz3y7k5q2v", "content": "CVE-2026-34183: Panic Over Memory Gremlins or Just Another Buzzword?", "creation_timestamp": "2026-06-27T17:43:39.679026Z"}, {"uuid": "dbe1da3e-1273-47fc-b25b-cc202295143e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34182", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-028", "content": "", "creation_timestamp": "2026-07-01T02:45:05.098473Z"}, {"uuid": "6f6122ca-bb99-4be4-8524-7fd1ebc02a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34181", "type": "seen", "source": "https://gist.github.com/alon710/2b9e0ac9d204b77b1b6db1f2d326bdfa", "content": "# GHSA-MPWR-8VM7-H73F: GHSA-mpwr-8vm7-h73f: Key Space Collapse and Authentication Bypass in go-pkcs12 PBMAC1 Decoding\n\n> **CVSS Score:** 7.4\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/GHSA-MPWR-8VM7-H73F\n\n## Summary\nA security vulnerability in the Go library software.sslmate.com/src/go-pkcs12 allows remote attackers to bypass password-based integrity verification. By crafting a PKCS#12 file with an excessively short KeyLength parameter in the PBMAC1 configuration, the derived MAC key space collapses, allowing an attacker to forge arbitrary certificate structures and private keys that are incorrectly verified as valid.\n\n## TL;DR\nAn authentication and integrity bypass flaw in go-pkcs12 allows attackers to forge PKCS#12 files by configuring a 1-byte PBMAC1 key length, collapsing the validation keyspace to 256 possibilities.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-354\n- **Attack Vector**: Network\n- **CVSS v3.1 Severity**: 7.4 (High)\n- **EPSS Score**: 0.00235\n- **Exploit Status**: Proof of Concept / Theoretical\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- software.sslmate.com/src/go-pkcs12\n- **go-pkcs12**: >= 0.6.0, < 0.7.2 (Fixed in: `0.7.2`)\n\n## Mitigation\n\n- Upgrade the go-pkcs12 dependency to version v0.7.2 or higher.\n- Implement client-side or boundary checks to inspect the ASN.1 structure of PKCS#12 containers before processing.\n- Enforce API rate-limiting on endpoints that ingest and parse PKCS#12 files to mitigate multi-attempt brute-force attacks.\n\n**Remediation Steps:**\n1. Open your Go project's terminal.\n2. Run the command: `go get -u software.sslmate.com/src/go-pkcs12@v0.7.2`\n3. Execute `go mod tidy` to clean up dependencies and update the `go.sum` file.\n4. Verify deployment using `govulncheck ./...` to confirm the vulnerability is no longer reported.\n\n## References\n\n- [GitHub Advisory GHSA-mpwr-8vm7-h73f](https://github.com/advisories/GHSA-mpwr-8vm7-h73f)\n- [SSLMate Security Advisory](https://github.com/SSLMate/go-pkcs12/security/advisories/GHSA-mpwr-8vm7-h73f)\n- [Fix Commit 03c441f6b0267f695ca02464133c0b373bf4dd55](https://github.com/SSLMate/go-pkcs12/commit/03c441f6b0267f695ca02464133c0b373bf4dd55)\n- [OpenSSL Security Advisory (2026-06-09)](https://openssl-library.org/news/secadv/20260609.txt)\n- [OpenSSL Vulnerability CVE-2026-34181](https://openssl-library.org/news/vulnerabilities/#CVE-2026-34181)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-MPWR-8VM7-H73F) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T06:31:46.876112Z"}, {"uuid": "fd9d88b0-bab4-40cc-8c86-26c4b9f83f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3418", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshcuo2pnf2j", "content": "One Broken REST API, One More Cathedral of Bad Decisions\nPANIC 72% | Lag 0.0h | CVE-2026-3418 lets an attacker with administrative access abuse the System REST API to upload malici\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-07T00:38:31.975024Z"}]}