{"vulnerability": "cve-2026-56398", "sightings": [{"uuid": "a55755e1-b94c-49dc-ac27-4e73ac6066f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2z4ioe22u", "content": "CVE-2026-56398 - Open WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URI\nCVE ID : CVE-2026-56398\n \n Published : July 15, 2026, 12:18 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerabili...", "creation_timestamp": "2026-07-15T15:47:38.157754Z"}, {"uuid": "bc8b5727-e6b5-46d4-9374-3fdb669aa210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56398", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqtunk4xan2u", "content": "\ud83d\udccc CVE-2026-56398 - Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth authentication flow where the picture claim URL MIME type is... https://www.cyberhub.blog/cves/CVE-2026-56398", "creation_timestamp": "2026-07-17T13:37:06.441213Z"}]}