{"vulnerability": "cve-2026-6218", "sightings": [{"uuid": "b9e564f7-b9f4-4b09-b1de-ca5a8611a9df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "seen", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-29T23:00:08.515658Z"}, {"uuid": "11b2c424-a447-434c-a6a1-030fd8c8f4b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "seen", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-30T00:00:12.018542Z"}, {"uuid": "82ffd940-1c0e-4787-933e-33d36e8e9b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62185", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrepm4uj2g", "content": "CVE-2026-62185 - Argo CD Helm Chart\nCVE ID : CVE-2026-62185\n \n Published : July 13, 2026, 9:31 p.m. | 20\u00a0minutes ago\n \n Description : Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Ar...", "creation_timestamp": "2026-07-13T22:44:31.066595Z"}, {"uuid": "af4e5e7e-16ac-4670-89ce-79c8042cef65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62187", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrm5eao22k", "content": "CVE-2026-62187 - OpenClaw\nCVE ID : CVE-2026-62187\n \n Published : July 13, 2026, 9:30 p.m. | 22\u00a0minutes ago\n \n Description : OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configure...", "creation_timestamp": "2026-07-13T22:48:40.479968Z"}, {"uuid": "ca7138fd-85f8-4757-a992-de4cb27b90d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62184", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrur56ci2g", "content": "CVE-2026-62184 - luci-app-banip Log Monitor IP Extraction Bypass\nCVE ID : CVE-2026-62184\n \n Published : July 13, 2026, 9:30 p.m. | 22\u00a0minutes ago\n \n Description : luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address fro...", "creation_timestamp": "2026-07-13T22:53:29.410287Z"}, {"uuid": "8fbde5ba-f781-4f46-924f-af57cfbec791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62188", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqktx6xbvt27", "content": "CVE-2026-62188 - OpenClaw\nCVE ID : CVE-2026-62188\n \n Published : July 13, 2026, 9:30 p.m. | 22\u00a0minutes ago\n \n Description : OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which the Feishu permission tools could ignor...", "creation_timestamp": "2026-07-13T23:30:38.695885Z"}, {"uuid": "9871b896-3943-41ec-84a9-9b46774c897c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62187", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116918228655494378", "content": "CVE-2026-62187 - Privilege Escalation in Openclaw Feishu tools. Bypasses per-account disablement allowing unauthorized actions. CVSS 8.1. Update to v2026.6.9 immediately. #CVE #Openclaw #infosec\nhttps://www.valtersit.com/cve/CVE-2026-62187/", "creation_timestamp": "2026-07-14T12:03:09.511555Z"}, {"uuid": "0c7f9c3d-da76-49c4-b74d-0251ac20654f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62187", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqm5ydioea2n", "content": "CVE-2026-62187 - Privilege Escalation in Openclaw Feishu tools. Bypasses per-account disablement allowing unauthorized actions. CVSS 8.1. Update to v2026.6.9 immediately. #CVE #Openclaw #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-62187/", "creation_timestamp": "2026-07-14T12:03:09.540799Z"}, {"uuid": "f1c0d13f-7a61-48af-9363-c1f26889b552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62186", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqmeoeeuin2e", "content": "CVE-2026-62186 - Authorization bypass in Openclaw before 2026.6.8. Lower-trust callers can exploit HTTP model overrides to bypass admin controls. CVSS 7.6. No patch yet. Harden your input validation and access controls immediately. #CVE #in...\n\nhttps://www.valtersit.com/cve/CVE-2026-62186/", "creation_timestamp": "2026-07-14T14:02:35.651788Z"}, {"uuid": "f2e12217-6aed-4e56-bb9d-55f56623b341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62186", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116918699311489381", "content": "CVE-2026-62186 - Authorization bypass in Openclaw before 2026.6.8. Lower-trust callers can exploit HTTP model overrides to bypass admin controls. CVSS 7.6. No patch yet. Harden your input validation and access controls immediately. #CVE #infosec #Openclaw\nhttps://www.valtersit.com/cve/CVE-2026-62186/", "creation_timestamp": "2026-07-14T14:02:51.138633Z"}, {"uuid": "f5503e06-4be8-49a2-b60d-c484c43aab55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62187", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqovfe5as62u", "content": "\ud83d\udccc CVE-2026-62187 - OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configure... https://www.cyberhub.blog/cves/CVE-2026-62187", "creation_timestamp": "2026-07-15T14:07:06.567428Z"}, {"uuid": "317a8a86-3461-499f-91f3-afb16a9398d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3w3ocrbc2r", "content": "CVE-2026-62183: Apache Syncope: User self-service privilege escalation", "creation_timestamp": "2026-07-20T18:24:12.076409Z"}, {"uuid": "4b56b57e-d48f-46ef-b521-7b2545caff23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr652gyor42j", "content": "CVE-2026-62183 - apache syncope\nApache Syncope, a user management tool, has a security issue that allows unprivileged users to gain administrator privileges. This could happen if a user is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachesyncope #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-21T15:34:06.206570Z"}, {"uuid": "180593fc-4e4e-4ec8-984e-b0a787553f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "seen", "source": "Telegram/UzTfHUgZGM9DyNSoGitZ5lAOtGPh6OQvkJEqAtc8BIR2GVs", "content": "", "creation_timestamp": "2026-07-22T17:00:05.702114Z"}, {"uuid": "4a189838-40a0-4688-8205-e914e784d0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "published-proof-of-concept", "source": "Telegram/UzTfHUgZGM9DyNSoGitZ5lAOtGPh6OQvkJEqAtc8BIR2GVs", "content": "", "creation_timestamp": "2026-07-23T00:00:08.691817Z"}, {"uuid": "46151ea9-b859-4766-8849-9d49a401e10e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrczel3k7n2g", "content": "Apache Syncope patches an SQL injection (CVE-2026-57308) and a privilege escalation flaw (CVE-2026-62183). Update to 4.0.7 or 4.1.2 to stay safe.\n\n#ApacheSyncope #SQLInjection #PrivilegeEscalation #CVE202657308 #CVE202662183 #IdentityManagement #InfoSec #PatchNow", "creation_timestamp": "2026-07-23T14:11:30.499363Z"}, {"uuid": "f4e963aa-9ee0-4d5a-a1df-fc7ed637b467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "published-proof-of-concept", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-31T00:00:47.209095Z"}]}