{"vulnerability": "cve-2026-6224", "sightings": [{"uuid": "867156f3-a7da-4db3-8efc-3da14446201e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6224", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjgbpwk74k23", "content": "", "creation_timestamp": "2026-04-14T01:57:27.320002Z"}, {"uuid": "46eb7cba-876d-4d13-b7be-15abc96c7145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6224", "type": "published-proof-of-concept", "source": "Telegram/_DNd18EV1_mvoOjDBqQ_at4zOgBzw_-F-OvAJ7pAjcWk8VU", "content": "", "creation_timestamp": "2026-04-13T23:21:32.000000Z"}, {"uuid": "30356687-9ba1-47fb-a047-a8d74d9ca691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62246", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvk6yfyz32g", "content": "\ud83d\udfe0 CVE-2026-62246 - High (8.5)\n\nKamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62246/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T23:00:31.937031Z"}, {"uuid": "275a00b9-d9c5-4b28-9558-8e6a4d0e225a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62246", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrxkkywufs2i", "content": "CVE-2026-62246 - Kamaji tenant isolation bypass. Lossy name normalization lets tenants read, modify, or destroy other tenants' Kubernetes data. CVSS 8.5. Update to 26.7.4-edge immediately. #CVE #Kubernetes #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-62246/", "creation_timestamp": "2026-07-31T18:12:34.255307Z"}, {"uuid": "8171e5b0-a8c7-4494-b6fc-eb019a2aad97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqknn46cuy26", "content": "CVE-2026-62240 - CrewAI\nCVE ID : CVE-2026-62240\n \n Published : July 13, 2026, 9:04 p.m. | 26\u00a0minutes ago\n \n Description : CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist ...", "creation_timestamp": "2026-07-13T21:37:37.775425Z"}, {"uuid": "992c8da2-938c-441a-b35a-e6ca22b2cac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqko3zv2pr27", "content": "CVE-2026-62242 - Spring Boot Admin Server\nCVE ID : CVE-2026-62242\n \n Published : July 13, 2026, 9:04 p.m. | 25\u00a0minutes ago\n \n Description : Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to regis...", "creation_timestamp": "2026-07-13T21:45:58.679918Z"}, {"uuid": "6bbf9095-5c7a-4a0b-aefa-f0c35b272d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62241", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqsidieaof2d", "content": "CVE-2026-62241 - clawvet\nA self-hosted Clawvet API server is at risk of exposing user data if not updated to version 0.7.5 or later. An attacker can access a user's email address, subscription plan, and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#clawvet #mohibshaikh #CVE #infosec", "creation_timestamp": "2026-07-17T00:24:04.207614Z"}, {"uuid": "eb0d3f8a-88e1-47c7-baa8-af1bbd90134f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62241", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116932727657867490", "content": "MohibShaikh clawvet API server <0.7.5 (CVE-2026-62241) suffers a CRITICAL flaw: hard-coded JWT secret enables unauthenticated user data access and session cookie forgery. Change secrets & limit endpoint access. https://radar.offseq.com/threat/cve-2026-62241-missing-authentication-for-critical-b8ebafbae06b4bce #OffSeq #CVE202662241 #vuln", "creation_timestamp": "2026-07-17T01:30:26.634048Z"}, {"uuid": "ac9526ea-89d0-4311-b1b9-e68e9895edc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62241", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqsm27phe52j", "content": "MohibShaikh clawvet API <0.7.5 has a CRITICAL flaw: attackers can forge JWTs & access sensitive user info. Change default JWT secret & restrict API endpoints now. https://radar.offseq.com/threat/cve-2026-62241-missing-authentication-for-critical-b8ebafbae06b4bce #OffSeq #CVE202662241", "creation_timestamp": "2026-07-17T01:30:28.729398Z"}, {"uuid": "0df24d68-dbff-403e-b9a8-c6d68bb78900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62241", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqst6txcff2e", "content": "CVE-2026-62241 - clawvet\nCVE ID : CVE-2026-62241\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me') in auth.ts and ships it as the de...", "creation_timestamp": "2026-07-17T03:38:20.106358Z"}, {"uuid": "4c9c7641-5f0f-40c6-9927-5c77013f4fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62240", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mquxu42n3r23", "content": "\ud83d\udccc CVE-2026-62240 - CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and block... https://www.cyberhub.blog/cves/CVE-2026-62240", "creation_timestamp": "2026-07-18T00:07:07.619971Z"}, {"uuid": "1219d980-3bdb-40ae-93b9-2b6e79b971a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62241", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqz2aalmt32l", "content": "\ud83d\udd34 CVE-2026-62241 - Critical (9.1)\n\nclawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62241/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T15:00:21.645247Z"}]}