{"vulnerability": "cve-2026-64870", "sightings": [{"uuid": "5fc54425-6c8a-4b16-9e83-bea3ae00bd9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64870", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxtesop7dg2u", "content": "CVE-2026-64870 - MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation\nCVE ID : CVE-2026-64870\n \n Published : July 30, 2026, 7:18 p.m. | 26\u00a0minutes ago\n \n Description : MaxKB is an open-source AI assistant for enterprise. In versions 2.0.0 throu...", "creation_timestamp": "2026-07-30T20:00:13.650782Z"}]}