{"vulnerability": "cve-2026-6590", "sightings": [{"uuid": "9ebe7b8c-856c-4af1-9fb0-d031cb7236e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6590", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjvl6gp25g2k", "content": "", "creation_timestamp": "2026-04-20T03:56:33.611340Z"}, {"uuid": "fd11212b-3ffd-4c02-8177-9afe6f2db5b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65906", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mtekysg2w624", "content": "A critical-severity fix just shipped for Jetbrains Teamcity. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-65906", "creation_timestamp": "2026-08-18T15:50:05.455656Z"}, {"uuid": "0ac5d6c4-41ba-447b-a4be-0fa8f10661eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65905", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtydl6w76z2k", "content": "\ud83d\udd17 CVE : CVE-2026-32990, CVE-2026-65182, CVE-2026-65183, CVE-2026-65637, CVE-2026-65905, CVE-2026-65927, CVE-2026-66299, CVE-2026-66422, CVE-2026-68525, CVE-2026-68569, CVE-2026-68763, CVE-2026-73180", "creation_timestamp": "2026-08-26T12:30:27.479902Z"}, {"uuid": "dec697d3-d629-47a8-a2a0-2ac5f5ab459b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65905", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu3actcs342e", "content": "CVE-2026-65905 - tomcat\nIf your Tomcat server uses DIGEST authentication, an attacker could capture a valid login request and replay it once, potentially gaining access. This affects many older Tomcat\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tomcat #apache #CVE #infosec", "creation_timestamp": "2026-08-27T16:10:04.816139Z"}, {"uuid": "68d20926-c2a3-4ee8-81bd-f938061cc2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65907", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116969533025380702", "content": "CVE-2026-65907: CRITICAL RCE in JetBrains TeamCity (CVSS 9.1). Affects <2026.1.2, <2025.11.6. Exploitable via Git VCS roots \u2014 no patch yet. Restrict access, minimize Git user privileges. More info: https://radar.offseq.com/threat/cve-2026-65907-cwe-94-in-jetbrains-teamcity-0b7d157127b512e7 #OffSeq #TeamCity #Vuln #RCE", "creation_timestamp": "2026-07-23T13:30:31.952379Z"}, {"uuid": "844d76b0-9879-49c6-bea0-10796a9cb490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65907", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrcx3efa542r", "content": "JetBrains TeamCity CRITICAL RCE (CVE-2026-65907) via Git VCS roots in versions <2026.1.2, <2025.11.6. No patch yet \u2014 restrict TeamCity access & limit Git user privileges. Details: https://radar.offseq.com/threat/cve-2026-65907-cwe-94-in-jetbrains-teamcity-0b7d157127b512e7 #OffSeq #TeamCity #Vulne...", "creation_timestamp": "2026-07-23T13:30:34.184992Z"}, {"uuid": "7203c27a-bc42-4842-a200-556527e58a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65907", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrd46zczbq2a", "content": "CVE-2026-65907 - teamcity\nIf you use JetBrains TeamCity, be aware that before a recent update, hackers could potentially run malicious code on your system if they gained access to your Git repository.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#teamcity #jetbrains #CVE #infosec", "creation_timestamp": "2026-07-23T15:02:05.014374Z"}, {"uuid": "76695aa8-4f10-4bd3-abe6-ab7042dcb8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65902", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-76mc-f452-cxcm", "content": "", "creation_timestamp": "2026-07-23T16:35:19.366469Z"}, {"uuid": "536803b9-a166-4f91-8a51-6e21e79a02e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65901", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-x4vx-rjvf-j5p4", "content": "", "creation_timestamp": "2026-07-23T16:35:21.655814Z"}, {"uuid": "949b1b23-fa35-4245-96a1-0704f2c5bd59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65900", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-gvmj-g25r-r7wr", "content": "", "creation_timestamp": "2026-07-23T16:35:23.957748Z"}, {"uuid": "f3178b3d-4422-452b-a67d-3918add5e1b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65906", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdcvtdw6i2j", "content": "\ud83d\udfe0 CVE-2026-65906 - High (8.8)\n\nIn JetBrains TeamCity before 2026.1.2, 2025.11.6 \u0441ode execution via Kotlin DSL sandbox escape wa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-65906/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-23T17:02:13.335974Z"}, {"uuid": "633b0764-0d9a-4dce-9696-204ad0548a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65905", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/djd7h3cbj7p5x", "content": "CVE-2026-65905: Apache Tomcat: Limited replay attack possible with DIGEST authentication", "creation_timestamp": "2026-08-26T01:00:06.383873Z"}]}