{"vulnerability": "cve-2026-6678", "sightings": [{"uuid": "8e773ae9-f0f3-4d1e-b494-3f3bbf635457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66786", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtnbv3iooa2q", "content": "\ud83d\udc1b VULNERABILITIES (CVSS 9.1) CVE-2026-66786:  \u2014 severity moderate \u2014 Red Hat Security Data (JSON)\nhttps://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-66786.json #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-08-22T03:00:54.498844Z"}, {"uuid": "7aaa27be-1e14-4a28-9610-ff3771e4ca18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66780", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtjcggrxq722", "content": "A critical Red Hat vulnerability, CVE-2026-66780 (CVSS 9.9), enables a MITM attack across a cluster mesh. Two more critical flaws also disclosed.\n\n#RedHat #CVE202666780 #MITM #Kubernetes #Keycloak #InfoSec", "creation_timestamp": "2026-08-20T12:59:58.378236Z"}, {"uuid": "5a6f8869-a6d5-4704-a079-52cbf7d09030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66780", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtezi7xmyo2c", "content": "\ud83d\udea8 CVE-2026-66780 \u2014 CVSS 9.9 CRITICAL\n\nA flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66780\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T20:09:15.384823Z"}, {"uuid": "0d02f485-95ff-46b6-ba4f-3e3324497c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66780", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtf3ra5x5j2j", "content": "CVE-2026-66780 - red hat advanced cluster management for kubernetes 2\nThe Submariner-operator has a security flaw that allows a compromised cluster to alter network configurations and potentially intercept sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-08-18T20:50:04.903349Z"}, {"uuid": "b23ca357-9ddb-4d54-908d-4942fdfcde4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66785", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtlmyc3u4h2m", "content": "CVE-2026-66785 - Critical network redirection flaw in Submariner. Malicious clusters can hijack peer traffic via crafted endpoints. CVSS 9.9. No patch yet - isolate clusters, monitor traffic. #CVE #Submariner #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-66785/", "creation_timestamp": "2026-08-21T11:14:14.761118Z"}, {"uuid": "84619d07-e689-4375-8d77-ab74171a5bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66785", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117133204130544603", "content": "CVE-2026-66785 - Critical network redirection flaw in Submariner. Malicious clusters can hijack peer traffic via crafted endpoints. CVSS 9.9. No patch yet - isolate clusters, monitor traffic. #CVE #Submariner #infosec\nhttps://www.valtersit.com/cve/CVE-2026-66785/", "creation_timestamp": "2026-08-21T11:14:16.890369Z"}, {"uuid": "a3cda143-125e-4e80-929e-d88eedb489d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6678", "type": "seen", "source": "https://infosec.place/objects/cf6e553c-bb60-4c89-9f17-6f2b54a2754a", "content": "New vulnerability report from Talos:WolfSSL wolfSSL PKCS#7 OtherRecipientInfo integer underflow vulnerabilityhttps://talosintelligence.com/vulnerability_reports/TALOS-2026-2408CVE-2026-6678,CVE-2026-6678,CVE-2026-6678", "creation_timestamp": "2026-07-01T16:00:12.062842Z"}, {"uuid": "cd290870-3259-4bb7-982a-c7fde9c42c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66785", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjxo5keg325", "content": "CVE-2026-66785 - red hat advanced cluster management for kubernetes 2\nIn Submariner, a compromised cluster can announce false network ranges that aren\u2019t checked. This causes other connected clusters to send their data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-08-20T19:20:05.148141Z"}, {"uuid": "25c3fead-d217-4450-b12e-5d2c68f99147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66788", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjya3jrf52b", "content": "CVE-2026-66788 - red hat advanced cluster management for kubernetes 2\nIf a cluster that talks to Lighthouse is hacked, an attacker can trick Lighthouse into placing network objects in any namespace, even critical\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-08-20T19:30:07.064522Z"}, {"uuid": "575d6dbd-31bc-452c-84ff-6137d867bd30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66785", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtk2fbjng72p", "content": "\ud83d\udea8 CVE-2026-66785 \u2014 CVSS 9.9 CRITICAL\n\nA flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect network t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66785\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T20:08:48.669842Z"}, {"uuid": "577404f9-3d27-419a-aa09-2acd4a455648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66788", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtk2fjde2k25", "content": "\ud83d\udea8 CVE-2026-66788 \u2014 CVSS 9.9 CRITICAL\n\nA flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerabi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66788\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T20:08:56.669114Z"}, {"uuid": "0cc9944d-5eb3-4278-b878-ab486017b699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66785", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtk5c4vgga2r", "content": "\ud83d\udd34 CVE-2026-66785 - Critical (9.9)\n\nA flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66785/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T21:00:45.066682Z"}, {"uuid": "e389cfe8-0e76-4e96-a410-a5ade17946cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66786", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mukqfxdxg22d", "content": "\ud83d\udea8 CVE-2026-66786 \u2014 CVSS 9.1 CRITICAL\n\nA flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form st...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66786\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T20:08:05.296965Z"}, {"uuid": "88f653e9-6ab2-4e64-bb32-780de8f836c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66786", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muktcw76222y", "content": "CVE-2026-66786 - red hat advanced cluster management for kubernetes 2\nSubmariner's certificate\u2011authentication mode builds its connection settings from text supplied by each cluster without checking it. A malicious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-09-02T21:00:05.044401Z"}, {"uuid": "95f8d98d-c928-4fd3-aa40-0dd350365a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66786", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mul5ftkg4p2z", "content": "\ud83d\udd34 CVE-2026-66786 - Critical (9.1)\n\nA flaw was found in submariner. In cert-auth mode, the connection configuration is built using fr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-66786/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-03T00:00:41.503149Z"}]}