{"vulnerability": "cve-2026-71214", "sightings": [{"uuid": "315e93b2-9a22-4a62-80a1-fa528d2abf9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71214", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117041727081914237", "content": "CVE-2026-71214: NASA-AMMOS plandev sequencing-server has a CRITICAL vuln (CVSS 9.8) \u2014 unauthenticated users can inject commands by spoofing session roles or using whitelisted endpoints. Patch urgently. More: https://radar.offseq.com/threat/cve-2026-71214-cwe-306-missing-authentication-for-critical-function-in-nasa-ammos-plandev-sequencing-a69c1ea44211854b #OffSeq #Vuln #NASA #CyberSec #CVSS", "creation_timestamp": "2026-08-05T07:30:25.809646Z"}, {"uuid": "18d988fc-ab33-475a-90e6-cb4757727b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71214", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mscyzgcese2v", "content": "NASA-AMMOS plandev sequencing-server hit by CRITICAL vuln (CVSS 9.8): unauthenticated attackers can inject admin rules/commands. Review your deployments & patch ASAP. https://radar.offseq.com/threat/cve-2026-71214-cwe-306-missing-authentication-for-critical-function-in-nasa-ammos-plandev-sequenci...", "creation_timestamp": "2026-08-05T07:30:28.822947Z"}, {"uuid": "6d7156cd-51ce-4a80-90e3-0e9b9444004f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71214", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msd7emhmmy2a", "content": "CVE-2026-71214\nThe Aerie/PlanDev sequencing-server allows an attacker to insert arbitrary data without authentication. This is because the server relies on information sent by the client, rather than verifying the client's\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-05T09:24:05.337602Z"}]}