{"vulnerability": "cve-2026-7683", "sightings": [{"uuid": "965db3a0-5098-4a26-84cf-831dc0321c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76833", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjj5g6een2r", "content": "\ud83d\udfe0 CVE-2026-76833 - High (7.8)\n\n@cgauge/yaml npm package contains an arbitrary code execution vulnerability that allows attackers...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76833/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T15:00:12.293317Z"}, {"uuid": "5110315c-6b34-4227-98ee-5c5a3367d12f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76832", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ao6zm6lzhma5h", "content": "CVE-2026-76832 - Agno PythonTools Path Traversal via joinpath file_name argument\nCVE ID : CVE-2026-76832\n \n Published : Aug. 19, 2026, 10:17 p.m. | 14\u00a0minutes ago\n \n Description : Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that...", "creation_timestamp": "2026-08-19T22:36:47.451770Z"}, {"uuid": "909299fe-292d-4f91-aea8-a5feceee4a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76832", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtlhaea32l", "content": "\ud83d\udfe0 CVE-2026-76832 - High (8.8)\n\nAgno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76832/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T23:01:40.979176Z"}, {"uuid": "63540585-fb5c-444f-a738-28258a8e6d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76838", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lzangtp4vj27", "content": "CVE-2026-76838 - Hi.Events before 1.11.1-beta Server-Side Request Forgery via Unvalidated Webhook Redirects\nCVE ID : CVE-2026-76838\n \n Published : Aug. 24, 2026, 5:36 p.m. | 27\u00a0minutes ago\n \n Description : Hi.Events validates a webhook destination only when it is registered, n...", "creation_timestamp": "2026-08-24T18:47:24.980392Z"}, {"uuid": "ee771f58-af09-4fbb-823d-67fda9cce5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4r33lpgqkvzkk", "content": "CVE-2026-76837 - Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name\nCVE ID : CVE-2026-76837\n \n Published : Aug. 24, 2026, 5:36 p.m. | 27\u00a0minutes ago\n \n Description : Baserow interpolates a user's display name into the rich-text mention markup w...", "creation_timestamp": "2026-08-24T18:49:24.357052Z"}, {"uuid": "7f3cc094-6516-49d2-b0f2-9d4ffa56abaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76838", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyijzlir27", "content": "\ud83d\udfe0 CVE-2026-76838 - High (8.5)\n\nHi.Events validates a webhook destination only when it is registered, never when it is used. NoIn...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76838/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-24T19:01:29.076320Z"}, {"uuid": "f4aa6682-4c27-4ac5-9508-558dd9b7db15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyixqmp52r", "content": "\ud83d\udd34 CVE-2026-76835 - Critical (9.1)\n\nOAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76835/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-24T19:01:44.179103Z"}, {"uuid": "26da17b7-2ecc-4869-aea9-d1214cc0cd05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtu23pht6c2y", "content": "CVE-2026-76835 - oauth2-proxy\nThe OAuth2 Proxy software treats any client as a trusted proxy by default, so it trusts the X-Forwarded-Uri header sent by the requester. An attacker can send a fake header that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oauth2proxy #CVE #infosec", "creation_timestamp": "2026-08-24T19:30:04.928191Z"}, {"uuid": "830ce985-d7ec-48ca-a855-263c6ffecf7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtu4a2g2b225", "content": "\ud83d\udea8 CVE-2026-76835 \u2014 CVSS 9.3 CRITICAL\n\nOAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip auth...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76835\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T20:08:18.115433Z"}, {"uuid": "272f7ef5-8e04-4ac8-929f-94e0bbe8da27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://www.acn.gov.it/portale/w/oauth2-poc-pubblico-per-lo-sfruttamento-di-una-vulnerabilita-con-gravita-critica-", "content": "Disponibile un Proof of Concept (PoC) per la CVE-2026-76835 presente in OAuth2 Proxy. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe permettere a un attaccante remoto non autenticato di eludere i meccanismi di autenticazione sui sistemi interessati.", "creation_timestamp": "2026-08-27T16:01:01.275590Z"}, {"uuid": "5cf9d4c0-621d-410c-8a0c-1ed6c50434aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76835", "type": "seen", "source": "https://www.acn.gov.it/portale/w/oauth2-poc-pubblico-per-lo-sfruttamento-di-una-vulnerabilita-con-gravita-critica-", "content": "Disponibile un Proof of Concept (PoC) per la CVE-2026-76835 presente in OAuth2 Proxy. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe permettere a un attaccante remoto non autenticato di eludere i meccanismi di autenticazione sui sistemi interessati.", "creation_timestamp": "2026-08-28T01:00:44.784977Z"}, {"uuid": "0f3d60bc-b32b-42d4-8f9c-1ead45746fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76836", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv46haca72p", "content": "CVE-2026-76836\nAnyone with only basic station profile permission can change the custom Liquidsoap configuration in AzuraCast. Those changes are written directly into the script and can run system commands when the station\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:40:04.453102Z"}]}