{"vulnerability": "cve-2026-7775", "sightings": [{"uuid": "56f6b5b5-888e-4e43-a3fd-b5878fd715b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77751", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtljpl5m5p25", "content": "MISP's STIX converter (misp-stix) has a path traversal bug (CVSS 8.8): a crafted record makes it read files outside its template folder.\n\nAffects builds up to 2026.7.8. No public exploit yet.\n\nFix: move to a patched build. (CVE-2026-77751)", "creation_timestamp": "2026-08-21T10:15:40.882291Z"}, {"uuid": "51e697cc-1e17-4d32-9723-a973a4c265a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/afpvlr4q5ds2o", "content": "CVE-2026-77755 - Denial of Service in MISP-STIX Import via Malformed or Oversized STIX Documents in misp-stix library\nCVE ID : CVE-2026-77755\n \n Published : Aug. 21, 2026, 10:16 a.m. | 17\u00a0minutes ago\n \n Description : A denial-of-service vulnerability was identified in misp-sti...", "creation_timestamp": "2026-08-21T10:41:29.856061Z"}, {"uuid": "cc44107e-696a-414b-a6ba-30db3000e84b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77751", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5zoaa3pqzsyqk", "content": "CVE-2026-77751 - Path Traversal in MISP Object Template Resolution During STIX Import and Export in misp-stix library\nCVE ID : CVE-2026-77751\n \n Published : Aug. 21, 2026, 10:16 a.m. | 17\u00a0minutes ago\n \n Description : A path traversal vulnerability existed in the handling of MI...", "creation_timestamp": "2026-08-21T10:43:29.290262Z"}, {"uuid": "8947c772-0293-44d2-bd21-650b4ea5879b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77759", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3sqovrbovachd", "content": "CVE-2026-77759 - IDOR and missing authorization in the Prospero Flow CRM transaction API allow cross-tenant reading of financial records\nCVE ID : CVE-2026-77759\n \n Published : Aug. 21, 2026, 11:29 a.m. | 26\u00a0minutes ago\n \n Description : Authorization Bypass Through User-Control...", "creation_timestamp": "2026-08-21T12:21:29.704246Z"}, {"uuid": "0065b4ad-796e-4164-9e91-8b0af6cf3c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77756", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mw6sub3gjz2d", "content": "\ud83d\udd17 CVE : CVE-2026-34500, CVE-2026-41293, CVE-2026-73581, CVE-2026-75973, CVE-2026-76183, CVE-2026-77756, CVE-2026-77762, CVE-2026-77791, CVE-2026-78383, CVE-2026-78437, CVE-2026-79677, CVE-2026-86248, CVE-2026-86350, CVE-2026-87022", "creation_timestamp": "2026-09-23T13:10:19.274157Z"}, {"uuid": "d2b1c0ee-3b51-4822-9248-22fc9deac74a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77756", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mw7vkccudc2k", "content": "Tomcat\u306e\u8106\u5f31\u6027(Critical: CVE-2026-76183, CVE-2026-86248, CVE-2026-86350, High: CVE-2026-75973, CVE-2026-77762, CVE-2026-77791, CVE-2026-78383, CVE-2026-78437, CVE-2026-79677, CVE-2026-87022, Medium: CVE-2026-73581, Low: CVE-2026-77756)\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-09-23T23:31:08.962588Z"}, {"uuid": "6d6df894-dbc1-4c4f-be16-0182f5a37571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-77756", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apache-tomcat-multiple-vulnerabilities_20260929", "content": "", "creation_timestamp": "2026-09-28T20:00:00.000000Z"}]}