{"vulnerability": "cve-2026-7875", "sightings": [{"uuid": "6cdd882c-75fe-4c8c-80ad-4026a7914c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7875", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77llsuog2g", "content": "\ud83d\udfe0 CVE-2026-7875 - High (8.8)\n\nNanoClaw contains a host/container filesystem boundary vulnerability in outbound attachment handl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7875/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T17:21:01.162296Z"}, {"uuid": "77707553-b78b-4d2b-b8f5-dd4b17844e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7875", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmz4vbxl2z2h", "content": "\ud83d\udccc CVE-2026-7875 - NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that a... https://www.cyberhub.blog/cves/CVE-2026-7875", "creation_timestamp": "2026-05-29T18:07:08.429223Z"}, {"uuid": "22eee49a-e258-4390-8558-adbb8e8c898e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7875", "type": "seen", "source": "https://t.me/shimiscyberworld/1249", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-06\n\n\ud83d\udcca 25 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-41930 (9.8) \u2014 CVE-2026-41930: Vvveb Docker Hard-Coded Credentials Lead to\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-7841 (8.8) \u2014 GeoVision GV-ASWeb RCE: High-Severity Flaw Affects\u2026\n  \u2022 CVE-2025-31951 (8.8) \u2014 HCL BigFix RunBookAI Vulnerability Allows Command Smuggling\n  \u2022 CVE-2026-20034 (8.8) \u2014 Cisco Unity Connection: Authenticated RCE Via Web\u2026\n  \u2022 CVE-2026-42503 (8.8) \u2014 CVE-2026-42503: gopls Vulnerability Exposes Dev\u2026\n  \u2022 CVE-2026-7875 (8.8) \u2014 NanoClaw Container Vulnerability Allows Arbitrary File\u2026\n  \u2022 CVE-2026-41934 (8.8) \u2014 Vvveb RCE: Authenticated Users Can Achieve Unauthenticated\u2026\n  \u2022 CVE-2026-41938 (8.8) \u2014 CVE-2026-41938: Vvveb Unrestricted File Upload Leads to RCE\n  \u2022 CVE-2024-30151 (8.3) \u2014 HCL BigFix Service Management Privilege Escalation\u2026\n  \u2022 CVE-2026-41936 (8.1) \u2014 CVE-2026-41936: Vvveb XXE Allows File Disclosure, Privilege\u2026\n  \u2022 CVE-2026-6691 (7.8) \u2014 CVE-2026-6691: MongoDB C Driver Heap Overflow via GSSAPI\u2026\n  \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar &amp; more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:15.425609Z"}, {"uuid": "480fe94f-e97b-4458-b9d2-7ca6f010bc04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7875", "type": "seen", "source": "https://t.me/shimiscyberworld/1249", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-06\n\n\ud83d\udcca 25 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-41930 (9.8) \u2014 CVE-2026-41930: Vvveb Docker Hard-Coded Credentials Lead to\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-7841 (8.8) \u2014 GeoVision GV-ASWeb RCE: High-Severity Flaw Affects\u2026\n  \u2022 CVE-2025-31951 (8.8) \u2014 HCL BigFix RunBookAI Vulnerability Allows Command Smuggling\n  \u2022 CVE-2026-20034 (8.8) \u2014 Cisco Unity Connection: Authenticated RCE Via Web\u2026\n  \u2022 CVE-2026-42503 (8.8) \u2014 CVE-2026-42503: gopls Vulnerability Exposes Dev\u2026\n  \u2022 CVE-2026-7875 (8.8) \u2014 NanoClaw Container Vulnerability Allows Arbitrary File\u2026\n  \u2022 CVE-2026-41934 (8.8) \u2014 Vvveb RCE: Authenticated Users Can Achieve Unauthenticated\u2026\n  \u2022 CVE-2026-41938 (8.8) \u2014 CVE-2026-41938: Vvveb Unrestricted File Upload Leads to RCE\n  \u2022 CVE-2024-30151 (8.3) \u2014 HCL BigFix Service Management Privilege Escalation\u2026\n  \u2022 CVE-2026-41936 (8.1) \u2014 CVE-2026-41936: Vvveb XXE Allows File Disclosure, Privilege\u2026\n  \u2022 CVE-2026-6691 (7.8) \u2014 CVE-2026-6691: MongoDB C Driver Heap Overflow via GSSAPI\u2026\n  \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar &amp; more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:35.376907Z"}]}