{"vulnerability": "cve-2026-85184", "sightings": [{"uuid": "03fd4d21-1421-4d80-b5ce-c3559f977086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85184", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3muonnibgck25", "content": "\ud83d\udea8 Critical-severity security fix in @fastify/middie@9.3.4 just released!\n\nPatches CVE-2026-85184: path-scoped middleware bypass via absolute-form request target. \n\ngithub.com/fastify/midd...", "creation_timestamp": "2026-09-04T09:29:18.237916Z"}, {"uuid": "e3bafa65-53cd-40f9-aa33-980bf0a3d7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85184", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muor2bmavz2o", "content": "CVE-2026-85184\nIf you use Fastify with the @fastify/middie package version 9.1.0 through 9.3.3, a specially crafted request can avoid the middleware that checks login or permissions. This lets an unauthenticated user reach\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-04T10:30:07.067605Z"}, {"uuid": "0f7222cb-9e5d-4775-8a28-0582fb61c090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85184", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2tjbibd4j4meo", "content": "CVE-2026-85184 - @fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target\nCVE ID : CVE-2026-85184\n \n Published : Sept. 4, 2026, 10:17 a.m. | 20\u00a0minutes ago\n \n Description : @fastify/middie versions >= 9.1.0 and before 9.3.4 decide whether...", "creation_timestamp": "2026-09-04T10:44:42.567352Z"}, {"uuid": "3b779bbf-a620-4203-842f-24220446f467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85184", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muowikdvj72w", "content": "\ud83d\udea8 CVE-2026-85184 \u2014 CVSS 9.1 CRITICAL\n\n@fastify/middie versions >= 9.1.0 and before 9.3.4 decide whether to run path-scoped middleware by matching...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85184\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T12:07:33.853395Z"}]}