{"vulnerability": "cve-2026-85637", "sightings": [{"uuid": "4c504eb8-12eb-4d81-9bb5-084f41db7936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85637", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117249737557787582", "content": "CVE-2026-85637: Missing auth in jofpin/trape (Admin Endpoint) allows remote attacks via join_room. CVSS 5.3. Exploit public, no patch yet. If you run trape 1.0/2.0, isolate/disconnect it now. Details: https://www.valtersit.com/cve/CVE-2026-85637/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-11T01:10:14.954767Z"}, {"uuid": "751cd30b-f0d9-4dfb-9bfb-27d493a35c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85637", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv7flmptej2f", "content": "CVE-2026-85637: Missing auth in jofpin/trape (Admin Endpoint) allows remote attacks via join_room. CVSS 5.3. Exploit public, no patch yet. If you run trape 1.0/2.0, isolate/disconnect it now. Details: https://www.valtersit.com/cve/CVE-2026-85637/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-11T01:20:19.031999Z"}, {"uuid": "1f66fd6b-8149-43a0-ba9c-9a57f35876af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85637", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mv7im5g6cr2r", "content": "Public exploit, no patch, and the usual tragic confidence parade\nPANIC 67% | Lag 0.0h | CVE-2026-85637 is a missing-authentication flaw in jofpin/trape's admin endpoint via join_room, allo\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-11T02:14:17.676876Z"}]}