{"uuid": "4f10f3d9-a768-4290-82cb-7f3bf385be5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71424", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcvw3oz5b2p", "content": "CVE-2026-71424 - onyx\nOnyx's API endpoints, used for managing servers, exposed another user's login credentials to anyone with certain access permissions. This issue has been fixed in versions 3.1.10, 3.2.14, and 4.0.0\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#onyx #CVE #infosec", "creation_timestamp": "2026-08-18T00:00:07.899120Z"}