{"uuid": "eb8ed76d-1ab8-4b12-b453-9318f1d5c763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67595", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrt53khbxv2t", "content": "VaahCMS 2.0.0 \u2013 2.3.4 hit by CRITICAL vuln: OTP email templates contain malicious JS enabling code execution, keylogging, & C2. Avoid JS-enabled email rendering. Await vendor patch. https://radar.offseq.com/threat/cve-2026-67595-embedded-malicious-code-in-webreinvent-vaahcms-94fc0638a0fe22eb #Off...", "creation_timestamp": "2026-07-30T00:00:38.645654Z"}