{"vulnerability": "CVE-2026-10054", "sightings": [{"uuid": "7ef6a600-a3a3-467a-9125-91de9214296a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10054", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpqgjz7j5523", "content": "CVE-2026-10054 - Eclipse Theia: Insecure WebSocket Terminal Access\nCVE ID : CVE-2026-10054\n \n Published : July 3, 2026, 10:11 a.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : In affected versions of Eclipse Theia (1.8.1 and later), the browser backend exposes privileged terminal ...", "creation_timestamp": "2026-07-03T11:21:24.470387Z"}, {"uuid": "b5f4348e-99f7-4bfa-b818-2945c39ec717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10054", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprsjpvlng2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10054 \u0432 Eclipse Theia: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B556CBA8-B15A-4858-8150-5CE72D49BC10", "creation_timestamp": "2026-07-04T00:28:39.278374Z"}, {"uuid": "b034bfb7-48f1-4fea-953e-a2198963237e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10054", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpwl7evzoe2d", "content": "\ud83d\udfe0 CVE-2026-10054 - High (8.8)\n\nIn affected versions of Eclipse Theia (1.8.1 and later), the browser backend exposes privileged t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10054/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-05T22:00:55.728905Z"}, {"uuid": "80beaaef-f6d0-4b15-82ed-36a77974e149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100543", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwfqhdqnwd27", "content": "\ud83d\udfe0 CVE-2026-100543 - High (7.5)\n\nOpenClaw (npm package openclaw) before 2026.8.1 could include deterministic hashes computed over ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100543/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T07:15:57.437204Z"}, {"uuid": "af508d1a-567c-4257-99c6-5ae95da71e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100544", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwfqhkxerb2d", "content": "\ud83d\udfe0 CVE-2026-100544 - High (8.8)\n\nopenclaw's @openclaw/voice-call package before 2026.8.1 launches the configured agent for classic...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100544/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T07:16:05.526589Z"}, {"uuid": "0d838dd8-f6d6-4a25-87f0-bf3c6396f3b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100541", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwfrcnsuwp2k", "content": "\ud83d\udfe0 CVE-2026-100541 - High (7.5)\n\nOpenClaw's Matrix integration (npm package @openclaw/matrix) versions >= 2026.2.2 and < 2026.8...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-100541/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-26T07:31:13.874450Z"}, {"uuid": "c19fcfed-8b1f-4b1a-9dc9-2cda0676beea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100544", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwh4bhjpfg25", "content": "CVE-2026-100544 - voice-call\nThe openclaw/voice-call component before version 2026.8.1 does not correctly identify who is calling when a voice call comes in. This means a remote caller can be treated as\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#voicecall #openclaw #CVE #infosec", "creation_timestamp": "2026-09-26T20:20:04.059092Z"}]}