{"vulnerability": "CVE-2026-1839", "sightings": [{"uuid": "9af1cf11-5754-42d9-bfaf-2298c2bf7a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miv4dqxdnj2i", "content": "", "creation_timestamp": "2026-04-07T06:05:54.436644Z"}, {"uuid": "ae11d08d-0a55-48c3-b47d-5d29d26a66d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18394", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrxy3dgsuf2v", "content": "Strands Agents Tools 0.8.2\u672a\u6e80\u306ehttp_request\u30c4\u30fc\u30eb\u3067\u8a8d\u8a3c\u4e0d\u5099\u304c\u3042\u308a\u3001LLM\u7d4c\u7531\u3067\u30d7\u30ed\u30ad\u30b7\u3092\u901a\u3058\u305f\u5916\u90e8\u30ea\u30af\u30a8\u30b9\u30c8\u306b\u3088\u308a\u3001HTTP_REQUEST_TOKEN_CO\u2026\nCVE-2026-18394 CVSS 7.4 | HIGH", "creation_timestamp": "2026-07-31T22:14:20.730092Z"}, {"uuid": "f3020a39-d319-4c8f-b53b-17c365a32d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-18394", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-18394", "content": "", "creation_timestamp": "2026-08-01T00:15:03.577119Z"}, {"uuid": "c4b807fe-40b8-46c0-b244-27f54cd7e7c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18393", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mu7s54ftd22s", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-18393\n\nA flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond\nthe bounds of a heap-allocated buffer when processing crafted TDSC cursor...", "creation_timestamp": "2026-08-29T11:39:39.323217Z"}, {"uuid": "8bd55538-a281-4de0-9671-ff13da53358f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18391", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvyfs4lmy2j", "content": "CVE-2026-18391 - woocommerce subscriptions\nIf you use WooCommerce Subscriptions version 9.1.0 or earlier, an attacker can potentially run malicious code on your website without needing a password. This is a serious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-12T20:40:03.990508Z"}]}