{"vulnerability": "CVE-2026-40541", "sightings": [{"uuid": "b4c22622-4567-4779-822c-81e2ade43f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40541", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnhpnwevta2j", "content": "\ud83d\udd17 CVE : CVE-2026-40541, CVE-2026-9491, CVE-2026-9548", "creation_timestamp": "2026-06-04T13:20:18.321010Z"}, {"uuid": "cba049bc-66dd-45a6-9d5f-d5e67758e3a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40541", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu6scmrlkm25", "content": "CVE-2026-40541\nVersions of Synology Chat Server released before 2.4.5\u201122148 do not properly clean data entered on the web interface. This lets someone with a valid account insert harmful code that can read, change or delete\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T02:10:04.756221Z"}, {"uuid": "0f8b1aaf-6a09-468f-af37-a8ba5f8a990e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40541", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/a3f5pmncjv75k", "content": "CVE-2026-40541 - Synology Chat Server Cross-Site Scripting Vulnerability\nCVE ID : CVE-2026-40541\n \n Published : Aug. 28, 2026, 8:16 a.m. | 19\u00a0minutes ago\n \n Description : An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in e...", "creation_timestamp": "2026-08-28T08:40:27.659398Z"}]}