{"vulnerability": "CVE-2026-40575", "sightings": [{"uuid": "1041e3f8-d22a-4e93-812c-5d156badc0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-authentication-bypass-oauth2-can-lead-unauthorized-data-access-patch", "content": "", "creation_timestamp": "2026-04-16T11:06:42.000000Z"}, {"uuid": "be102b08-0d64-4924-b93a-d230f5eb00fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk2ivmsreh2t", "content": "", "creation_timestamp": "2026-04-22T02:59:09.391601Z"}, {"uuid": "f17307e3-8f8b-4f81-b78c-0640468dd62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk2j6lahqe2v", "content": "", "creation_timestamp": "2026-04-22T03:04:09.658465Z"}, {"uuid": "4ca76d41-ab12-4bf5-aa56-f6525b3887fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4iob7mtq2z", "content": "", "creation_timestamp": "2026-04-22T22:00:22.891598Z"}, {"uuid": "5e96ddbe-01fc-46ff-acfb-5a54b4a9b186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkiuofjkjm2o", "content": "", "creation_timestamp": "2026-04-27T20:07:08.334191Z"}, {"uuid": "3dd1cf12-2a80-454b-8778-1551f9d5538c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "Telegram/LUR06ONloRlViUIW27ojzHZG9BE33b4Dag-_8VffcgXgN_8", "content": "", "creation_timestamp": "2026-04-22T01:19:23.000000Z"}, {"uuid": "853c493a-a499-4c98-a734-1dafc08310bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv4qe4xe72m", "content": "CVE-2026-40575 - oauth2-proxy\nOAuth2 Proxy can let attackers bypass authentication checks if the software is configured to skip authentication for certain routes and a malicious client sends a fake\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oauth2proxy #Golang #CVE #infosec", "creation_timestamp": "2026-08-25T05:50:05.362818Z"}]}