{"vulnerability": "CVE-2026-5507", "sightings": [{"uuid": "338adc45-79cb-4956-8c89-438b571369f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55071", "type": "published-proof-of-concept", "source": "https://github.com/SepineTam/mcp-for-stata/security/advisories/GHSA-49m4-vp58-wgc9", "content": "", "creation_timestamp": "2026-08-12T20:35:03.804906Z"}, {"uuid": "e748dcbb-079b-4876-bc77-459111dd5531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55074", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mswc2xrsax2v", "content": "The ansible-jailexec FreeBSD connection plugin, through 1.3.0, resolved put_file destinations to + and ran mkdir -p and mv there as root on the host. Both follow symlinks, so a symlink inside the jail is followed outside it. CVE-2026-55074. #dev", "creation_timestamp": "2026-08-12T23:32:58.762536Z"}, {"uuid": "3fdc1767-9ad3-4670-89a8-3332ed6a1186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55078", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3vcs3yad2x", "content": "CVE-2026-55078 - Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service\nCVE ID : CVE-2026-55078\n \n Published : July 7, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : Coder allows organizations to provision remote development environments via...", "creation_timestamp": "2026-07-08T00:45:06.712277Z"}, {"uuid": "d3ac0d81-1f34-4506-b27a-079a70942448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55077", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3w4fg6mc2x", "content": "CVE-2026-55077 - Coder: User-admin role can reset owner account password\nCVE ID : CVE-2026-55077\n \n Published : July 7, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2...", "creation_timestamp": "2026-07-08T00:59:24.640065Z"}, {"uuid": "1ebbd1e7-0fe9-4b4a-8533-239a085693b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55076", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3wxaw4lr2k", "content": "CVE-2026-55076 - Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking\nCVE ID : CVE-2026-55076\n \n Published : July 7, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : Coder allows organizations to provision remote development ...", "creation_timestamp": "2026-07-08T01:14:25.716682Z"}, {"uuid": "cfb3d0ce-6536-4ec4-9c59-08110eb15fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55075", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq5m7qsymz26", "content": "CVE-2026-55075 - Authentication Bypass in Coder. OIDC login flaws enable account takeover. CVSS 7.4. Update to patched versions immediately. #CVE #Coder #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-55075/", "creation_timestamp": "2026-07-08T17:07:39.234932Z"}]}