{"vulnerability": "CVE-2026-62857", "sightings": [{"uuid": "c5c9a404-0ec3-418e-8e3f-c7d34931d668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62857", "type": "seen", "source": "https://bsky.app/profile/hollo.hollo.social.ap.brid.gy/post/3mqwslocjbbu2", "content": "### Hollo security updates: 0.8.9 and 0.9.9\n\nIf you run Hollo, update to a patched release now. CVE-2026-62857 affects Fedify's NodeInfo client, which Hollo uses to identify the software running on remote ActivityPub servers.\n\nA NodeInfo lookup starts by fetching a remote server's `/ [\u2026]", "creation_timestamp": "2026-07-18T17:38:21.836637Z"}, {"uuid": "df24079b-adc1-441b-8a3c-0fffedf01667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62857", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqxycl25wi2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-58532: 47 interactions\nCVE-2026-15409: 21 interactions\nCVE-2026-63030: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-63030: 16 interactions\nCVE-2026-60137: 9 interactions\nCVE-2026-62857: 4 interactions\n", "creation_timestamp": "2026-07-19T04:53:12.183463Z"}]}