{"vulnerability": "CVE-2026-6734", "sightings": [{"uuid": "e52041c0-c950-4904-ab19-164326d13815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67346", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6y3reb6zoq65d", "content": "CVE-2026-67346 - Swarms 6.8.1 Server-Side Request Forgery via DNS Rebinding Bypass\nCVE ID : CVE-2026-67346\n \n Published : July 30, 2026, 3:16 p.m. | 28\u00a0minutes ago\n \n Description : Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerabil...", "creation_timestamp": "2026-07-30T15:49:07.215123Z"}, {"uuid": "a7846976-6f7d-48f9-884d-45a66aaf39ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67340", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrzlbintyl2c", "content": "ArcadeDB <26.7.2 faces a CRITICAL flaw (CVE-2026-67340): UPDATE_SCHEMA users can trigger OS command execution via JavaScript triggers. Restrict permissions & monitor triggers until patch. https://radar.offseq.com/threat/cve-2026-67340-improper-control-of-generation-of-code-code-injection-in-arcad...", "creation_timestamp": "2026-08-01T13:30:28.848537Z"}, {"uuid": "a5acf1d6-6ee3-4f3d-83aa-083ec3186984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4jpcl4yqppusi", "content": "CVE-2026-67341 - ArcadeDB before 26.7.2 Authorization Bypass via SQL DEFINE FUNCTION\nCVE ID : CVE-2026-67341\n \n Published : Aug. 1, 2026, 1:17 p.m. | 25\u00a0minutes ago\n \n Description : ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFIN...", "creation_timestamp": "2026-08-01T13:49:27.415610Z"}, {"uuid": "6649f0a9-60bc-4800-ac97-9486620c5f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2xavbtzc3oidi", "content": "CVE-2026-67340 - ArcadeDB before 26.7.2 Remote Code Execution via Trigger Scripts\nCVE ID : CVE-2026-67340\n \n Published : Aug. 1, 2026, 1:17 p.m. | 25\u00a0minutes ago\n \n Description : ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.la...", "creation_timestamp": "2026-08-01T13:55:30.383382Z"}, {"uuid": "42c451d6-3a1b-48ce-8fa4-1febe4cdbd3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67342", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jcvjw5wuz2ydv", "content": "CVE-2026-67342 - ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers\nCVE ID : CVE-2026-67342\n \n Published : Aug. 1, 2026, 1:17 p.m. | 25\u00a0minutes ago\n \n Description : ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers fo...", "creation_timestamp": "2026-08-01T14:01:27.037207Z"}, {"uuid": "05d26a4c-fa4e-4058-95d7-11b4451d4d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqckeekh2t", "content": "\ud83d\udd34 CVE-2026-67340 - Critical (9.8)\n\nArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.l...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67340/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T15:00:33.191482Z"}, {"uuid": "89247e0d-abb8-45c0-a262-b38e6a07823c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67341", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqcr5vi22b", "content": "\ud83d\udd34 CVE-2026-67341 - Critical (9.8)\n\nArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67341/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T15:00:39.734357Z"}, {"uuid": "862b9c1b-6f6a-4add-a917-13b71022ebb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67342", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqcxjacm2g", "content": "\ud83d\udd34 CVE-2026-67342 - Critical (9.8)\n\nArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers fo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67342/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T15:00:46.451769Z"}, {"uuid": "d8cb8a43-15f6-4e4a-83b5-f285a7ce08a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67343", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqe7ct742n", "content": "\ud83d\udfe0 CVE-2026-67343 - High (8.8)\n\nArcadeDB versions before 26.7.2 fail to properly redact the cluster token in the GET /api/v1/serv...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67343/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T15:01:28.812576Z"}, {"uuid": "2fd74e7d-26ae-4d10-b3aa-11402c03d922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-04T17:00:04.801077Z"}, {"uuid": "37b0603a-d034-424a-987e-8f61bf7e58fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67344", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrzrg36jmq2d", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-67344](https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-8vr5-263f-x5r3)\n...\nhttps://github.com/ArcadeData/arcadedb/security/advisories/GHSA-8vr5-263f-x5r3 #CVE #ZeroDay #PatchManagement", "creation_timestamp": "2026-08-01T15:20:24.559201Z"}, {"uuid": "e28a0851-e4fb-486d-815c-799e157b3797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2c5x4qsl2l", "content": "CVE-2026-67340 - arcadedb\nArcadeDB versions prior to 26.7.2 are vulnerable to a security risk. An authenticated user with sufficient permissions can create a malicious script that executes OS commands,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#arcadedb #arcadedata #CVE #infosec", "creation_timestamp": "2026-08-01T20:20:05.654402Z"}, {"uuid": "f6491fcc-8717-4eec-8b64-1b76c386b612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67341", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2c5yegfb2p", "content": "CVE-2026-67341 - arcadedb\nOld versions of ArcadeDB have a security weakness that lets attackers with database access execute their own JavaScript code. This is a serious issue because it allows\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#arcadedb #arcadedata #CVE #infosec", "creation_timestamp": "2026-08-01T20:20:06.699077Z"}, {"uuid": "9790b654-a499-400a-a20e-0ad058554d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67342", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2cbii3z52u", "content": "CVE-2026-67342 - arcadedb\nVersions of ArcadeDB before 26.7.2 have a security weakness that allows unauthorized access to databases. This could allow attackers to view or modify sensitive data. Upgrade to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#arcadedb #arcadedata #CVE #infosec", "creation_timestamp": "2026-08-01T20:22:04.325891Z"}, {"uuid": "331494f6-6d6a-4b5d-9528-279f4223cd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2ij326vm2p", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67340 \u0432 ArcadeDB: \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u044b\n\n\n\nhttps://kripta.biz/posts/6D43DDE6-5843-41B1-B14F-2C7CD7B50578", "creation_timestamp": "2026-08-01T22:13:41.014770Z"}, {"uuid": "028cb7f6-2875-4bae-98e2-783822ff4a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2ijjybuu22", "content": "CVE-2026-67340: \u05d4\u05e4\u05e8\u05e6\u05d4 \u05d4\u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-ArcadeDB \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d1\u05d9\u05e6\u05d5\u05e2 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea \u05d8\u05e8\u05d9\u05d2\u05e8\u05d9\u05dd - \u05de\u05d4 \u05e9\u05d7\u05d5\u05d1\u05d4 \u05dc\u05d3\u05e2\u05ea\n\n\n\nhttps://khesef.xyz/posts/CBDDDF8C-6F69-41D7-993F-181DE6FD05D0", "creation_timestamp": "2026-08-01T22:13:56.557763Z"}, {"uuid": "06c6c833-846e-4ffa-90e2-b21bcb826684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67342", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms6hlz6bpw2j", "content": "CVE-2026-67342 - Critical auth bypass in ArcadeDB HTTP endpoints. Attackers can access or modify unauthorized databases. CVSS 9.8. No patch yet, restrict exposure immediately. #CVE #ArcadeDB #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-67342/", "creation_timestamp": "2026-08-03T12:08:04.927617Z"}, {"uuid": "262917f9-c1cc-4398-af3f-7a00e10148df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67342", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117031494265005692", "content": "CVE-2026-67342 - Critical auth bypass in ArcadeDB HTTP endpoints. Attackers can access or modify unauthorized databases. CVSS 9.8. No patch yet, restrict exposure immediately. #CVE #ArcadeDB #infosec\nhttps://www.valtersit.com/cve/CVE-2026-67342/", "creation_timestamp": "2026-08-03T12:10:15.938869Z"}, {"uuid": "3cfcbfc4-c7b5-4580-8c55-4cb07972cc9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67344", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2j7rm62d25", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67344 \u0432 ArcadeDB: \u043a\u0430\u043a \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 ALTER TYPE\n\n\n\nhttps://kripta.biz/posts/1ABD0746-FA80-4A38-BF93-116C890A9183", "creation_timestamp": "2026-08-01T22:26:23.044042Z"}, {"uuid": "d3655e14-8549-4f7b-ac85-4586d137bde5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67344", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2jabtq2w2p", "content": "CVE-2026-67344: \u05e4\u05e8\u05e6\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-ArcadeDB \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u043e\u0431\u0445\u043e\u0434 \u05d0\u05d9\u05de\u05d5\u05ea \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea ALTER TYPE\n\n\n\nhttps://khesef.xyz/posts/2D5BDF5B-C3F6-4D2E-B9E7-9432DEE92F6A", "creation_timestamp": "2026-08-01T22:26:40.046352Z"}, {"uuid": "dfdfa956-89a1-4588-82c0-9404095cac03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67343", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jdt446r25", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67343 \u0432 ArcadeDB: \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043d\u043e\u043c\u0443 \u0442\u043e\u043a\u0435\u043d\u0443 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443\n\n\n\nhttps://kripta.biz/posts/D529E69C-268E-421C-B930-ADC5AD7B5C96", "creation_timestamp": "2026-08-01T22:28:38.936422Z"}, {"uuid": "341e889d-988a-4001-8f03-5da4072a391c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67341", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jhuch5j22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67341 \u0432 ArcadeDB: \u043a\u0430\u043a \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 SQL DEFINE FUNCTION\n\n\n\nhttps://kripta.biz/posts/AB8B8368-9749-42E9-9328-80FF7632EA27", "creation_timestamp": "2026-08-01T22:30:54.511700Z"}, {"uuid": "4c81f46e-3a44-4c8f-b753-e350c179eceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67341", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3ms2jibtotf2r", "content": "ArcadeDB 26.7.2 \u4e4b\u524d\u7248\u672c\u5b58\u5728\u4e25\u91cd\u6388\u6743\u7ed5\u8fc7\u6f0f\u6d1e:CVE-2026-67341 \u5168\u9762\u89e3\u6790\n\n\n\nhttps://qian.cx/posts/649B47C2-4DF5-4211-A679-E079414754B6", "creation_timestamp": "2026-08-01T22:31:08.515185Z"}, {"uuid": "2543b0e0-7c00-497c-92c2-7f5bc62e67c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67342", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jujvj6f2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67342 \u0432 ArcadeDB: \u043a\u0430\u043a \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435\n\n\n\nhttps://kripta.biz/posts/AB4766F8-32F6-4135-8613-73E7AC8D9AB6", "creation_timestamp": "2026-08-01T22:37:59.360195Z"}, {"uuid": "f01e95da-c7ce-4fcd-9b02-4a9cd6291cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67342", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2juut5wr2u", "content": "CVE-2026-67342: \u05e4\u05e8\u05e6\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-ArcadeDB \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05e2\u05e7\u05d9\u05e4\u05ea \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d3\u05e8\u05da \u05de\u05e0\u05d4\u05dc\u05d9 \u05de\u05e1\u05d3\u05d9 \u05e0\u05ea\u05d5\u05e0\u05d9\u05dd\n\n\n\nhttps://khesef.xyz/posts/7928AF61-CA3A-458A-8160-0FB6F7A9032C", "creation_timestamp": "2026-08-01T22:38:10.934756Z"}, {"uuid": "a4f6f1ea-ef8a-44ba-b420-7c7b058bd66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67340", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-05T00:00:26.522837Z"}, {"uuid": "b0a2e289-e34a-4ca6-9d56-1df5aa3f418d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67341", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2leyxbki2p", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67341 \u0432 ArcadeDB: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/AE5FF16A-B20A-4030-8DD7-45676E235959", "creation_timestamp": "2026-08-01T23:05:05.926529Z"}, {"uuid": "db9ae86a-4224-42d3-8076-02004104ac55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67344", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2lnm5do325", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-67344 \u0432 ArcadeDB: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/475BB089-1B47-4CB9-B9CB-EF3D8567FABD", "creation_timestamp": "2026-08-01T23:09:54.209632Z"}, {"uuid": "5c16b710-7a7c-4ec8-99c7-897967815f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67344", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2loblza42c", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-ArcadeDB: \u05de\u05d4 \u05db\u05dc \u05d0\u05e8\u05d2\u05d5\u05df \u05e6\u05e8\u05d9\u05da \u05dc\u05d3\u05e2\u05ea \u05e2\u05dc CVE-2026-67344\n\n\n\nhttps://khesef.xyz/posts/0B783B7F-BC5A-4704-B365-5F38211989D0", "creation_timestamp": "2026-08-01T23:10:16.833219Z"}, {"uuid": "713ba67d-bd84-4843-8cab-4cd448e9063d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67342", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117023678462005988", "content": "ArcadeDB <26.7.2 hit by CRITICAL CVE-2026-67342: Auth bypass via unvalidated HTTP endpoints (time series, batch, Prometheus, Grafana). Attackers can access & modify DBs. Restrict endpoints, monitor logs. https://radar.offseq.com/threat/cve-2026-67342-authorization-bypass-through-user-controlled-key-in-arcadedata-arcadedb-9042ff023c492871 #OffSeq #ArcadeDB #Vuln #Infosec", "creation_timestamp": "2026-08-02T05:26:51.053287Z"}, {"uuid": "248977e8-cb01-4aaf-b775-06224fd318ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-67341", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117024032313529986", "content": "ArcadeDB (<26.7.2) hit by CRITICAL vuln (CVE-2026-67341, CVSS 9.3). Improper auth lets users with DB access execute arbitrary JS via DEFINE FUNCTION, bypassing admin-only restrictions. Restrict access, monitor usage, check for patches. https://radar.offseq.com/threat/cve-2026-67341-incorrect-authorization-in-arcadedata-arcadedb-6bb8ad21f1650c1c #OffSeq #CVE #infosec", "creation_timestamp": "2026-08-02T05:28:02.692767Z"}, {"uuid": "5f2a73c4-daa0-4a02-a87f-d7ab5e6033b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6734", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3moiqvjtjr22g", "content": "\ud83d\udea8 High-severity security fix in undici (7.26.0, 8.2.0) just released!\n\nPatches CVE-2026-6734. undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse.\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-06-17T16:40:20.695655Z"}, {"uuid": "3e9dcaa2-5c81-4ee8-9f3c-b8421255a474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6734", "type": "seen", "source": "https://bsky.app/profile/nodeland.dev/post/3mol72n3uli2x", "content": "\ud83d\udfe0 High: SOCKS5 cross-origin routing (CVE-2026-6734).\nSocks5ProxyAgent reused one connection pool across origins without checking the origin matched. Requests/credentials could go to the wrong destination.\nFixed in 7.28.0 / 8.2.0.", "creation_timestamp": "2026-06-18T15:59:03.514324Z"}, {"uuid": "6df3101a-f6c0-4538-8c0c-efee963367b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6734", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3momlf6cpo527", "content": "CVE-2026-6734 - Undici Socks5ProxyAgent flaw. Cross-origin request routing: credentials leak, wrong origin trusted, HTTPS downgrade possible. CVSS 7.5. No patch yet. Review usage immediately. #CVE #NodeJS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-6734/", "creation_timestamp": "2026-06-19T05:12:21.072344Z"}, {"uuid": "84652bc9-d37b-4b90-85d6-682b8dc6236d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6734", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk2uogshr2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6734 \u0432 Undici: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 Socks5ProxyAgent\n\n\n\nhttps://kripta.biz/posts/8B4F01BF-B4C7-4E9C-8A6B-3D2E51D6F4F7", "creation_timestamp": "2026-07-13T16:01:50.754992Z"}, {"uuid": "e8b25eb3-d550-4555-8aac-2e691e84dd50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6734", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrhkpkyk2y", "content": "\u05d4\u05e9\u05e4\u05e2\u05ea CVE-2026-6734: \u05e1\u05d9\u05db\u05d5\u05df \u05d1\u05d1\u05d9\u05e6\u05d5\u05e2 \u05d7\u05d5\u05d6\u05e8 \u05e9\u05dc \u05d1\u05e8\u05d9\u05db\u05ea \u05d7\u05d9\u05d1\u05d5\u05e8\u05d9\u05dd \u05e2\u05dd Socks5ProxyAgent \u05d1-Undici\n\n\n\nhttps://khesef.xyz/posts/3FFBEE4D-B51E-4444-B529-227A59D32F50", "creation_timestamp": "2026-07-16T08:02:04.801535Z"}]}