{"vulnerability": "CVE-2026-7664", "sightings": [{"uuid": "f9ab4b6f-38fb-4b0f-8279-a3ccb748b2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7664", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116794708120532850", "content": "CVE-2026-7664 (CRITICAL, CVSS 9.8): IBM Langflow OSS 1.0.0 \u2013 1.8.4 has an improper auth flaw in MCP endpoint, allowing unauthenticated access to protected resources. Patch status unknown \u2014 monitor IBM advisories. https://radar.offseq.com/threat/cve-2026-7664-cwe-287-improper-authentication-in-i-c216bd5b6f57089f #OffSeq #CVE #IBM #infosec", "creation_timestamp": "2026-06-22T16:30:16.419010Z"}, {"uuid": "1addfdf0-cc28-4963-80b2-d33047de1be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-7664", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3movco74w352g", "content": "CVE-2026-7664 in IBM Langflow OSS (1.0.0 \u2013 1.8.4) is CRITICAL \u2014 improper authentication lets attackers access and control MCP project resources. Check IBM advisories for patches. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-7664-cwe-287-improper-authentication-in-i-c216bd5b6f57089f #OffSeq #Vuln #IBM", "creation_timestamp": "2026-06-22T16:30:17.827849Z"}, {"uuid": "870e1ffc-7578-481c-8c6e-9f09f16a349b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7664", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3movm563w5c27", "content": "CVE-2026-7664 - Unauthenticated Flow Execution via Webhook Endpoint in Langflow OSS\nCVE ID : CVE-2026-7664\n \n Published : June 22, 2026, 2:10 p.m. | 4\u00a0hours, 59\u00a0minutes ago\n \n Description : IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access pr...", "creation_timestamp": "2026-06-22T19:19:43.024087Z"}, {"uuid": "ef11257c-9ce8-428b-b4ac-2f1d495e09a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7664", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3movzfaw4bs2y", "content": "\ud83d\udea8  ALERT: CVE-2026-7664\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nIBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to improper authorization enforcement in the Streamable MCP transport endpoint.\n\n\ud83c\udfaf WHO'S AFFECTED:\n ", "creation_timestamp": "2026-06-22T23:16:52.844279Z"}, {"uuid": "c5325560-a0b0-4501-b77d-a656fbba0955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7664", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpaot7hgl42g", "content": "\ud83d\udccc CVE-2026-7664 - IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access protected MCP project resources and execute MCP operations due to... https://www.cyberhub.blog/cves/CVE-2026-7664", "creation_timestamp": "2026-06-27T05:07:07.269637Z"}, {"uuid": "99296f46-c77f-4586-807c-e48a1e984e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mu7u2syxml23", "content": "Two vulnerabilities in the Unitree G1 EDU humanoid robot enable root remote code execution (RCE), tracked as CVE-2026-76639 and CVE-2026-76640. The first involves a network path through chat_go and bashrunner, while the second exploits a Bluetooth Low Energy (BLE) interaction.", "creation_timestamp": "2026-08-29T12:14:11.402307Z"}, {"uuid": "563ee099-ee9b-44cf-a310-caeda52e205a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mucccl2bqg2p", "content": "The Unitree G1 humanoid robot has two flaws that give root with no login (CVE-2026-76639, CVE-2026-76640).\n\nOne works over Bluetooth from across a room, and a hacked robot can infect other G1 units nearby.\n\nUnitree fixed the cloud part; isolate the rest.", "creation_timestamp": "2026-08-30T11:34:22.352771Z"}, {"uuid": "297da2df-16fc-4140-8853-d246fce772d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76641", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjwlayjy62r", "content": "\ud83d\udfe0 CVE-2026-76641 - High (7.5)\n\nExpat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76641/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T19:00:35.292734Z"}, {"uuid": "24d9d516-440c-4496-ab9e-020a60156b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "seen", "source": "https://t.me/GithubRedTeam/99549", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a UniBLEed\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a OlivierLaflamme\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 21:23:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnitree G1 RCE PoC & Scripts (CVE-2026-76639 / CVE-2026-76640) technical details at boschko.ca/g1-ble-rce/\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-25T19:00:04.335158Z"}, {"uuid": "fafdc06c-1ce5-47e9-8e13-fb1d4fdc0002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7664", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mr2v3ayquk2z", "content": "\u300cLangflow OSS\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u4fee\u6b63\n\nAI\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u958b\u767a\u57fa\u76e4\u300cLangflow OSS\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\nIBM\u304c\u73fe\u5730\u6642\u95936\u670821\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30012\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-10561\u300d\u300cCVE-2026-7664\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-10561\u300d\u306f\u3001\u300cPython\u300d\u306e\u5b9f\u884c\u74b0\u5883\u306b\u304a\u3051\u308b\u5206\u96e2\u306e\u4e0d\u5099\u3084\u8a8d\u8a3c\u306e\u30d0\u30a4\u30d1\u30b9\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3002\n\n\u9650\u5b9a\u3055\u308c\u305f\u30b0\u30ed\u30fc\u30d0\u30eb\u8f9e\u66f8\u3092\u69cb\u6210\u3059\u308b\u969b\u3001\u7d44\u307f\u8fbc\u307f\u95a2\u6570\u3092\u7121\u52b9\u5316\u3057\u3066\u3044\u306a\u3044\u305f\u3081\u3001\u8a31\u53ef\u30ea\u30b9\u30c8\u306b\u95a2\u4fc2\u306a\u304f\u95a2\u6570\u3092\u5229\u7528\u3067\u304d\u308b\u3002", "creation_timestamp": "2026-07-20T08:33:26.371863Z"}, {"uuid": "8a96119d-6586-4924-b191-a4ef1843fd6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99549", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a UniBLEed\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a OlivierLaflamme\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 21:23:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnitree G1 RCE PoC & Scripts (CVE-2026-76639 / CVE-2026-76640) technical details at boschko.ca/g1-ble-rce/\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-26T00:00:09.052175Z"}, {"uuid": "8a73db00-30c2-4dd3-888a-a8010bc389fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "published-proof-of-concept", "source": "Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI", "content": "", "creation_timestamp": "2026-08-26T00:00:10.515260Z"}, {"uuid": "63f1856f-e56e-4a59-a402-dabb09f5e845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "seen", "source": "https://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.html", "content": "Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) chains affecting the Unitree G1 EDU, including a Bluetooth Low Energy (BLE) path that can reach root on the robot's Locomotion PC.\n\nThe flaws are tracked as CVE-2026-76639 and CVE-2026-76640, with the first involving a network-adjacent path through chat_go and bashrunner and the", "creation_timestamp": "2026-08-29T01:00:35.211636Z"}, {"uuid": "bc96b656-8cb0-4be9-a7f6-443e8aef33b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mu5gyx6aad2l", "content": "Two independent root RCE chains affect the Unitree G1 EDU, including a BLE path to root on the Locomotion PC, tracked as CVE-2026-76639 and CVE-2026-76640.\n", "creation_timestamp": "2026-08-28T13:15:09.510298Z"}, {"uuid": "289de320-5b1d-4567-bb08-064a333fb314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "seen", "source": "Telegram/33VE_JMtbJzhGXLGhc9z7UjTOc8VkRF04n-G2cvJ843fRQE", "content": "", "creation_timestamp": "2026-08-29T00:00:06.772602Z"}, {"uuid": "596e63e5-6dfd-4a9b-8d7e-fd4b09d95292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117173762999493513", "content": "Oh, goodie. The robots come with recycled bugs. These two are tracked as CVE-2026-76639 and CVE-2026-76640.\nThis was posted on August 27.\nBoschko Security Blog: UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range https://boschko.ca/g1-ble-rce/\nMore:\nThe Hacker News: Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth https://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.html #infosec #vulnerability #robotics", "creation_timestamp": "2026-08-28T15:08:53.850849Z"}, {"uuid": "98a889cb-da27-497b-88ff-27b87eb9501f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "seen", "source": "https://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.html", "content": "Security researcher Olivier Laflamme has disclosed two independent root remote code execution (RCE) chains affecting the Unitree G1 EDU, including a Bluetooth Low Energy (BLE) path that can reach root on the robot's Locomotion PC.\n\nThe flaws are tracked as CVE-2026-76639 and CVE-2026-76640, with the first involving a network-adjacent path through chat_go and bashrunner and the", "creation_timestamp": "2026-08-28T16:00:54.101262Z"}, {"uuid": "adb64ad2-3352-4fe0-9a4d-03ccca6cb6ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "published-proof-of-concept", "source": "Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI", "content": "", "creation_timestamp": "2026-08-25T11:00:03.150312Z"}, {"uuid": "2272d7d9-89f2-4052-b6a1-af805263930b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "seen", "source": "Telegram/tndVUT7cQzNaVNRWaPmWA7BbZdZXIbA4uVPA8fo4RiGDHQ", "content": "", "creation_timestamp": "2026-08-29T03:00:04.319526Z"}, {"uuid": "bf9b7db4-4a28-4948-9fe8-a3b305a2b7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "published-proof-of-concept", "source": "Telegram/tndVUT7cQzNaVNRWaPmWA7BbZdZXIbA4uVPA8fo4RiGDHQ", "content": "", "creation_timestamp": "2026-08-30T00:00:55.778610Z"}, {"uuid": "4b2aa7e9-af6d-4d56-9e53-d053267cad0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "published-proof-of-concept", "source": "Telegram/33VE_JMtbJzhGXLGhc9z7UjTOc8VkRF04n-G2cvJ843fRQE", "content": "", "creation_timestamp": "2026-08-30T00:00:55.989007Z"}, {"uuid": "a7b65f64-956e-48cc-9dd9-bb28ab9376e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76641", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mug4jap4or2n", "content": "2/4\n\nl/expat-2.8.4-x86_64-1.txz:  Upgraded.\n  This update fixes security issues.\n  For more information, see:\n    https://www.cve.org/CVERecord?id=CVE-2026-66046\n    https://www.cve.org/CVERecord?id=CVE-2026-76641\n    https://www.cve.org/CVERecord?id=CVE-2026-76957", "creation_timestamp": "2026-09-01T00:01:22.944761Z"}, {"uuid": "c8fded21-9e60-4d91-9286-39f7ff6a1288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "seen", "source": "https://t.me/Russian_OSINT/7797", "content": "\u0412 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0418\u0411-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u041e\u043b\u0438\u0432\u044c\u0435 \u041b\u0430\u0444\u043b\u0430\u043c\u043c\u0430 \u043d\u0430 Boschko Security Blog \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0443\u043c\u0430\u043d\u043e\u0438\u0434\u043d\u043e\u043c \u0440\u043e\u0431\u043e\u0442\u0435 Unitree G1 \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c\u044e $20 000. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u043e \u0430\u0432\u0442\u043e\u0440\u0443 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 $5 000 \u043f\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 bug bounty \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0438\u044e \u0434\u0432\u0443\u0445 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432: CVE-2026-76639 \u0438 CVE-2026-76640.\n\n\ud83d\udcd6 https://boschko.ca/g1-ble-rce/\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-02T06:00:16.373407Z"}, {"uuid": "b846aac5-0085-451e-9417-fc6b93f22def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76640", "type": "published-proof-of-concept", "source": "https://t.me/Russian_OSINT/7797", "content": "\u0412 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u0418\u0411-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u041e\u043b\u0438\u0432\u044c\u0435 \u041b\u0430\u0444\u043b\u0430\u043c\u043c\u0430 \u043d\u0430 Boschko Security Blog \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0433\u0443\u043c\u0430\u043d\u043e\u0438\u0434\u043d\u043e\u043c \u0440\u043e\u0431\u043e\u0442\u0435 Unitree G1 \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c\u044e $20 000. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u043e \u0430\u0432\u0442\u043e\u0440\u0443 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 $5 000 \u043f\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 bug bounty \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0438\u044e \u0434\u0432\u0443\u0445 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432: CVE-2026-76639 \u0438 CVE-2026-76640.\n\n\ud83d\udcd6 https://boschko.ca/g1-ble-rce/\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-03T00:00:46.784724Z"}, {"uuid": "61439bd2-44a0-455a-b51e-4add53775f35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76642", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/65v5pmt2awpvl", "content": "CVE-2026-76642 - util-linux libmount Privilege Escalation via Failed Mount Helper\nCVE ID : CVE-2026-76642\n \n Published : Sept. 3, 2026, 10:54 a.m. | 24\u00a0minutes ago\n \n Description : util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before runn...", "creation_timestamp": "2026-09-03T11:24:25.043396Z"}, {"uuid": "841c1242-9a8f-47a4-9abd-82e2d884c26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76642", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3muvfz7thww2s", "content": "2/6\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-76642\n    https://www.cve.org/CVERecord?id=CVE-2026-78410\n    https://www.cve.org/CVERecord?id=CVE-2026-78409\n    https://www.cve.org/CVERecord?id=CVE-2026-78408\n    https://www.cve.org/CVERecord?id=CVE-2024-28085\n  (* Security fix *)", "creation_timestamp": "2026-09-07T02:01:20.312851Z"}]}