{"vulnerability": "CVE-2026-7978", "sightings": [{"uuid": "a4bf494c-6e03-4a09-a1d7-72b3600ec7a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7978", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260507", "content": "", "creation_timestamp": "2026-05-06T18:00:00.000000Z"}, {"uuid": "47d772c6-a17b-4043-8f0d-4245ab55b1f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7978", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260508", "content": "", "creation_timestamp": "2026-05-07T18:00:00.000000Z"}, {"uuid": "2d9589bb-7ecc-4f4e-a5ae-98d56f7c5506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79785", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jmhr6poe7gll2", "content": "CVE-2026-79785 - X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads\nCVE ID : CVE-2026-79785\n \n Published : Aug. 25, 2026, 4:17 p.m. | 17\u00a0minutes ago\n \n Description : X-AnyLabeling's model downloader disabled TLS certificate verification. downl...", "creation_timestamp": "2026-08-25T16:40:46.584094Z"}, {"uuid": "69790678-bf52-4078-b8d7-dc745c0983ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d3yed6gizjhmp", "content": "CVE-2026-79784 - Vocos through 0.1.0 Arbitrary Code Execution via Unrestricted class_path in Model Configuration\nCVE ID : CVE-2026-79784\n \n Published : Aug. 25, 2026, 4:17 p.m. | 17\u00a0minutes ago\n \n Description : Vocos instantiates a class named by a configuration file without r...", "creation_timestamp": "2026-08-25T16:46:46.325003Z"}, {"uuid": "a1882cb1-cc30-4bc1-8a4a-53adc4a32b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dn7hco7ln725o", "content": "CVE-2026-79782 - rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP Redirect\nCVE ID : CVE-2026-79782\n \n Published : Aug. 25, 2026, 4:17 p.m. | 17\u00a0minutes ago\n \n Description : rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect ...", "creation_timestamp": "2026-08-25T16:52:46.432317Z"}, {"uuid": "d170017f-6f52-41b6-ac24-42a6e98e1d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79784", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwc7cp6cl2o", "content": "\ud83d\udfe0 CVE-2026-79784 - High (8.8)\n\nVocos instantiates a class named by a configuration file without restricting which class may be n...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-79784/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-25T17:00:36.354559Z"}, {"uuid": "ea2a6766-2853-4479-a6ec-5d4a8e8cbc7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79782", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtwfzmxjvk2j", "content": "\ud83d\udea8 CVE-2026-79782 \u2014 CVSS 9.3 CRITICAL\n\nrclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79782\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T18:08:59.562848Z"}, {"uuid": "93c39709-ca55-4265-a23f-66285c7b60a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79787", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtwmp5yebg2p", "content": "\ud83d\udea8 CVE-2026-79787 \u2014 CVSS 9.3 CRITICAL\n\nAlluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, al...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-79787\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T20:08:24.779885Z"}, {"uuid": "6ef9c9c3-4f79-43a5-a3da-517dfd76315e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79787", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtx4yr622p23", "content": "CVE-2026-79787 - alluxio\nAlluxio\u2019s built\u2011in gateway for cloud storage does not check that incoming requests really come from an authorized source when left in its default setup. This lets anyone pretend to be any\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#alluxio #CVE #infosec", "creation_timestamp": "2026-08-26T01:00:07.017987Z"}]}