{"vulnerability": "CVE-2026-9323", "sightings": [{"uuid": "51d3c822-2c23-4304-81c0-edbf3061c322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9323", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqwicdxykb2z", "content": "CVE-2026-9323 - urwid\nThe urwid web display backend generates session IDs that can be easily predicted by attackers, allowing them to read sensitive information, inject keystrokes, and even take control of a user's\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#urwid #CVE #infosec", "creation_timestamp": "2026-07-18T14:34:05.382120Z"}, {"uuid": "0922ad18-2aa1-405e-9a69-e3078530127a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9323", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwjrntoau2w", "content": "\ud83d\udfe0 CVE-2026-9323 - High (8.1)\n\nThe urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id)...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9323/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T15:00:32.901730Z"}, {"uuid": "fec8f3f6-e16a-40c2-80ae-16e6d7d868a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9323", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqwpdeae4a2g", "content": "CVE-2026-9323 - Insecure PRNG and Information Exposure in urwid Web Display Backend\nCVE ID : CVE-2026-9323\n \n Published : July 18, 2026, 2:17 p.m. | 1\u00a0hour, 22\u00a0minutes ago\n \n Description : The urwid web display backend (urwid/display/web.py) generates web session identifiers (...", "creation_timestamp": "2026-07-18T16:39:55.189859Z"}, {"uuid": "cb4d9673-2cef-444f-9d9d-a1f0feaa34fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9323", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr4weyakao2j", "content": "CVE-2026-9323\nA security issue exists in the urwid web display backend, where session IDs can be easily predicted by an attacker. This allows an attacker to read the victim's terminal screen, inject keystrokes, or terminate\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-21T04:02:04.073651Z"}, {"uuid": "f51a4c14-57e9-4f39-9297-69761311012f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9323", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr5j2aeqyy2y", "content": "CVE-2026-9323 - urwid\nA security issue in Debian Linux allows attackers to run malicious code without needing permission. This can happen when a user visits a compromised website or opens a malicious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#urwid #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-07-21T09:36:04.696351Z"}]}