{"vulnerability": "cve-2026-104480", "sightings": [{"uuid": "f94c6991-d684-4471-bd9c-d7912317d256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104480", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117369079388271154", "content": "Discord libdave CRITICAL vuln (CVE-2026-104480, CVSS 9.4): Affected versions 1.1.0 \u2013 <1.2.0 let attackers inject unauthorized members into encrypted sessions. Patch status unconfirmed \u2014 check https://radar.offseq.com/threat/cve-2026-104480-cwe-390-detection-of-error-condition-without-action-in-discord-libdave-b9a84610b93cd7e9 #OffSeq #Discord #CVE2026104480 #infosec", "creation_timestamp": "2026-10-02T03:00:25.934739Z"}, {"uuid": "9868814c-6b2f-45b1-a6cb-f487b8ba6f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104480", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwuexz6rea2f", "content": "Discord libdave (v1.1.0 \u2013 <1.2.0) has a CRITICAL vuln (CVE-2026-104480, CVSS 9.4). Attackers can join encrypted sessions undetected. Check for vendor updates: https://radar.offseq.com/threat/cve-2026-104480-cwe-390-detection-of-error-condition-without-action-in-discord-libdave-b9a84610b93cd7e9 #O...", "creation_timestamp": "2026-10-02T03:00:28.179913Z"}, {"uuid": "b7f1a5ed-6e34-44da-9f79-98fde39672a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104480", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gq6ibut5ojyka", "content": "CVE-2026-104480 - Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership\nCVE ID : CVE-2026-104480\n \n Published : Oct. 2, 2026, 2:17 a.m. | 1\u00a0hour, 3\u00a0minutes ago\n \n Description : Discord libdave before 1.2.0 did not reject an MLS Welcome ...", "creation_timestamp": "2026-10-02T03:46:55.336155Z"}, {"uuid": "9b5b4915-02e2-4c58-b410-9d90e7db3a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104480", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwuipokzit27", "content": "\ud83d\udea8 CVE-2026-104480 \u2014 CVSS 9.4 CRITICAL\n\nDiscord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster containe...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104480\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-02T04:07:22.524023Z"}]}