{"vulnerability": "cve-2026-105786", "sightings": [{"uuid": "673eb48c-6fed-4559-b112-ea7fcb951e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105786", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcizezeok2w", "content": "CVE-2026-105786\nThe note\u2011taking app Joplin (versions before 3.7.13) lets an attacker trick a user into approving a malicious identifier, creating a permanent password that gives the attacker full read\u2011write access to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-07T17:50:04.506120Z"}, {"uuid": "8a52b828-8057-4ef3-b583-7da94360637a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105786", "type": "seen", "source": "https://bsky.app/profile/cybercod.bsky.social/post/3mxckv6nvet26", "content": "Thanks for sharing! This Joplin vulnerability (CVE-2026-105786) is a good reminder to keep your apps updated. If you use Joplin, make sure you're on at least version 3.7.13 to stay secure. Stay safe!", "creation_timestamp": "2026-10-07T18:23:31.241220Z"}]}