{"vulnerability": "cve-2026-18397", "sightings": [{"uuid": "2604af66-d0c8-4892-9a80-8582ee0a4a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18397", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mww2z4wf5d2p", "content": "CVE-2026-18397: AI Agents Lower the Bar for Exploiting SConnect", "creation_timestamp": "2026-10-02T19:07:26.761873Z"}, {"uuid": "00be46f3-a115-44de-900c-e6a0e42c854a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18397", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwxeuemg452q", "content": "\ud83e\udd16 CVE-2026-18397 (CVSS 9.4): drive-by RCE in Thales SConnect, the browser extension behind SWIFT 3SKey hardware MFA. A hand-rolled RSA check reads a stale buffer; heap spray bypasses it in ~6-10s.\nhttps://www.darkreading.com/cybersecurity-operations/swift-banking-govt-middleware-rce", "creation_timestamp": "2026-10-03T07:36:24.254233Z"}]}