{"vulnerability": "cve-2026-3646", "sightings": [{"uuid": "b77c2883-b6ba-46b6-aab5-4eb260429ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3646", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mixshoskua24", "content": "", "creation_timestamp": "2026-04-08T07:47:08.210418Z"}, {"uuid": "b339851e-bd20-4f7c-9590-e165bf7d7200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36469", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwbgo24vy624", "content": "CVE-2026-36469\nCuteNews version 2.1.2 allows someone using the Media Manager\u2019s \u2018Upload by URL\u2019 feature to cause the server to fetch any web address it chooses. This can let an attacker reach internal services, steal data, or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-24T14:10:05.010094Z"}]}