{"vulnerability": "cve-2026-40575", "sightings": [{"uuid": "1041e3f8-d22a-4e93-812c-5d156badc0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-authentication-bypass-oauth2-can-lead-unauthorized-data-access-patch", "content": "", "creation_timestamp": "2026-04-16T11:06:42.000000Z"}, {"uuid": "be102b08-0d64-4924-b93a-d230f5eb00fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk2ivmsreh2t", "content": "", "creation_timestamp": "2026-04-22T02:59:09.391601Z"}, {"uuid": "f17307e3-8f8b-4f81-b78c-0640468dd62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk2j6lahqe2v", "content": "", "creation_timestamp": "2026-04-22T03:04:09.658465Z"}, {"uuid": "4ca76d41-ab12-4bf5-aa56-f6525b3887fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4iob7mtq2z", "content": "", "creation_timestamp": "2026-04-22T22:00:22.891598Z"}, {"uuid": "5e96ddbe-01fc-46ff-acfb-5a54b4a9b186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkiuofjkjm2o", "content": "", "creation_timestamp": "2026-04-27T20:07:08.334191Z"}, {"uuid": "3dd1cf12-2a80-454b-8778-1551f9d5538c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "Telegram/LUR06ONloRlViUIW27ojzHZG9BE33b4Dag-_8VffcgXgN_8", "content": "", "creation_timestamp": "2026-04-22T01:19:23.000000Z"}, {"uuid": "853c493a-a499-4c98-a734-1dafc08310bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv4qe4xe72m", "content": "CVE-2026-40575 - oauth2-proxy\nOAuth2 Proxy can let attackers bypass authentication checks if the software is configured to skip authentication for certain routes and a malicious client sends a fake\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oauth2proxy #Golang #CVE #infosec", "creation_timestamp": "2026-08-25T05:50:05.362818Z"}, {"uuid": "bc882515-c78a-4e43-b0ae-97e3d8b8ed56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40575", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwcc4boogk2t", "content": "\u300cOAuth2 Proxy\u300d\u306b\u8a8d\u8a3c\u56de\u907f\u306e\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u306f\u672a\u516c\u958b\n\n\u8a8d\u8a3c\u30d7\u30ed\u30af\u30b7\u300cOAuth2 Proxy\u300d\u306b\u8a8d\u8a3c\u3092\u56de\u907f\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30bd\u30fc\u30b9\u30ea\u30dd\u30b8\u30c8\u30ea\u306b\u304a\u3044\u3066\u4fee\u6b63\u304c\u9032\u3081\u3089\u308c\u3066\u3044\u308b\u304c\u3001\u4fee\u6b63\u7248\u306f\u672a\u63d0\u4f9b\u3068\u306a\u3063\u3066\u3044\u308b\u3002\n\n\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30af\u30b7\u30e2\u30fc\u30c9\u3067\u300ctrusted_proxy_ip\u300d\u3092\u8a2d\u5b9a\u3057\u3066\u3044\u306a\u3044\u5834\u5408\u3001\u7d30\u5de5\u3057\u305f\u300cX-Forwarded-Uri\u300d\u30d8\u30c3\u30c0\u306b\u3088\u3063\u3066\u8a8d\u8a3c\u3092\u56de\u907f\u3067\u304d\u308b\u8106\u5f31\u6027\u300cCVE-2026-76835\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3082\u306e\u3002\u30c7\u30d5\u30a9\u30eb\u30c8\u69cb\u6210\u3067\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3044\u3046\u3002\n\n...\n\n\u300c\u540c7.15.2\u300d\u306b\u3066\u300cCVE-2026-40575\u300d\u3068\u3057\u3066\u5bfe\u7b56\u3092\u5b9f\u65bd\u3057\u305f\u3082\u306e\u306e\u3001...", "creation_timestamp": "2026-09-24T22:21:14.849941Z"}]}