{"vulnerability": "cve-2026-7325", "sightings": [{"uuid": "3a97bd19-4e5e-42f3-8edd-648d5d02fd92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7325", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhgn63lvp2q", "content": "CVE-2026-7325 - Devolutions Server Active Directory Browsing Authorization Bypass\nCVE ID : CVE-2026-7325\n \n Published : 22 mai 2026 15:30 | 21\u00a0minutes ago\n \n Description : Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privil...", "creation_timestamp": "2026-05-22T17:13:37.686242Z"}, {"uuid": "eb60ce57-e985-45fc-802f-e9737521c710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73253", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmr35zbxp2m", "content": "CVE-2026-73253 - mongoose\nThe Mongoose web server library (versions before 7.22) can be tricked by a network attacker who controls a broad certificate to pretend to be any deeper sub\u2011site, such as\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mongoose #debian #Debian14 #CVE #infosec", "creation_timestamp": "2026-08-21T22:00:04.932831Z"}, {"uuid": "06f8b2de-fca3-4164-b759-ad081e2e5716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73256", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmr37dxfk24", "content": "CVE-2026-73256 - mongoose\nIf you run Mongoose as an HTTP/1.0 reverse proxy and have a version older than 7.22, an attacker on the network can send specially crafted data that bypasses the proxy and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mongoose #debian #Debian14 #CVE #infosec", "creation_timestamp": "2026-08-21T22:00:06.337965Z"}, {"uuid": "fbcd401a-dd1b-4805-bef4-04a86c5c0432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73257", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmrmzsk2c2b", "content": "CVE-2026-73257 - mongoose\nOlder versions of the Mongoose embedded web server can be tricked by a specially crafted web request that mixes two size indicators. This can cause the server and any\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mongoose #debian #Debian14 #CVE #infosec", "creation_timestamp": "2026-08-21T22:10:04.664787Z"}, {"uuid": "6679f3aa-0e58-498d-a179-1470a3a97471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73251", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnldkq5zo2c", "content": "CVE-2026-73251\nOlder versions of the Mongoose web server library can be tricked into trusting a fake TLS certificate, letting an attacker pretend to be a legitimate server. This can lead to interception of data, credential\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T05:50:04.062912Z"}, {"uuid": "d1695536-7e9b-46f5-ab0f-8336ca959964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73256", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnldla7yh2t", "content": "CVE-2026-73256\nThe Mongoose web server (versions before 7.22) can be tricked into treating specially crafted internet requests as if they were using an old protocol, while a proxy in front thinks they are normal. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T05:50:04.856516Z"}, {"uuid": "9a242827-1fd5-4f12-9c05-550526aad519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73253", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnlvgr5472t", "content": "CVE-2026-73253\nA version of the Mongoose embedded web server could be fooled by an attacker who has a wildcard security certificate for a higher\u2011level domain. The server\u2019s check for the correct website name could accept a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T06:00:03.861956Z"}, {"uuid": "37ce0ead-f715-431d-a29b-67fffc518e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73257", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjvgn3ler25", "content": "CVE-2026-73257 - mongoose\nThe built\u2011in Mongoose web server, in versions before 7.22, allows a remote attacker to send a single web request that includes two different size specifications. The server reads\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mongoose #cesanta #CVE #infosec", "creation_timestamp": "2026-08-20T18:40:06.385222Z"}, {"uuid": "16cc4b6e-eb9f-44a7-89ea-14556af9e234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73256", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjvyie3f52c", "content": "CVE-2026-73256 - mongoose\nIf you use Mongoose version before 7.22 as a reverse proxy, an attacker on the network can send specially crafted web requests that bypass normal checks. This can let the attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mongoose #cesanta #CVE #infosec", "creation_timestamp": "2026-08-20T18:50:04.663211Z"}, {"uuid": "d67559a5-a9ec-41a9-8db2-b0794369c751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73256", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjwlhlixg2r", "content": "\ud83d\udd34 CVE-2026-73256 - Critical (9.1)\n\nMongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73256/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T19:00:42.096696Z"}, {"uuid": "c50e8f01-36bd-4a27-9142-2ca2e80c6aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73257", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjwlod6jf2m", "content": "\ud83d\udd34 CVE-2026-73257 - Critical (9.1)\n\nMongoose is an embedded web server and network library. Priro to version 7.22, a remote unauthent...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-73257/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-20T19:00:48.933897Z"}, {"uuid": "2ad16f1d-54fc-4ecc-8d50-d23666acbb16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73253", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjxo475z72e", "content": "CVE-2026-73253 - mongoose\nVersions of Mongoose before 7.22 may accept a certificate that only covers a higher\u2011level domain and still trust connections to deeper subdomains. This lets an attacker who can see\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mongoose #cesanta #CVE #infosec", "creation_timestamp": "2026-08-20T19:20:04.171962Z"}, {"uuid": "ded16d9a-c500-45aa-828d-97461b945408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73257", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtk2ereyih2e", "content": "\ud83d\udea8 CVE-2026-73257 \u2014 CVSS 9.1 CRITICAL\n\nMongoose is an embedded web server and network library. Priro to version 7.22, a remote unauthenticated att...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73257\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T20:08:31.558085Z"}, {"uuid": "e32d04d4-d0af-4632-8fe3-2a9e6b4c9e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73251", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtk2dy7ijg25", "content": "\ud83d\udea8 CVE-2026-73251 \u2014 CVSS 9.3 CRITICAL\n\nMongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73251\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T20:08:05.261821Z"}, {"uuid": "c04cf4f1-7a31-4503-a138-16ccebc3a220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73253", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtk2eahoar2t", "content": "\ud83d\udea8 CVE-2026-73253 \u2014 CVSS 9.1 CRITICAL\n\nMongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73253\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T20:08:13.943276Z"}, {"uuid": "63a8df63-3194-418e-bc8d-1c144bc63c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73256", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtk2eim4dw2f", "content": "\ud83d\udea8 CVE-2026-73256 \u2014 CVSS 9.1 CRITICAL\n\nMongoose is an embedded web server and network library. Prior to 7.22, a remote unauthenticated attacker ca...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73256\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T20:08:25.350839Z"}, {"uuid": "5fa0bdd7-5096-4884-95c3-928fe99e10fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73257", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mto2gdeuib2t", "content": "CVE-2026-73257\nThe built\u2011in Mongoose server (versions before 7.22) accepts HTTP messages that contain both a size header and a chunked encoding header. Because it handles the two headers differently than some reverse proxies,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T10:20:03.320748Z"}]}