{"vulnerability": "cve-2026-7476", "sightings": [{"uuid": "c6f175df-fb47-4a8e-91af-cec88f90bed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74764", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt77z2bg322b", "content": "CVE-2026-74764\nPandora's TAR archive extraction feature can be exploited by submitting a specially crafted archive, potentially allowing an attacker to write malicious files to unintended locations. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-16T12:50:17.067144Z"}, {"uuid": "e27ee75a-6fdf-4a95-93e6-bef0355c0aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74764", "type": "seen", "source": "Telegram/WMbXdsWD4aD9yWaxFBTOaCMIwTY0OXjfqfRzm1negHJiBm4", "content": "", "creation_timestamp": "2026-08-17T18:00:05.494857Z"}, {"uuid": "7da7eee1-78a0-4705-b079-8a68a9473ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74764", "type": "published-proof-of-concept", "source": "Telegram/WMbXdsWD4aD9yWaxFBTOaCMIwTY0OXjfqfRzm1negHJiBm4", "content": "", "creation_timestamp": "2026-08-18T00:00:10.884296Z"}, {"uuid": "9be9767b-8f97-4e45-8f2b-9ef318f83521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74764", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5pxbekkd23", "content": "CVE-2026-74764 - pandora\nPandora's TAR archive extraction feature can be exploited by submitting a specially crafted archive. This could allow an attacker to write files outside the intended\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pandora #pandoraanalysis #CVE #infosec", "creation_timestamp": "2026-08-15T22:30:04.625083Z"}, {"uuid": "13167c93-f16e-4088-aac8-ff3a3451666f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74766", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117363378955069525", "content": "CVE-2026-74766 Net::IDN::Punycode Perl heap use-after-free in decode_punycode, CVSS 8.4. Patch still under review, so pin or avoid untrusted input for now. https://www.valtersit.com/cve/CVE-2026-74766/ #CVE #infosec #Perl", "creation_timestamp": "2026-10-01T02:50:43.951033Z"}, {"uuid": "c123615f-d0a8-43ca-a638-0975ad03f7ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74766", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwruijfjab2r", "content": "CVE-2026-74766 Net::IDN::Punycode Perl heap use-after-free in decode_punycode, CVSS 8.4. Patch still under review, so pin or avoid untrusted input for now. https://www.valtersit.com/cve/CVE-2026-74766/ #CVE #infosec #Perl", "creation_timestamp": "2026-10-01T03:00:07.740148Z"}, {"uuid": "5678fec0-9aa6-4a28-8d40-8d88fd40512c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74765", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117367741183816688", "content": "CVE-2026-74765 Net::IDN::Punycode for Perl: out-of-bounds read via integer overflow in encode_punycode lets the digit index escape the 36-entry table. CVSS 6.5. Patch under review - check your deps. https://www.valtersit.com/cve/CVE-2026-74765/ #CVE #infosec #Perl", "creation_timestamp": "2026-10-01T21:20:09.581027Z"}, {"uuid": "9865e9de-b75b-40a1-b23f-97d9c54d5a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74765", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwtsj7fvio2p", "content": "CVE-2026-74765 Net::IDN::Punycode for Perl: out-of-bounds read via integer overflow in encode_punycode lets the digit index escape the 36-entry table. CVSS 6.5. Patch under review - check your deps. https://www.valtersit.com/cve/CVE-2026-74765/ #CVE #infosec #Perl", "creation_timestamp": "2026-10-01T21:30:03.777448Z"}]}