{"vulnerability": "cve-2026-78222", "sightings": [{"uuid": "3a5dd9a5-ebeb-4dcd-a998-f84cfa3b939a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-78222", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2047", "content": "", "creation_timestamp": "2026-09-03T08:45:18.387550Z"}, {"uuid": "6bae282b-4b11-43d3-9c75-e010e1503b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-78222", "type": "seen", "source": "https://www.acn.gov.it/portale/w/f5-risolte-vulnerabilita-nei-prodotti-nginx", "content": "", "creation_timestamp": "2026-09-03T12:45:04.707243Z"}, {"uuid": "42cb2f82-5df3-47f9-b57d-471f15e02ade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78222", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mumli32zq72z", "content": "\ud83d\udd17 CVE : CVE-2026-18329, CVE-2026-33278, CVE-2026-42959, CVE-2026-63020, CVE-2026-66362, CVE-2026-66842, CVE-2026-77180, CVE-2026-78222, CVE-2026-78689", "creation_timestamp": "2026-09-03T13:45:08.221637Z"}, {"uuid": "085695e1-33bb-466a-9c28-3ab2b8984309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78222", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3muoiqso3gt2s", "content": "CVE-2026-78222 [HIGH] nginx\n\nA vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch() can crash an NGINX worker when trusted JavaScript reads Response.statusText. Exploitation requires control or influence\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-78222", "creation_timestamp": "2026-09-04T08:01:38.827510Z"}, {"uuid": "5406a5cd-e010-4ea0-aa91-be995567b937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78222", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwvjve4qvs2h", "content": "\u300cNGINX JavaScript\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027 - \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u516c\u958b\n\nNGINX\u4e0a\u3067JavaScript\u306b\u3088\u308b\u51e6\u7406\u3092\u5b9f\u884c\u3059\u308b\u305f\u3081\u306b\u7528\u3044\u3089\u308c\u308b\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u300cNGINX JavaScript\uff08njs\uff09\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\nF5\u306f\u73fe\u5730\u6642\u95932026\u5e749\u67082\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30013\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-78689\u300d\u300cCVE-2026-18329\u300d\u300cCVE-2026-78222\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u958b\u767a\u30c1\u30fc\u30e0\u306f\u300cCVE-2026-78689\u300d\u3092\u300cmajor\u300d\u3001\u306e\u3053\u308b2\u4ef6\u3092\u300cmedium\u300d\u3068\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0\u3057\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-10-02T14:01:07.383578Z"}]}