{"vulnerability": "cve-2026-93556", "sightings": [{"uuid": "bfe4cda0-35aa-4738-ae4a-e3f59eed1b34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93556", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw3xrcpwpu2n", "content": "CVE-2026-93556 - tankuam places\nThe password\u2011reset function in Tankuam Places does not check that the requester matches the account being changed. An attacker could change the user ID in the request\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tankuamplaces #kompini #CVE #infosec", "creation_timestamp": "2026-09-22T10:00:09.770914Z"}, {"uuid": "7bd61516-d096-478a-a378-61075cc266a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93556", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw3y6lxahn2r", "content": "\ud83d\udea8 CVE-2026-93556 \u2014 CVSS 9.3 CRITICAL\n\nThe \u2018/password/guardarClau/recover\u2019 endpoint accepts the \u2018usuariId\u2019 parameter, which specifies the account ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93556\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T10:07:35.991920Z"}]}