{"vulnerability": "cve-2026-9464", "sightings": [{"uuid": "aa75619a-532a-464f-b0d5-610582a9ea8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94645", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/atlktzf7pphit", "content": "CVE-2026-94645 - Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound\nCVE ID : CVE-2026-94645\n \n Published : Oct. 2, 2026, 10:51 a.m. | 28\u00a0minutes ago\n \n Description : Improper validation of specified quantity in input, Allocati...", "creation_timestamp": "2026-10-02T11:43:02.196842Z"}, {"uuid": "6b437bc8-cbe9-4328-b66d-89b32d943118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94644", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hheadw4sqo5m3", "content": "CVE-2026-94644 - Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound\nCVE ID : CVE-2026-94644\n \n Published : Oct. 2, 2026, 10:53 a.m. | 26\u00a0minutes ago\n \n Description : Allocation of resources without limits or throttling vulnerability in Apache Thrift PH...", "creation_timestamp": "2026-10-02T11:49:01.748365Z"}, {"uuid": "2ff0e928-10e2-4d29-8ac6-c480ea5d1ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94642", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gj4tntwfxzaoc", "content": "CVE-2026-94642 - Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception\nCVE ID : CVE-2026-94642\n \n Published : Oct. 2, 2026, 10:57 a.m. | 23\u00a0minutes ago\n \n Description : Uncaught exception vulnerability in Apache Thrift PHP bindings.\n\n\n\nThis ...", "creation_timestamp": "2026-10-02T11:55:05.119561Z"}]}