VulnSocial

CVE-2026-94038Disclosure

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of the file deno/main.tsx of the component Deno Backend. Such manipulation of the argument supabase_url leads to server-side request forgery. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The name of the patch is 8389032e5d52c28c4855c6126ca7d0eae8af346a. It is best practice to apply a patch to resolve this issue.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-20); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-20: 1Mentions · 2026-10-19: 1PoC Mentioned / Linked · 2026-10-19: 1Patch / Workaround · 2026-10-19: 1Technical Details · 2026-09-20: 1Technical Details · 2026-10-19: 109-2010-19
Signal classification2 categories
Disclosure
150.0%
PoC
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-201
Disclosure1
2026-10-191
PoC1
Full discourse2 posts
  • Hugo | DevOps | Cybersecurity@HugoValters
    PoC

    CVE-2026-94038: SSRF in NonceGeek dim-sum-app (CVSS 7.3), public exploit out, patch unconfirmed. Apply commit 8389032 if you run it. #CVE #infosec https://www.valtersit.com/cve/CVE-2026-94038/ #NonceGeek #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker

    Post summary

    The tweet announces CVE-2026-94038 (SSRF, CVSS 7.3) in NonceGeek dim-sum-app, states a public exploit is available, and recommends applying commit 8389032 as a mitigation; the main emphasis appears to be on the public exploit availability.

    0000045
    1.1K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-94038 A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of the file deno/main.tsx of the component Deno Bac… https://www.cve.org/CVERecord?id=CVE-2026-94038

    Post summary

    The tweet discloses the detection of CVE-2026-94038 in NonceGeek dim-sum-app, noting it impacts the textSearchV2Handler function in deno/main.tsx, but provides no PoC, exploit, patch, or evidence of active exploitation.

    000001.7K
    58.1K followersView on X

Explore more

Back to dashboard