logoalt Hacker News

danso • today at 4:58 PM • 2 replies • view on HN

The person who wrote the widely-referred-to tweet last night (claiming to "have recreated & lab/field tested CVE-2026-109618 / CVE-2026-109619") followed up a couple hours later and said that their POC had not been proven to work "in the wild"

[0] https://x.com/J4ck3LSyN/status/2112703096443097263

[1] https://x.com/J4ck3LSyN/status/2112753673235501137


Replies

nicce • today at 5:48 PM

The whole post looked to be vibecoded and the code did not even match the claims

bawolff • today at 5:47 PM

As far as i know they lied and are now retracting their claims. What they posted was not consistent with the details of the real bug.