CLAIM-2026-09-06-06

Four of the eight findings were still live on 1 September 2026, more than sixty days after the earliest report was filed on 26 June 2026.

Why it matters

Patch status is not something you can assume from a disclosure being two months old. Four findings were live at publication, so version pinning and retest are the deployer's job.

Sources

• manifoldsec2026gitspawn
• cloudsecuri2026ciso