{"vulnerability": "2026-52", "sightings": [{"uuid": "7b7c7543-272e-4b2e-8782-d1f104c47ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5201", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3midtzstdys2x", "content": "", "creation_timestamp": "2026-03-31T09:21:55.931921Z"}, {"uuid": "d0c65a40-3145-4100-942a-80b870a4a6fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5201", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3midwj4o52i2q", "content": "", "creation_timestamp": "2026-03-31T10:06:16.352911Z"}, {"uuid": "f7b3cd3c-f1ae-43a3-9124-b54310d96935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5204", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mievqqttvn2s", "content": "", "creation_timestamp": "2026-03-31T19:25:18.687739Z"}, {"uuid": "9fd0a6e7-e0a5-4357-a177-aa361936592b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5205", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miewehc6cf25", "content": "", "creation_timestamp": "2026-03-31T19:36:19.621136Z"}, {"uuid": "3a04eb91-9e6c-48ff-b88b-e5702c173598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mifb7btvxu24", "content": "", "creation_timestamp": "2026-03-31T22:50:17.395980Z"}, {"uuid": "f800f095-29fe-4558-bbe7-16a1964f3bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5212", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mifbr6w5j62o", "content": "", "creation_timestamp": "2026-03-31T23:00:18.323733Z"}, {"uuid": "4b6dcc54-86fb-4337-a4c5-0a4b078c572b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5214", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mifcwsffwy2s", "content": "", "creation_timestamp": "2026-03-31T23:21:20.224758Z"}, {"uuid": "cb8307bf-f17b-4fd9-8622-620d42cf804e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5215", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mifnp3l6ed2g", "content": "", "creation_timestamp": "2026-04-01T02:33:52.651589Z"}, {"uuid": "f88921c6-7c4e-4c59-9530-5f6ede638fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5235", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mifnxzyxzp2g", "content": "", "creation_timestamp": "2026-04-01T02:38:53.220790Z"}, {"uuid": "2927d845-1e88-498a-a040-3b5dc62e01c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5236", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mifoayfszk2i", "content": "", "creation_timestamp": "2026-04-01T02:43:53.554349Z"}, {"uuid": "9a1db4d7-0617-4b8e-b2dc-2fbe4436f0ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mifojwtpko2s", "content": "", "creation_timestamp": "2026-04-01T02:48:53.440534Z"}, {"uuid": "73a979a1-f648-43ee-9b90-d74625531ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5237", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mifosvbro624", "content": "", "creation_timestamp": "2026-04-01T02:53:53.870080Z"}, {"uuid": "7c5db2f7-942c-425d-a1a0-1ad7bf8c7199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5238", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mifp3tpzjc2i", "content": "", "creation_timestamp": "2026-04-01T02:58:54.372228Z"}, {"uuid": "9633c044-9c6e-46e4-ac03-7bd5ce4930cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5214", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mifpkerw7x2s", "content": "", "creation_timestamp": "2026-04-01T03:07:04.391582Z"}, {"uuid": "1bc7ec60-adc4-4fc6-8abd-5abf5f9bef05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5213", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mifrvvacrm2d", "content": "", "creation_timestamp": "2026-04-01T03:49:16.040991Z"}, {"uuid": "098d0a1f-c53c-4362-acb4-8485a4416263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5212", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mifrw3uhtm2d", "content": "", "creation_timestamp": "2026-04-01T03:49:23.061827Z"}, {"uuid": "a4851694-d4a5-44ae-8451-e6f57dbabbf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5211", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mifw6l7rru2t", "content": "", "creation_timestamp": "2026-04-01T05:05:42.843705Z"}, {"uuid": "4c063670-3899-4e8d-b11e-8734411d4b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5249", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mifwi2smm22i", "content": "", "creation_timestamp": "2026-04-01T05:11:00.523246Z"}, {"uuid": "e99aaaa4-2d3e-4e49-a91e-9911b09f9b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5251", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mifwzxooid2q", "content": "", "creation_timestamp": "2026-04-01T05:21:01.067939Z"}, {"uuid": "7ee72650-6904-47de-8347-7492b5d8c1aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/secureblue.dev/post/3mifxo7xtac2k", "content": "", "creation_timestamp": "2026-04-01T05:32:22.411540Z"}, {"uuid": "de6f0874-e3c7-458c-9a4b-a0e3635628ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5248", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5248", "content": "", "creation_timestamp": "2026-03-31T23:16:41.000000Z"}, {"uuid": "81c823a4-c825-4f6e-a54c-df7324a76fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5286", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mifzak4oci22", "content": "", "creation_timestamp": "2026-04-01T06:00:29.736413Z"}, {"uuid": "bdd88dbc-9f84-492c-8089-737ec8c53dd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5286", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116327922216539438", "content": "", "creation_timestamp": "2026-04-01T06:00:29.792324Z"}, {"uuid": "c64b999e-667c-449f-a686-b4e828eecfff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5290", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116327944482614052", "content": "", "creation_timestamp": "2026-04-01T06:06:07.315466Z"}, {"uuid": "d4f745de-5443-46df-a252-b83a70f5ceef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5272", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116327997434667227", "content": "", "creation_timestamp": "2026-04-01T06:19:35.334099Z"}, {"uuid": "69cd9c84-8683-48e1-8eb9-49084770c893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5286", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116328050981830981", "content": "", "creation_timestamp": "2026-04-01T06:33:12.488573Z"}, {"uuid": "a189594b-5eef-42c0-8234-13a82eab8947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5282", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mig7yd45t522", "content": "", "creation_timestamp": "2026-04-01T08:01:09.743782Z"}, {"uuid": "f49c506b-a351-4843-8f03-a023b8b784fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5284", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miga2zax3r2i", "content": "", "creation_timestamp": "2026-04-01T08:02:40.268691Z"}, {"uuid": "2edf581d-d3b2-4040-a8d9-82abba9d0349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5291", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miga5twbwl25", "content": "", "creation_timestamp": "2026-04-01T08:04:15.142744Z"}, {"uuid": "24515978-0689-4706-b00c-07b5cb4453b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5285", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migaatlzxf22", "content": "", "creation_timestamp": "2026-04-01T08:05:55.619957Z"}, {"uuid": "9bb01c79-b716-4849-bbb9-2d656031b570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5288", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migahejbzd2j", "content": "", "creation_timestamp": "2026-04-01T08:09:34.646103Z"}, {"uuid": "6f8c11fd-c7ae-4534-9103-703c4b6d1965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migakxft4522", "content": "", "creation_timestamp": "2026-04-01T08:11:34.922909Z"}, {"uuid": "a8bb7919-bfe1-433b-b609-ab05607f4252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migaoseuhk2s", "content": "", "creation_timestamp": "2026-04-01T08:13:44.130245Z"}, {"uuid": "c6da85f0-8f1a-4a60-b0da-1c3e94b571fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5286", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migasws5bo2n", "content": "", "creation_timestamp": "2026-04-01T08:16:06.355060Z"}, {"uuid": "19011d7e-2afa-4411-9d3f-269264d63338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migaxjekzo2n", "content": "", "creation_timestamp": "2026-04-01T08:18:36.548361Z"}, {"uuid": "b88e64e3-ba61-465f-a32c-584c6fafc6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5283", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migbbrqc5a25", "content": "", "creation_timestamp": "2026-04-01T08:24:20.875850Z"}, {"uuid": "5457d04d-d2af-4d37-ba27-22736e59c263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migbhqt6g624", "content": "", "creation_timestamp": "2026-04-01T08:27:41.458318Z"}, {"uuid": "f8810708-c8d5-475d-8ca9-37f5d95c6c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5287", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migbohq76h2o", "content": "", "creation_timestamp": "2026-04-01T08:31:26.466096Z"}, {"uuid": "659eb1bc-5222-4883-a2e1-0eb579521079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5292", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migbw5btls23", "content": "", "creation_timestamp": "2026-04-01T08:35:44.018152Z"}, {"uuid": "2e41f5ca-90ea-49e1-aa78-fb22c4173d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5258", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migci26j4r2s", "content": "", "creation_timestamp": "2026-04-01T08:45:44.724319Z"}, {"uuid": "184b1584-cdb8-4856-9e0d-97718dd1cdb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5255", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migcqymasv23", "content": "", "creation_timestamp": "2026-04-01T08:50:45.179242Z"}, {"uuid": "d4e6eb51-f4a7-4eb5-8c8c-e26dcc822f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5256", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migczx2i6y2i", "content": "", "creation_timestamp": "2026-04-01T08:55:45.502010Z"}, {"uuid": "07c9b790-41a3-46f4-9425-d60c91eebc25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5257", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migdcvopxx25", "content": "", "creation_timestamp": "2026-04-01T09:00:45.938362Z"}, {"uuid": "10c0dabe-807a-4a65-8975-52ee2b60f6fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3miggtoi6cp2r", "content": "", "creation_timestamp": "2026-04-01T10:03:50.104993Z"}, {"uuid": "4e05c524-43d5-4317-9369-f2d4030afaea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5258", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3miggwqovgj2o", "content": "", "creation_timestamp": "2026-04-01T10:05:33.326782Z"}, {"uuid": "c033a364-6f2b-46b1-913f-8f6f80931fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3miglsbjyis22", "content": "", "creation_timestamp": "2026-04-01T11:32:35.020071Z"}, {"uuid": "7991fba2-10f6-481a-bf32-b242faa9d3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5261", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3migmysow6x24", "content": "", "creation_timestamp": "2026-04-01T11:54:07.067879Z"}, {"uuid": "7348cbb4-f8d8-4513-b261-ccb3e451cdef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3migpesdyzk2s", "content": "", "creation_timestamp": "2026-04-01T12:36:35.260989Z"}, {"uuid": "44f3894a-fc70-4844-ae37-3d5b5e9dc3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5286", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116329798400742227", "content": "", "creation_timestamp": "2026-04-01T13:57:35.925218Z"}, {"uuid": "f3bf4e2f-a0db-4e9b-a486-c5c10db27fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3migu7dyq3e2n", "content": "", "creation_timestamp": "2026-04-01T14:03:00.329957Z"}, {"uuid": "74e070cb-9ac5-4ab2-b8c6-330b46cdd408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3miguaorbqy2a", "content": "", "creation_timestamp": "2026-04-01T14:03:45.051180Z"}, {"uuid": "f3f90fda-5d77-422f-b317-839b767e4c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3migwl24j3z2g", "content": "", "creation_timestamp": "2026-04-01T14:45:21.162456Z"}, {"uuid": "0faeebb3-49b3-408c-bb72-72f1117db1b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5286", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3migwwlz3nx2d", "content": "", "creation_timestamp": "2026-04-01T14:51:48.567158Z"}, {"uuid": "e124358a-cdc3-4ef8-a7ff-666bb4b27e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5288", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3migwwsv3bn2s", "content": "", "creation_timestamp": "2026-04-01T14:51:55.503812Z"}, {"uuid": "b0caef67-ec95-43c2-a8d8-7e8ac94bcfa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/cybelangel.bsky.social/post/3migxlqkte22q", "content": "", "creation_timestamp": "2026-04-01T15:03:39.800097Z"}, {"uuid": "4504df07-07e3-400a-acd7-07d075158d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3migyhpxyke2w", "content": "", "creation_timestamp": "2026-04-01T15:19:17.730292Z"}, {"uuid": "0f1bf9ef-4798-40c3-b601-6ce88cf489fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5286", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3migykxs2mu25", "content": "", "creation_timestamp": "2026-04-01T15:21:05.774901Z"}, {"uuid": "ae7725c1-879c-4956-9019-ff8bb402d37f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5288", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3migyl6zc7s2m", "content": "", "creation_timestamp": "2026-04-01T15:21:13.259487Z"}, {"uuid": "98b51f98-0140-4536-b59a-6748f5a865ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3migyo2cog425", "content": "", "creation_timestamp": "2026-04-01T15:22:49.930951Z"}, {"uuid": "80655990-c287-4603-951a-d5ad2707dab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5290", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3migyoavp3l2r", "content": "", "creation_timestamp": "2026-04-01T15:22:55.859698Z"}, {"uuid": "556dcb76-21fa-4b99-980c-911eb78ee6c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5292", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3migyohfisx2d", "content": "", "creation_timestamp": "2026-04-01T15:23:03.141944Z"}, {"uuid": "1ed9f9d1-0c7e-40b4-8a59-4fa04c4052b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5278", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3migz4pr57x2d", "content": "", "creation_timestamp": "2026-04-01T15:31:01.416393Z"}, {"uuid": "de10ff28-a63a-40e5-93f3-2ee3512664a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3migz4wdhgj2r", "content": "", "creation_timestamp": "2026-04-01T15:31:08.386170Z"}, {"uuid": "91563f76-1881-44fa-b39e-c27bf4c32ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5282", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3migz54wo7r2r", "content": "", "creation_timestamp": "2026-04-01T15:31:15.340089Z"}, {"uuid": "41a91a89-2f8d-4489-84eb-d742328234dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3migzzhk37c2y", "content": "", "creation_timestamp": "2026-04-01T15:47:05.527672Z"}, {"uuid": "5739f5cf-309b-4409-b1e4-7f1ac7bb9dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://thehackernews.com/2026/04/new-chrome-zero-day-cve-2026-5281-under.html", "content": "", "creation_timestamp": "2026-04-01T09:42:00.000000Z"}, {"uuid": "e9f10d12-e8a7-431c-a0e6-a39e2be29922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mih2tayisx2k", "content": "", "creation_timestamp": "2026-04-01T16:01:30.872899Z"}, {"uuid": "86519b8c-6750-4e5e-ab16-139da8ae4d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mih3eszsdv2l", "content": "", "creation_timestamp": "2026-04-01T16:11:20.312270Z"}, {"uuid": "d6892c73-32c8-4e93-b068-ddda6e171555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5284", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mih4hjj2sg2m", "content": "", "creation_timestamp": "2026-04-01T16:30:45.781446Z"}, {"uuid": "36d6999e-62db-4f21-9a75-a0265dec445d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5272", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mih65vy4gt2s", "content": "", "creation_timestamp": "2026-04-01T17:01:12.912168Z"}, {"uuid": "e2d73df0-9d39-49c4-89c6-d6c7998ee70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mih665csgb2s", "content": "", "creation_timestamp": "2026-04-01T17:01:18.716916Z"}, {"uuid": "845e3389-53aa-44ab-9ec2-fa2d0063c8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5275", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mih66ejifz25", "content": "", "creation_timestamp": "2026-04-01T17:01:25.250461Z"}, {"uuid": "8bb4d880-3021-4ab5-bc03-3bdc30c67456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5277", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mih6ahyy242j", "content": "", "creation_timestamp": "2026-04-01T17:02:36.933545Z"}, {"uuid": "0602d59f-116f-4e98-8cc1-1b3def0a09a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mihadp7qlv27", "content": "", "creation_timestamp": "2026-04-01T17:40:12.064046Z"}, {"uuid": "cdeab18c-3a7e-47e8-91bf-829800b0fefd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mihae32wft2z", "content": "", "creation_timestamp": "2026-04-01T17:40:28.248641Z"}, {"uuid": "7f965dc4-8369-4ab0-950e-9cef05b1defe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/google-chrome-security-advisory-av26-306", "content": "", "creation_timestamp": "2026-04-01T13:00:56.000000Z"}, {"uuid": "ac75c07e-08fd-4737-84b0-5b41ede80db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-44", "content": "", "creation_timestamp": "2026-04-01T14:12:13.000000Z"}, {"uuid": "053edea6-54d5-497b-8143-702105b93e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/sonoclaudio.ransomnews.online/post/3mihcvbaw7s2d", "content": "", "creation_timestamp": "2026-04-01T18:25:53.046188Z"}, {"uuid": "b62c559a-08b5-4fd5-a658-14ed3eb46d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mihg7rw7vi2m", "content": "", "creation_timestamp": "2026-04-01T19:25:22.759683Z"}, {"uuid": "70879ec2-05c8-409c-aca8-a89df3b7b411", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/53ed66cc-b608-4322-aae2-2b902fc2da31", "content": "", "creation_timestamp": "2026-04-01T20:00:02.109774Z"}, {"uuid": "e1c5f5b5-cd44-41a1-b5ee-33a22d3f0e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mihiar5fhh2q", "content": "", "creation_timestamp": "2026-04-01T20:01:43.191772Z"}, {"uuid": "c9d91304-d813-43bb-b1c5-a012527f7906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6156711", "content": "", "creation_timestamp": "2026-04-01T20:16:18.529524Z"}, {"uuid": "05f4aca0-8d69-4ee0-8d00-4910a99cdab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mihlnmemyj2q", "content": "", "creation_timestamp": "2026-04-01T21:02:36.067837Z"}, {"uuid": "1b274f25-44d6-4691-96e5-d957cda66f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mihlp6zmqy2k", "content": "", "creation_timestamp": "2026-04-01T21:03:28.751839Z"}, {"uuid": "b16b6182-55b0-4564-8e1f-607ce3106fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/wasm.activitypub.awakari.com.ap.brid.gy/post/3mihlv4dklk72", "content": "", "creation_timestamp": "2026-04-01T21:06:52.089757Z"}, {"uuid": "9d3f8b99-7a8a-4b2a-94f3-7ff0362e7074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mihombwr3s2r", "content": "", "creation_timestamp": "2026-04-01T21:55:32.107546Z"}, {"uuid": "645f56da-0601-4e81-a549-7151b7690a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mihruj53ms26", "content": "", "creation_timestamp": "2026-04-01T22:53:52.732823Z"}, {"uuid": "0198cda9-6c39-40d6-bd76-d4f0f528e535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mihs3xfvq22q", "content": "", "creation_timestamp": "2026-04-01T22:57:58.957000Z"}, {"uuid": "e1094144-577c-43a3-a85f-b61dcac1fee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mihsdkbhy52s", "content": "", "creation_timestamp": "2026-04-01T23:02:14.044821Z"}, {"uuid": "7c442078-aeae-47db-96e9-3c9ca45f0abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5281", "type": "seen", "source": "https://bsky.app/profile/niztal.bsky.social/post/3mihuqlf5pb2u", "content": "", "creation_timestamp": "2026-04-01T23:45:19.385283Z"}, {"uuid": "1f7ffa4f-c5cd-4c38-b03c-a00a94069db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/mwyr.es/post/3mihvah6kt22l", "content": "", "creation_timestamp": "2026-04-01T23:54:11.299215Z"}, {"uuid": "34523068-bc10-4a0b-88a6-25d87c0f5429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mihvbuvb7w2r", "content": "", "creation_timestamp": "2026-04-01T23:54:59.562177Z"}, {"uuid": "a7d01ff7-8cca-46f6-9032-77ca23d73bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mihzq4lfbd25", "content": "", "creation_timestamp": "2026-04-02T01:14:31.532786Z"}, {"uuid": "4af91304-d8c2-4c29-ae51-5a5899b8ca90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mii5vb4mib2l", "content": "", "creation_timestamp": "2026-04-02T02:28:59.190170Z"}, {"uuid": "5973e657-e832-40da-a60b-a9e9b5785d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5281", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mii7ehpvta2k", "content": "", "creation_timestamp": "2026-04-02T02:55:23.383720Z"}, {"uuid": "d7e84019-d45a-48e9-99c7-4a908f5ea643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5281", "type": "seen", "source": "https://bsky.app/profile/clankussy.abu.guru/post/3miid6gohth2w", "content": "", "creation_timestamp": "2026-04-02T04:03:35.544752Z"}, {"uuid": "2724d2eb-d47d-45eb-8cbc-9a0398114293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3miidqhtjh22f", "content": "", "creation_timestamp": "2026-04-02T04:13:42.619375Z"}, {"uuid": "ab8fcb17-6e4e-46b8-834b-d0fe592bc4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3miijqfczif2j", "content": "", "creation_timestamp": "2026-04-02T06:01:00.981907Z"}, {"uuid": "25a7a121-365c-4233-a407-9c5605568967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/bettycjung.bsky.social/post/3miimavlh3c24", "content": "", "creation_timestamp": "2026-04-02T06:46:06.928446Z"}, {"uuid": "1f76be93-5a9a-4984-aa74-2d2688b8cf75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/winfuture.de/post/3miiofrc65p2v", "content": "", "creation_timestamp": "2026-04-02T07:24:33.253083Z"}, {"uuid": "40482d7f-74d3-42eb-8f73-458457f603fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5287", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miiqfkxmaq2j", "content": "", "creation_timestamp": "2026-04-02T08:00:13.935611Z"}, {"uuid": "6b3639e6-3f81-4557-ab68-b9afca4b4140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5279", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miiqfsmmql2r", "content": "", "creation_timestamp": "2026-04-02T08:00:22.394897Z"}, {"uuid": "311715c6-3ea5-46b2-a79c-07cff61ce638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miiqfztbls2h", "content": "", "creation_timestamp": "2026-04-02T08:00:29.877292Z"}, {"uuid": "e467efe7-f67b-48b4-86a8-574cbc7c59f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3miiqjbhfsk2h", "content": "", "creation_timestamp": "2026-04-02T08:02:17.555860Z"}, {"uuid": "961c1372-9e7f-4175-b37a-3682f87c1e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3miirfl3urx2n", "content": "", "creation_timestamp": "2026-04-02T08:18:07.513937Z"}, {"uuid": "d61f153a-ddd3-439f-b40c-d26ed77d136f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3miisef5hek2d", "content": "", "creation_timestamp": "2026-04-02T08:35:21.410107Z"}, {"uuid": "f9fd7960-b389-4aba-8aab-430e39412a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5285", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miistxkfwe2w", "content": "", "creation_timestamp": "2026-04-02T08:44:05.123759Z"}, {"uuid": "1cd66032-5851-40e4-9e3f-33a4e86e0e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3miiu3eyt622d", "content": "", "creation_timestamp": "2026-04-02T09:06:06.822983Z"}, {"uuid": "7507d3d0-174f-40c4-b231-64a160fabcc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "MISP/f15094ac-c6b8-4c5e-ad9f-470d4c4740d9", "content": "", "creation_timestamp": "2026-04-01T15:10:23.000000Z"}, {"uuid": "09b00514-e1eb-463b-8d7f-7c13ec50da69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1812", "content": "", "creation_timestamp": "2026-04-02T04:00:00.000000Z"}, {"uuid": "178e28c1-a395-4ea6-8952-b82d95aa7372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5245", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miix6a7d6i2o", "content": "", "creation_timestamp": "2026-04-02T10:01:23.605345Z"}, {"uuid": "254a8c9d-8973-48db-8b51-3ba0510df473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://gist.github.com/stone776/3df2d61a9cf3c9ed5d62aedd56575f95", "content": "", "creation_timestamp": "2026-04-02T10:38:05.000000Z"}, {"uuid": "4c5f2936-a15d-4743-9ab5-c1f4e1b503ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5245", "type": "seen", "source": "https://gist.github.com/N3mes1s/5af547237daf3a1f075c27cafd0544d3", "content": "", "creation_timestamp": "2026-04-02T11:51:33.000000Z"}, {"uuid": "d31d1041-1c8b-4199-9006-583662cae576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://gist.github.com/stone776/7ede78069392bd76c552e9510fec668d", "content": "", "creation_timestamp": "2026-04-02T12:46:30.000000Z"}, {"uuid": "2fd5cfdf-b4b7-4a24-a379-ad31800fa701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5204", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mijcbmisnv2i", "content": "", "creation_timestamp": "2026-04-02T13:20:09.330377Z"}, {"uuid": "628075d0-d7c0-4480-b679-e1a903d33860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mijopdfslj2u", "content": "", "creation_timestamp": "2026-04-02T17:02:33.789606Z"}, {"uuid": "f4521a1b-d686-4fd1-99bb-3af0bebf0f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5214", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mijt23rpqa2d", "content": "", "creation_timestamp": "2026-04-02T18:20:09.760290Z"}, {"uuid": "f9fc0ad2-2d08-4923-a3b3-1d2f0b7b8264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5213", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miju5uo3y52f", "content": "", "creation_timestamp": "2026-04-02T18:40:10.181973Z"}, {"uuid": "590b0381-fefc-4a12-a0d7-90b3d559ef22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5212", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mijvbsfgx42f", "content": "", "creation_timestamp": "2026-04-02T19:00:16.318146Z"}, {"uuid": "df6e1665-6e53-4a33-8f47-71c9697271a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5281", "type": "seen", "source": "https://bsky.app/profile/breachandbuild.bsky.social/post/3mik2nbkfxx2a", "content": "", "creation_timestamp": "2026-04-02T20:36:09.537759Z"}, {"uuid": "c64f4b46-e655-499a-a63e-b5cab906fd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mik45hnzqm2g", "content": "", "creation_timestamp": "2026-04-02T21:03:12.772915Z"}, {"uuid": "41a8a086-3527-4150-9714-efc15e5d6ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mikoe5gxyx26", "content": "", "creation_timestamp": "2026-04-03T02:28:58.004741Z"}, {"uuid": "11bd2a0a-1e72-4966-a4f1-d26d1cbda1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mikucaurssjv", "content": "", "creation_timestamp": "2026-04-03T04:15:18.364785Z"}, {"uuid": "ed5a8fbc-02bd-4f17-9f0b-245214cdd377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/deskmodder.de/post/3mil2ulmbbv2r", "content": "", "creation_timestamp": "2026-04-03T06:12:54.424908Z"}, {"uuid": "65360182-c277-4ec6-b6b6-8930fa5d0477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3milml4siyrl2", "content": "", "creation_timestamp": "2026-04-03T11:29:51.025195Z"}, {"uuid": "35586058-80b9-4b98-9ee4-391b33740641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3milv3jxqd72a", "content": "", "creation_timestamp": "2026-04-03T14:02:04.898554Z"}, {"uuid": "591b82b0-4d8e-42ad-bb29-4e2e814630f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/babyblue70.bsky.social/post/3mim2jf3nvc2r", "content": "", "creation_timestamp": "2026-04-03T15:39:20.193477Z"}, {"uuid": "0f2e0b92-cf89-4695-b33f-79b9cb81462c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mim7cyqoml26", "content": "", "creation_timestamp": "2026-04-03T17:05:13.451882Z"}, {"uuid": "c630c738-0854-4348-b362-18e6c78ff516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5281", "type": "seen", "source": "https://bsky.app/profile/clankussy.abu.guru/post/3mimyfucndv2y", "content": "", "creation_timestamp": "2026-04-04T00:34:14.618407Z"}, {"uuid": "af6bd765-29e4-490c-b4a2-6db77f0f286d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5256", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3minhbljjft2u", "content": "", "creation_timestamp": "2026-04-04T05:00:15.984613Z"}, {"uuid": "cedfb639-417c-4e7d-8d2f-31bdb6b53ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/buchikuma.bsky.social/post/3mio3n2cf6b2s", "content": "", "creation_timestamp": "2026-04-04T11:04:34.519155Z"}, {"uuid": "11b3686e-2f6d-4adf-9eb4-f69d14a13d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/usaid.activitypub.awakari.com.ap.brid.gy/post/3mioum3lfznx2", "content": "", "creation_timestamp": "2026-04-04T18:31:33.650503Z"}, {"uuid": "44360348-0e6a-4ef5-b2d9-ed54d00c4d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5257", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mipfu42eml27", "content": "", "creation_timestamp": "2026-04-04T23:40:08.214509Z"}, {"uuid": "b6ec7cab-c60d-4811-a6cb-580a281dfefb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mippczeb4d26", "content": "", "creation_timestamp": "2026-04-05T02:29:32.560250Z"}, {"uuid": "57fbb5ed-8dc3-4fea-be85-35dab60fb028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://gist.github.com/nao-ichihara/31c2b4872f2b14ae26b1fcebae7a09e5", "content": "", "creation_timestamp": "2026-04-05T09:34:31.000000Z"}, {"uuid": "4fb78023-29c6-49e9-abee-2a517b6b4a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mirxrcfgob26", "content": "", "creation_timestamp": "2026-04-06T00:06:01.139880Z"}, {"uuid": "d30cd26d-aaaf-41d8-a727-632cd9f84da5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3misxguitcl2k", "content": "", "creation_timestamp": "2026-04-06T09:32:50.680328Z"}, {"uuid": "2e22c0c9-c4fa-40fa-87b6-b77a0bd236f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mit5imjoja2b", "content": "", "creation_timestamp": "2026-04-06T11:21:11.683049Z"}, {"uuid": "abf135c0-318f-455e-8645-448b9c774750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5273", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mitfqm3ajc2c", "content": "", "creation_timestamp": "2026-04-06T13:48:50.886040Z"}, {"uuid": "87442dbe-0245-4f84-a6a1-aad63a51f88a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5287", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mitfqm3ajc2c", "content": "", "creation_timestamp": "2026-04-06T13:48:50.978911Z"}, {"uuid": "e35b54d8-c41b-4491-a84f-ddfc58cc308f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5288", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mitfqm3ajc2c", "content": "", "creation_timestamp": "2026-04-06T13:48:51.059684Z"}, {"uuid": "89150368-deb4-4b45-b8c5-5e6448fa920c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mitfqm3ajc2c", "content": "", "creation_timestamp": "2026-04-06T13:48:51.145248Z"}, {"uuid": "b33f1966-a00f-4bc3-b7cf-d18a56d6c419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/seanchiggins.com/post/3mitngc7zse2r", "content": "", "creation_timestamp": "2026-04-06T16:06:14.245831Z"}, {"uuid": "35895020-97ac-4d86-a9c6-38ddf013d16d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3miuq7wokg52m", "content": "", "creation_timestamp": "2026-04-07T02:29:02.839458Z"}, {"uuid": "80ce042c-e1dc-4d3e-98ac-9fff2581af80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/geeknewsbot.bsky.social/post/3miv3zejnlj2x", "content": "", "creation_timestamp": "2026-04-07T06:00:09.864837Z"}, {"uuid": "c15f3804-b029-42c4-84d3-919279930d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mixaoxbf5327", "content": "", "creation_timestamp": "2026-04-08T02:30:29.850428Z"}, {"uuid": "d2f50c03-1f28-45f2-bbb2-f3cf71bae3ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "efc98512-7d57-43ea-add0-7e44fe6d74dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/04/01/cisa-adds-one-known-exploited-vulnerability-catalog", "content": "", "creation_timestamp": "2026-04-01T05:00:00.000000Z"}, {"uuid": "85bd4284-7bea-495a-9529-8695b4a458f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/microsoft-edge-security-advisory-av26-315", "content": "", "creation_timestamp": "2026-04-07T08:28:53.000000Z"}, {"uuid": "aec11bdd-95d9-4868-b8b0-4f1d213fa500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "012137b3-d559-40bc-9988-c973e374e07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5287", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "d661f336-8ab3-4473-a6ff-7dc369e3eac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5286", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "0c7927a7-7014-4018-b258-943995f58893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5282", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "e3cf2462-da54-433b-ab72-2ff64ae784f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5283", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "372a1228-771f-400f-9e7f-4a810553a29c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "41c26c26-5e92-48ab-b405-a31e0620c608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5284", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "01d14b17-300b-46ad-b2d1-b2d1bdb6c8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5279", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "77427ed9-ce4e-4cb4-8349-cf070aee851d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5291", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "22d7efeb-b243-4dee-9dee-aedf00ff70a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5276", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "b5cbeab7-737b-4c47-a214-2a2b67a6aee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5277", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "618b2d69-f333-4eff-9c48-13b43a66f054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "9bc78463-3761-48d4-871c-a6c809927939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5275", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "7aefac9e-5bcf-402a-9987-eb16dda5fb28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5278", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "59b0ed41-c7ff-41e3-b123-dfbbfa53eca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5272", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "d88bd9c8-4e6f-4eb4-9bd2-9ef171e61fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5273", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "7a224ba8-8924-4ec4-a5d0-c40984ae1177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "237d8c01-a200-4012-8eb4-4faa635b7cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5292", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "cc15afb7-d460-4c07-b864-9d948b5d9d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5290", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "ae750296-8452-4e04-830b-e14adffc654f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5282", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "47ec929a-8c4d-4521-a257-f0da66ddc939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "b518b3cd-00b2-4800-81ed-49e8e27be348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5292", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "46eea3b9-b0b9-4097-b390-6f54c41c247e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5276", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "1ab2a976-0294-4397-bc0f-65e7f02b7057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5286", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "08792187-a02f-4f68-8bbf-eb2ed8213911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "095706da-94ec-4d82-8eea-fa8726901a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5283", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "d6a830a8-8e28-4ecc-8fe1-b9b5f9c0537f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5277", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "d5795126-dcf1-4e62-b11a-ebf51c8c8c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5278", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "776737c8-ec39-4784-b638-cd69999fbd00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5279", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "8dc831e0-0cde-41f3-86f6-be35cd5eb359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "f6c954a6-d2e0-4697-960a-b87dbc88cc42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5273", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "08c3b4d8-a603-45c7-8e4c-705829eba0d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5285", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "e0afb573-db3e-43f6-946d-099fd45a50d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5287", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "0afff58d-339a-423e-b009-039eff12eb50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "73abc6c3-7e93-46cd-90e2-f6dee1bf480a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5291", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "bd3fa22e-fb47-4a7c-b5b3-e04b371c555c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5275", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "818a51bb-ef5a-4924-8a9d-0f76636c6cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5288", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "7ae3bfdf-bfac-4493-810c-243c0ed9f0a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5290", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "eaf382e0-8c2c-443f-8790-0c9df3e84e7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5285", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "35f93c95-840f-4ff1-b65e-b02afa2be83c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5288", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "9a9b1650-b03f-4dcc-a2c7-f966ba4df256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5284", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "12100c3b-eb42-4927-98fa-68649bf66ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5272", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "1b7586fd-23b2-4bbd-aabf-3a20dacc3679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "9363d3ef-6bd3-4d3e-b3f9-2d95d2849375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "d7ebc1f5-7371-4dfb-9efc-2482a364b813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "d0bfef4d-f56f-4fc1-81fb-5b874db055fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5291", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "1e9a786c-f21e-4315-8517-605a1f95bc49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5273", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "f092a0b4-047e-476f-99f5-55d0db79405e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5279", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "e509d8f4-8468-4a29-9ef0-87d9369292cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5290", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "dad00ca6-b1f8-4ff0-9faa-9cfb1323d1b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5275", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "86432588-c556-45c5-a0e3-c7491bc014ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5277", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "519974be-7c49-4a01-9c52-3527bf73ce81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5286", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "e289476c-8002-499c-9293-7b96042a9853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5287", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "d690025a-bbbe-4a6e-b68a-91d8a35d6a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5272", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "bd6c284d-0dc7-4d2a-a9da-780ee01dc03f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5292", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "8ffabfc1-42eb-40dc-90c1-1cdffb8110ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5276", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "30144d40-ac4a-448e-b0cc-21926cbe709e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5284", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "ad8bb6a1-dc21-486d-8890-7e40a7742324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5285", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "cd301fd8-862e-4b8e-89cf-877d79de65a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3miy3enej3t2h", "content": "", "creation_timestamp": "2026-04-08T10:26:30.450685Z"}, {"uuid": "72d84868-e532-4c31-8eee-383c2ae4b8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3miy3ff5ub62c", "content": "", "creation_timestamp": "2026-04-08T10:26:55.031880Z"}, {"uuid": "5a822a22-965d-42f7-a03a-b15206cd128b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5283", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "c608c10a-556e-4a74-ba96-72d42d4893a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5208", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miyihiq3ga2g", "content": "", "creation_timestamp": "2026-04-08T14:20:44.366752Z"}, {"uuid": "9b469b7a-022d-4bfb-932c-5e57ffeebfcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3miz365ppas2f", "content": "", "creation_timestamp": "2026-04-08T19:55:33.242568Z"}, {"uuid": "cf7e07b2-753f-4bb3-a9c5-2a2942ca2017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3miz3cletsc2f", "content": "", "creation_timestamp": "2026-04-08T19:58:03.158214Z"}, {"uuid": "64f87900-cd10-45a9-a518-eff9ffd3c4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3miz3mnx2ds2f", "content": "", "creation_timestamp": "2026-04-08T20:03:39.353090Z"}, {"uuid": "df8850c5-cd3a-4321-b0d2-afe0e3b04274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3miz3qoj3r22f", "content": "", "creation_timestamp": "2026-04-08T20:05:55.793396Z"}, {"uuid": "ae171fed-65f4-48b7-a54b-25427546302f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mizr665myz26", "content": "", "creation_timestamp": "2026-04-09T02:29:14.772890Z"}, {"uuid": "af7de9fd-7b2a-4f1d-951b-cbd699008bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5208", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2kf3tmdp2d", "content": "", "creation_timestamp": "2026-04-09T10:00:31.337263Z"}, {"uuid": "0179a48d-e21a-432c-a767-97eaffbc4a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5264", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj44ghlwjv24", "content": "", "creation_timestamp": "2026-04-10T00:56:06.900819Z"}, {"uuid": "1df12cdc-b27a-4b3a-87c0-08aae29c30be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mj4kj7tf2k2f", "content": "", "creation_timestamp": "2026-04-10T05:08:11.024499Z"}, {"uuid": "9f9eca0f-e146-498d-8c37-b6959a4cd992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5217", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj6qyaeuv42t", "content": "", "creation_timestamp": "2026-04-11T02:09:14.469380Z"}, {"uuid": "bffee5a6-e79d-4b3b-bc81-e980460d9f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5207", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj6r3a35zt2r", "content": "", "creation_timestamp": "2026-04-11T02:10:54.647070Z"}, {"uuid": "b70dd737-6bd3-4c5b-83e3-016de9680a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5226", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj6rbqz2cv23", "content": "", "creation_timestamp": "2026-04-11T02:14:33.549387Z"}, {"uuid": "74ab0321-ae2c-449d-9809-e4994c0215cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mj7hg4vguk2v", "content": "", "creation_timestamp": "2026-04-11T08:50:44.403495Z"}, {"uuid": "1f3aad26-f62d-4ce7-8f76-d1fb7d244a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5284", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mj7hg4vguk2v", "content": "", "creation_timestamp": "2026-04-11T08:50:44.490598Z"}, {"uuid": "e174555d-049b-46e1-ad9d-97d5e077a6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5286", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mj7hg4vguk2v", "content": "", "creation_timestamp": "2026-04-11T08:50:44.898752Z"}, {"uuid": "78c82e13-c9d4-40c6-8a18-0a86c538c13d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5217", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116388792901284434", "content": "", "creation_timestamp": "2026-04-12T00:00:42.598816Z"}, {"uuid": "29be34bd-9ff4-442d-93d0-8f8b69d2c03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5217", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjb2bd77pm2n", "content": "", "creation_timestamp": "2026-04-12T00:00:42.905748Z"}, {"uuid": "26f8b88a-f1a4-4ce7-a33d-bfb7d5682fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "50cbbc09-1f2c-4230-87d1-7e8b03f0ea32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5286", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "f21ec2c0-1647-4da0-89ec-eb58b58e5399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5272", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "c5b70f90-5214-424a-b015-824e4344645f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5273", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "c8c4c382-75ef-458b-b407-0d1a60938be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "448e30b0-fa92-499a-92a3-69e7d8350a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5275", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "8c29b961-309f-4147-b65f-eabd76b7f254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5276", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "02026b79-98ff-4ae0-b075-2c8d0603327f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5277", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "e61e9156-0192-4dde-8c3b-9821aeadcfc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5279", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "b3ac8855-948a-417f-bf5e-60a07bf4da21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "6647d468-3463-4e5d-a7e4-2591eda318a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5283", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "ea3f2298-c0c9-43c9-b274-98ca313ddb3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5284", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "3aaadb0b-5623-4be4-a3b9-87728d0283f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5285", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "5a629c8a-acb1-47c8-9038-7b15b6952add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5287", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "5052afc8-fccc-4eb3-9d33-e83680d28770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "2404c0b5-a551-4d16-bc25-80b3cba904ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5290", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "8f0c370a-e1ae-4c85-a4ce-ff44b8ce9b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5291", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "d0ef14d9-4321-417e-8f84-09ad6f6f591c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5292", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "b42357ab-4e61-4a71-a08f-9e68c43791ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mjfe6ec5s22t", "content": "", "creation_timestamp": "2026-04-13T17:08:40.974205Z"}, {"uuid": "5f5e1ec0-f179-47ef-b562-aa6a94bb9ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "ebbc02fc-5aac-45e1-a059-a4d4ad3f1eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5279", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "e5edb154-4fbe-4fc8-835e-65a35cca00cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5277", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "bac2ce2f-c168-4559-8389-49206b8c2f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5291", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "36a081c1-c733-4562-ad3a-84661af6b971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5292", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "ebd04a47-91a6-4897-909a-f7b532459321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5286", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "4fde9d9e-f6f0-427d-bb1d-5e4581609e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5275", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "c96b608c-235d-4990-b672-abc9428d1f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5276", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "96f94363-a768-4230-b891-cb8cb5bca493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "c642b6c5-c693-40d2-84a4-78e32a8f98f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5283", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "fe67ba70-b6cc-47cd-8cbf-07ba108fba1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5284", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "e8257474-901a-417b-baf3-50b232119ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5285", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "74e8a36d-eb8f-4381-9dbf-649c420bf5b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5272", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "c3e97da4-36ff-4d48-a5df-eda1e1e9f1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5273", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "d9b3466d-156b-4cfc-b09d-3a13e4437d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "63774021-ba0d-4b6d-8779-accb032d1269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5287", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "10497d60-0a3b-42be-8c6d-b824dcdeaae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "ce9ac24a-5b2e-41e4-b75b-1ab7b2f22996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5290", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "cf747a42-4e33-4e97-84ff-7f61a5c53118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://krebsonsecurity.com/2026/04/patch-tuesday-april-2026-edition/", "content": "", "creation_timestamp": "2026-04-14T19:47:59.000000Z"}, {"uuid": "1a9d0cf3-46bd-4796-ba4b-f6b8d4326c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/groovysecurity.bsky.social/post/3mjmq7eu5rn2i", "content": "", "creation_timestamp": "2026-04-16T15:32:50.474176Z"}, {"uuid": "3690d6be-1cb3-4157-9a38-1ff538a77a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5234", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjocmzk6ie2b", "content": "", "creation_timestamp": "2026-04-17T06:35:02.118584Z"}, {"uuid": "be87c936-25ce-45fe-8a30-b722384c32e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5231", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjod6wfmuy22", "content": "", "creation_timestamp": "2026-04-17T06:45:05.592411Z"}, {"uuid": "f9f999cc-8bee-49d8-846e-a7f2bf7f13be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5234", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjopuy3kwk2r", "content": "", "creation_timestamp": "2026-04-17T10:32:07.020697Z"}, {"uuid": "4f475fca-ec9d-4fe9-9cfc-dfe72ecc0836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5231", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjpangfeoq2c", "content": "", "creation_timestamp": "2026-04-17T15:32:07.884247Z"}, {"uuid": "614da0a5-03e1-4331-af42-10cc0db9dc9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "MISP/f15094ac-c6b8-4c5e-ad9f-470d4c4740d9", "content": "", "creation_timestamp": "2026-04-18T03:31:40.000000Z"}, {"uuid": "8498bb1a-3a26-405b-9f70-8c13ef8e336a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5217", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjqsyjbjwn27", "content": "", "creation_timestamp": "2026-04-18T06:33:06.770613Z"}, {"uuid": "5c6b35dc-7b44-4002-b5e0-6dd87546e1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5226", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjv4hdt2ad2h", "content": "", "creation_timestamp": "2026-04-19T23:33:06.763092Z"}, {"uuid": "cd0567e1-140a-4451-9366-64ca3af87483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5265", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjwudarxe22v", "content": "", "creation_timestamp": "2026-04-20T16:12:58.575727Z"}, {"uuid": "4dd53718-3802-4519-a663-b8d0a42ce9d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5265", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjwuv7lkt72h", "content": "", "creation_timestamp": "2026-04-20T16:23:01.608978Z"}, {"uuid": "2bd05c94-835c-4844-9b81-5311e01ed39d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/bigpoppaken.bsky.social/post/3mjxmjmzski24", "content": "", "creation_timestamp": "2026-04-20T23:26:03.577015Z"}, {"uuid": "9dda8324-dd2b-4f00-ac98-d0b5998a77fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5262", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u", "content": "", "creation_timestamp": "2026-04-22T12:50:07.677669Z"}, {"uuid": "0ad47425-45bc-4e42-9753-e3a9b1c40592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5201", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mk3u5b3irs2m", "content": "", "creation_timestamp": "2026-04-22T15:52:59.357797Z"}, {"uuid": "7728fdf6-6981-4460-b3e8-2534bc4d33a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5262", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk43zvvmkl2c", "content": "", "creation_timestamp": "2026-04-22T18:14:13.969190Z"}, {"uuid": "752a73fa-6281-468a-897a-6a02d6a960c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5262", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mk46m2zwjs2k", "content": "", "creation_timestamp": "2026-04-22T19:00:11.480498Z"}, {"uuid": "9dcf18dd-657b-46d5-a3ac-e6945a73d7f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5262", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mk76k7tbb62v", "content": "", "creation_timestamp": "2026-04-23T23:37:07.996151Z"}, {"uuid": "53541002-86da-432f-a2f1-c2ca01e32433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5262", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-11-new-vulnerabilities-gitlab-ce-and-ee-editions-patch-immediately", "content": "", "creation_timestamp": "2026-04-24T07:57:51.000000Z"}, {"uuid": "3f39017e-347c-4a5e-834b-c4a2ed55e976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mkb4bibpn52q", "content": "", "creation_timestamp": "2026-04-24T18:01:46.904997Z"}, {"uuid": "eb0f81fe-a53a-471e-bb80-66c20cf5f468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/thehackernews/8716", "content": "\ud83d\uded1 Chrome 0-day Warning!\n\nTracked as CVE-2026-5281, this WebGPU (Dawn) use-after-free bug allows code execution via a crafted page if the renderer is compromised. \n\nIt\u2019s the 4th exploited Chrome browser zero-day in 2026.\n\n\ud83d\udd17 Read \u2192 https://thehackernews.com/2026/04/new-chrome-zero-day-cve-2026-5281-under.html", "creation_timestamp": "2026-04-01T11:55:08.000000Z"}, {"uuid": "ff4f710c-8acb-4532-ad00-104b1e5db386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/79261", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-5281\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TheMalwareGuardian\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-07 14:59:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-5281 (Chrome Dawn WebGPU UAF) analysis, lab validation tools, and reproducible environment for vulnerable vs patched builds.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-07T15:00:04.000000Z"}, {"uuid": "01c6259b-5321-4b3f-ba5b-1a520bab5399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5275", "type": "seen", "source": "Telegram/0Pt1cki95fA53ajnnsK8Av3dKVeZdTqxfrxRx4frF74hO10", "content": "", "creation_timestamp": "2026-04-01T15:25:49.000000Z"}, {"uuid": "5e9543e0-5663-4223-8e4a-ef5687a2e193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5289", "type": "seen", "source": "Telegram/4u6pNJfi3nLv5HBYbkAV_RO5hA7CasKnKFj2guWNAP2iZfQ", "content": "", "creation_timestamp": "2026-04-01T15:25:59.000000Z"}, {"uuid": "831d9ee1-4a24-46cd-a52d-eb3cd50a6766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "Telegram/koWg9picjaG2ToUTHmWZAVRmpkVaxUxcP1juXCV4e7L2qpk", "content": "", "creation_timestamp": "2026-04-02T09:00:05.000000Z"}, {"uuid": "91dff31f-2aec-4744-a388-0eda42f64cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5231", "type": "published-proof-of-concept", "source": "Telegram/OCRuCpCrMYyNHl7tK2WvZ5-EwER3iqlB4XvdcqwHWSl_drs", "content": "", "creation_timestamp": "2026-04-17T03:16:02.000000Z"}, {"uuid": "4ce656f3-83d7-4a75-851e-e420680d6b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5278", "type": "seen", "source": "Telegram/0Pt1cki95fA53ajnnsK8Av3dKVeZdTqxfrxRx4frF74hO10", "content": "", "creation_timestamp": "2026-04-01T15:25:49.000000Z"}, {"uuid": "846e0bab-54fe-4fb2-8942-aead2769a013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5277", "type": "seen", "source": "Telegram/0Pt1cki95fA53ajnnsK8Av3dKVeZdTqxfrxRx4frF74hO10", "content": "", "creation_timestamp": "2026-04-01T15:25:49.000000Z"}, {"uuid": "5c3cce83-4978-43bd-b964-77387b0859e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5280", "type": "seen", "source": "Telegram/Bkk_ez1WX0IehsVWjuM9-HkhESHwAR-xv4qkWYfcObZ2M48", "content": "", "creation_timestamp": "2026-04-02T01:18:12.000000Z"}, {"uuid": "c6e41387-c35e-40e8-8a5f-319d24685238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5279", "type": "seen", "source": "Telegram/Bkk_ez1WX0IehsVWjuM9-HkhESHwAR-xv4qkWYfcObZ2M48", "content": "", "creation_timestamp": "2026-04-02T01:18:12.000000Z"}, {"uuid": "72932ce2-e892-4d70-8c86-1d55c8260ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5287", "type": "seen", "source": "Telegram/Bkk_ez1WX0IehsVWjuM9-HkhESHwAR-xv4qkWYfcObZ2M48", "content": "", "creation_timestamp": "2026-04-02T01:18:12.000000Z"}, {"uuid": "369c1700-a289-422e-ac78-32199d9efdc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5201", "type": "published-proof-of-concept", "source": "Telegram/Qn5Ivb0hY_RRFbz3_smbJhwPSq3L1UkRwhbZcM0sFXYUsHw", "content": "", "creation_timestamp": "2026-04-01T15:00:14.000000Z"}, {"uuid": "9efd252b-3f22-46f0-ab41-b75bfb5b05bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5264", "type": "seen", "source": "Telegram/aaKaZzhZCQTbBESVtGmK3HO5aOAiXiyEGsKbx2XTc93AVKM", "content": "", "creation_timestamp": "2026-04-09T23:30:50.000000Z"}, {"uuid": "60ac0641-079d-4186-8b76-6af89cc90559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "Telegram/4zYpYE5e9_2FkC7Z53Af8gCedtL6FpkxFD5yjbQn9BVECOM", "content": "", "creation_timestamp": "2026-04-01T15:25:32.000000Z"}, {"uuid": "a362c05b-ceb2-4f6c-b9cb-d6f4052a3d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5201", "type": "published-proof-of-concept", "source": "Telegram/v9uCn_dLujK0z6nWpoAPZrXvhfEaTfJKfYKQA8qCx-Erqh4", "content": "", "creation_timestamp": "2026-04-01T15:00:07.000000Z"}, {"uuid": "e67f4a7d-e8ef-43bf-8103-b08a8a10525e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5263", "type": "seen", "source": "Telegram/aaKaZzhZCQTbBESVtGmK3HO5aOAiXiyEGsKbx2XTc93AVKM", "content": "", "creation_timestamp": "2026-04-09T23:30:50.000000Z"}, {"uuid": "13d7ebfd-25da-42ea-8b37-55702fa511ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5217", "type": "published-proof-of-concept", "source": "Telegram/_qUc7Bg1mtpLkc1l9EDpx_bLzBpTm3H6GzOTVEjPbt6Wa7k", "content": "", "creation_timestamp": "2026-04-11T03:22:02.000000Z"}, {"uuid": "e97eacf3-cc3e-44cf-9d45-17e0d5de6301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5283", "type": "seen", "source": "Telegram/0Pt1cki95fA53ajnnsK8Av3dKVeZdTqxfrxRx4frF74hO10", "content": "", "creation_timestamp": "2026-04-01T15:25:49.000000Z"}, {"uuid": "963af317-2e0c-4154-abe4-4364ef1e32fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5256", "type": "published-proof-of-concept", "source": "Telegram/PyNQtULQpgHoLf2PKswM_vEDbaboZwTfs0uqYxCbwNT3ZRI", "content": "", "creation_timestamp": "2026-04-01T07:15:40.000000Z"}, {"uuid": "05218084-a2a5-4e57-b016-007ef5d2401c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5212", "type": "published-proof-of-concept", "source": "Telegram/_fnqeA0DSzUxsfUgrLtw39NRieZko7R6ZhEkNfy6t9mpSrc", "content": "", "creation_timestamp": "2026-03-31T23:20:32.000000Z"}, {"uuid": "1c26ee04-f387-452c-8fb7-947f001cb016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5213", "type": "published-proof-of-concept", "source": "Telegram/_fnqeA0DSzUxsfUgrLtw39NRieZko7R6ZhEkNfy6t9mpSrc", "content": "", "creation_timestamp": "2026-03-31T23:20:32.000000Z"}, {"uuid": "f5b997cf-2885-48eb-bd5d-f008e0d6fcfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "Telegram/0Pt1cki95fA53ajnnsK8Av3dKVeZdTqxfrxRx4frF74hO10", "content": "", "creation_timestamp": "2026-04-01T15:25:49.000000Z"}, {"uuid": "bd1a311a-c5af-4bdd-8807-bdfcd2c6f4c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5284", "type": "seen", "source": "Telegram/0Pt1cki95fA53ajnnsK8Av3dKVeZdTqxfrxRx4frF74hO10", "content": "", "creation_timestamp": "2026-04-01T15:25:49.000000Z"}, {"uuid": "2ca10e21-6238-4eb4-86bd-32eed5396b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5271", "type": "seen", "source": "Telegram/G7jwG369FM-EA8JMh95pmFocIEiy10HcnXiWAHgS3_Vj404", "content": "", "creation_timestamp": "2026-04-07T21:22:07.000000Z"}, {"uuid": "b81b52b8-1d75-4813-9070-05ed5f63b6b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5208", "type": "seen", "source": "Telegram/w2JXUvOVbxOFgIv0sLZ9cDyiJ5at0tkdnYt2mHRi_DRLUrQ", "content": "", "creation_timestamp": "2026-04-08T13:16:11.000000Z"}, {"uuid": "292ea8cf-cea2-49ba-a7a7-2d14ed0df480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5210", "type": "published-proof-of-concept", "source": "Telegram/fvcDlylB6Q78KniI1pBDCXqCziRIFy6eVM6L3PvvuY9d-E4", "content": "", "creation_timestamp": "2026-03-31T21:19:21.000000Z"}, {"uuid": "f53ef81d-a4dd-4a05-bdb2-6dd03db9df65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5204", "type": "published-proof-of-concept", "source": "Telegram/e_KNKUl3o6DiU-2-jA1Bozh3wu6D5ajzBDCTSMbn5G7zvLo", "content": "", "creation_timestamp": "2026-03-31T17:26:20.000000Z"}, {"uuid": "67f59909-aef3-4ca6-a3bf-6f5c443912ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5292", "type": "seen", "source": "Telegram/4u6pNJfi3nLv5HBYbkAV_RO5hA7CasKnKFj2guWNAP2iZfQ", "content": "", "creation_timestamp": "2026-04-01T15:25:59.000000Z"}, {"uuid": "4be57b25-c8dc-415a-b522-b3bfcb9933b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5290", "type": "seen", "source": "Telegram/4u6pNJfi3nLv5HBYbkAV_RO5hA7CasKnKFj2guWNAP2iZfQ", "content": "", "creation_timestamp": "2026-04-01T15:25:59.000000Z"}, {"uuid": "19ce82ba-c199-4b60-b472-f772db1d1ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5286", "type": "seen", "source": "Telegram/4u6pNJfi3nLv5HBYbkAV_RO5hA7CasKnKFj2guWNAP2iZfQ", "content": "", "creation_timestamp": "2026-04-01T15:25:59.000000Z"}, {"uuid": "d607e6c0-7ef8-4d95-b7fa-ecfa223af800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5288", "type": "seen", "source": "Telegram/4u6pNJfi3nLv5HBYbkAV_RO5hA7CasKnKFj2guWNAP2iZfQ", "content": "", "creation_timestamp": "2026-04-01T15:25:59.000000Z"}, {"uuid": "dffbfd3f-4d77-4f12-b0c7-94c4ba398ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5201", "type": "seen", "source": "Telegram/qhrMuORufep18va9_eZH1nvqNGmq4wR7ALJzzgA5Ea6S8aY", "content": "", "creation_timestamp": "2026-03-31T11:17:48.000000Z"}, {"uuid": "c41bc9a6-0fe0-4127-bedd-fe2e4ca5d273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5261", "type": "published-proof-of-concept", "source": "Telegram/or2m_3WCYby8bXskMQzpfDu1qBTJahou7yZRDnRXRdJQw8o", "content": "", "creation_timestamp": "2026-04-01T11:16:06.000000Z"}, {"uuid": "9fced34e-e280-4dbe-a6ae-c6ec9e4213e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5211", "type": "seen", "source": "Telegram/OA0BhF0tC6EPmRi9BAj0aaRm3q83l75bwQVc9b2koDj48CY", "content": "", "creation_timestamp": "2026-03-31T21:19:34.000000Z"}, {"uuid": "c2274430-9edd-415b-aec5-8307e3a576a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5237", "type": "published-proof-of-concept", "source": "Telegram/I7gM78d3mp9wugorspZkHmlDKuo-8DymFEq-4a44ip7mrow", "content": "", "creation_timestamp": "2026-04-01T01:15:30.000000Z"}, {"uuid": "5f699a46-0afe-4833-bc9b-50efd0ed0d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5258", "type": "published-proof-of-concept", "source": "Telegram/Z8Avvvay3ok1mF87MeUHRJnFA0IUoCxf5B7S0L87cvtb7Og", "content": "", "creation_timestamp": "2026-04-01T09:15:13.000000Z"}, {"uuid": "1f7d0118-5c7e-47e8-9681-38f2a31d3875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5214", "type": "published-proof-of-concept", "source": "Telegram/2Cqk_qvtgaegci7UwxXD-qABu2YaVYQoLZQGlshG1KuvbS0", "content": "", "creation_timestamp": "2026-03-31T23:21:09.000000Z"}, {"uuid": "77ab86ef-c002-442b-b8fb-5266f39f6159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5272", "type": "seen", "source": "Telegram/4zYpYE5e9_2FkC7Z53Af8gCedtL6FpkxFD5yjbQn9BVECOM", "content": "", "creation_timestamp": "2026-04-01T15:25:32.000000Z"}, {"uuid": "509ef86f-d4ab-436b-90b0-aa0881fa2990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5244", "type": "seen", "source": "Telegram/mGl_Lp0_izI3D0-5yUiuFR5RNrOUKpF492R3nyj4h4cSwXA", "content": "", "creation_timestamp": "2026-04-02T09:15:50.000000Z"}, {"uuid": "5fa498fe-c903-48fd-941f-7fe53270fa1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5238", "type": "published-proof-of-concept", "source": "Telegram/I7gM78d3mp9wugorspZkHmlDKuo-8DymFEq-4a44ip7mrow", "content": "", "creation_timestamp": "2026-04-01T01:15:30.000000Z"}, {"uuid": "ecd3ee3f-5c67-4939-8138-f2bac908b908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5257", "type": "published-proof-of-concept", "source": "Telegram/PyNQtULQpgHoLf2PKswM_vEDbaboZwTfs0uqYxCbwNT3ZRI", "content": "", "creation_timestamp": "2026-04-01T07:15:40.000000Z"}, {"uuid": "46e7785c-abce-4a43-acf3-8fbad7ae43bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5285", "type": "seen", "source": "Telegram/Bkk_ez1WX0IehsVWjuM9-HkhESHwAR-xv4qkWYfcObZ2M48", "content": "", "creation_timestamp": "2026-04-02T01:18:12.000000Z"}, {"uuid": "0a23cef9-cd35-4213-9e58-a0944431b2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/78378", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-5281\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a umair-aziz025\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-02 01:54:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-02T02:00:04.000000Z"}, {"uuid": "0647a76b-95bf-45e6-807b-67a930776934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/xakep_ru/19178", "content": "\u0412 Google Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0443\u044e\u0441\u044f \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome, \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0435\u0435 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-5281, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nhttps://xakep.ru/2026/04/02/cve-2026-5281/", "creation_timestamp": "2026-04-02T10:34:25.000000Z"}, {"uuid": "e8b3258c-1cd8-46c2-a4d4-60299469bb92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/39292", "content": "New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation \u2014 Patch Released \u2013 thehackernews.com\n\nWed, 01 Apr 2026 19:42:00", "creation_timestamp": "2026-04-01T20:03:03.000000Z"}, {"uuid": "3b5ed9b0-df66-4aba-a319-137211f912e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/ctinow/248106", "content": "New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation \u2014 Patch Released\nhttps://ift.tt/URBQp1s", "creation_timestamp": "2026-04-01T13:39:46.000000Z"}, {"uuid": "4c2437a5-e5ea-4f9c-b244-85b747d7decb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/9418", "content": "New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation \u2014 Patch Released \u2013 thehackernews.com\n\nWed, 01 Apr 2026 19:42:00", "creation_timestamp": "2026-04-01T20:03:03.000000Z"}, {"uuid": "74255383-2891-45c9-abe4-84bd7a9fa4c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://t.me/bdufstecru/3055", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Dawn \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b\n\nBDU:2026-04540\nCVE-2026-5281\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0445\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e \u00ab\u0431\u0435\u043b\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u0430\u043c\u00bb;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442);\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (VPN).\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html", "creation_timestamp": "2026-04-03T13:01:12.000000Z"}, {"uuid": "90d1379b-d096-46da-ac2a-60e7546cadc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5201", "type": "seen", "source": "https://t.me/GithubRedTeam/78303", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-5201\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kagancapar\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-01 13:57:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-5201: Heap-based buffer overflow in gdk-pixbuf JPEG loader (CWE-122, CVSS 7.5)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-01T14:00:04.000000Z"}, {"uuid": "0a061923-8160-410e-baeb-155f1aa74f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/true_secator/8054", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0443\u0436\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u0439 \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 0-day \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nCVE-2026-5281, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 Chromium, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0442\u0438\u043f\u0430 \u00ab\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f\u00bb \u0432 Dawn, \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 WebGPU, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Chromium.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u043e\u0435 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435.\n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442 \u0432 Google, \u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0435\u0441\u0442\u044c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 0-day \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f.\n\n\u0414\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c.\n\nGoogle \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u041f\u041a. \u041d\u043e\u0432\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f Windows, macOS (146.0.7680.177/178) \u0438 Linux (146.0.7680.177).\n\n\u042d\u0442\u043e \u0443\u0436\u0435 \u0447\u0435\u0442\u0432\u0451\u0440\u0442\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f 0-day \u0432 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430.\n\n\u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u043f\u0435\u0440\u0432\u0430\u044f (CVE-2026-2441) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0430\u043d\u043d\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0442\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0432 CSSFontFeatureValuesMap (\u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a \u0448\u0440\u0438\u0444\u0442\u043e\u0432 CSS \u0432 Chrome), \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google\u00a0\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f\u00a0.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 CVE \u0432 Chrome,\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0\u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430\u00a0\u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 2D-\u0433\u0440\u0430\u0444\u0438\u043a\u0438 Skia (CVE-2026-3909), \u0430 \u0432\u0442\u043e\u0440\u0430\u044f - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 JavaScript \u0438 WebAssembly (CVE-2026-3910).\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438\u00a08 \u043d\u0443\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google (TAG), \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435\u043c \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2026-04-01T13:00:06.000000Z"}, {"uuid": "0ca55424-aac7-4686-92e2-e463ac1e4fa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5201", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mkkqwtl5hqs2", "content": "", "creation_timestamp": "2026-04-28T14:06:16.757907Z"}, {"uuid": "92d5c53b-e3d4-4ec8-bb08-80b1e32afd9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5262", "type": "seen", "source": "Telegram/-TrxQEu_vpC0CzTlpYXuzrup_q5woS95qQpWNUcd_nRROGo", "content": "", "creation_timestamp": "2026-04-22T19:23:27.000000Z"}, {"uuid": "41978be0-9e6d-4aa9-9b98-f1cac7730e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52680", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/ffpd3ihundh7z", "content": "CVE-2026-52680: Apache Kyuubi: REST batch multipart upload path traversal allows controlled file write", "creation_timestamp": "2026-07-30T11:47:05.843698Z"}, {"uuid": "50ad1c76-019c-44d1-bceb-060cfcfdb131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52841", "type": "seen", "source": "https://gist.github.com/alon710/555463e864b3e92acb0ee1bba5502d4f", "content": "# CVE-2026-52841: CVE-2026-52841: Authorization Bypass in Easy!Appointments Google OAuth Provider Binding\n\n> **CVSS Score:** 3.1\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-52841\n\n## Summary\nAn authorization bypass vulnerability exists in Easy!Appointments before version 1.6.0. The application fails to validate ownership of the provider ID during the Google OAuth synchronization process. This allows authenticated backend users to link their personal Google Calendars to peer providers, leading to unauthorized access to scheduled appointments and associated customer metadata.\n\n## TL;DR\nAn authorization bypass flaw in Easy!Appointments allows authenticated backend users to bind their personal Google OAuth token to other providers' profiles, syncing external scheduling metadata and customer PII directly to the attacker's calendar.\n\n## Technical Details\n\n- **CWE ID**: CWE-639\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 3.1 (Low)\n- **EPSS Score**: 0.00129\n- **CISA KEV Status**: Not Listed\n- **Exploit Status**: No public PoC\n- **Vulnerable Versions**: < 1.6.0\n\n## Affected Systems\n\n- Easy!Appointments self-hosted appointment scheduler\n- **Easy!Appointments**: < 1.6.0 (Fixed in: `1.6.0`)\n\n## Mitigation\n\n- Upgrade to Easy!Appointments version 1.6.0 or newer\n- Audit active Google Calendar configuration bindings in the application database\n- Monitor application logs for session state manipulation attempts\n\n**Remediation Steps:**\n1. Apply the software update to version 1.6.0 or newer on your production servers\n2. Verify that the Google.php controller includes the updated authorization check inside the oauth_callback method\n3. Query the ea_settings database table to identify duplicate or unexpected Google sync configurations\n4. Revoke any suspicious or duplicate Google OAuth synchronization tokens\n\n## References\n\n- [GitHub Security Advisory GHSA-8hm4-r66f-29wr](https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-8hm4-r66f-29wr)\n- [Easy!Appointments Patch Commit 4b2d245](https://github.com/alextselegidis/easyappointments/commit/4b2d245d2cd2058dc76e05f6eb65b26699268471)\n- [Easy!Appointments 1.6.0 Release Tag](https://github.com/alextselegidis/easyappointments/releases/tag/1.6.0)\n- [NVD - CVE-2026-52841 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-52841)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-52841) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T03:31:37.463951Z"}, {"uuid": "c6325e39-f3ab-4803-860c-cf115fb9f782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52837", "type": "seen", "source": "https://gist.github.com/alon710/2d94cc50795411681f41b69ad6e69380", "content": "# CVE-2026-52837: CVE-2026-52837: Unauthenticated PII Leakage in Easy!Appointments Booking Reschedule Endpoint\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-52837\n\n## Summary\nAn unauthenticated Personally Identifiable Information (PII) disclosure vulnerability exists in Easy!Appointments versions up to and including 1.5.2. Requesting the booking reschedule endpoint with a valid appointment hash causes the system to embed the raw customer database record into the HTML response as inline JavaScript variables, exposing sensitive details. This includes email addresses, phone numbers, physical addresses, custom database metadata, and internal directory configurations such as LDAP DNs. The vulnerability has been resolved in version 1.6.0.\n\n## TL;DR\nUnauthenticated remote attackers can extract complete customer database records by accessing the booking reschedule endpoint with a valid 12-character appointment hash.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-200, CWE-639\n- **Attack Vector**: Network (Unauthenticated)\n- **CVSS v4.0 Score**: 6.9 (Medium)\n- **EPSS Score**: 0.00352 (Percentile: 27.89%)\n- **Impact**: Information Disclosure (PII Leakage)\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Easy!Appointments <= 1.5.2\n- **Easy!Appointments**: <= 1.5.2 (Fixed in: `1.6.0`)\n\n## Mitigation\n\n- Upgrade to Easy!Appointments version 1.6.0 or later\n- Manually apply array-filtering hotfix to the Booking controller\n- Enforce strict Referrer-Policy to prevent hash leakage\n\n**Remediation Steps:**\n1. Assess current Easy!Appointments version and back up the database and web root.\n2. Apply the official upgrade package to transition to version 1.6.0 or newer.\n3. Verify the patch by loading a reschedule URL and inspecting the rendered HTML source for the absence of raw 'customer_data' fields.\n4. Configure the web server (Nginx/Apache) to append 'Referrer-Policy: no-referrer' to outgoing HTTP headers.\n\n## References\n\n- [GitHub Security Advisory GHSA-xgr6-pqjv-3pf8](https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-xgr6-pqjv-3pf8)\n- [Fix Commit 40bb0b3](https://github.com/alextselegidis/easyappointments/commit/40bb0b31b531540bc9006efce4220eb0a437ed2b)\n- [Easy!Appointments 1.6.0 Release Notes](https://github.com/alextselegidis/easyappointments/releases/tag/1.6.0)\n- [NVD CVE-2026-52837 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-52837)\n- [CVE.org CVE-2026-52837 Record](https://www.cve.org/CVERecord?id=CVE-2026-52837)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-52837) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T04:31:31.123107Z"}, {"uuid": "b73b6d11-cc3c-49b7-ac23-2c861fe3331c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52134", "type": "seen", "source": "Telegram/8sG8-znVA24HEgCSSOgSFdLJSscjGG_d1L2w-JFGPL2oE2E", "content": "", "creation_timestamp": "2026-07-30T01:00:03.212979Z"}, {"uuid": "b3667d22-263d-4c6b-bb40-a31a96710d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52134", "type": "seen", "source": "Telegram/Yj7Aq_xyYiyFjEC7_fWRp1WW6CPSPv-8fFQ8YzgEKFCsJSk", "content": "", "creation_timestamp": "2026-07-30T01:00:03.066297Z"}, {"uuid": "ec4bb238-9823-4685-8d56-0bbbacef54bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "published-proof-of-concept", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "content": "", "creation_timestamp": "2026-07-30T01:00:13.963222Z"}, {"uuid": "e6eea675-8680-4734-b931-a86ec16cfd31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52840", "type": "seen", "source": "https://gist.github.com/alon710/5f2d10f3a54edb2e4c4f46ec9659b74e", "content": "# CVE-2026-52840: CVE-2026-52840: Server-Side Request Forgery in Easy!Appointments CalDAV Connector\n\n> **CVSS Score:** 2.7\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-52840\n\n## Summary\nEasy!Appointments prior to version 1.6.0 is vulnerable to Server-Side Request Forgery (SSRF) within its CalDAV integration module. The system handles user-supplied URLs in the connection test endpoint without verifying host constraints or network schemes, allowing authenticated backend users to probe internal infrastructure.\n\n## TL;DR\nAn authenticated SSRF vulnerability in Easy!Appointments prior to 1.6.0 allows backend users to probe internal networks and access loopback and RFC1918 addresses via unvalidated CalDAV connection test requests.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 2.7\n- **EPSS Score**: 0.00186 (Percentile: 8.49%)\n- **Exploit Status**: poc\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Easy!Appointments scheduling platform\n- **easyappointments**: < 1.6.0 (Fixed in: `1.6.0`)\n\n## Mitigation\n\n- Upgrade Easy!Appointments to version 1.6.0 or higher.\n- Enforce network segmentation and egress filtering rules to prevent the application container from connecting to local and private IP addresses.\n- Audit existing backend accounts to ensure only trusted users hold administrative, provider, or secretary permissions.\n\n**Remediation Steps:**\n1. Download the Easy!Appointments 1.6.0 release package.\n2. Apply the database migrations and update the application files, ensuring the patched `application/libraries/Caldav_sync.php` is deployed.\n3. Verify that the `ENABLE_CALDAV_SSRF_CHECK` parameter or any equivalent toggles are removed from the configurations to maintain secure-by-default logic.\n4. Test the CalDAV connection interface with a loopback address to verify that host validation successfully blocks the request.\n\n## References\n\n- [GHSA-pm5p-7w5h-jm5q Advisory Details](https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-pm5p-7w5h-jm5q)\n- [NVD - CVE-2026-52840 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-52840)\n- [CVE.org CVE-2026-52840 Record](https://www.cve.org/CVERecord?id=CVE-2026-52840)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-52840) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T06:31:29.627132Z"}, {"uuid": "f5d3f8e0-b2ad-4c31-967a-1f8efed3f278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://t.me/GithubRedTeam/95796", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Kimai-CVE-2026-49865-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cyeezy08\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 05:51:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) \u2014 Kimai time-tracking default APP_SECRET authentication bypass affecting versions \u2264 2.57.0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T07:00:03.930339Z"}, {"uuid": "78487193-8817-45ed-bfe3-f4ad74156389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52839", "type": "seen", "source": "https://gist.github.com/alon710/5694b6f230218930632a6e462097e637", "content": "# CVE-2026-52839: CVE-2026-52839: Cross-Provider Appointment Injection and Authorization Bypass in Easy!Appointments\n\n> **CVSS Score:** 3.3\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-52839\n\n## Summary\nAn authorization bypass and logical 'write-before-crash' vulnerability in Easy!Appointments versions prior to 1.6.0 allows authenticated users with the 'Provider' role to inject unauthorized bookings into foreign providers' schedules or reassign existing appointments via parameter manipulation on the 'store' and 'update' endpoints.\n\n## TL;DR\nAuthenticated providers can inject or reassign appointments into schedules of other providers due to missing session-boundary validation on mutation endpoints, compounded by a write-before-crash logic flaw.\n\n## Technical Details\n\n- **CWE ID**: CWE-639\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 3.3 (Low)\n- **Exploit Status**: None (No active public exploits)\n- **CISA KEV Status**: Not Listed\n- **Affected Functions**: appointments/store, appointments/update\n\n## Affected Systems\n\n- Easy!Appointments\n- **Easy!Appointments**: < 1.6.0 (Fixed in: `1.6.0`)\n\n## Mitigation\n\n- Upgrade to Easy!Appointments version 1.6.0 or higher to apply official fixes.\n- Apply manual session validation controls to the store and update methods in application/controllers/Appointments.php.\n- Perform scheduled database integrity reviews to identify unauthorized appointment reassignments.\n\n**Remediation Steps:**\n1. Identify all deployment instances running Easy!Appointments versions older than 1.6.0.\n2. Back up the active database and configuration files.\n3. Download and install Easy!Appointments version 1.6.0 from the official release page.\n4. If manual patching is required, insert session role-slug verification checks into the store() and update() functions.\n5. Verify the patch by attempting to submit an appointment containing a foreign provider ID using a low-privilege provider account.\n\n## References\n\n- [GitHub Security Advisory GHSA-w8xc-8g92-v77h](https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-w8xc-8g92-v77h)\n- [NVD CVE-2026-52839 Record](https://nvd.nist.gov/vuln/detail/CVE-2026-52839)\n- [Easy!Appointments Version 1.6.0 Release Tag](https://github.com/alextselegidis/easyappointments/releases/tag/1.6.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-52839) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T05:31:24.691808Z"}, {"uuid": "85253b2f-e7c0-4d92-9644-44258348096b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5219", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jkscrvoddfroi", "content": "CVE-2026-5219 - CSRF in Softtr's E-Commerce Pack\nCVE ID : CVE-2026-5219\n \n Published : July 30, 2026, 2:17 p.m. | 21\u00a0minutes ago\n \n Description : Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows Cross Site R...", "creation_timestamp": "2026-07-30T15:03:06.400466Z"}, {"uuid": "7ea3524d-6ae1-487a-96fb-d2d7ef9a86cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52838", "type": "seen", "source": "https://gist.github.com/alon710/a3242bec311706e278c5de9e07dda21c", "content": "# CVE-2026-52838: CVE-2026-52838: Stored Cross-Site Scripting via Booking Disabled Message in Easy!Appointments\n\n> **CVSS Score:** 2.6\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-52838\n\n## Summary\nThis report provides a comprehensive technical teardown of CVE-2026-52838 (GHSA-996f-334j-67g7), a stored Cross-Site Scripting (XSS) vulnerability in Easy!Appointments. The flaw occurs in how the application manages the 'booking disabled' custom message configuration, allowing high-privileged administrators to persist unsanitized payloads that execute on unauthenticated guest landing pages.\n\n## TL;DR\nA stored Cross-Site Scripting vulnerability in Easy!Appointments prior to version 1.6.0 allows authenticated administrators to store arbitrary JavaScript payloads in the booking settings. These payloads execute automatically in the browser context of unauthenticated visitors when the application is configured in booking disabled mode.\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 2.6\n- **EPSS Score**: 0.00184\n- **Impact**: Stored Cross-Site Scripting\n- **Exploit Status**: None / No Public PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Easy!Appointments\n- **easyappointments**: < 1.6.0 (Fixed in: `1.6.0`)\n\n## Mitigation\n\n- Upgrade Easy!Appointments to version 1.6.0 or higher.\n- Apply manual template-level output sanitization using the pure_html helper function.\n- Implement a robust Content Security Policy (CSP) to block the execution of inline JavaScript payloads.\n\n**Remediation Steps:**\n1. Determine the current version of the Easy!Appointments installation.\n2. Back up the database and existing application directory.\n3. Download the 1.6.0 release from the official repository.\n4. Deploy the updated codebase, ensuring files in the application/views and application/controllers directories are overwritten.\n5. Validate the fix by attempting to input HTML tags in the booking message configuration as an administrator and verifying they are sanitized on the guest page.\n\n## References\n\n- [GitHub Advisory GHSA-996f-334j-67g7](https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-996f-334j-67g7)\n- [Vulnerability Fix Commit](https://github.com/alextselegidis/easyappointments/commit/629a0415f54f75556c17f4f5d9c77fda1fdbdeae)\n- [Easy!Appointments 1.6.0 Release Tag](https://github.com/alextselegidis/easyappointments/releases/tag/1.6.0)\n- [NVD Vulnerability Detail for CVE-2026-52838](https://nvd.nist.gov/vuln/detail/CVE-2026-52838)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-52838) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-30T02:32:04.935473Z"}, {"uuid": "7887d726-3197-452e-a861-c635789d122d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "Telegram/47AGWfAWFIwZKzQcl_sisfXazYjpo74QYaHVlY-riLjwoTE", "content": "", "creation_timestamp": "2026-07-30T14:00:04.763878Z"}, {"uuid": "9c951923-2dc4-4d9b-9969-eb98e97e6713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://t.me/GithubRedTeam/96531", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52824\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AzureADTrent\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 03:43:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTechnical analysis and PoC of CVE-2026-52824: default APP_SECRET in the Kimai Docker image enabling unauthenticated login link forgery. Affects <= 2.57.0, fixed in 2.58.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T05:00:03.775438Z"}, {"uuid": "aec0c72a-55fc-4217-81b2-650f69733717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52855", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrzd55332f2a", "content": "CVE-2026-52855 - Critical SSTI in Wings (Pterodactyl). Low-priv user can read daemon config tokens via {{config.}} in egg templates. CVSS 9.9. Update to 1.12.3 immediately. #CVE #infosec #Pterodactyl\n\nhttps://www.valtersit.com/cve/CVE-2026-52855/", "creation_timestamp": "2026-08-01T11:04:52.353182Z"}, {"uuid": "cd88f339-02be-4e76-a365-360f3188e6fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52869", "type": "seen", "source": "https://gist.github.com/Correctover/36ce05054d457c4fb176b23f08f9962b", "content": "# MCP Protocol Security in 2026: Why Patching Isn't Enough \u2014 And What Runtime Verification Solves\n\n> **Author**: Guigui Wang, Correctover  \n> **Date**: August 4, 2026  \n> **Relevance**: AI Agent infrastructure, MCP security, runtime verification standards\n\n---\n\n## TL;DR\n\nThe Model Context Protocol (MCP) has accumulated **at least 5 confirmed CVEs** in 2026 alone \u2014 DNS rebinding, session hijacking, session poisoning, cross-client data leaks, and Origin header bypass. Every single one follows the same pattern: the protocol trusts its environment without verifying it.\n\nI'm the author of **CCS (Correctover Computing Standard)**, the first IETF submission for AI Agent runtime verification (draft-correctover-ccs-00). This blog post shows how CCS's 7-dimensional runtime verification framework would have caught these vulnerabilities **systemically** \u2014 not as individual patches, but as a class of problems.\n\nIf you're running MCP-based AI agent infrastructure, you need to think about runtime verification, not just patching. Here's why.\n\n---\n\n## The MCP Vulnerability Catalog (2026)\n\n### CVE-2026-11624: DNS Rebinding Attack\n**Severity**: High  \n**Affected**: All MCP server implementations prior to v0.25  \n**Root Cause**: Missing `Origin` header validation\n\nAn attacker-controlled domain uses DNS rebinding to redirect a victim's browser to `127.0.0.1`, where a local MCP server is running. Because the server doesn't validate `Origin` headers, it accepts connections from the browser context \u2014 allowing arbitrary tool execution.\n\n**Impact**: Any website a developer visits while running an MCP server locally could weaponize this. File reads, command execution, database access \u2014 all through the agent's tool interface.\n\n### CVE-2026-67431: Session Poisoning (Ruby SDK)\n**CVSS**: 8.3 (High)  \n**Affected**: `mcp` Ruby gem < v0.23.0  \n**Root Cause**: Transport layer doesn't bind sessions to their owners\n\nThe stateful transport implementation failed to bind established sessions to their original owners or connection contexts. Any actor with access to a session ID can execute arbitrary tool calls.\n\n### CVE-2026-52869: Session Hijacking (Python SDK)\n**CVSS**: 7.1 (High)  \n**Affected**: MCP Python SDK < v1.27.2  \n**Root Cause**: JSON-RPC requests routed purely on user-controlled session IDs without ownership validation\n\nA bearer-token-authenticated attacker can hijack and inject JSON-RPC messages into another client's session by supplying their session ID. The transport layer accepts any valid token and routes to the target session.\n\n### CVE-2026-25536: Cross-Client Data Leak (TypeScript SDK)\n**CVSS**: 7.1 (High)  \n**Affected**: `@modelcontextprotocol/sdk` v1.10.0 through v1.25.3  \n**Root Cause**: Race condition in shared server/transport state\n\nWhen a single server or transport instance serves multiple clients, one client's tool results, notifications, and sampling requests can be delivered to another client. The trigger is ordinary concurrent load, not a crafted attack.\n\n### OX Security Findings: STDIO Transport Architecture\nThe MCP STDIO transport spawns a new process for every connection. This architectural choice means:\n- Each connection has its own process boundary (isolation?)\n- But also: each connection can access the full host system\n- No centralized verification of what the spawned process does\n\n---\n\n## The Pattern: Protocol Trust Without Runtime Verification\n\nLook at all five CVEs. They share a fundamental pattern:\n\n> **MCP trusts its environment. It assumes that if you have a valid connection, you're authorized. If you have a session ID, you own it. If you can reach localhost, you're a legitimate client.**\n\nThis is a **design-level assumption**, not a bug. And it's the same assumption that causes every new CVE.\n\nPatching one vulnerability doesn't fix the pattern:\n- Adding Origin validation fixes DNS rebinding but doesn't prevent the next spoofing attack\n- Binding sessions to owners prevents hijacking but doesn't validate what the session does\n- Isolating transport state prevents leaks but doesn't verify tool execution intent\n\nWhat MCP needs is not another patch. It needs **runtime verification** \u2014 continuous, systematic validation of every agent action against its authorization and intent.\n\n---\n\n## How CCS Solves This Systemically\n\nCCS (draft-correctover-ccs-00) is a 7-dimensional runtime verification framework submitted to IETF. Here's how each dimension addresses the MCP vulnerability pattern:\n\n### 1. Structure Verification\n**What it checks**: Is the incoming request structurally valid? Does it conform to the expected schema?\n\n**Catches**: Malformed JSON-RPC, unexpected tool call parameters, requests that don't match the server's capability declaration.\n\n### 2. Schema Verification  \n**What it checks**: Does the request match the declared tool/resource schema?\n\n**Catches**: Cross-client data leaks (responses with wrong schema), session poisoning (requests with wrong parameter types).\n\n### 3. Latency Verification\n**What it checks**: Is the response time within expected bounds?\n\n**Catches**: DNS rebinding attacks (abnormal latency patterns when browser proxies to localhost), replay attacks (timing anomalies).\n\n### 4. Cost Verification\n**What it checks**: Does the operation stay within declared resource bounds?\n\n**Catches**: Resource exhaustion through tool spam, unexpected computational costs from hijacked sessions.\n\n### 5. Identity Verification\n**What it checks**: Is the requesting entity who it claims to be? Is the session bound to the authenticated principal?\n\n**Catches**: Session hijacking (CVE-2026-52869), session poisoning (CVE-2026-67431). CCS binds session identity to the authenticated principal at the transport layer.\n\n### 6. Integrity Verification\n**What it checks**: Has the data been tampered with? Is the response from the expected source?\n\n**Catches**: Cross-client data leaks (CVE-2026-25536), response injection. CCS verifies data integrity at the byte level.\n\n### 7. Security Verification\n**What it checks**: Does the observed behavior match the declared authorization policy?\n\n**Catches**: DNS rebinding (CVE-2026-11624), STDIO process escape. CCS verifies that every tool execution stays within the declared authorization boundary, regardless of the transport mechanism.\n\n### Performance\n- **P50 latency**: ~133\u03bcs (out-of-process) / ~7.5\u03bcs (in-process)\n- **Verification mode**: Continuous, per-action\n- **False positive rate**: 0% across 28 audited projects\n\n---\n\n## The Self-Evolution Problem\n\nHere's what makes this worse: MCP is a **living protocol**. New transports are added. New SDKs are implemented. New tool patterns emerge. Every change introduces new attack surfaces.\n\nStatic patches can't keep up. You need a verification engine that **evolves** with the protocol.\n\nThat's why CCS includes a self-evolving detection engine (MCPFuzz):\n- **Layer 1**: Static analysis of known vulnerability patterns\n- **Layer 2**: Dynamic fuzzing with semantic-aware test generation\n- **Layer 3**: Behavioral analysis that discovers new bypass patterns autonomously\n\nThis isn't a rule engine. It's an agent that continuously learns what \"normal\" MCP behavior looks like and flags deviations. It achieved **0 false positives** across 28 production projects in the agent ecosystem.\n\n---\n\n## What This Means for You\n\n### If you're an MCP server operator:\n- Upgrade to the latest SDK versions (v0.25+ for Python, v0.23.0+ for Ruby, v1.26.0+ for TypeScript)\n- Implement Origin header validation\n- Bind sessions to authenticated principals\n- Isolate transport state per client\n\nBut also: **deploy runtime verification**. The patches fix known CVEs. CCS prevents the next class of vulnerabilities.\n\n### If you're building on MCP:\n- Don't assume the protocol is secure. It's a living standard with fundamental trust assumptions.\n- Add CCS verification to your agent pipeline. 133\u03bcs overhead is negligible compared to the risk.\n- Audit your tool execution policies. What is your agent authorized to do? CCS enforces that at runtime.\n\n### If you're an enterprise deploying AI agents:\n- MCP is the connective tissue between your LLM and your enterprise tools (databases, APIs, file systems).\n- A vulnerability in MCP is a vulnerability in your entire agent infrastructure.\n- Runtime verification is not optional. It's the difference between \"we patched the known CVEs\" and \"we systematically prevent the class of problems.\"\n\n---\n\n## The Standard Matters\n\nCCS is not just my project. It's submitted to IETF (draft-correctover-ccs-00, Submission #167254). This means:\n- It's a community standard, not a vendor lock-in\n- It's transparent, auditable, and open\n- It's designed to be adopted across the ecosystem\n\nThe DOI (10.5281/zenodo.21783723) provides timestamped proof of priority. The ccs-verifier SDK is on PyPI (v0.4.1). The code is open source.\n\nI'm not selling anything. I'm establishing a standard and proving it works. The question is whether the ecosystem adopts it before or after the next major MCP vulnerability makes headlines.\n\n---\n\n## Resources\n\n- **CCS IETF Draft**: https://datatracker.ietf.org/submit/status/167254/\n- **CCS DOI**: https://doi.org/10.5281/zenodo.21783723\n- **ccs-verifier SDK**: https://pypi.org/project/ccs-verifier/\n- **GitHub**: https://github.com/Correctover/ccs-verifier\n- **MCP CVE-2026-11624**: https://cvereports.com/reports/CVE-2026-11624\n- **MCP CVE-2026-52869**: https://cvereports.com/reports/CVE-2026-52869\n\n---\n\n*Guigui Wang is the author of CCS and founder of Correctover. Correctover's mission is to make AI Agent runtime verification a standard practice, not an afterthought.*\n", "creation_timestamp": "2026-08-04T06:51:03.321496Z"}, {"uuid": "b5e73f35-d5c1-47e8-91d9-08ddd5ec79a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52923", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T10:17:41.807844Z"}, {"uuid": "b5538432-988a-4ac2-9670-679e6523af70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52993", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T10:17:44.215725Z"}, {"uuid": "37cd07a2-fe69-4c2a-9d83-f9db62b51d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52102", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-04T17:00:04.753927Z"}, {"uuid": "85f41223-0d32-450d-acc2-98fbdaf6cb45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52680", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-04T17:00:04.851420Z"}, {"uuid": "3fde1198-a246-4434-9d4c-8e09ac2eb1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "published-proof-of-concept", "source": "Telegram/47AGWfAWFIwZKzQcl_sisfXazYjpo74QYaHVlY-riLjwoTE", "content": "", "creation_timestamp": "2026-07-31T00:00:29.570854Z"}, {"uuid": "b5883f00-5b65-415c-88cc-e614353f3b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95796", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Kimai-CVE-2026-49865-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cyeezy08\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 05:51:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) \u2014 Kimai time-tracking default APP_SECRET authentication bypass affecting versions \u2264 2.57.0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-31T00:00:38.582363Z"}, {"uuid": "d9320179-9bc4-40bf-877f-ba5e4bf03342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52134", "type": "published-proof-of-concept", "source": "Telegram/8sG8-znVA24HEgCSSOgSFdLJSscjGG_d1L2w-JFGPL2oE2E", "content": "", "creation_timestamp": "2026-07-31T00:00:43.981470Z"}, {"uuid": "406c3f2b-0780-4cdd-b837-5100f43c6054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52134", "type": "published-proof-of-concept", "source": "Telegram/Yj7Aq_xyYiyFjEC7_fWRp1WW6CPSPv-8fFQ8YzgEKFCsJSk", "content": "", "creation_timestamp": "2026-07-31T01:00:26.869339Z"}, {"uuid": "3606e83c-2fc9-4c9c-bb0a-78c6fa3d61dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95672", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52832-PoC-exploit-nuclio-dashboard\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mdvpat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 10:43:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Join, letting an attacker write arbitrary content to any path as root. (CVE-2026-52832, \u22641.15.27)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-01T19:00:04.003455Z"}, {"uuid": "a215d76a-5432-495a-bf4b-8911993d0001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "published-proof-of-concept", "source": "Telegram/r4YAq9sqiCZdls8-ldA7XAIZMKynCRrGuzy5h6EQSIOA624", "content": "", "creation_timestamp": "2026-08-04T10:00:05.457142Z"}, {"uuid": "1ad996e2-7588-4ec5-af76-af8de0eddccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "published-proof-of-concept", "source": "Telegram/j-DMWk1jylS6oTK3WkqNWOGjNQLp4_I9IFyoV0ikHsL-Sj8", "content": "", "creation_timestamp": "2026-08-03T11:08:45.204832Z"}, {"uuid": "5e8b4450-7a7a-4c29-9154-520477a36880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5222", "type": "seen", "source": "https://bsky.app/profile/feedbot.unronritaro.net/post/3msbta7rtuf2f", "content": "Security Advisory for Cargo (CVE-2026-5222) | Rust Blog", "creation_timestamp": "2026-08-04T20:14:13.348261Z"}, {"uuid": "db8428ef-d84f-468f-948d-546ef23846ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5223", "type": "seen", "source": "https://bsky.app/profile/feedbot.unronritaro.net/post/3msbtac5fpq2e", "content": "Security Advisory for Cargo (CVE-2026-5223) | Rust Blog", "creation_timestamp": "2026-08-04T20:14:15.751689Z"}, {"uuid": "07ebaf4c-e864-4f9f-b24e-e0e96a5c4bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "seen", "source": "https://t.me/GithubRedTeam/96368", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52887-NocoBase-SQLi-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 03:57:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-52887 \u2014 NocoBase SQL injection -> PostgreSQL-superuser RCE (myInAppChannels:list filter, CVSS 10.0). Author PoC + source analysis + docker lab.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T05:00:03.076625Z"}, {"uuid": "72ca8c62-fd34-460d-bfcc-0198a5684153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52680", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96571", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52680_exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 09:38:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T11:00:05.728929Z"}, {"uuid": "c1057129-9aed-45d2-9cbf-a6151846b802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52102", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-05T00:00:26.456004Z"}, {"uuid": "7526781c-38de-4d6b-b7c6-5a3fbf24ff77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5299", "type": "seen", "source": "https://t.me/itarmyofrussianews/379", "content": "Wireshark \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u0432 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0431\u043e\u043b\u0435\u0435 40 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430\n\n\u0414\u043b\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0435\u0442\u0438 \u0438 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u044d\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445, SOC \u0438 \u043b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f\u0445. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 4.6.5, \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0435\u0433\u043e \u0431\u0435\u0437 \u0437\u0430\u0434\u0435\u0440\u0436\u0435\u043a\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430. \u041e\u043d\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432: TLS (CVE-2026-5402), SBC-\u0430\u0443\u0434\u0438\u043e\u043a\u043e\u0434\u0435\u043a (CVE-2026-5403), RDP (CVE-2026-5405), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0438\u043c\u043f\u043e\u0440\u0442\u0430 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 (CVE-2026-5656). \u0412\u043e \u0432\u0441\u0435\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u0431\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043d\u043e \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b\n\n\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0435\u043c, \u0447\u0442\u043e Wireshark \u0447\u0430\u0441\u0442\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435. \u042d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u043e\u0439, \u0442\u0430\u043a \u043a\u0430\u043a \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043c\u0435\u0441\u0442\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ICMPv6, HTTP, WebSocket, MySQL, BT-DHT \u0438 \u0434\u0440\u0443\u0433\u0438\u0435. \u0410\u0442\u0430\u043a\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0434\u0430\u0436\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442\n\n\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043e\u0448\u0438\u0431\u043a\u0438, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0446\u0438\u043a\u043b\u0430\u043c \u0438 \u043f\u043e\u043b\u043d\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0447\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 SIEM\n\n\u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430\u0445 \u0434\u0435\u043a\u043e\u043c\u043f\u0440\u0435\u0441\u0441\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 zlib \u0438 LZ77. \u041e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0436\u0430\u0442\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043a \u0441\u0431\u043e\u044f\u043c \u043f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e \u0441\u0436\u0430\u0442\u0438\u0435, \u0447\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u043b\u043e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u043f\u0440\u043e\u0431\u043b\u0435\u043c: \u043e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u0439 \u0434\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0441\u0431\u043e\u0435\u0432 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0414\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e CVE-\u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043e\u0442 CVE-2026-5299 \u0434\u043e CVE-2026-6870\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0418\u0418, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u044f\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\n\n\u0414\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 Wireshark \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438\u043b\u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u0439 \u043c\u0435\u0440\u043e\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043a\u0430\u043a \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u0442\u0430\u043a \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0435\u0442\u0438.\n\n\u041d\u0430\u0448\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b: \n\u041a\u0430\u043d\u0430\u043b \u0444\u043e\u0440\u0443\u043c\u0430: T.ME/XSSF_FORUM\n\u041d\u0430\u0448 \u043a\u0430\u043d\u0430\u043b: T.ME/ITARMYOFRUSSIANEWS", "creation_timestamp": "2026-05-03T10:37:15.000000Z"}, {"uuid": "af4181a2-ce64-4f81-add2-3350fca2afa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5294", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116520086781199288", "content": "\ud83d\udea8 CRITICAL: CVE-2026-5294 in Geeky Bot WP plugin (\u22641.2.2) allows unauthenticated RCE by installing arbitrary plugins via an exposed AJAX endpoint. Disable or remove plugin & monitor for patches. https://radar.offseq.com/threat/cve-2026-5294-cwe-862-missing-authorization-in-ahm-a69c64e2 #OffSeq #WordPress #Vuln #InfoSec", "creation_timestamp": "2026-05-05T04:30:26.688484Z"}, {"uuid": "d4e809ea-3a5f-4dac-a168-53c7e4625eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5294", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ml3e2ul6oy2l", "content": "Geeky Bot WP plugin (\u22641.2.2) has a CRITICAL flaw: unauth attackers can install plugins & run code. Disable or remove plugin ASAP and watch for patches. https://radar.offseq.com/threat/cve-2026-5294-cwe-862-missing-authorization-in-ahm-a69c64e2 #OffSeq #WordPress #Security", "creation_timestamp": "2026-05-05T04:30:28.329608Z"}, {"uuid": "9a3a2636-2df0-461c-9de8-e2d52d00d0f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5294", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml3kh5qhtd2e", "content": "CVE-2026-5294 - GeekyBot\nCVE ID : CVE-2026-5294\n \n Published : May 5, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : The Geeky Bot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.2.2. This is due to a nopriv AJAX route...", "creation_timestamp": "2026-05-05T06:24:42.574733Z"}, {"uuid": "8bc63b46-fd06-4d96-8b8a-6621178f5b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95672", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52832-PoC-exploit-nuclio-dashboard\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mdvpat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 10:43:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Join, letting an attacker write arbitrary content to any path as root. (CVE-2026-52832, \u22641.15.27)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-02T00:00:23.071007Z"}, {"uuid": "24d9869c-0c43-42d1-9795-251b6afa5b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5294", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vqdvtin2q", "content": "\ud83d\udd34 CVE-2026-5294 - Critical (9.8)\n\nThe Geeky Bot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5294/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:19:22.357081Z"}, {"uuid": "00b9ea3f-dd3f-48b7-be48-f948bf5eae4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52680", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-05T00:00:26.563207Z"}, {"uuid": "5ac32a7b-b56b-4ac4-89e8-088b626c4e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52539", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrwxk5vccl2e", "content": "CVE-2026-52539\nOutstatic CMS versions up to 2.1.9 contain a secret key in the code. This means that anyone can access the admin section without a password. To fix this, update to the latest version or set a custom secret key\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-31T12:32:05.100671Z"}, {"uuid": "d8955cdd-f3b0-45fd-bff4-11528be1de42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52855", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrxgqloluu2j", "content": "CVE-2026-52855 - wings\nWings, a server management tool, accidentally shares sensitive information with users who can control certain settings. This could allow unauthorized users to access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wings #pterodactyl #Golang #CVE #infosec", "creation_timestamp": "2026-07-31T17:04:06.813465Z"}, {"uuid": "bd20e062-b600-4bdf-a559-72ce9298b037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52855", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2cyzi3feyud55", "content": "CVE-2026-52855 - Wings exposes node configuration secrets through egg configuration-file templating\nCVE ID : CVE-2026-52855\n \n Published : July 31, 2026, 5:16 p.m. | 30\u00a0minutes ago\n \n Description : Wings is the server control plane for Pterodactyl, a free, open-source game ser...", "creation_timestamp": "2026-07-31T17:54:22.874693Z"}, {"uuid": "58bf6631-4bc8-408f-9677-62876f338768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52856", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms3fwwqe6w2e", "content": "\ud83d\udfe0 CVE-2026-52856 - High (7.5)\n\nWings is the server control plane for Pterodactyl, a free, open-source game server management pan...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52856/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-02T07:02:32.165763Z"}, {"uuid": "cef4ddc4-b73c-47d3-b572-60d6b61365c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5247", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mleb74euom2g", "content": "CVE-2026-5247 post-expirator (CVSS Score 5.5) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-08T17:33:06.847048Z"}, {"uuid": "159ec415-a39c-41a9-b6e6-af244a31a2c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52680", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrxndjqrcv2o", "content": "CVE-2026-52680 - apache kyuubi\nApache Kyuubi allows attackers to upload malicious files to unintended locations on the server. This can lead to sensitive data being overwritten or compromised.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachekyuubi #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-31T19:02:04.627231Z"}, {"uuid": "b9d32178-d96a-4f3f-953e-268a5e286d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52855", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrxpz3tkbi2p", "content": "Wings 1.12.3\u672a\u6e80\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u304a\u3044\u3066\u3001egg\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u306e`{{config.}}`\u30d7\u30ec\u30fc\u30b9\u30db\u30eb\u30c0\u30fc\u306b\u3088\u308a\u3001\u4f4e\u6a29\u9650\u30e6\u30fc\u30b6\u30fc\u306f\u30c7\u30fc\u30e2\u30f3\u8a2d\u5b9a\u304b\u3089`{{config.token}}\u2026\nCVE-2026-52855 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-07-31T19:49:55.703115Z"}, {"uuid": "f18ae163-767c-4d3f-98f4-74113924a9c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52856", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrxq3akldl23", "content": "\u4e0b\u8a18\u306f\u3001\u3044\u305f\u3060\u3044\u305f\u6761\u4ef6\u306b\u57fa\u3065\u3044\u3066\u8a18\u4e8b\u5185\u5bb9\u3092\u8981\u7d04\u3059\u308b\u969b\u306e\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u3067\u3059\u3002  ---  **\u8981\u7d04\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8**  **[\u88fd\u54c1\u540d] [\u30d0\u30fc\u30b8\u30e7\u30f3]** \u306b\u3066\u3001[\u8106\u5f31\u6027\u306e\u5185\u5bb9] \u304c\u767a\u751f\u3002\u3053\u308c\u306b\u3088\u308a\u3001[\u5f71\u2026\nCVE-2026-52856 CVSS 7.5 | HIGH", "creation_timestamp": "2026-07-31T19:51:07.912298Z"}, {"uuid": "ea48dd14-139e-4247-977e-0699d2e82ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5266", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllzp7kxcx2k", "content": "CVE-2026-5266 - Wikimedia Foundation Echo Sensitive Information Exposure\nCVE ID : CVE-2026-5266\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo.\n\n Thi...", "creation_timestamp": "2026-05-11T19:40:14.904054Z"}, {"uuid": "d353034e-583e-40c4-a13a-f5098b3304d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5266", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllzp7kxcx2k", "content": "CVE-2026-5266 - Wikimedia Foundation Echo Sensitive Information Exposure\nCVE ID : CVE-2026-5266\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo.\n\n Thi...", "creation_timestamp": "2026-05-11T19:40:14.901646Z"}, {"uuid": "1eba33c4-35bd-4065-92b4-cb0511bbc4b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "seen", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-03T08:00:03.201612Z"}, {"uuid": "886b8c9d-66eb-4784-bbe9-97b47936f12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5297", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-14", "content": "", "creation_timestamp": "2026-05-14T07:52:53.000000Z"}, {"uuid": "327ee46d-8d60-4e57-9235-514799d9c9c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5297", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "ce50340d-39b3-4f0b-8e15-537756f4e7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52955", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:07:36.947138Z"}, {"uuid": "83cc060f-74ed-4c84-8c1d-80b48293eb0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52911", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:03:43.026859Z"}, {"uuid": "2a8a6033-b26e-4fc1-9847-151af2450e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52912", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:03:45.228912Z"}, {"uuid": "1a0f7896-59d0-47bf-986c-264d40c4b1f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52915", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:04:55.129539Z"}, {"uuid": "1c4ee02c-ded2-4934-a6b6-0e67fbdb3add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5229", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mluxsxr7ya2y", "content": "CRITICAL: WordPress Form Notify plugin \u22641.1.10 allows full account takeover via OAuth authentication bypass. Disable or patch ASAP. Details: https://radar.offseq.com/threat/cve-2026-5229-cwe-287-improper-authentication-in-m-73809aa0 #OffSeq #WordPress #CVE20265229", "creation_timestamp": "2026-05-15T09:00:31.466027Z"}, {"uuid": "b99c98bf-1b9a-4ecf-b6ed-ee9643ea7fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5229", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlv363rg662w", "content": "\ud83d\udd34 CVE-2026-5229 - Critical (9.8)\n\nThe Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to and...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5229/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-15T10:00:26.703762Z"}, {"uuid": "d8a0c743-62df-4130-b995-de9d6a8d5f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5229", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlvaaa44ml2k", "content": "CVE-2026-5229 - Receive Notifications After Form Submitting \u2013 Form Notify for Any Forms\nCVE ID : CVE-2026-5229\n \n Published : May 15, 2026, 9:16 a.m. | 50\u00a0minutes ago\n \n Description : The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to...", "creation_timestamp": "2026-05-15T11:31:06.820132Z"}, {"uuid": "9cdb3e78-ef55-46bc-98df-f3a73125551d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52914", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:03:47.427841Z"}, {"uuid": "aca024ef-c73d-4abb-bf5b-27e4849d411f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52916", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:04:57.321646Z"}, {"uuid": "19595872-0749-4107-b7fa-69a0200e6911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52931", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:07:02.530600Z"}, {"uuid": "7e7f2806-6319-48d7-a34e-fde9128455fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52919", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:05:02.215506Z"}, {"uuid": "a8523cab-0e48-4f16-a564-670138dbba25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52920", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:05:04.636673Z"}, {"uuid": "d9932737-dfd1-48c0-96dd-fe613b8786b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52921", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:05:06.918477Z"}, {"uuid": "0865de04-cafc-45a1-addd-4fde9e341f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52925", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:06:20.848181Z"}, {"uuid": "9ed207e2-3980-4570-988a-d5551e5d29b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52962", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:08:49.088375Z"}, {"uuid": "7badb82a-dafa-4bb0-ab7b-2f257cd4a406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52926", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:07:00.309879Z"}, {"uuid": "4997fb99-3802-4737-a6c1-c1ee9adbe38b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52958", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:08:11.512996Z"}, {"uuid": "0bb53882-7439-482a-a6cd-f1bfc9354350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52963", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:08:51.734709Z"}, {"uuid": "928c845e-95d9-4d5e-a120-3bbe3807d120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52969", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:08:53.970267Z"}, {"uuid": "5c7b81ae-83d1-4599-863c-e9f6572ec9e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52982", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:10:03.751607Z"}, {"uuid": "4c057154-9370-4b52-83e5-1c50c440417d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52985", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:11:13.745305Z"}, {"uuid": "f59de337-39c0-4b1b-8ff9-07f80101de4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52992", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:11:48.573849Z"}, {"uuid": "d1a2116f-423f-40b2-ae92-3125b16e5266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52999", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:13:28.966243Z"}, {"uuid": "40fd2a16-a99b-45d5-9619-3652c06bacaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "published-proof-of-concept", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-04T00:00:44.084826Z"}, {"uuid": "2516ce29-9ddc-41c7-82d8-1f5cc1866afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96368", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52887-NocoBase-SQLi-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 03:57:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-52887 \u2014 NocoBase SQL injection -> PostgreSQL-superuser RCE (myInAppChannels:list filter, CVSS 10.0). Author PoC + source analysis + docker lab.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:48.592690Z"}, {"uuid": "3d91e914-ed0f-4690-be56-93978df740a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52970", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:34:12.515709Z"}, {"uuid": "e2b400e2-50ed-4534-b5e0-608805658980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52922", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:32:41.805796Z"}, {"uuid": "51ca528d-a961-469c-9a98-b4076cd1c68a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5200", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmbqvvqtst2k", "content": "CVE-2026-5200 - AcyMailing\nCVE ID : CVE-2026-5200\n \n Published : May 20, 2026, 8:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : The AcyMailing \u2013 An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Missing Autho...", "creation_timestamp": "2026-05-20T11:01:29.986955Z"}, {"uuid": "38698396-d573-4a17-b1c7-8b1cf9841941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52954", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:33:27.312604Z"}, {"uuid": "10b5b7b8-cb96-4ab9-937f-52b53d12a40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52984", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:34:16.574249Z"}, {"uuid": "beda4b66-cb01-4aa6-a042-3cf3c903e260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52986", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:34:20.613145Z"}, {"uuid": "c43a9d91-1ce9-46c1-a278-64538670647a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52998", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:35:29.000775Z"}, {"uuid": "128c4dde-eec6-4884-b7d8-5c9b6004d258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5203", "type": "published-proof-of-concept", "source": "Telegram/-GtOjHLopjI3IaP_VfvZorB58d5FmtAfesT4Onu4QlAoHy4", "content": "", "creation_timestamp": "2026-05-19T03:00:11.000000Z"}, {"uuid": "cdf4ab1a-b921-48f9-9013-c375dcea157a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52995", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:37:03.839568Z"}, {"uuid": "b54d014f-0c9d-459b-bce0-9d4ae46630c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "published-proof-of-concept", "source": "Telegram/j-DMWk1jylS6oTK3WkqNWOGjNQLp4_I9IFyoV0ikHsL-Sj8", "content": "", "creation_timestamp": "2026-08-04T01:00:19.904723Z"}, {"uuid": "8b8c0146-0eca-46e3-a811-aa0eed936249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52957", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:57:33.789855Z"}, {"uuid": "8103aa0d-4ae5-44ff-9e43-d52ab0453ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52993", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T08:58:02.552035Z"}, {"uuid": "64a385b8-07ad-4934-b30b-e9e3ed394e6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5222", "type": "seen", "source": "https://bsky.app/profile/feedbot.unronritaro.net/post/3mmo5ahvngy2z", "content": "Security Advisory for Cargo (CVE-2026-5222) | Rust Blog", "creation_timestamp": "2026-05-25T09:14:06.570136Z"}, {"uuid": "bd8c5fc4-8edd-4e35-9ea1-97390295ef47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5223", "type": "seen", "source": "https://bsky.app/profile/feedbot.unronritaro.net/post/3mmo5ak2uby2z", "content": "Security Advisory for Cargo (CVE-2026-5223) | Rust Blog", "creation_timestamp": "2026-05-25T09:14:08.628160Z"}, {"uuid": "b79d2f89-7281-458d-97fb-d0cd9211ba68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52102", "type": "seen", "source": "https://t.me/GithubRedTeam/96595", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52102-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a showmeyourhands\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 12:57:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T14:00:05.899172Z"}, {"uuid": "9d354883-38b4-4ccb-bcec-0edfa7ba62f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5223", "type": "seen", "source": "https://bsky.app/profile/planetmozilla.bsky.social/post/3mmod63myfw2y", "content": "The Rust Programming Language Blog: Security Advisory for Cargo (CVE-2026-5223) https://blog.rust-lang.org/2026/05/25/cve-2026-5223/", "creation_timestamp": "2026-05-25T11:00:08.596174Z"}, {"uuid": "5603c35e-7fbf-453f-8d9f-51834861622b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5222", "type": "seen", "source": "https://bsky.app/profile/planetmozilla.bsky.social/post/3mmod65ugme23", "content": "The Rust Programming Language Blog: Security Advisory for Cargo (CVE-2026-5222) https://blog.rust-lang.org/2026/05/25/cve-2026-5222/", "creation_timestamp": "2026-05-25T11:00:10.993975Z"}, {"uuid": "a4b3f326-cedc-460d-ad16-8f89ace18182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5223", "type": "seen", "source": "https://bsky.app/profile/Mozilla.activitypub.awakari.com.ap.brid.gy/post/3mmonlrfxooj2", "content": "The Rust Programming Language Blog: Security Advisory for Cargo (CVE-2026-5223) The Rust Security Response Team was notified that Cargo incorrectly handled symlinks inside of crate tarballs downloa...\n\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-25T14:07:57.680177Z"}, {"uuid": "28ae27a8-4b1c-449d-a81c-e4cbab4468fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5223", "type": "seen", "source": "https://bsky.app/profile/rustaceans.bsky.social/post/3mmou7vm6uc2j", "content": "JUST IN: Security Advisory for Cargo (CVE-2026-5223) \n\n>> Cargo CVE-2026-5223: Malicious crates with symlinks can override other crates from the same third-party registry. Fixed in Rust 1.96.0.\n\n#rustlang #rust", "creation_timestamp": "2026-05-25T16:05:23.827059Z"}, {"uuid": "c994ae19-fb9f-4380-b4bf-ce38985a8e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5222", "type": "seen", "source": "https://bsky.app/profile/rustaceans.bsky.social/post/3mmouayf62v24", "content": "JUST IN: Security Advisory for Cargo (CVE-2026-5222) \n\n>> Cargo CVE-2026-5222: Sparse registry URL normalization flaw lets attackers steal credentials from third-party registries under niche conditions. Fixed in Rust 1.96.\n\n#rustlang #rustlang", "creation_timestamp": "2026-05-25T16:06:18.552684Z"}, {"uuid": "64e91704-3410-4a8d-97aa-af10e160e1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5222", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mmpvpdugoc2u", "content": "\ud83d\udd12 Security Advisory for Cargo (CVE-2026-5222)\n\nRust's Cargo has a low-severity vulnerability (CVE-2026-5222) where it incorrectly normalized URLs for sparse index registries, potent...\n\nhttps://tinyurl.com/4jt9z7k4 #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-05-26T02:04:34.944112Z"}, {"uuid": "e8927b31-387c-4d64-a09d-bd0cecf29396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5223", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmpx5qwrnf2j", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-45584: 65 interactions\nCVE-2026-46727: 22 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-26980: 7 interactions\nCVE-2026-44277: 3 interactions\nCVE-2026-5223: 3 interactions\n", "creation_timestamp": "2026-05-26T02:30:33.167088Z"}, {"uuid": "b8f2ee3c-d25c-4ebe-9fc7-7ad6c5e4e531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52102", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96595", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52102-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a showmeyourhands\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 12:57:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:28.550582Z"}, {"uuid": "0d11e234-976a-49fc-b206-27256eaf9c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5260", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3vce4zi2k", "content": "\ud83d\udfe0 CVE-2026-5260 - High (8.2)\n\nA flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5260/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-26T23:00:36.978062Z"}, {"uuid": "cf51e7fe-b523-4636-9296-3f52999ae671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5260", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsclcm7wc2c", "content": "CVE-2026-5260 - Gnutls: gnutls: information disclosure via heap overread in rsa key exchange\nCVE ID : CVE-2026-5260\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : A flaw was found in libgnutls. A remote attacker, by sending an extremely shor...", "creation_timestamp": "2026-05-27T01:00:17.533993Z"}, {"uuid": "5a7a6c27-90d5-458e-bfdb-d18a21cb39d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "published-proof-of-concept", "source": "Telegram/r4YAq9sqiCZdls8-ldA7XAIZMKynCRrGuzy5h6EQSIOA624", "content": "", "creation_timestamp": "2026-08-05T00:00:47.592164Z"}, {"uuid": "56bf5a57-5437-4311-b00a-defbd2f417eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52680", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96571", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52680_exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 09:38:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:46.701182Z"}, {"uuid": "7def8103-563e-4577-aad2-d3a1c74f726b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96531", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52824\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AzureADTrent\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 03:43:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTechnical analysis and PoC of CVE-2026-52824: default APP_SECRET in the Kimai Docker image enabling unauthenticated login link forgery. Affects <= 2.57.0, fixed in 2.58.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:53.764519Z"}, {"uuid": "349e07ed-f4de-46f6-ae7d-c469eb799a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52533", "type": "seen", "source": "https://bsky.app/profile/zuh.re/post/3mt6yt5weks2o", "content": "Here is a published references for CVE-2026-52533 with Proof of Concept details that I provide.\n\nzuh.re/cve/2026-525...", "creation_timestamp": "2026-08-16T10:41:28.521976Z"}, {"uuid": "b27f8f27-9116-413e-804b-3e2f4277c189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52533", "type": "seen", "source": "https://bsky.app/profile/zuh.re/post/3mt6zbg53qk2o", "content": "Here is a published reference for CVE-2026-52533 with a Proof of Concept (PoC) details that I disclose in ethical manner.\n\nzuh.re/cve/2026-52533", "creation_timestamp": "2026-08-16T10:49:29.347807Z"}, {"uuid": "2d53a8b5-cb54-460f-9809-32255b0bb90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52533", "type": "seen", "source": "https://bsky.app/profile/zuh.re/post/3mt6zemb3w22o", "content": "Here is a published reference for CVE-2026-52533 with a Proof of Concept (PoC) details that I disclosed in ethical manner.\n\nzuh.re/cve/2026-525...", "creation_timestamp": "2026-08-16T10:51:17.054916Z"}, {"uuid": "e468bede-e786-4a4f-afe8-735b1bfea5a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52927", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2018", "content": "", "creation_timestamp": "2026-08-14T08:45:07.538211Z"}, {"uuid": "dc17a1cf-40c1-4fd6-9e7b-424a378bcce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52682", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3msucfj7e6ks3", "content": "PowerDNS Recursor\u306e\u8106\u5f31\u6027\u60c5\u5831\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\uff08CVE-2026-52682\uff09 https://jprs.jp/tech/security/2026-08-12-powerdns-recursor.html", "creation_timestamp": "2026-08-12T04:33:34.226463Z"}, {"uuid": "6d6c9feb-a37a-4efd-b75a-3b63b5a2274d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52682", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3msucgasuwss3", "content": "PowerDNS Authoritative Server\u306e\u8106\u5f31\u6027\u60c5\u5831\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\uff08CVE-2026-52682\uff09 https://jprs.jp/tech/security/2026-08-12-powerdns-auth.html", "creation_timestamp": "2026-08-12T04:33:58.133402Z"}, {"uuid": "d411c2de-5e99-4d53-8ac5-fe2f0c3f6223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52879", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msjrc5bbpc2b", "content": "\ud83d\udfe0 CVE-2026-52879 - High (7.5)\n\nKlever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52879/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T00:00:49.262332Z"}, {"uuid": "009626aa-024c-4358-83fb-711843f8dd0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52878", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msjrbwd7al2w", "content": "\ud83d\udfe0 CVE-2026-52878 - High (7.5)\n\nKlever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52878/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T00:00:41.802717Z"}, {"uuid": "8b820df8-d092-4dc5-bb91-2a0e3254c152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52880", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msjrdieu5f2m", "content": "\ud83d\udfe0 CVE-2026-52880 - High (7.5)\n\nKlever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 throug...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52880/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T00:01:34.382243Z"}, {"uuid": "6fefe930-c2b8-4d34-8700-39eab59c9ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52886", "type": "published-proof-of-concept", "source": "Telegram/FHR8sTJaHxMdgYZj-FavirPOXM07ovPaeCJ2J24gHjC9VrE", "content": "", "creation_timestamp": "2026-08-08T00:12:52.774713Z"}, {"uuid": "e30bb8b7-7afc-4019-ab39-a79d049c5ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5229", "type": "seen", "source": "Telegram/6xSl8M-nlr0DVWrXfh1_Vgp809cFlu-RWegCg0E_A2g7m3o", "content": "", "creation_timestamp": "2026-05-26T09:00:04.000000Z"}, {"uuid": "81a1c9ac-a301-40e4-bf31-47959e374110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5229", "type": "seen", "source": "Telegram/0GiSZs1mYgE6usTH1T9gS9Io2DYBjx6aLN6oDmWf5dZhrI8", "content": "", "creation_timestamp": "2026-05-26T07:00:13.000000Z"}, {"uuid": "bb9107e1-d3dd-406f-8ef9-bd4e9ffc7018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52929", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtknspewo42v", "content": "PoC exploit code for CVE-2026-52929, a Linux kernel SCTP flaw, is public. A video shows root privilege escalation on Ubuntu 26.04.\n\n#CVE202652929 #LinuxKernel #SCTP #PrivilegeEscalation #PoC #infosec", "creation_timestamp": "2026-08-21T01:56:21.110432Z"}, {"uuid": "42df1ae4-4151-4a8a-ae14-eff0c76dd805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://gist.github.com/cyberupdates365/8c25b3e697367b53444620d88929c7e8", "content": "# Fix Chrome CVE-2026-5281: Google Chrome Zero-Day Exploit\n\nGoogle confirms active zero-day attacks. Patch the Chrome CVE-2026-5281 exploit now to secure your enterprise endpoints.\n\nRead our full technical breakdown to understand how the UAF memory corruption operates and how to verify your browser patch status.\n\n\ud83d\udd17 **[Read the Full Guide on CyberUpdates365](https://cyberupdates365.com/chrome-cve-2026-5281-fix-zero-day/)**", "creation_timestamp": "2026-08-12T06:47:30.928148Z"}, {"uuid": "a0a36c42-92f3-4a94-b8a3-daf54c7d13d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5296", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmvwjfgzfg2c", "content": "\ud83d\udd17 CVE : CVE-2026-1402, CVE-2026-2601, CVE-2026-2710, CVE-2026-4868, CVE-2026-5296, CVE-2026-6713, CVE-2026-8716", "creation_timestamp": "2026-05-28T11:35:08.078493Z"}, {"uuid": "1f21f087-7fac-4200-a445-6c5e9e7ffe52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52889", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mth4mwvuku24", "content": "\ud83d\udea8 CVE-2026-52889 \u2014 CVSS 9.8 CRITICAL\n\nFormie is a Craft CMS plugin for creating forms. Prior to 3.1.27, Formie can pass request-derived Hidden fi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-52889\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T16:10:54.105019Z"}, {"uuid": "a1a9c725-a3c1-4af9-9a3d-aa8f1377e8d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/cyberupdates365.bsky.social/post/3msun32ytj22d", "content": "Are you using Google Chrome? \ud83d\uded1 An actively exploited Zero-Day vulnerability (CVE-2026-5281) is in the wild. Hackers can execute code just from you visiting a page. Update and relaunch your browser immediately! Full details here:\ncyberupdates365.com/chrome-cve-2...\n#CyberSecurity #InfoSec #TechNews", "creation_timestamp": "2026-08-12T07:44:36.116836Z"}, {"uuid": "41eb7f85-04d8-4418-a351-152ca7ef91c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52723", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtestjgtg72p", "content": "\ud83d\udea8 CVE-2026-52723 \u2014 CVSS 9.1 CRITICAL\n\nePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-52723\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T18:10:18.550232Z"}, {"uuid": "84d242f1-46df-47cc-876d-1e8f625b7ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5241", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnffunrsrm2e", "content": "CVE-2026-5241 - Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers\nCVE ID : CVE-2026-5241\n \n Published : June 3, 2026, 2:16 p.m. | 57\u00a0minutes ago\n \n Description : A vulnerability in the LightGlue model loading path of huggingface/transformers versi...", "creation_timestamp": "2026-06-03T15:19:47.754594Z"}, {"uuid": "157d0d00-a949-45f8-9508-a4c73fcfa14e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5228", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mniq3d6wvj25", "content": "\ud83d\udfe0 CVE-2026-5228 - High (8.8)\n\nImproper Access Control, Missing Authorization vulnerability in Kurt Software Studio WriteUp Mobi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5228/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-04T23:00:29.112757Z"}, {"uuid": "10f9182a-9be1-4d4d-9536-49bb51e7152e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/52e07854-2c36-4672-a512-4c081843b1e2", "content": "", "creation_timestamp": "2026-08-17T09:00:26.754997Z"}, {"uuid": "f2707433-1fef-4a9f-9fa0-3d1688531ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://t.me/VulnerabilityNews/41656", "content": "Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome\n\nGoogle has announced fixes for CVE-2026-5281, a zero-day affecting Chrome\u2019s Dawn component.\u00a0\nThe post Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome appeared first on SecurityWeek.\nhttps://www.securityweek.com/exploited-zero-day-among-21-vulnerabilities-patched-in-chrome/", "creation_timestamp": "2026-08-18T19:00:06.033371Z"}, {"uuid": "b0d19e98-6d69-497a-8d62-dc7232573dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52778", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnshvh27vg2y", "content": "\ud83d\udd34 CVE-2026-52778 - Critical (9.8)\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, an unsafe execution vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52778/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-08T20:00:38.929970Z"}, {"uuid": "c081b98c-89a6-48b8-8ccf-7d4a9a59a01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52723", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtew6fc7cl2j", "content": "CVE-2026-52723 - epa3-service-opensource\nAn attacker between the ePA system and a medical device can intercept and manipulate sensitive patient data. This is a serious security risk because it allows an attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fbeta #CVE #infosec", "creation_timestamp": "2026-08-18T19:10:04.326816Z"}, {"uuid": "26f67ded-8e82-46c6-99f0-cbbcf12a98a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52776", "type": "published-proof-of-concept", "source": "https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-h47f-gmjp-m7rr", "content": "", "creation_timestamp": "2026-08-12T16:35:03.200751Z"}, {"uuid": "730a2791-dddd-44d6-898d-cd2c6830182c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52830", "type": "seen", "source": "https://t.me/pphm_HackerNews/1828", "content": "\ud83d\udd34 Critical fast-mcp-telegram Vulnerability Lets Attackers Access Telegram Session Without Token\n\nA critical vulnerability in fast-mcp-telegram (CVE-2026-52830, GHSA-rxw2-pc8j-vxwm) allows attackers to access a Telegram MCP session over HTTP without a valid bearer token by abusing a path-traversal flaw in how session files are resolved on disk.\n\nThis breaks the intended high-entropy token boundary and exposes the default Telegram account to full message and MTProto access.\n\nfast-mcp-telegram is a Telegram MCP server that bridges Telegram accounts to AI assistants and HTTP clients via a session-based authentication model.", "creation_timestamp": "2026-08-21T23:00:10.401355Z"}, {"uuid": "ee3ec6f5-7bfb-4d65-a464-b6b0017b9745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52778", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mntu5424d22s", "content": "CVE-2026-52778 - Critical ReDoS in YesWiki. Unpatched flaw in CalcField.php allows crash via regex denial of service on eval(). CVSS 9.8. Upgrade to 4.6.6 immediately. #CVE #YesWiki #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-52778/", "creation_timestamp": "2026-06-09T09:12:19.901837Z"}, {"uuid": "ebed5e2a-9bab-4608-92c4-2b1c92113c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52715", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98085", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-GeoLeak-CVE-2026-52715\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 686f6c61\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 18:37:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC funcional de CVE-2026-52715 (GeoLeak): SQLi no autenticada en GEO my WordPress <= 4.5.5 via swlatlng/nelatlng. Laboratorio Docker + exploit time-based/boolean-based + exfiltracion sin comas en payload.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-14T20:00:04.245197Z"}, {"uuid": "22ca5b48-c15a-4dcc-8832-38b801078b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52793", "type": "published-proof-of-concept", "source": "https://github.com/froxlor/froxlor/security/advisories/GHSA-f9rx-7wf7-jr36", "content": "", "creation_timestamp": "2026-05-29T06:32:36.000000Z"}, {"uuid": "190e64b4-e899-4bba-b4b0-2f6f58d91bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52880", "type": "published-proof-of-concept", "source": "https://github.com/klever-io/klever-go/security/advisories/GHSA-w4c6-7r69-w7j9", "content": "", "creation_timestamp": "2026-06-02T10:32:57.000000Z"}, {"uuid": "e7cae17a-15f8-4a2c-a4a9-b9715ed83df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52879", "type": "published-proof-of-concept", "source": "https://github.com/klever-io/klever-go/security/advisories/GHSA-hf2g-6j7h-98wg", "content": "", "creation_timestamp": "2026-06-02T10:32:40.000000Z"}, {"uuid": "1aa590d8-518a-48f3-8557-9f8e7e0ad6e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52878", "type": "published-proof-of-concept", "source": "https://github.com/klever-io/klever-go/security/advisories/GHSA-rm5c-5x2p-48wr", "content": "", "creation_timestamp": "2026-06-02T10:34:12.000000Z"}, {"uuid": "bae03b85-9351-4567-9852-7eb33c21e832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mnvyclz7ou22", "content": "Google Chrome\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3001\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\n\nGoogle\u306f\u3001\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u6df1\u523b\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\uff08CVE-2026-5281\uff09\u3092\u4fee\u6b63\u3059\u308b\u305f\u3081\u3001Chrome\u306e\u7dca\u6025\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002 Stable\u30c1\u30e3\u30f3\u30cd\u30eb\u306f\u3001Windows\u304a\u3088\u3073Mac\u5411\u3051\u306b\u30d0\u30fc\u30b8\u30e7\u30f3149.0.7827.102/.103\u3001Linux\u5411\u3051\u306b149.0.7827.", "creation_timestamp": "2026-06-10T05:32:18.805249Z"}, {"uuid": "5c8fa7df-f85f-47e7-9073-3121042dbb83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3mnwlmv624n2n", "content": "Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884)\n\nDiscussion", "creation_timestamp": "2026-06-10T11:18:20.087854Z"}, {"uuid": "279b85b4-b711-4fe4-8d66-2cb92ac29f52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mnwlpjjr3e22", "content": "Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884)\ncomments \u00b7 posted on 2026.06.10 at 05:28:40 (c=1, p=5)", "creation_timestamp": "2026-06-10T11:19:33.256164Z"}, {"uuid": "5b8a55a9-1c98-4767-8311-995c5474a08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "seen", "source": "https://bsky.app/profile/hackernewsbot.bsky.social/post/3mnwlqi37xp23", "content": "Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884) | Discussion", "creation_timestamp": "2026-06-10T11:20:05.719626Z"}, {"uuid": "db25eeee-b827-47a6-a9d1-19fc5cd65f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3mnwlsm7jik2c", "content": "Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884)\nDiscussion | hackernews | Author: ringzeropirate", "creation_timestamp": "2026-06-10T11:21:52.916716Z"}, {"uuid": "f94e41f4-d684-499e-b880-c9f4942108d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mnwmdrqrxc2q", "content": "Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884)\n\nhttps://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-p58x-r3c9-x9p6", "creation_timestamp": "2026-06-10T11:30:53.385979Z"}, {"uuid": "c7a254f7-a9da-4de7-966c-9a6b3f161f97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "seen", "source": "https://bsky.app/profile/betterhn20.e-work.xyz/post/3mnwo7xvt7d2u", "content": "Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884) https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-p58x-r3c9-x9p6 (https://news.ycombinator.com/item?id=48473731)", "creation_timestamp": "2026-06-10T12:04:33.003852Z"}, {"uuid": "e4de7075-487e-4360-94c7-949d2a3ab5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52759", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnwy3uedfc2f", "content": "CVE-2026-52759 - Ghidra\nCVE ID : CVE-2026-52759\n \n Published : June 10, 2026, 2:16 p.m. | 23\u00a0minutes ago\n \n Description : Ghidra before 12.1.1 contains an uncontrolled memory allocation vulnerability in the Mach-O binary parser that allows attackers to cause denial of service....", "creation_timestamp": "2026-06-10T15:01:12.203270Z"}, {"uuid": "771dde35-982e-4107-92d4-0ef5137f0d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52752", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnwy7pl2zb2m", "content": "CVE-2026-52752 - Ghidra\nCVE ID : CVE-2026-52752\n \n Published : June 10, 2026, 2:16 p.m. | 23\u00a0minutes ago\n \n Description : Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. Attackers...", "creation_timestamp": "2026-06-10T15:03:21.450253Z"}, {"uuid": "4a68e532-9e3e-4f37-bee0-793764c55cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52750", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnwynanusq2j", "content": "CVE-2026-52750 - Ghidra\nCVE ID : CVE-2026-52750\n \n Published : June 10, 2026, 2:16 p.m. | 23\u00a0minutes ago\n \n Description : Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe metacharacters are not properly escaped. ...", "creation_timestamp": "2026-06-10T15:10:55.639264Z"}, {"uuid": "55998198-3904-4693-b444-0f34e094d04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnwyymb62k2k", "content": "CVE-2026-52757 - Ghidra\nCVE ID : CVE-2026-52757\n \n Published : June 10, 2026, 2:16 p.m. | 23\u00a0minutes ago\n \n Description : Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. Attack...", "creation_timestamp": "2026-06-10T15:17:16.730636Z"}, {"uuid": "ba8434da-cb4c-402d-b555-f917949070e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnwz7deg5b2q", "content": "CVE-2026-52758 - Ghidra\nCVE ID : CVE-2026-52758\n \n Published : June 10, 2026, 2:16 p.m. | 23\u00a0minutes ago\n \n Description : Ghidra before 12.1 contains a SQL injection vulnerability in BSim filter types that concatenate user-supplied values directly into SQL queries without esca...", "creation_timestamp": "2026-06-10T15:21:06.039428Z"}, {"uuid": "c93f0e06-ab0f-4ee1-9c98-6b376613142c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52751", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnwzh4kpsh2r", "content": "CVE-2026-52751 - Ghidra\nCVE ID : CVE-2026-52751\n \n Published : June 10, 2026, 2:16 p.m. | 23\u00a0minutes ago\n \n Description : Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows unauthenticated remote co...", "creation_timestamp": "2026-06-10T15:27:19.882176Z"}, {"uuid": "f8e995bf-4678-4502-a8c4-11c2a5f4bc08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnwzq34mxv2k", "content": "CVE-2026-52755 - Ghidra\nCVE ID : CVE-2026-52755\n \n Published : June 10, 2026, 2:16 p.m. | 23\u00a0minutes ago\n \n Description : Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write files outside the intended th...", "creation_timestamp": "2026-06-10T15:30:24.455994Z"}, {"uuid": "4dd3ed7c-5ba4-4f1c-a92b-11945afb32fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnx2by7mii2j", "content": "CVE-2026-52756 - Ghidra\nCVE ID : CVE-2026-52756\n \n Published : June 10, 2026, 2:16 p.m. | 23\u00a0minutes ago\n \n Description : Ghidra before 12.2 contains an unauthenticated path traversal vulnerability in the IsfServer that accepts TCP connections and passes client-supplied namesp...", "creation_timestamp": "2026-06-10T15:40:45.207677Z"}, {"uuid": "5a63e927-ecd3-4867-98af-6a5549799806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52726", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxw7rkajz2g", "content": "\ud83d\udfe0 CVE-2026-52726 - High (7.5)\n\nDulwich is a pure-Python implementation of the Git file formats and protocols. Starting in versio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52726/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T00:00:17.080757Z"}, {"uuid": "e0ac51a0-ac9c-4d9b-973b-f500163f71ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "seen", "source": "https://bsky.app/profile/sagalinked.bsky.social/post/3mny3xvfhz227", "content": "\ud83d\udcf0 A critical security vulnerability has been discovered in Notepad++, allowing for remote code execution via path traversal (CVE-2026-52884).\n\n\ud83d\udd17 https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-p58x-r3c9-x9p6\n\n#Tech #Dev", "creation_timestamp": "2026-06-11T01:43:14.272238Z"}, {"uuid": "a30e70b8-c486-48f8-854c-a5e7713a0c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52726", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mny4gmq7qk24", "content": "CVE-2026-52726 - Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload\nCVE ID : CVE-2026-52726\n \n Published : June 10, 2026, 11:16 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Descripti...", "creation_timestamp": "2026-06-11T01:51:28.006063Z"}, {"uuid": "c38df89b-fcdc-4520-b6c6-3017aac8b420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52750", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mny5f7ym472n", "content": "CVE-2026-52750 - Command Injection in Ghidra on Windows. Malicious URLs in comments execute arbitrary commands. CVSS 7.8. Disable URL clicking or block untrusted files. #CVE #Ghidra #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-52750/", "creation_timestamp": "2026-06-11T02:08:34.908489Z"}, {"uuid": "a2201426-0143-4da3-a787-1e8e476bbcdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mny6npocp42d", "content": "Top 3 CVE for last 7 days:\nCVE-2025-10263: 24 interactions\nCVE-2026-11645: 23 interactions\nCVE-2015-5119: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2025-10263: 22 interactions\nCVE-2026-10520: 17 interactions\nCVE-2026-52884: 7 interactions\n", "creation_timestamp": "2026-06-11T02:31:14.547717Z"}, {"uuid": "165c89fa-edfd-4544-a5ff-4dfedf431e50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5208", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnz6tjfkrs2o", "content": "\ud83d\udccc CVE-2026-5208 - Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash ... https://www.cyberhub.blog/cves/CVE-2026-5208", "creation_timestamp": "2026-06-11T12:07:08.039079Z"}, {"uuid": "2941fa56-e3dc-4588-b1c4-bee8930d9290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52758", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnziveizyk22", "content": "\ud83d\udccc CVE-2026-52758 - Ghidra before 12.1 contains a SQL injection vulnerability in BSim filter types that concatenate user-supplied values directly into SQL queries without... https://www.cyberhub.blog/cves/CVE-2026-52758", "creation_timestamp": "2026-06-11T15:07:07.665755Z"}, {"uuid": "25f5c6b9-d97b-4f2a-be8f-2330b15346a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52751", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo24z3qhlg2i", "content": "\ud83d\udccc CVE-2026-52751 - Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows unauthenticated remo... https://www.cyberhub.blog/cves/CVE-2026-52751", "creation_timestamp": "2026-06-11T21:07:07.317706Z"}, {"uuid": "730845e0-b87a-4f6d-b3a7-bf1ba8260e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52754", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo26oplrgz2o", "content": "\ud83d\udccc CVE-2026-52754 - Ghidra before 12.1 contains an authentication bypass vulnerability in PKIAuthenticationModule.authenticate() that allows any user with a valid CA-sign... https://www.cyberhub.blog/cves/CVE-2026-52754", "creation_timestamp": "2026-06-11T21:37:06.372679Z"}, {"uuid": "73987348-87c1-482e-a3d6-1e2d55e9b61d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52608", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjild7mo725", "content": "CVE-2026-52608\nAn unauthenticated attacker can inject malicious PHP code into reports, potentially allowing them to execute arbitrary commands on the server. This could lead to data theft or server compromise. Update to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-20T14:50:04.346864Z"}, {"uuid": "6aff7016-b42c-4b7c-aea2-579a66c25f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-52704", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3modkepmag52l", "content": "WooCommerce PDF Invoice Builder plugin (\u22642.0.8) hit by CRITICAL RCE flaw (CVE-2026-52704) \u2014 no patch yet. Disable or remove plugin ASAP to avoid total compromise. Details: https://radar.offseq.com/threat/cve-2026-52704-cwe-94-improper-control-of-generati-76aad4c5 #OffSeq #WordPress #Security", "creation_timestamp": "2026-06-15T15:00:13.845365Z"}, {"uuid": "ca5ab256-93fa-4329-909f-b6bd0c3f5d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-52704", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116754717813611535", "content": "\ud83d\udea8 CRITICAL: CVE-2026-52704 in WooCommerce PDF Invoice Builder \u22642.0.8 enables remote code execution via code injection (CWE-94). No patch yet \u2014 disable/remove plugin to prevent full system compromise. More info: https://radar.offseq.com/threat/cve-2026-52704-cwe-94-improper-control-of-generati-76aad4c5 #OffSeq #WordPress #Vuln", "creation_timestamp": "2026-06-15T15:00:19.650179Z"}, {"uuid": "61f278ff-3a57-4cdc-9bf6-6a8d2d09c35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52704", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3modnisap7l2x", "content": "CVE-2026-52704 - WordPress WooCommerce PDF Invoice Builder plugin\nCVE ID : CVE-2026-52704\n \n Published : June 15, 2026, 2:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : Improper Control of Generation of Code ('Code Injection') vulnerability in Edgar Rojas WooCommerce PDF In...", "creation_timestamp": "2026-06-15T15:56:20.011956Z"}, {"uuid": "7005f256-e643-4f5b-b272-fe6deb904d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5233", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3modo5vhfge2v", "content": "CVE-2026-5233 - Missing Rate Limiting in Mia Technologies' Pizzy Library\nCVE ID : CVE-2026-5233\n \n Published : June 15, 2026, 2:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : Improper Control of Interaction Frequency vulnerability in MIA Technology Inc. Pizzy Library allows...", "creation_timestamp": "2026-06-15T16:07:59.546052Z"}, {"uuid": "9fd62687-2e2e-4141-9051-ba04ef2c0431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3modoceu4652d", "content": "CVE-2026-5242 - Code Injection in Mia Technologies' Pizzy Library\nCVE ID : CVE-2026-5242\n \n Published : June 15, 2026, 2:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : Improper neutralization of formula elements in a CSV file vulnerability in MIA Technology Inc. Pizzy Libra...", "creation_timestamp": "2026-06-15T16:10:29.839668Z"}, {"uuid": "dc1e75a1-d524-40e5-b83c-7b8c25c1b3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5230", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3modpsvyaeb2b", "content": "CVE-2026-5230 - Improper Access Control in Mia Technologies' Pizzy Library\nCVE ID : CVE-2026-5230\n \n Published : June 15, 2026, 2:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : Improper Access Control, Missing Authorization vulnerability in MIA Technology Inc. Pizzy Library...", "creation_timestamp": "2026-06-15T16:37:38.418760Z"}, {"uuid": "6d16b371-ec9d-4a40-a28c-714b74513da5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5242", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3modulbmoiu2n", "content": "\ud83d\udfe0 CVE-2026-5242 - High (8.8)\n\nImproper neutralization of formula elements in a CSV file vulnerability in MIA Technology Inc. Pi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5242/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T18:02:52.235770Z"}, {"uuid": "03fa136e-aa74-46ff-a0bb-a3f59f21d3bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52704", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3modulj4fol22", "content": "\ud83d\udd34 CVE-2026-52704 - Critical (10)\n\nImproper Control of Generation of Code ('Code Injection') vulnerability in Edgar Rojas WooCommerc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52704/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T18:03:00.759613Z"}, {"uuid": "abe20c49-64ff-474c-a634-e342ea5b9b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52720", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe3rrgugs2w", "content": "CVE-2026-52720 - Gstreamer1-plugins-bad-free: gstreamer: heap buffer overflow via crafted vnc server rectangle in librfb\nCVE ID : CVE-2026-52720\n \n Published : June 15, 2026, 7:15 p.m. | 26\u00a0minutes ago\n \n Description : A heap buffer overflow vulnerability was found in GStreame...", "creation_timestamp": "2026-06-15T20:11:45.082041Z"}, {"uuid": "0dc9b4b6-731a-497a-b94c-3f8344210022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52721", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe4bt4hen2w", "content": "CVE-2026-52721 - Gstreamer1-plugins-bad-free: gstreamer: multiple out-of-bounds reads in pcapparse ipv4/tcp header parsing\nCVE ID : CVE-2026-52721\n \n Published : June 15, 2026, 7:10 p.m. | 31\u00a0minutes ago\n \n Description : Multiple out-of-bounds read vulnerabilities were found i...", "creation_timestamp": "2026-06-15T20:20:43.624389Z"}, {"uuid": "0607dbfd-6206-48ae-821a-ccff0b64bd6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52719", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe4m3klva2b", "content": "CVE-2026-52719 - Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds read via jpeg segment length validation in va decoder\nCVE ID : CVE-2026-52719\n \n Published : June 15, 2026, 7:10 p.m. | 31\u00a0minutes ago\n \n Description : An out-of-bounds read vulnerability was found in the V...", "creation_timestamp": "2026-06-15T20:26:28.090376Z"}, {"uuid": "c4f70e5f-5f99-459f-9b21-4326a69a3f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52722", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe5ah73xo2y", "content": "CVE-2026-52722 - Gstreamer1-plugins-bad-free: gstreamer: signed integer overflow in vmnc decoder cursor payload handling\nCVE ID : CVE-2026-52722\n \n Published : June 15, 2026, 7:15 p.m. | 26\u00a0minutes ago\n \n Description : A signed integer overflow vulnerability was found in GStre...", "creation_timestamp": "2026-06-15T20:37:51.353354Z"}, {"uuid": "ace53f0a-79e4-4cf7-8cf8-c9301293ee9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52718", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe6n7ygzu2v", "content": "CVE-2026-52718 - Gstreamer1-plugins-bad-free: gstreamer: denial of service via av1 tile_list_obu parser byte/bit confusion\nCVE ID : CVE-2026-52718\n \n Published : June 15, 2026, 7:15 p.m. | 26\u00a0minutes ago\n \n Description : A denial of service vulnerability was found in GStreamer...", "creation_timestamp": "2026-06-15T21:02:54.074304Z"}, {"uuid": "40ff1527-bb60-4f83-90c5-7c3185a9d383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52697", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moebpnpmxf2p", "content": "CVE-2026-52697 - WordPress Taskbuilder plugin\nCVE ID : CVE-2026-52697\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Subscriber SQL Injection in Taskbuilder <= 5.0.7 versions.\n \n Severity: 8.5 | HIGH\n \n Visit the link for more details, such as CVS...", "creation_timestamp": "2026-06-15T21:57:56.493886Z"}, {"uuid": "284dd528-7d8d-47fe-b71e-de2d991ca364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52694", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moebumcksd2i", "content": "\ud83d\udfe0 CVE-2026-52694 - High (7.5)\n\nUnauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce <= 2.0 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52694/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T22:00:43.516018Z"}, {"uuid": "da2c8d5e-d7bd-49d2-9789-decee7093838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52695", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moebut72by2n", "content": "\ud83d\udfe0 CVE-2026-52695 - High (7.5)\n\nUnauthenticated Sensitive Data Exposure in ABC Crypto Checkout <= 1.8.2 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52695/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T22:00:50.675561Z"}, {"uuid": "c065f6c6-5138-4568-b2d2-fd00ab7d148f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52697", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moebw3cgrk2v", "content": "\ud83d\udfe0 CVE-2026-52697 - High (8.5)\n\nSubscriber SQL Injection in Taskbuilder <= 5.0.7 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52697/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T22:01:32.710688Z"}, {"uuid": "47c7bbc5-07d7-4cf5-afcb-01daa7e59a37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52699", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moebwccie52y", "content": "\ud83d\udfe0 CVE-2026-52699 - High (7.5)\n\nUnauthenticated Insecure Direct Object References (IDOR) in VikRentCar <= 1.4.5 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52699/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T22:01:40.283706Z"}, {"uuid": "976029a1-e95d-4ab5-8255-148e21792db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52700", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moebwj2hkn26", "content": "\ud83d\udfe0 CVE-2026-52700 - High (8.5)\n\nSubscriber SQL Injection in WCMultiShipping <= 3.0.2 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52700/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T22:01:47.233761Z"}, {"uuid": "9fb4fa21-968a-4453-b69d-fc024572da8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52700", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moebymanjo2b", "content": "CVE-2026-52700 - WordPress WCMultiShipping plugin\nCVE ID : CVE-2026-52700\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions.\n \n Severity: 8.5 | HIGH\n \n Visit the link for more details, suc...", "creation_timestamp": "2026-06-15T22:02:57.010704Z"}, {"uuid": "463970cf-0b5a-4e89-a1bc-2fff52538b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52693", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moecblu3xg22", "content": "CVE-2026-52693 - WordPress eCommerce Product Catalog plugin\nCVE ID : CVE-2026-52693\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.\n \n Severity: 9.3 | CRITICAL\n \n Visit t...", "creation_timestamp": "2026-06-15T22:07:58.605290Z"}, {"uuid": "b9d526a4-4916-48f5-947c-31a7894fe0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52703", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moeckkecr52j", "content": "CVE-2026-52703 - WordPress FastDup plugin\nCVE ID : CVE-2026-52703\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.\n \n Severity: 9.6 | CRITICAL\n \n Visit the link for more details, such as C...", "creation_timestamp": "2026-06-15T22:12:59.148333Z"}, {"uuid": "ac81a869-729e-4e32-8a37-4e12f2c066c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52703", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moefb56g4m2n", "content": "\ud83d\udd34 CVE-2026-52703 - Critical (9.6)\n\nUnauthenticated Path Traversal in FastDup <= 2.7.2 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52703/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T23:01:25.046475Z"}, {"uuid": "10efc950-1edf-45bc-a662-4bf31efde9b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52692", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moefbee6n22n", "content": "\ud83d\udfe0 CVE-2026-52692 - High (7.5)\n\nUnauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52692/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T23:01:32.612743Z"}, {"uuid": "9fccf661-5d8a-4c61-9e14-f34f268fac2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52702", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moei6c4drq2j", "content": "CVE-2026-52702 - WordPress SEO Redirection plugin\nCVE ID : CVE-2026-52702\n \n Published : June 15, 2026, 9:17 p.m. | 2\u00a0hours, 24\u00a0minutes ago\n \n Description : Unauthenticated Cross Site Scripting (XSS) in SEO Redirection <= 9.17 versions.\n \n Severity: 7.1 | HIGH\n \n Visit the ...", "creation_timestamp": "2026-06-15T23:53:30.289794Z"}, {"uuid": "7896236a-3794-4069-8a38-3ac91b9cf49d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52695", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moeiifsxce2m", "content": "CVE-2026-52695 - WordPress ABC Crypto Checkout plugin\nCVE ID : CVE-2026-52695\n \n Published : June 15, 2026, 9:17 p.m. | 2\u00a0hours, 24\u00a0minutes ago\n \n Description : Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout <= 1.8.2 versions.\n \n Severity: 7.5 | HIGH\n \n Visi...", "creation_timestamp": "2026-06-15T23:59:09.726037Z"}, {"uuid": "0dea03ef-6073-4c7c-be54-16315f8e8c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52699", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moeizrwkeq2a", "content": "CVE-2026-52699 - WordPress VikRentCar plugin\nCVE ID : CVE-2026-52699\n \n Published : June 15, 2026, 9:17 p.m. | 2\u00a0hours, 24\u00a0minutes ago\n \n Description : Unauthenticated Insecure Direct Object References (IDOR) in VikRentCar <= 1.4.5 versions.\n \n Severity: 7.5 | HIGH\n \n Visit...", "creation_timestamp": "2026-06-16T00:08:52.776544Z"}, {"uuid": "b4aa49b0-f41f-47c5-92e0-7fa3615373c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52693", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moelwr42op2n", "content": "\ud83d\udd34 CVE-2026-52693 - Critical (9.3)\n\nUnauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52693/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T01:00:53.565485Z"}, {"uuid": "fb90b7ea-7934-48ba-8446-af3aca2ef924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-52703", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moexnkgnj42p", "content": "CRITICAL alert \ud83d\udea8: Ninja Team FastDup (<=2.7.2) hit by unauthenticated path traversal flaw. Review deployments, restrict access, and watch for patches! https://radar.offseq.com/threat/cve-2026-52703-cwe-35-path-traversal-in-ninja-team-07f46330 #OffSeq #vulnerability #security", "creation_timestamp": "2026-06-16T04:30:28.904848Z"}, {"uuid": "7d6ef00d-f061-42bf-acbd-0717249bad90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-52703", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116757903852347463", "content": "\u26a0\ufe0f CRITICAL: CVE-2026-52703 in Ninja Team FastDup (<=2.7.2) enables unauthenticated path traversal. Attackers could access restricted files. Monitor for vendor updates and restrict access! https://radar.offseq.com/threat/cve-2026-52703-cwe-35-path-traversal-in-ninja-team-07f46330 #OffSeq #vulnerability #infosec", "creation_timestamp": "2026-06-16T04:30:29.604208Z"}, {"uuid": "976ca89d-2c83-4948-be32-e51fa51f8226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-52693", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mof4ohota627", "content": "CRITICAL: Unauthenticated SQL Injection in impleCode eCommerce Product Catalog <=3.5.5. Sensitive data at risk. Patch status unknown \u2014 implement input validation & monitor vendor. https://radar.offseq.com/threat/cve-2026-52693-cwe-89-improper-neutralization-of-s-53fcc5a2 #OffSeq #SQLInjection #ec...", "creation_timestamp": "2026-06-16T06:00:28.214051Z"}, {"uuid": "238d8b39-6fc5-43d2-8713-ea3b864fe9a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-52693", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116758257705278854", "content": "\ud83d\udd34 CRITICAL: CVE-2026-52693 in impleCode eCommerce Product Catalog <=3.5.5 enables unauthenticated SQL Injection. Sensitive data at risk \u2014 patch status unconfirmed. Apply input validation & watch for vendor updates. https://radar.offseq.com/threat/cve-2026-52693-cwe-89-improper-neutralization-of-s-53fcc5a2 #OffSeq #SQLInjection #Infosec #Vuln", "creation_timestamp": "2026-06-16T06:00:43.840125Z"}, {"uuid": "521f8009-33ff-4a92-ad36-81b0e93682fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52715", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mofnhilfdv24", "content": "\ud83d\udd34 CVE-2026-52715 - Critical (9.3)\n\nUnauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52715/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T11:00:47.829120Z"}, {"uuid": "5373532a-18f3-4e13-b0f7-9369b1e6b720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52715", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mofws5zfah22", "content": "CVE-2026-52715 - WordPress GEO my WordPress plugin\nCVE ID : CVE-2026-52715\n \n Published : June 16, 2026, 10:16 a.m. | 2\u00a0hours, 52\u00a0minutes ago\n \n Description : Unauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions.\n \n Severity: 9.3 | CRITICAL\n \n Visit the link ...", "creation_timestamp": "2026-06-16T13:47:54.394426Z"}, {"uuid": "8b05e257-70d0-4f45-8316-08172508592d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52711", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mofxjkmt4c2n", "content": "\ud83d\udfe0 CVE-2026-52711 - High (7.5)\n\nUnauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52711/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T14:00:54.838856Z"}, {"uuid": "0e9c594c-0541-4b7a-b23b-641d8d666d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52846", "type": "published-proof-of-concept", "source": "https://github.com/caddyserver/caddy/security/advisories/GHSA-vcc4-2c75-vc9v", "content": "", "creation_timestamp": "2026-06-08T22:24:11.000000Z"}, {"uuid": "0eafd9bc-c873-4dc6-8fb1-3af3a4eab02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52845", "type": "published-proof-of-concept", "source": "https://github.com/caddyserver/caddy/security/advisories/GHSA-f59h-q822-g45g", "content": "", "creation_timestamp": "2026-06-08T22:25:00.000000Z"}, {"uuid": "0d44be9d-dd4d-4473-be01-c9d4b26dadc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52844", "type": "published-proof-of-concept", "source": "https://github.com/caddyserver/caddy/security/advisories/GHSA-qrp7-cvwr-j2c6", "content": "", "creation_timestamp": "2026-06-08T22:24:46.000000Z"}, {"uuid": "645cc7d9-7573-4176-bc60-a5aaac503fa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mohtx2qxuf2b", "content": "\ud83c\udfed CISA adds Chrome CVE-2026-5281 to KEV (CVSS 8.8). Use\u2011after\u2011free in WebGPU Dawn, actively exploited. Patch to Chrome 146.0.7680.178 NOW.\n\nSource: CISA #CyberSecurity #InfoSec", "creation_timestamp": "2026-06-17T08:02:11.611947Z"}, {"uuid": "e6f6b8da-4f07-4bff-b9f7-6d53dacc4ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52705", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moigzsfneq25", "content": "CVE-2026-52705 - WordPress SigmaForms Pro \u2013 AI Generated Forms plugin\nCVE ID : CVE-2026-52705\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated Arbitrary File Upload in SigmaForms Pro \u2013 AI Generated Forms <= 1.4.5 versions.\n ...", "creation_timestamp": "2026-06-17T13:43:44.771758Z"}, {"uuid": "4b8b952f-4c17-4264-9a34-15e9ac799128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52706", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moihui2ijg2g", "content": "CVE-2026-52706 - WordPress JetEngine plugin\nCVE ID : CVE-2026-52706\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions.\n \n Severity: 9.8 | CRITICAL\n \n Visit the link for mor...", "creation_timestamp": "2026-06-17T13:58:39.798980Z"}, {"uuid": "abbea106-e41f-4ff0-9d83-adba22bafaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52735", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfa54nnq52p", "content": "\ud83d\udea8 CVE-2026-52735 \u2014 CVSS 9.3 CRITICAL\n\nZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block that zcashd reject...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-52735\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:08:19.096114Z"}, {"uuid": "d05b3614-f16a-4425-a3fe-99f5e3e4c2fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52673", "type": "seen", "source": "https://gist.github.com/onehang01/93d233a8aef2fc73294c25db8ca3b424", "content": "# Vulnerability Report: CVE-2026-52673 - CBoard - <=0.4.2 SQL Injection\n\n## Vulnerability Summary\nCboard v.0.4.2 and before contains a SQL Injection vulnerability in the `/cboard/dashboard/getDimensionValues.do` endpoint.\n\n## Vulnerability Details\nThis interface allows users to submit SQL query configurations. During processes including data source testing, field retrieval, dimension value querying, and aggregation querying, the backend directly concatenates SQL statements using user-supplied SQL or column name expressions and executes them via JDBC Statement.executeQuery().\nWithout parameterized queries in place and lacking effective allowlist validation for SQL structures and column name expressions, authenticated attackers can craft malicious SQL to perform arbitrary queries against the backend data source or bypass logical conditions.\nTested endpoint: /cboard/dashboard/getDimensionValues.do\nTest payload (URL-encoded):\ndatasourceId=1&query={\"sql\":\"SELECT 9 AS A\"}&colmunName=A*2\n\nThe backend computes and returns the result 18. This output verifies that the expression A*2 inside the colmunName parameter is concatenated into the final SQL statement and executed by the database, instead of being treated as a plain string. Attackers can abuse this vulnerability to extract sensitive data stored in the database.", "creation_timestamp": "2026-06-18T16:31:13.000000Z"}, {"uuid": "a8de4d54-9185-4d68-a402-708002a1ef9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52866", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-169-01", "content": "", "creation_timestamp": "2026-06-18T05:00:00.000000Z"}, {"uuid": "7f16ba41-2ac3-4e11-9735-22c9bec878b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52866", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3molmxpdsxc2g", "content": "~Cisa~\nVulnerabilities in Apollo Pharmacy Blood Glucose Monitors allow BLE interception of health data and DoS attacks.\n-\nIOCs: CVE-2026-50034, CVE-2026-52866\n-\n#CVE202650034 #CVE202652866 #ThreatIntel", "creation_timestamp": "2026-06-18T20:07:56.522640Z"}, {"uuid": "67c2d3d5-1569-453e-973c-5b29c09ba2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52885", "type": "published-proof-of-concept", "source": "Telegram/Twzxtbvyqic9grgE7JaZrbs3i9BOrZG8PBBvMyWgrTB7Ya8", "content": "", "creation_timestamp": "2026-06-09T19:00:13.000000Z"}, {"uuid": "165e7da7-5708-45cb-85b1-56fe2336d97e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ddba0c2f-8343-46c2-aa44-ddc4401cb837", "content": "", "creation_timestamp": "2026-06-19T12:45:14.059431Z"}, {"uuid": "5021cbfd-43e1-42fb-9d88-d8efbeb3384d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52942", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260806", "content": "", "creation_timestamp": "2026-08-06T04:45:47.102697Z"}, {"uuid": "62fbb1d0-955e-4df5-94c4-ce0aa727984f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52717", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3moqhuzmfw22w", "content": "Aten\u00e7\u00e3o, admins Debian! A CVE-2026-52717 no plugin ffmpeg do GStreamer (gst-libav1.0) pode comprometer seu sistema com um simples arquivo de m\u00eddia.  Saiba mais: -> tinyurl.com/2s4htzrr #Debian", "creation_timestamp": "2026-06-20T18:20:18.285978Z"}, {"uuid": "88b4b2e0-807d-4d0a-81e3-58c619fca760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52717", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3moqhv2i2ok2w", "content": "Aten\u00e7\u00e3o, admins Debian! A CVE-2026-52717 no plugin ffmpeg do GStreamer (gst-libav1.0) pode comprometer seu sistema com um simples arquivo de m\u00eddia.  Saiba mais: -> tinyurl.com/2s4htzrr #Debian", "creation_timestamp": "2026-06-20T18:20:18.833392Z"}, {"uuid": "5d53b63a-d3bc-4f36-8b34-f2e89c028a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52911", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3morvmyoclx2y", "content": "CVE-2026-52911 - ksmbd: scope conn->binding slowpath to bound sessions only\nCVE ID : CVE-2026-52911\n \n Published : June 21, 2026, 6:18 a.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: scope conn->bind...", "creation_timestamp": "2026-06-21T07:58:58.883274Z"}, {"uuid": "861f3806-e1b3-4827-aa91-ccdff2a9b59b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52715", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98085", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-GeoLeak-CVE-2026-52715\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 686f6c61\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 18:37:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC funcional de CVE-2026-52715 (GeoLeak): SQLi no autenticada en GEO my WordPress <= 4.5.5 via swlatlng/nelatlng. Laboratorio Docker + exploit time-based/boolean-based + exfiltracion sin comas en payload.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-15T00:00:13.811209Z"}, {"uuid": "b0cd6b53-07fc-48ff-be41-13420fd2bd3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52798", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-jq8v-rmf6-65jw", "content": "", "creation_timestamp": "2026-06-19T02:22:07.000000Z"}, {"uuid": "1e01c5cf-6c47-48a1-b3ae-598e32108b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52796", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-4j89-2c4f-44c6", "content": "", "creation_timestamp": "2026-06-19T02:22:15.000000Z"}, {"uuid": "035c089d-b1e7-422e-817d-3eb78c8a6188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52801", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-wv27-2vqp-j7g5", "content": "", "creation_timestamp": "2026-06-19T02:21:31.000000Z"}, {"uuid": "a252d680-e25d-4d6c-8be4-f95697835045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52801", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mowgfyzzvh2y", "content": "Open sign-ups plus one missing check means any account on your Gogs server can read repositories it was never given.\n\nSelf-hosted Gogs before 0.14.3 is affected (CVE-2026-52801).\n\nUpdate to 0.14.3 and turn off open registration.", "creation_timestamp": "2026-06-23T03:09:57.531300Z"}, {"uuid": "82b5027c-c3b0-4b98-b0b9-85a906b898c4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/72f7ab04-7ed1-4a4e-b87f-5e6f9f68d758", "content": "", "creation_timestamp": "2026-06-23T14:03:40.616592Z"}, {"uuid": "a58711c1-1969-442d-a81e-2d595a129df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52816", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-3w28-36p9-w929", "content": "", "creation_timestamp": "2026-06-19T02:19:23.000000Z"}, {"uuid": "dcc98614-e322-46d5-ab08-28e8542e4bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52815", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-744x-3838-5r56", "content": "", "creation_timestamp": "2026-06-19T02:17:16.000000Z"}, {"uuid": "39f768ac-e3d8-45c7-9933-12c9ffe78f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52814", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-xp79-5mx3-jx52", "content": "", "creation_timestamp": "2026-06-19T02:17:29.000000Z"}, {"uuid": "e16dcd34-f023-4f2e-a4ae-96ec76e53398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52813", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-c39w-43gm-34h5", "content": "", "creation_timestamp": "2026-06-19T02:17:38.000000Z"}, {"uuid": "56d65fd1-0a68-4a98-9884-e72e4f755a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52812", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-6p9m-q3jp-47h4", "content": "", "creation_timestamp": "2026-06-19T02:17:49.000000Z"}, {"uuid": "9c95ccc5-14f7-4b07-8faf-850cd391ff22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52811", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-89mr-xqfv-758m", "content": "", "creation_timestamp": "2026-06-19T02:18:08.000000Z"}, {"uuid": "0f136092-caf5-4f9b-8e19-b782f77ada15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52810", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-wmfg-5p4h-5fw3", "content": "", "creation_timestamp": "2026-06-19T02:18:21.000000Z"}, {"uuid": "4a7c8338-fef5-424f-b04c-df5096ffe847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52809", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-5c3f-6486-3g7g", "content": "", "creation_timestamp": "2026-06-19T02:19:01.000000Z"}, {"uuid": "fbda799c-0059-457d-9853-66a8df5153be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52808", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-268j-37xf-pp52", "content": "", "creation_timestamp": "2026-06-19T02:19:10.000000Z"}, {"uuid": "4f984149-fcbc-4449-8d71-982c8a1f597f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52807", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-vcm5-gvmp-78mp", "content": "", "creation_timestamp": "2026-06-19T02:19:30.000000Z"}, {"uuid": "bc7c939e-3494-4068-b50d-28e10b84712d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52806", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-qf6p-p7ww-cwr9", "content": "", "creation_timestamp": "2026-06-19T02:19:43.000000Z"}, {"uuid": "ce765f92-88d5-43ad-8014-3a55870b4203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52802", "type": "published-proof-of-concept", "source": "https://github.com/gogs/gogs/security/advisories/GHSA-xxhq-69mf-w8cr", "content": "", "creation_timestamp": "2026-06-19T02:21:21.000000Z"}, {"uuid": "cc790936-0072-4144-968d-8e17b38934cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52844", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moy756hrqk2r", "content": "CVE-2026-52844 - Caddy: Windows `file_server` path authorization bypass via encoded backslash\nCVE ID : CVE-2026-52844\n \n Published : June 23, 2026, 5:50 p.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : Caddy is an extensible server platform that uses TLS by default. Prior to 2.1...", "creation_timestamp": "2026-06-23T20:05:07.189195Z"}, {"uuid": "f0da7cd4-6fb3-409a-b61b-17d5fa49f794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52846", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moy7pw3teh25", "content": "CVE-2026-52846 - Caddy: stripHTML template function bypass\nCVE ID : CVE-2026-52846\n \n Published : June 23, 2026, 5:47 p.m. | 1\u00a0hour, 56\u00a0minutes ago\n \n Description : Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, Caddy\u2019s stripHTML template fun...", "creation_timestamp": "2026-06-23T20:15:32.838887Z"}, {"uuid": "cf657ec4-1c44-4481-ac92-9431050676b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52845", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moya4fjjjv2t", "content": "CVE-2026-52845 - Caddy: FastCGI header normalization bypass in `forward_auth copy_headers`\nCVE ID : CVE-2026-52845\n \n Published : June 23, 2026, 5:52 p.m. | 1\u00a0hour, 52\u00a0minutes ago\n \n Description : Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4...", "creation_timestamp": "2026-06-23T20:22:31.379265Z"}, {"uuid": "50204c27-0cdd-4011-b12c-e51bf8c63dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52844", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moyjjmoi3g2j", "content": "CVE-2026-52844 - Path Traversal in Caddy on Windows. CVSS 7.5. Unauthenticated remote attackers can bypass auth/deny routes protecting /private/*. Fixed in 2.11.4. Update immediately. #CVE #Caddy #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-52844/", "creation_timestamp": "2026-06-23T23:10:58.839661Z"}, {"uuid": "86408728-f049-4928-a384-a0c61e90e8cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52844", "type": "seen", "source": "https://bsky.app/profile/netalexx.bsky.social/post/3moykdgad322x", "content": "CVE-2026-52844 is a critical path traversal vulnerability affecting Caddy", "creation_timestamp": "2026-06-23T23:25:26.472446Z"}, {"uuid": "cca76f05-f29a-4e72-998c-e56a1c79d820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52940", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116804178176541056", "content": "There is a new vulnerability with elevated criticality in Linux Kernel (CVE-2026-52940) https://vuldb.com/vuln/373201", "creation_timestamp": "2026-06-24T08:38:38.105201Z"}, {"uuid": "3019e603-3dbd-4eb1-aec2-25cdaf975682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52815", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52815.yaml", "content": "", "creation_timestamp": "2026-06-24T03:43:07.000000Z"}, {"uuid": "f9727e6d-84fd-4370-8d3f-d687456ec5a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52919", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116804018776035123", "content": "A severe vulnerability was disclosed for Linux Kernel (CVE-2026-52919) https://vuldb.com/vuln/373158", "creation_timestamp": "2026-06-24T07:58:04.603063Z"}, {"uuid": "e883e4c2-23b3-4a6e-b94f-b6170c1430eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52935", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116804074266316465", "content": "There is a new vulnerability with elevated criticality in Linux Kernel (CVE-2026-52935) https://vuldb.com/vuln/373186", "creation_timestamp": "2026-06-24T08:12:12.186155Z"}, {"uuid": "abfeb5d3-a4dc-41d5-8abe-969d7cd93073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52937", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116804125485299247", "content": "The severity is increased for this new vulnerability affecting Linux Kernel (CVE-2026-52937) https://vuldb.com/vuln/373199", "creation_timestamp": "2026-06-24T08:25:16.088520Z"}, {"uuid": "a484d1ba-ec34-447a-966e-6f26d358dfb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52929", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozna5kmu52k", "content": "CVE-2026-52929 - sctp: stream: fully roll back denied add-stream state\nCVE ID : CVE-2026-52929\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: stream: fully roll back ...", "creation_timestamp": "2026-06-24T09:49:55.768829Z"}, {"uuid": "4fe69eec-fa6e-446c-98ab-58b7917441ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52926", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moznf2667h2i", "content": "CVE-2026-52926 - batman-adv: clear current gateway during teardown\nCVE ID : CVE-2026-52926\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: clear current gateway ...", "creation_timestamp": "2026-06-24T09:52:39.883872Z"}, {"uuid": "a09821b7-ee76-49b5-9982-65af3212b1cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52934", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moznkg7gwb2g", "content": "CVE-2026-52934 - batman-adv: tvlv: reject oversized TVLV packets\nCVE ID : CVE-2026-52934\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: tvlv: reject oversized T...", "creation_timestamp": "2026-06-24T09:55:40.530606Z"}, {"uuid": "fd36d250-a1ba-4415-9ad9-8bd913725876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52925", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moznqfczce2t", "content": "CVE-2026-52925 - vrf: Fix a potential NPD when removing a port from a VRF\nCVE ID : CVE-2026-52925\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nvrf: Fix a potential NPD wh...", "creation_timestamp": "2026-06-24T09:59:00.752685Z"}, {"uuid": "74cc438e-e53a-45ab-9a60-b586906e4b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52931", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moznx4fjsb23", "content": "CVE-2026-52931 - batman-adv: tp_meter: avoid use of uninit sender vars\nCVE ID : CVE-2026-52931\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: tp_meter: avoid us...", "creation_timestamp": "2026-06-24T10:02:46.455772Z"}, {"uuid": "fb69b1cc-73da-4b01-af9c-3ed879ffb41a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52932", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozo6s6jhj2y", "content": "CVE-2026-52932 - xfrm: ipcomp: Free destination pages on acomp errors\nCVE ID : CVE-2026-52932\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: ipcomp: Free destination ...", "creation_timestamp": "2026-06-24T10:07:06.658258Z"}, {"uuid": "d191d7fd-0165-4040-8279-f08b1b10cea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozohsj3cz2i", "content": "CVE-2026-52933 - io_uring/poll: fix signed comparison in io_poll_get_ownership()\nCVE ID : CVE-2026-52933\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/poll: fix s...", "creation_timestamp": "2026-06-24T10:12:06.647423Z"}, {"uuid": "03d7f2e4-a9ba-46eb-8819-42e60f5affaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52927", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozoqr7m7c2m", "content": "CVE-2026-52927 - netfilter: ebtables: fix OOB read in compat_mtw_from_user\nCVE ID : CVE-2026-52927\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: fix O...", "creation_timestamp": "2026-06-24T10:17:06.911811Z"}, {"uuid": "34da2efc-3d42-4c0a-92f2-374d8ab10e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52928", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozozpza2w2f", "content": "CVE-2026-52928 - af_unix: Reject SIOCATMARK on non-stream sockets\nCVE ID : CVE-2026-52928\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: Reject SIOCATMARK on non-s...", "creation_timestamp": "2026-06-24T10:22:07.706189Z"}, {"uuid": "581c7fd9-953f-4946-a1b6-12041af28b7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52937", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozpcolbgn2y", "content": "CVE-2026-52937 - tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR\nCVE ID : CVE-2026-52937\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\ntap: fix stack info leak in ta...", "creation_timestamp": "2026-06-24T10:27:08.186136Z"}, {"uuid": "ef76cb7e-97f5-4302-b946-964d377975fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52935", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozpln4nyf2k", "content": "CVE-2026-52935 - xfrm: espintcp: do not reuse an in-progress partial send\nCVE ID : CVE-2026-52935\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: espintcp: do not reus...", "creation_timestamp": "2026-06-24T10:32:08.730069Z"}, {"uuid": "106501d4-9121-40e8-9980-cbac3f188513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52930", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozpngvuvj2t", "content": "CVE-2026-52930 - ipc/shm: serialize orphan cleanup with shm_nattch updates\nCVE ID : CVE-2026-52930\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nipc/shm: serialize orphan ...", "creation_timestamp": "2026-06-24T10:33:09.208132Z"}, {"uuid": "04812826-80cd-4382-be2e-837e12104fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52936", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozptg2oal2m", "content": "CVE-2026-52936 - crypto: jitterentropy - replace long-held spinlock with mutex\nCVE ID : CVE-2026-52936\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: jitterentropy ...", "creation_timestamp": "2026-06-24T10:36:29.596168Z"}, {"uuid": "7d34323c-2317-4b57-b8e6-6c1b4f5a3bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52938", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozq25cdjg2m", "content": "CVE-2026-52938 - bpf: Fix NULL pointer dereference in bpf_sk_storage_clone and diag paths\nCVE ID : CVE-2026-52938\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 29\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix NU...", "creation_timestamp": "2026-06-24T10:40:15.522585Z"}, {"uuid": "15779e43-cae2-4753-a903-90ccd84bf6df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52940", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozqbszocp2x", "content": "CVE-2026-52940 - tun: zero the whole vnet header in tun_put_user()\nCVE ID : CVE-2026-52940\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 29\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\ntun: zero the whole vnet header in...", "creation_timestamp": "2026-06-24T10:44:32.919306Z"}, {"uuid": "e149614b-0493-455b-b7d3-b620340076eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52941", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozqkrljyh2t", "content": "CVE-2026-52941 - net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint\nCVE ID : CVE-2026-52941\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 29\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: avoid NU...", "creation_timestamp": "2026-06-24T10:49:33.662486Z"}, {"uuid": "f6ea6839-2cc9-48de-a6ed-425a79773eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52939", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozqtqd6ep23", "content": "CVE-2026-52939 - net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion\nCVE ID : CVE-2026-52939\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 29\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nnet...", "creation_timestamp": "2026-06-24T10:54:34.276939Z"}, {"uuid": "6484ae83-b830-4ab7-94ed-b585be62e823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52942", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mozr4oruxj2k", "content": "CVE-2026-52942 - netfilter: nf_log: validate MAC header was set before dumping it\nCVE ID : CVE-2026-52942\n \n Published : June 24, 2026, 7:14 a.m. | 2\u00a0hours, 29\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_log: ...", "creation_timestamp": "2026-06-24T10:59:34.647226Z"}, {"uuid": "09c6aeb9-130c-40b3-a931-96f645381a11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52937", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116804848954646212", "content": "Some increased actor activities are shown targeting Linux Kernel (CVE-2026-52937) https://vuldb.com/vuln/373199/cti", "creation_timestamp": "2026-06-24T11:29:12.396800Z"}, {"uuid": "87398d1a-f53c-4a8f-b14c-cc29fbc109a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52971", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116806461162472827", "content": "We have just added an important vulnerability affecting Linux Kernel (CVE-2026-52971) https://vuldb.com/vuln/373320", "creation_timestamp": "2026-06-24T18:19:12.629695Z"}, {"uuid": "aabcfe5f-4b46-42ee-a71e-5a9d87f982c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52982", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116806516142028189", "content": "There is a new vulnerability with elevated criticality in Linux Kernel (CVE-2026-52982) https://vuldb.com/vuln/373351", "creation_timestamp": "2026-06-24T18:33:11.664951Z"}, {"uuid": "4e703b8f-d1a2-46e4-9456-3acc03544b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52991", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116806566941197022", "content": "We have just added an important vulnerability affecting Linux Kernel (CVE-2026-52991) https://vuldb.com/vuln/373355", "creation_timestamp": "2026-06-24T18:46:06.455755Z"}, {"uuid": "52f5064d-8868-4dc0-925c-1f5ca2c025eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xafiefx25", "content": "CVE-2026-52810 - Gogs: Write to readonly repositories using receive-pack + service=git-upload-pack confusion\nCVE ID : CVE-2026-52810\n \n Published : June 24, 2026, 8:30 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : Gogs is an open source self-hosted Git service. Prior to 0.14....", "creation_timestamp": "2026-06-24T22:21:41.236485Z"}, {"uuid": "dfed1a35-1b7b-486a-936c-c02b7f92ad55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52797", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xjwx3ej2f", "content": "CVE-2026-52797 - Gogs: Overwriting critical files results in a denial of service\nCVE ID : CVE-2026-52797\n \n Published : June 24, 2026, 8:35 p.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : Gogs is an open source self-hosted Git service. Prior to 0.14.0, as an authorized user, an ...", "creation_timestamp": "2026-06-24T22:27:01.461398Z"}, {"uuid": "bbce403c-90b8-4671-83a9-4dbd5d7e1233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52812", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2y72dynn2f", "content": "CVE-2026-52812 - Gogs: LFS dedupe path leaks private repo content across tenants\nCVE ID : CVE-2026-52812\n \n Published : June 24, 2026, 8:32 p.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git LFS storage is conten...", "creation_timestamp": "2026-06-24T22:38:49.633943Z"}, {"uuid": "ffa8dc21-6f87-4b08-9006-efe01af92802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52811", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2yysdqds2t", "content": "CVE-2026-52811 - Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym\nCVE ID : CVE-2026-52811\n \n Published : June 24, 2026, 8:31 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : Gogs is an open source self-hosted Git service. Prior to 0.14.3, (*Reposit...", "creation_timestamp": "2026-06-24T22:53:13.632118Z"}, {"uuid": "dc6f1976-db52-4d5a-a42a-d3897d100429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2zkpdboz2l", "content": "CVE-2026-52813 - Gogs: Path Traversal in organization name results in RCE through Git hooks\nCVE ID : CVE-2026-52813\n \n Published : June 24, 2026, 8:33 p.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization n...", "creation_timestamp": "2026-06-24T23:03:14.612680Z"}, {"uuid": "33c6b7a7-5501-4988-8d1c-e9803cdc874b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52815", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52815.yaml", "content": "", "creation_timestamp": "2026-06-25T00:00:02.277559Z"}, {"uuid": "02467dc1-11b6-4bdc-84aa-884edca16825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52943", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116810225692140650", "content": "Some increased actor activities are shown targeting Linux Kernel (CVE-2026-52943) https://vuldb.com/vuln/373239/cti", "creation_timestamp": "2026-06-25T10:16:35.264924Z"}, {"uuid": "48e9c8f7-c2bd-4c60-b032-2a1275903609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52815", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52815.yaml", "content": "", "creation_timestamp": "2026-06-26T00:00:02.187275Z"}, {"uuid": "6177690a-07e7-456b-940e-608d91ea0303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mp7xhjvf6h2q", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-52884](https://github.com/notepad-plus-plus/notepad-plus-plus/commit/ea1508855e9c4528f6...\nhttps://github.com/notepad-plus-plus/notepad-plus-plus/commit/ea1508855e9c4528f6198ce9d345f13cb759ebf4 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-06-26T22:08:59.488257Z"}, {"uuid": "a663e300-3be2-4d78-9760-9c350c9fdc6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52885", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7xwnrx5d23", "content": "CVE-2026-52885 - Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory\nCVE ID : CVE-2026-52885\n \n Published : June 26, 2026, 8:19 p.m. | 1\u00a0hour, 26\u00a0minutes ago\n \n Description : Notepad++ is a free and open-source source code editor. Prior to 8.9.6.4, NppCommands.cpp checks ...", "creation_timestamp": "2026-06-26T22:17:26.719587Z"}, {"uuid": "f41e7a94-bb65-4f98-bd26-2319f71868f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52784", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpa2zyry4n26", "content": "CVE-2026-52784 - Critical CSRF in OpenProject. Attackers can escalate privileges via /users/:id. CVSS 8.8. Update to 17.3.3 or 17.4.1 immediately. #CVE #OpenProject #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-52784/", "creation_timestamp": "2026-06-26T23:13:00.254906Z"}, {"uuid": "e5ee954c-2fa1-45b8-93fe-c3178b58ad6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpa3nmpsxo27", "content": "CVE-2026-52784 - OpenProject: CSRF on TARGET through /users/:id via POST parameter \"user[admin]\"\nCVE ID : CVE-2026-52784\n \n Published : June 26, 2026, 6:56 p.m. | 4\u00a0hours, 15\u00a0minutes ago\n \n Description : OpenProject is open-source, web-based project management software. Prior ...", "creation_timestamp": "2026-06-26T23:23:58.770725Z"}, {"uuid": "21a9f3da-49f8-422d-8513-79557a0f5d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpa3tm22wn2s", "content": "CVE-2026-52783 - OpenProject: Information Disclosure (cleartext storage of data) on localhost through memcached via Others \"storage. .httpx_access_token\" leads to Sensitive Data Exposure\nCVE ID : CVE-2026-52783\n \n Published : June 26, 2026, 6:57 p.m. | 4\u00a0hours, 13\u00a0minutes ago\n...", "creation_timestamp": "2026-06-26T23:27:19.950600Z"}, {"uuid": "2116f3e1-3eec-4bc9-9089-f12e9d9690b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52780", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpa42cxqt52c", "content": "CVE-2026-52780 - OpenProject: Cache store poisoning leads to Remote Code Execution (RCE)\nCVE ID : CVE-2026-52780\n \n Published : June 26, 2026, 7:09 p.m. | 4\u00a0hours, 2\u00a0minutes ago\n \n Description : OpenProject is open-source, web-based project management software. Prior to 17.3.3...", "creation_timestamp": "2026-06-26T23:31:07.016960Z"}, {"uuid": "2872e77e-7e1b-4b81-8406-800e415c4cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52785", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpa4twxjql23", "content": "CVE-2026-52785 - OpenProject: SQL injection in timestamps functionality\nCVE ID : CVE-2026-52785\n \n Published : June 26, 2026, 6:54 p.m. | 4\u00a0hours, 17\u00a0minutes ago\n \n Description : OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the...", "creation_timestamp": "2026-06-26T23:45:24.586457Z"}, {"uuid": "b43f5d4e-fe31-41dc-a3ac-b2f13a84dd04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpa54vks5o2c", "content": "CVE-2026-52782 - OpenProject: IDOR through /projects/ /settings/project_storages/ via PATCH parameter \"storages_project_storage[project_folder_id]\" leads to Access to Unauthorized Resources\nCVE ID : CVE-2026-52782\n \n Published : June 26, 2026, 6:59 p.m. | 4\u00a0hours, 12\u00a0minutes a...", "creation_timestamp": "2026-06-26T23:50:25.081424Z"}, {"uuid": "5b489737-09bf-4ce2-b982-6af760a2e81d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52815", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52815.yaml", "content": "", "creation_timestamp": "2026-06-27T00:00:02.781215Z"}, {"uuid": "792bf61f-7ce6-4162-9497-f18c67cacbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mpalab7enm2q", "content": "\ud83c\udfed CISA adds Chrome CVE-2026-5281 to KEV (CVSS 8.8). Use\u2011after\u2011free in WebGPU Dawn, actively exploited. Patch to Chrome 146.0.7680.178 NOW.\n\nSource: CISA #CyberSecurity #InfoSec", "creation_timestamp": "2026-06-27T04:02:50.237807Z"}, {"uuid": "f067ec8d-c667-4e19-ba1f-6b5e4f885bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpaljwb6yc2s", "content": "\ud83c\udfed CISA adds Chrome CVE-2026-5281 to KEV (CVSS 8.8). Use\u2011after\u2011free in WebGPU Dawn, actively exploited. Patch to Chrome 146.0.7680.178 NOW.\n\nSource: CISA #PotatoSecurity #InfoSec", "creation_timestamp": "2026-06-27T04:08:14.260410Z"}, {"uuid": "068862a7-9f64-4037-b7d0-40b263e987b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52938", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpbvrbz4jf2b", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-52938](https://git.kernel.org/stable/c/16af24fea29c209dea53595c99f6da9398548e1b)\nIn the...\nhttps://git.kernel.org/stable/c/16af24fea29c209dea53595c99f6da9398548e1b #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-06-27T16:43:58.524892Z"}, {"uuid": "93406a09-76d1-485d-8106-269cf8f2b828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52815", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52815.yaml", "content": "", "creation_timestamp": "2026-06-28T00:00:03.327333Z"}, {"uuid": "f52216d3-7457-4fcb-8f80-ad0928cd339d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpe54rn2dj2x", "content": "\ud83d\udfe0 CVE-2026-52884 - High (7.8)\n\nNotepad++ is a free and open-source source code editor. In v8.9.6.1, isInTrustedDirectory() does ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52884/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-28T14:01:00.747021Z"}, {"uuid": "a941991a-a91c-4d7d-9e68-207c360d39f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52785", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpenuzqf3u2x", "content": "\ud83d\udd34 CVE-2026-52785 - Critical (9.9)\n\nOpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52785/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-28T19:00:54.718527Z"}, {"uuid": "db65632e-919d-41a2-90be-91f54fc5a965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52780", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpenvjmkmg2v", "content": "\ud83d\udd34 CVE-2026-52780 - Critical (9.6)\n\nOpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, ca...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52780/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-28T19:01:10.960856Z"}, {"uuid": "9fbae03c-3c8e-4d4f-b664-8cc4b0b5ed22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52782", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mper7mwwdo2x", "content": "\ud83d\udd34 CVE-2026-52782 - Critical (9.9)\n\nOpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52782/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-28T20:00:31.601377Z"}, {"uuid": "34c96109-036e-4f57-a2cc-15d7054ca57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52783", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mper7ufns52x", "content": "\ud83d\udfe0 CVE-2026-52783 - High (8.2)\n\nOpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, Op...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52783/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-28T20:00:39.163928Z"}, {"uuid": "aedf21da-ecd6-48ce-bbf5-3c8172f917fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52784", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpera3svdj2s", "content": "\ud83d\udfe0 CVE-2026-52784 - High (8.8)\n\nOpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52784/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-28T20:00:47.562848Z"}, {"uuid": "0c0f657e-f1e9-4480-b961-bad764bd95a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5260", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfrzc3jn2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-5260 \u0432 libgnutls: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/DDA8C715-A363-4B18-952D-D7D39B641B9D", "creation_timestamp": "2026-06-29T11:41:21.841770Z"}, {"uuid": "166bdd83-2d6b-4262-b546-d6754203dc2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52782", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpwbgbyp2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52782 \u0432 OpenProject: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/90B1627A-7223-4A99-85F4-20F18CB9688C", "creation_timestamp": "2026-06-29T14:42:42.054900Z"}, {"uuid": "735edb88-92aa-4fc6-adb6-bd5774d107b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpxqx6qt2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52884 \u0432 Notepad++: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/CD5DBF76-1F74-4B0E-B60C-94AED1D8D9D7", "creation_timestamp": "2026-06-29T14:43:31.701202Z"}, {"uuid": "a797c332-b6c7-4255-9eb0-d07be20468ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52783", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgq2okxvr2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52783 \u0432 OpenProject: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/54A3E4CC-7CE2-4F1F-AB17-E4E1BBF9EF22", "creation_timestamp": "2026-06-29T14:45:10.366655Z"}, {"uuid": "68b610a0-7783-4f64-a59b-8dad20584087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52885", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgq7a2jh22t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52885 \u0432 Notepad++: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/38F9CF36-82B5-4B22-97FD-D6AA6AD4C2B0", "creation_timestamp": "2026-06-29T14:47:42.475905Z"}, {"uuid": "f2227c84-c78c-4d67-85ef-a4ef8c35511c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7foecqu2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52884 \u0432 Notepad++: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5CBA5C4B-F9A6-4123-BF72-643035B15073", "creation_timestamp": "2026-06-29T19:19:44.890968Z"}, {"uuid": "da8c206b-62b2-4115-a432-be03657d4234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52885", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7n5q2772g", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52885 \u0432 Notepad++: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/7ED60CAB-E334-45B7-99C5-FCFE744A0D05", "creation_timestamp": "2026-06-29T19:23:55.880317Z"}, {"uuid": "156aa088-827b-466f-9ac2-8fc2920c412e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52885", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mph7n7lquc2v", "content": "Notepad++ \u5b89\u5168\u6f0f\u6d1e CVE-2026-52885 \u6df1\u5ea6\u89e3\u6790:\u6f0f\u6d1e\u6210\u56e0\u3001\u5f71\u54cd\u53ca\u4fee\u590d\u6307\u5357\n\n\n\nhttps://qian.cx/posts/5C5073C9-991C-4136-ADD8-57701EA7DEF5", "creation_timestamp": "2026-06-29T19:23:58.046093Z"}, {"uuid": "45d51af1-97af-47b7-837f-a3002c0df8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52760", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mphh55tg752z", "content": "CVE-2026-52760: Apache ActiveMQ, Apache ActiveMQ Web Console: Stored XSS via Unescaped values in ActiveMQ Web Console", "creation_timestamp": "2026-06-29T21:38:09.276806Z"}, {"uuid": "95404298-7bc0-4818-a987-c5dee95afb61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52876", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfd36ngi624", "content": "\ud83d\udfe0 CVE-2026-52876 - High (8.8)\n\nStreambert is a cross-platform Electron Desktop App to stream and download video content. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52876/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T23:00:55.845284Z"}, {"uuid": "c1b1660d-5c79-45ee-9baa-387115b4cf85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52877", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfd3fjcln27", "content": "\ud83d\udfe0 CVE-2026-52877 - High (8.3)\n\nStreambert is a cross-platform Electron Desktop App to stream and download video content. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52877/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T23:01:03.533924Z"}, {"uuid": "e0925ded-b75c-4a2e-b1cc-cdb59c5f864e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52854", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfd56wys52r", "content": "\ud83d\udfe0 CVE-2026-52854 - High (8.6)\n\nMaps is a MediaWiki extension that enables visualization of geographic data through dynamic embed...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52854/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T23:02:03.258636Z"}, {"uuid": "c659f27f-491e-458b-ab2b-c42833cff35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52872", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtfd5g3dk222", "content": "\ud83d\udfe0 CVE-2026-52872 - High (8.8)\n\nStreambert is a cross-platform Electron Desktop App to stream and download video content. Prior t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52872/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-18T23:02:10.668372Z"}, {"uuid": "22d9b52d-1c51-44b6-978e-a59fd6cd9419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52872", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6uri3cotoarv3", "content": "CVE-2026-52872 - Streambert: Local File Exfiltration and Overwrite via Subtitle file: Protocol\nCVE ID : CVE-2026-52872\n \n Published : 18 ao\u00fbt 2026 22:16 | 1\u00a0heure, 32\u00a0minutes ago\n \n Description : Streambert is a cross-platform Electron Desktop App to stream and download video ...", "creation_timestamp": "2026-08-18T23:55:57.935296Z"}, {"uuid": "756afb9f-cb0b-457e-a4a1-bdbd9cbceea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52806.yaml", "content": "", "creation_timestamp": "2026-08-19T00:00:06.755794Z"}, {"uuid": "0c4e9d00-effc-421c-8bc9-49c804f5f9fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/VulnerabilityNews/41656", "content": "Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome\n\nGoogle has announced fixes for CVE-2026-5281, a zero-day affecting Chrome\u2019s Dawn component.\u00a0\nThe post Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome appeared first on SecurityWeek.\nhttps://www.securityweek.com/exploited-zero-day-among-21-vulnerabilities-patched-in-chrome/", "creation_timestamp": "2026-08-19T00:00:07.959063Z"}, {"uuid": "32616b33-4d69-42c8-b98d-ef4e486cd62e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/65a07e8f-71bc-4743-900f-bf9585bfde6d", "content": "", "creation_timestamp": "2026-06-30T17:00:16.855725Z"}, {"uuid": "81e65821-e763-4c71-b98a-3876c90d4650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52868", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpk3fqjp4i2z", "content": "CVE-2026-52868 - OFFIS DCMTK Toolkit Path Traversal\nCVE ID : CVE-2026-52868\n \n Published : June 30, 2026, 9:06 p.m. | 39\u00a0minutes ago\n \n Description : An unauthenticated attacker can read worklist records from a directory outside the intended per-AE worklist storage area. In a ...", "creation_timestamp": "2026-06-30T22:46:11.579243Z"}, {"uuid": "f26e2834-58f8-4771-95e9-89af0efbf99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52466", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msg5oy5zy22s", "content": "CVE-2026-52466\nThe VuFind library software has a security issue where, even if a user doesn't have permission to access certain features, the system may still perform the action. This can happen when a user tries to access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T13:32:05.183559Z"}, {"uuid": "b7b82446-8e17-42d9-83e1-b537837992de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52877", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bvxcoaumghcko", "content": "CVE-2026-52877 - Streambert : Insecure Protocol Execution in open-external IPC Handler\nCVE ID : CVE-2026-52877\n \n Published : 18 ao\u00fbt 2026 22:16 | 1\u00a0heure, 32\u00a0minutes ago\n \n Description : Streambert is a cross-platform Electron Desktop App to stream and download video content....", "creation_timestamp": "2026-08-19T00:01:57.667277Z"}, {"uuid": "151047c2-47f5-4982-8eb7-be0e31f0ccb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52911", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260630", "content": "", "creation_timestamp": "2026-07-01T02:35:59.463041Z"}, {"uuid": "14df334f-2d52-4b0f-9651-ce73ff24fbeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52910", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260630", "content": "", "creation_timestamp": "2026-07-01T02:36:01.621488Z"}, {"uuid": "cef8d2b4-419c-4bcb-9722-3101e80a8807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52909", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260630", "content": "", "creation_timestamp": "2026-07-01T02:36:03.792294Z"}, {"uuid": "f3741b5a-fcf6-4d27-8ee0-5fef3796c4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52908", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260630", "content": "", "creation_timestamp": "2026-07-01T02:36:05.933633Z"}, {"uuid": "19748888-3bb2-4b0a-9815-5e77956fd27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52868", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01", "content": "", "creation_timestamp": "2026-07-01T02:36:51.493647Z"}, {"uuid": "06261739-ab38-4efb-9879-418803a106f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52912", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:46:51.046816Z"}, {"uuid": "b80c5187-6fd2-4deb-b781-e56c3b0798c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52913", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:46:53.392666Z"}, {"uuid": "c83660b6-8db1-4ef4-b144-cd35974b9f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52915", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:46:55.736164Z"}, {"uuid": "d7871bf5-2a7b-45c9-ac43-46779b95c01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52916", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:46:58.053745Z"}, {"uuid": "a54048d1-7ea5-40a6-802c-1f879e509042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52919", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:00.414271Z"}, {"uuid": "77155e20-3b25-4005-b365-fea0e50ca96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52921", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:02.695283Z"}, {"uuid": "d57fef7c-9688-4adf-9410-496de42debb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52922", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:05.045446Z"}, {"uuid": "81245216-d62e-4598-91d6-c54fb5683c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52923", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:07.935088Z"}, {"uuid": "6f4442a6-6ccb-41a2-b877-35384156b170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52924", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:10.185538Z"}, {"uuid": "df1104fe-9dc0-49d0-8b61-70bb89f00d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52926", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:12.454994Z"}, {"uuid": "9136137c-8299-48e2-8049-ac56693e52df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52927", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:14.737111Z"}, {"uuid": "9cea914c-0e2e-4890-8018-c617e7454008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52930", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:17.043488Z"}, {"uuid": "073543e1-31ad-4a22-b4f6-0a4998e84a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52931", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:19.326588Z"}, {"uuid": "a2098803-ca0c-4580-8574-34cae0ac2f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52934", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:21.580490Z"}, {"uuid": "14a79a90-fd83-4acd-9da6-12ed073e2223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52941", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:23.911565Z"}, {"uuid": "8bcf4ee1-ddca-4539-90ce-83c5a0c1bcf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52942", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:26.259372Z"}, {"uuid": "0768075f-a587-4448-83b1-ce2407fd0a2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52943", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:28.565331Z"}, {"uuid": "3e92683e-ba01-474a-8aac-8e1250dab064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52947", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:47:30.812529Z"}, {"uuid": "bfb8b7e1-1ff2-4a36-b88b-0721cb392c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52872", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtfgr7ydfd2l", "content": "Electron App Bleeds Out While Everyone Pretends This Is Fine\nPANIC 68% | Lag 0.0h | CVE-2026-52872 is a high-severity vulnerability in Streambert, a cross-platform Electron desktop app\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-19T00:06:56.058995Z"}, {"uuid": "daa66a33-0eca-4a90-a9df-6833c65dd006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52854", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtfgrfgaym2w", "content": "Another shiny MediaWiki hole, because patching is apparently a rumor\nPANIC 68% | Lag 0.0h | CVE-2026-52854 is a high-severity vulnerability in the Maps MediaWiki extension that can expose syst\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-19T00:07:01.678004Z"}, {"uuid": "d4e509ca-94f5-4eed-9e64-a2e5c7fa119a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52876", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/figu3j54p3lpi", "content": "CVE-2026-52876 - Streambert: Arbitrary File Execution via VLC/mpv Launcher Fallback\nCVE ID : CVE-2026-52876\n \n Published : 18 ao\u00fbt 2026 22:16 | 1\u00a0heure, 32\u00a0minutes ago\n \n Description : Streambert is a cross-platform Electron Desktop App to stream and download video content. Pr...", "creation_timestamp": "2026-08-19T00:08:02.163893Z"}, {"uuid": "886b2b4e-eef3-4a3d-b68c-298f2c861bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52875", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/imviueam5oza2", "content": "CVE-2026-52875 - Streambert: Arbitrary Directory Creation and File Manipulation via Backup Handler\nCVE ID : CVE-2026-52875\n \n Published : 18 ao\u00fbt 2026 22:16 | 1\u00a0heure, 32\u00a0minutes ago\n \n Description : Streambert is a cross-platform Electron Desktop App to stream and download vi...", "creation_timestamp": "2026-08-19T00:13:58.024839Z"}, {"uuid": "8e1a560f-1fe0-4f78-81dd-ea5da9e0bcc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52715", "type": "seen", "source": "Telegram/K7zXqOYFd1qXyT9LARXPzqWKeQzalprou3AuwisAGlu--nM", "content": "", "creation_timestamp": "2026-08-15T08:00:04.196142Z"}, {"uuid": "ceb7959c-7a35-4341-9c32-fec4cf950a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52715", "type": "seen", "source": "Telegram/dKwmYVy2aEc9gRb5YSn4b-auUmO46y6-PGZsT6qcYst_4VQ", "content": "", "creation_timestamp": "2026-08-15T08:00:04.273278Z"}, {"uuid": "52703335-84fc-4cc5-a2b7-3ff2d1149605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5220", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmrtb3oiy2d", "content": "CVE-2026-5220: \u0423\u0433\u0440\u043e\u0437\u0430 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/7CD0E2E4-648D-4CB6-A2EB-1DD1FEC3193D", "creation_timestamp": "2026-07-02T00:32:46.956649Z"}, {"uuid": "10e43e36-4de3-42c1-9136-23767179c366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5220", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmuft6pvk2u", "content": "CVE-2026-5220: \u0423\u0433\u0440\u043e\u0437\u0430 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/0F86CD22-E693-49CE-9C0B-F6F764D72DE3", "creation_timestamp": "2026-07-02T01:18:57.476063Z"}, {"uuid": "94724125-afbe-4610-a678-926597e6229c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5220", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mpmufw47l623", "content": "CVE-2026-5220 \u6f0f\u6d1e\u89e3\u6790:Web\u9875\u9762\u751f\u6210\u4e2d\u7684\u8f93\u5165\u4e2d\u548c\u4e0d\u8db3\u4e0eXSS\u653b\u51fb\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/BDCF497E-314E-4C4C-B0FF-8C3A5BA7D862", "creation_timestamp": "2026-07-02T01:19:00.451443Z"}, {"uuid": "7b2b4d08-4457-4001-a4a4-8e081ea6c7bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52196", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmux43qjr22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52196 \u0432 UTT nv518G: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/65CE13C9-D9EB-4BB0-8349-1F9E3289A598", "creation_timestamp": "2026-07-02T01:28:37.201902Z"}, {"uuid": "b391610f-239c-4c04-ac9c-9acca206d80b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5220", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmwfxkpfq2i", "content": "CVE-2026-5220: \u0423\u0433\u0440\u043e\u0437\u0430 XSS-\u0430\u0442\u0430\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/98C93B89-5CE1-4BDD-BB4F-846761D56C8C", "creation_timestamp": "2026-07-02T01:54:49.638505Z"}, {"uuid": "3fc1323b-3a48-4c61-a573-d7d26d5ddebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52610", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjtqyqvsd2t", "content": "CVE-2026-52610\nAn attacker can use Reportico-web to create or overwrite any file on the server, potentially leading to data theft or system compromise. This vulnerability affects Reportico-web versions 8.1.0 and earlier. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-20T18:10:08.265797Z"}, {"uuid": "60045846-7b0c-4d9f-b3e9-3c2bd50af261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52906", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:31.114414Z"}, {"uuid": "6b448390-19f9-41e8-af4b-647476c18c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52907", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:33.273282Z"}, {"uuid": "39f997a6-81bf-4a01-ae59-1ccc5e716087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5252", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30555", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, based on the latest observed activity.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-31900\n\ud83c\udfaf GitHub Action (Black) \u2013 Arbitrary Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Batosay1337Lab/CVE-2026-31900\n\n\ud83e\udde0 Overview\nA vulnerability in GitHub Actions using the Black formatter allows attackers to inject malicious repository references via pyproject.toml, leading to arbitrary code execution in CI environments.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary code execution in CI/CD\n\u2022 Secret leakage risk\n\u2022 Supply chain attack vector\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-29598\n\ud83c\udfaf Acora CMS \u2013 Stored XSS\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/padayali-JD/CVE-2026-29598\n\n\ud83e\udde0 Overview\nMultiple stored XSS vulnerabilities allow attackers to inject malicious scripts via user input fields such as first and last name.\n\n\u2699\ufe0f Impact\n\u2022 Stored XSS\n\u2022 Session hijacking\n\u2022 Persistent client-side attacks\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-22200\n\ud83c\udfaf osTicket \u2013 Arbitrary File Read via PDF Export\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Remnant-DB/CVE-2026-22200\n\n\ud83e\udde0 Overview\nA vulnerability in osTicket allows attackers to embed crafted HTML into tickets, which leads to arbitrary file read when exporting to PDF.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive file disclosure\n\u2022 Server-side data leakage\n\u2022 Unauthorized file access\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21710\n\ud83c\udfaf Node.js HTTP Server \u2013 Potential Exploitation Path\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/dajneem23/CVE-2026-21710\n\n\ud83e\udde0 Overview\nA vulnerability affecting Node.js HTTP servers may allow exploitation depending on server configuration and request handling logic.\n\n\u2699\ufe0f Impact\n\u2022 Server-side exploitation\n\u2022 Application instability\n\u2022 Attack surface expansion\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5252\n\ud83c\udfaf Admin Panel \u2013 Cross-Site Scripting (XSS)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/aydin5245/CVE-2026-5252-CVE-POC-ivanti\n\n\ud83e\udde0 Overview\nA reflected XSS vulnerability allows attackers to execute arbitrary JavaScript through crafted requests targeting message endpoints.\n\n\u2699\ufe0f Impact\n\u2022 Cross-site scripting\n\u2022 Session hijacking\n\u2022 Client-side exploitation\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Real-world PoC validation\n\u2022 CI/CD attack surface analysis\n\u2022 Web vulnerability exploitation patterns\n\u2022 Threat intelligence tracking\n\n\u26a0\ufe0f Important Note\nRecent GitHub trends show increasing risks:\n\u2022 Fake CVE advisories and malicious PoC distribution campaigns targeting developers\n\ud83d\udc49 Always verify PoC code before execution.\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:03.814508Z"}, {"uuid": "a30c482d-efa5-4ade-9a8a-758a56d9dd69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52904", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:26.757857Z"}, {"uuid": "8df4249d-5ee7-4de9-acb6-24c153bac870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52905", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:28.940209Z"}, {"uuid": "e06e3728-7456-49b8-b346-30ed6eb619fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52933", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:35.431463Z"}, {"uuid": "efb66002-ff10-461f-b8ef-17c0d1a5f0dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52813", "type": "seen", "source": "https://www.acn.gov.it/portale/w/gogs-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita", "content": "", "creation_timestamp": "2026-07-02T12:45:04.795582Z"}, {"uuid": "9c81f346-60f2-4ed8-a108-4b1edafeb0f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5263", "type": "seen", "source": "https://infosec.place/objects/8217d0cb-8282-473a-a92e-d3e5597ac7c9", "content": "New vulnerability report from Talos:WolfSSL wolfSSL X.509 registeredID name constraints enforcement improper input validation vulnerabilityhttps://talosintelligence.com/vulnerability_reports/TALOS-2026-2410CVE-2026-5263,CVE-2026-5263,CVE-2026-5263", "creation_timestamp": "2026-07-02T13:30:05.811867Z"}, {"uuid": "751be465-875f-4ca6-8eda-030dda6f15fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52186", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoaez6hty2i", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 UTT nv518G \u0438 nv518GV3 (CVE-2026-52186)\n\n\n\nhttps://kripta.biz/posts/7ED86C5B-47CB-4FD7-9D2D-276BF2C9EF95", "creation_timestamp": "2026-07-02T14:25:54.953606Z"}, {"uuid": "dcc8d746-78a0-40cf-b90e-be7d8a80e23d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52854", "type": "published-proof-of-concept", "source": "https://github.com/ProfessionalWiki/Maps/security/advisories/GHSA-4h7g-5542-v3fc", "content": "", "creation_timestamp": "2026-07-02T18:35:02.844101Z"}, {"uuid": "62212227-7c92-4bd5-8ae1-eff2b718ea73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52726", "type": "published-proof-of-concept", "source": "https://github.com/jelmer/dulwich/security/advisories/GHSA-gfhv-vqv2-4544", "content": "", "creation_timestamp": "2026-07-02T18:35:05.058817Z"}, {"uuid": "b9b4f179-1281-45bb-943d-4a1870d62836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52945", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpottc4qdb2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52945 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0430\u043d\u0430\u043b\u0438\u0437 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/37DE883F-4731-4891-9F3E-9701E583633B", "creation_timestamp": "2026-07-02T20:13:54.953664Z"}, {"uuid": "39329faa-3871-4a38-ab27-73d730cc3a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52817", "type": "published-proof-of-concept", "source": "https://github.com/Linuxfabrik/monitoring-plugins/security/advisories/GHSA-8w6w-23mq-h8rg", "content": "", "creation_timestamp": "2026-07-02T22:35:11.464694Z"}, {"uuid": "202614bb-f01a-4106-842d-393debddc828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52186", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpoxjh46wi2i", "content": "CVE-2026-52186\nA security issue in UTT nv518G software allows an attacker to run unauthorized code on the system. This can happen if an attacker sends malicious input to the software, potentially leading to system compromise.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-02T21:19:59.607988Z"}, {"uuid": "85904cf1-5ae1-4f9c-adf6-1b85884626c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52830", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpozshgwxf2b", "content": "\ud83d\udd34 CVE-2026-52830 - Critical (9.4)\n\nfast-mcp-telegram is a Telegram MCP Server. Prior to 0.19.1, fast-mcp-telegram validates HTTP Bea...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52830/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-02T22:00:50.488827Z"}, {"uuid": "23fac8d7-8452-45e6-ae16-363b666885bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52792", "type": "published-proof-of-concept", "source": "https://github.com/xyproto/algernon/security/advisories/GHSA-mm6c-5j6x-hq8m", "content": "", "creation_timestamp": "2026-07-02T22:35:07.166497Z"}, {"uuid": "7ff36c6f-a7d7-471b-8aea-acc6731258db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52834", "type": "published-proof-of-concept", "source": "https://github.com/tirr-c/jxl-oxide/security/advisories/GHSA-5pmv-rx8r-wmv5", "content": "", "creation_timestamp": "2026-07-02T22:35:09.317138Z"}, {"uuid": "8dcd8df8-0c97-4a33-bf24-ade546e83c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5241", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppayc3rqf2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-5241 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Hugging Face Transformers: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043c\u043e\u0434\u0435\u043b\u0435\u0439 LightGlue\n\n\n\nhttps://kripta.biz/posts/A12A5448-B878-4ED5-B35D-BC394F7ACBFD", "creation_timestamp": "2026-07-03T00:09:21.479654Z"}, {"uuid": "f7a174c4-3cf3-4352-b78b-8935dec6059b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52186", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq76ilmcn2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 CVE-2026-52186 \u0432 UTT nv518G \u0438 nv518GV3: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/CCA4EF58-8EE3-45FB-B35C-CF60C84907EF", "creation_timestamp": "2026-07-03T09:09:41.844919Z"}, {"uuid": "d93771eb-6226-4872-883f-45992d3a00df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52186", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mpq76ikfob2i", "content": "UTT nv518G \u7f51\u7edc\u8bbe\u5907\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e(CVE-2026-52186)\u6df1\u5ea6\u5206\u6790\u4e0e\u9632\u62a4\u6307\u5357\n\n\n\nhttps://qian.cx/posts/BED1E951-C5DF-4289-B970-883DC36CD12E", "creation_timestamp": "2026-07-03T09:09:42.256047Z"}, {"uuid": "0b91a78e-30da-4191-98d0-90fa1f3e2287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52190", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqa6hpdal2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52190 \u0432 UTT nv518G: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/4DC8841E-EE9E-41DA-956C-9EB533FA8C0B", "creation_timestamp": "2026-07-03T09:27:34.454133Z"}, {"uuid": "3db8b627-df96-445a-92e6-16c41dee0d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52187", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtba3psm2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52187 \u0432 UTT nv518G: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5603658D-FDB3-4A42-AA48-BE1E98B0004D", "creation_timestamp": "2026-07-03T15:09:08.422821Z"}, {"uuid": "fa505024-f6f9-468f-a58b-bceb6a040754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52191", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqz5saz7f2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52191 \u0432 UTT nv518G: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/88A75DDD-5B79-4CD1-9B7C-2A5BFF9D6BBB", "creation_timestamp": "2026-07-03T16:54:35.643670Z"}, {"uuid": "7c5402e6-a6f7-4ae6-a1a5-676a760eba88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52189", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr24otukw2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52189 \u0432 UTT nv518G: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/27DE9539-14E8-431E-A909-67E2794D78EA", "creation_timestamp": "2026-07-03T17:11:52.654007Z"}, {"uuid": "8a7c80f4-dafb-4d8e-b6c1-d1808cb91b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52188", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2oxwnpc2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52188 \u0432 UTT nv518G: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0C5AF974-DD4F-44EC-9389-D6DFE5E78D08", "creation_timestamp": "2026-07-03T17:22:06.167527Z"}, {"uuid": "a57910bf-077f-4760-81df-06dc629f0526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52192", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2sjskfb2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52192 \u0432 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 UTT: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\n\nhttps://kripta.biz/posts/66533354-18EC-45E1-AEFF-5B1AFDA06940", "creation_timestamp": "2026-07-03T17:24:04.989656Z"}, {"uuid": "b2e13e0b-0b8d-4545-937b-b3d480539cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52735", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mprjo7adcd2x", "content": "CVE-2026-52735 - zebra-script\nZebra's block validation process has a bug that can cause it to accept blocks that other nodes may reject. This can lead to a chain split, where different nodes\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zebrascript #conradoplg #rust #CVE #infosec", "creation_timestamp": "2026-07-03T21:50:06.058414Z"}, {"uuid": "2721e3f0-4ae7-42c5-a904-fca4a73c386a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52830", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mprjyv7j6527", "content": "CVE-2026-52830 - fast-mcp-telegram\nAn attacker can access the default Telegram account without a valid token, potentially reading and sending messages, if a specific session file exists on the server. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#leshchenko1979 #pip #CVE #infosec", "creation_timestamp": "2026-07-03T21:56:04.565126Z"}, {"uuid": "789edb63-cc02-460c-9939-d15770a6f0ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52830", "type": "seen", "source": "https://t.me/pphm_HackerNews/1828", "content": "\ud83d\udd34 Critical fast-mcp-telegram Vulnerability Lets Attackers Access Telegram Session Without Token\n\nA critical vulnerability in fast-mcp-telegram (CVE-2026-52830, GHSA-rxw2-pc8j-vxwm) allows attackers to access a Telegram MCP session over HTTP without a valid bearer token by abusing a path-traversal flaw in how session files are resolved on disk.\n\nThis breaks the intended high-entropy token boundary and exposes the default Telegram account to full message and MTProto access.\n\nfast-mcp-telegram is a Telegram MCP server that bridges Telegram accounts to AI assistants and HTTP clients via a session-based authentication model.", "creation_timestamp": "2026-08-22T00:00:26.771878Z"}, {"uuid": "ecdb868e-7d7d-4984-903f-2f3361774603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52909", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpulrh2cog2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52909 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8C7EF452-E18A-452D-8C2B-C43DB55B7C01", "creation_timestamp": "2026-07-05T03:05:41.546769Z"}, {"uuid": "f7d00bc2-17bf-4dba-8548-0549e47e69cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52975", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpumfhmzch27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52975 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1B58899A-F89C-4C30-9AB9-BB829122802B", "creation_timestamp": "2026-07-05T03:16:53.138117Z"}, {"uuid": "4b7d2812-e83f-450b-8970-1f7830aad07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52928", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpumid3pkb2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52928 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FD134C22-3BF9-4F36-9B6B-FAA90D732A12", "creation_timestamp": "2026-07-05T03:18:29.391719Z"}, {"uuid": "e22ed912-11f6-4e34-9cd7-3d1e06e0190b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52747", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpwu4jxh6o2t", "content": "Two ModSecurity vulnerabilities let attackers slip past WAF rules via a multipart parser bug (CVE-2026-52747). Update to ModSecurity v3.0.16 now.\n\n#ModSecurity #WAF #WAFBypass #OWASP #CVE202652747 #CVE202652761 #Vulnerability", "creation_timestamp": "2026-07-06T00:40:23.981746Z"}, {"uuid": "51f7ac80-196e-4374-88b8-bc15d3b938ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52918", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:12.192578Z"}, {"uuid": "84bc33e5-d27c-4b25-ab10-c3a2b0ccc691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52909", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:23:46.244947Z"}, {"uuid": "be7fcdef-870b-4b05-954b-8587617d25ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52910", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:23:48.561763Z"}, {"uuid": "a890719f-c427-46b2-9a34-708eafb9d320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52911", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:23:50.958270Z"}, {"uuid": "16bf4083-5037-4d4d-b84c-818ef467bc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52912", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:23:53.275423Z"}, {"uuid": "d43febad-8050-4501-b4bc-cab1b26326e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52913", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:23:55.910265Z"}, {"uuid": "35444492-3cff-4ae2-9d9e-95da07b5146f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52914", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:23:59.374754Z"}, {"uuid": "dc14624c-2eaa-4a53-be9b-d2251d378ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52915", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:01.672703Z"}, {"uuid": "d708205b-4ace-43c0-944c-aa12bbb146f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52916", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:03.997461Z"}, {"uuid": "0224fe56-342b-47e0-9c09-896a80030fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52917", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:08.150821Z"}, {"uuid": "716afba9-5dd7-41ed-b45b-6ccd5ace5a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52919", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:14.509430Z"}, {"uuid": "2254640e-37c6-4080-ba2a-bbd17f9916f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52920", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:16.839993Z"}, {"uuid": "dd488629-e4e1-4b95-892d-10b198f83625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52921", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:19.178174Z"}, {"uuid": "96d53927-01ea-425b-9c7c-f90ed894aa2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52922", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:21.900012Z"}, {"uuid": "7c5857d3-a073-4e86-a852-842034f2c6ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52923", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:24.267628Z"}, {"uuid": "156e6339-2dd4-4d3b-bc71-fe6daf1f2ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52924", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:26.855594Z"}, {"uuid": "d39cdc1b-648e-4be4-99d0-68207a8f4c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52925", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:29.196655Z"}, {"uuid": "bf2fbb3a-299d-4a00-a343-962e60d685be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52934", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:51.920468Z"}, {"uuid": "145eff93-9a4a-45e7-a3bc-301181be3b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52941", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:25:03.557346Z"}, {"uuid": "d4799fb1-a593-4dea-9356-350656bf5773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52926", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:33.839259Z"}, {"uuid": "f77b7474-c841-4be0-8fed-e8dafd873626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52927", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:36.180202Z"}, {"uuid": "455db904-847a-4fe9-bc9b-69038cf54341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52929", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:39.709708Z"}, {"uuid": "f66da78c-35fb-4dad-9d3d-7cbaac0b9c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52933", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:49.219396Z"}, {"uuid": "7e21bf09-8f21-43c2-a3c6-c231719f7a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52935", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:54.282651Z"}, {"uuid": "e04f9570-1ac0-4ded-aac8-9aa1ef577e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52930", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:42.617477Z"}, {"uuid": "ee62c39e-d3ca-46b6-b2e2-0261a1c50ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52931", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:44.950982Z"}, {"uuid": "7ac11c80-8507-4b8a-935e-ab43cc2a2fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52939", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:24:58.285453Z"}, {"uuid": "d2a19a1b-05bc-4241-872d-06091f09651a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52943", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:02.663376Z"}, {"uuid": "92ad9b5e-8baf-43df-9699-2833e497af3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52946", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:07.036857Z"}, {"uuid": "e8a39a50-e379-40e5-b87d-c96a09eaa8f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52947", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:09.396476Z"}, {"uuid": "4011d711-89f0-40a8-9152-9a641b60bcda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52948", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:11.709611Z"}, {"uuid": "d7701460-4963-4aca-a3ae-4796bd5bcbc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52954", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:14.087220Z"}, {"uuid": "6d5323c1-6ecf-4943-a2d4-515490a0f80b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52955", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:17.532075Z"}, {"uuid": "efa67e5c-88b9-49b3-8c62-0e8a5c4cc40e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52957", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:20.322378Z"}, {"uuid": "d788fb01-0833-4ebb-b592-02ea93514170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52958", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:23.389910Z"}, {"uuid": "c2e3d818-85c4-4d2e-b0c6-bf65a72cd1db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52962", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:25.921891Z"}, {"uuid": "5025dc3f-ef8c-4ec8-96ce-2887375c3866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52963", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:28.434261Z"}, {"uuid": "522af38d-8017-4084-868f-624b6897f754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52967", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:32.823292Z"}, {"uuid": "1d69382a-6162-4d4d-8bcd-c609e7adede3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52968", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:37.718666Z"}, {"uuid": "ca3209fa-8f99-4d9e-8970-d18c8f3a08e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52969", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:40.159380Z"}, {"uuid": "f5b3f67f-1500-404c-a230-c16d4c4e6215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52970", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:42.507467Z"}, {"uuid": "4f2315cc-157c-489b-8da9-0e879d31bbfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52972", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:44.873723Z"}, {"uuid": "3d210364-ff96-42c4-a0e7-0504befbcbf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52974", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:47.909486Z"}, {"uuid": "66360836-d125-46a6-b8aa-0d650626360c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52975", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:50.206441Z"}, {"uuid": "a04100a9-8ba8-4896-bfcf-7a048941b5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52977", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:52.719319Z"}, {"uuid": "e2cfefc3-c71c-4e10-bc5e-83c34d5de2e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52981", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:55.413325Z"}, {"uuid": "03870e16-3094-4f1e-baed-ddecb632b0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52982", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:45:58.078566Z"}, {"uuid": "43e7b7be-b74a-48c5-b68a-a0de9e8d6152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52984", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:46:00.442327Z"}, {"uuid": "2f747fc0-1a87-40e5-8050-b378f9b1cd3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52985", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:46:02.849783Z"}, {"uuid": "761cf1d2-938c-469f-bc53-2f5d04763ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52986", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:46:08.486778Z"}, {"uuid": "39a46256-42ee-4d0e-af59-3ff1676cdff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52989", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:46:13.517328Z"}, {"uuid": "8717663a-c64d-4689-814b-0cbefb43148e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52992", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:46:15.929282Z"}, {"uuid": "1d845de8-44af-47d5-b9cf-3eee7eb06223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52993", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:46:18.252064Z"}, {"uuid": "b424555d-ec4c-4cf8-b847-e08653526f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52995", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:46:20.580188Z"}, {"uuid": "10cf48f6-1b4b-49b4-9f16-c12162b84be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52998", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:46:23.654628Z"}, {"uuid": "7cf12b04-329b-431c-a25c-a5ed203b384e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52999", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:46:26.408578Z"}, {"uuid": "840b2540-7795-4107-8cc2-5be3698d340f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52806.yaml", "content": "", "creation_timestamp": "2026-08-20T00:00:13.287314Z"}, {"uuid": "56a63b0a-1702-4336-a741-42382e141302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5241", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mtk5jszddv2r", "content": "A critical-severity fix just shipped for Huggingface Transformers. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-5241", "creation_timestamp": "2026-08-20T21:05:03.385493Z"}, {"uuid": "16978168-83da-4799-9070-fd538a048f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52942", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:54:14.689157Z"}, {"uuid": "1dd267a9-f215-45f0-97e7-f970058dda8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52806.yaml", "content": "", "creation_timestamp": "2026-08-18T06:00:06.232823Z"}, {"uuid": "1e96049a-da96-411e-8837-a41a5eb78a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5268", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpyhdrykfp22", "content": "CVE-2026-5268 - SFTP Server Authentication Weakness\nCVE ID : CVE-2026-5268\n \n Published : July 6, 2026, 3:25 p.m. | 22\u00a0minutes ago\n \n Description : An authentication bypass vulnerability exists in\nthe default SFTP server component utilized across the Ciena products listed. Thi...", "creation_timestamp": "2026-07-06T15:57:07.530792Z"}, {"uuid": "2cf77289-34ec-43cb-be5d-d57cf5e58f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52889", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mpylw6zxqa23", "content": "\u26a0\ufe0f PATCH NOW\n\nFormie, a popular form plugin for Craft CMS, has a critical flaw (CVSS 9.8): a hidden field can run attacker-supplied template code, no login needed.\n\nIt's the second such bug in five weeks.\n\nFix: update to Formie 3.1.27. (CVE-2026-52889)", "creation_timestamp": "2026-07-06T17:19:00.442093Z"}, {"uuid": "ade2a912-2f22-424a-beb2-5e31ce7e0fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52889", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpymggmgx42r", "content": "CVE-2026-52889 - formie\nAn unauthenticated attacker can execute server-side code by visiting a public form with a hidden field that uses a dynamic default value. This could lead to sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#formie #verbb #composer #CVE #infosec", "creation_timestamp": "2026-07-06T17:28:04.544539Z"}, {"uuid": "fe25a21d-8e1e-43c1-8797-4e0739c741de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5268", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpyszhqb762x", "content": "CVE-2026-5268 - 6500 s-series\nCiena products have a weakness in their SFTP server that lets attackers access files without permission. This means an attacker could read or change important system files, which is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ciena #CVE #infosec", "creation_timestamp": "2026-07-06T19:26:08.287059Z"}, {"uuid": "a7ad6a8d-d29c-4688-94a4-2370dc735d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52831", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq5zcwidwn2h", "content": "CVE-2026-52831 - nuclio\nNuclio's cron trigger feature allows attackers to inject malicious commands into shell scripts, potentially leading to persistent remote code execution. This affects Nuclio versions up\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nuclio #Golang #CVE #infosec", "creation_timestamp": "2026-07-08T21:02:04.618430Z"}, {"uuid": "6f938a63-aae0-4dcc-8bfe-e4edde2ee71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52831", "type": "published-proof-of-concept", "source": "https://github.com/nuclio/nuclio/security/advisories/GHSA-v5px-423j-pf7p", "content": "", "creation_timestamp": "2026-07-08T22:35:08.101642Z"}, {"uuid": "7d28b6bf-2526-4a2c-b8d5-8c572da06ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52533", "type": "seen", "source": "https://bsky.app/profile/zuh.re/post/3msxyofhvsc24", "content": "Here is published references for CVE-2026-52533 with Proof of Concept details that I provide.\n\nzuh.re/cve/2026-525...\n\nStay tune for another.", "creation_timestamp": "2026-08-13T15:50:13.665172Z"}, {"uuid": "3fcc70fe-dd11-41e9-bd21-4d703338540e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52766", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-6x7x-gcmf-7r8x", "content": "", "creation_timestamp": "2026-07-09T22:35:25.831980Z"}, {"uuid": "613febfc-8820-4820-8920-411a7e7ebe59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52928", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq7tuy52zk2u", "content": "\ud83d\udd17 CVE : CVE-2026-52928, CVE-2026-53138, CVE-2026-53151, CVE-2026-53157, CVE-2026-53163, CVE-2026-52909, CVE-2026-53325, CVE-2026-53361, CVE-2026-53362, CVE-2026-52909, CVE-2026-52928, CVE-2026-53138, CVE-2026-53151, CVE-2026-53157, CVE-2026-53163, CVE-2026-53325, CVE-2026-53361, CVE-2026-53362", "creation_timestamp": "2026-07-09T14:30:07.139510Z"}, {"uuid": "49a2a592-52bc-4e80-a352-8c98fae4d7c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52909", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mq7tuy52zk2u", "content": "\ud83d\udd17 CVE : CVE-2026-52928, CVE-2026-53138, CVE-2026-53151, CVE-2026-53157, CVE-2026-53163, CVE-2026-52909, CVE-2026-53325, CVE-2026-53361, CVE-2026-53362, CVE-2026-52909, CVE-2026-52928, CVE-2026-53138, CVE-2026-53151, CVE-2026-53157, CVE-2026-53163, CVE-2026-53325, CVE-2026-53361, CVE-2026-53362", "creation_timestamp": "2026-07-09T14:30:07.361714Z"}, {"uuid": "1d25d227-ee77-4138-82fa-ca51ff51fbc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52200", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq7zakvwqq2v", "content": "CVE-2026-52200\nA security issue in the Generic OEM UZ801_v2.1 4G LTE Router's web management API allows a remote attacker to potentially take control of the device. This could happen if the router is not properly secured or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-09T16:06:04.594316Z"}, {"uuid": "e6ef5527-35ec-44bf-88bd-85488a9c4b1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5260", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6enwk4k2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-5260 \u0432 libgnutls: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6DC74D99-B22D-4563-9866-B0ECAF87CCEA", "creation_timestamp": "2026-07-09T17:37:51.130223Z"}, {"uuid": "787b258c-df1d-43fa-8fbd-48e52f200260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52770", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-qg78-vmvc-fhjw", "content": "", "creation_timestamp": "2026-07-09T22:35:19.161321Z"}, {"uuid": "07862a94-0923-48c3-a0ba-9b97ef6f8162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52778", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqalzetvt62b", "content": "CVE-2026-52778 - yeswiki\nYesWiki's Bazar calculator in older versions can cause the server to crash or allow attackers to execute malicious code. This is a serious issue because it could lead to a denial of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#yeswiki #composer #CVE #infosec", "creation_timestamp": "2026-07-09T21:42:04.704940Z"}, {"uuid": "78fb76a3-2de1-444e-9dcd-d2e313150749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqame3yhu22w", "content": "CVE-2026-52766 - yeswiki\nYesWiki has a security issue that allows anyone with page write access to delete any wiki page, including the front page and admin pages, without permission. This is because the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#yeswiki #composer #CVE #infosec", "creation_timestamp": "2026-07-09T21:48:04.611651Z"}, {"uuid": "bcdce473-2ba9-4024-b596-66512b9610d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52777", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqame5dcxj25", "content": "CVE-2026-52777 - yeswiki\nYesWiki's Bazar feature is vulnerable to a PHP object injection attack when importing entries. An attacker can inject malicious code by posting a specially crafted request to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#yeswiki #composer #CVE #infosec", "creation_timestamp": "2026-07-09T21:48:05.876638Z"}, {"uuid": "3fd057e2-ef72-4bf7-aa01-dd85d1e7fdcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52778", "type": "seen", "source": "https://gist.github.com/alon710/7957cb9c4dd6636892863390d2a98c29", "content": "# CVE-2026-52778: CVE-2026-52778: Unauthenticated Remote Code Execution and ReDoS in YesWiki Bazar Formula Calculator\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-07-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-52778\n\n## Summary\nAn unsafe execution vulnerability exists in the Bazar form field calculator (CalcField.php) of YesWiki prior to version 4.6.6. The application attempts to validate mathematical formulas using a complex recursive regular expression before passing them to the PHP eval() function. This design leads to both Regular Expression Denial of Service (ReDoS) and Remote Code Execution (RCE) via validation bypass.\n\n## TL;DR\nUnsafe eval() in YesWiki Bazar Formula Calculator allows unauthenticated remote code execution and denial of service via regex stack overflow. Patched in 4.6.6.\n\n## Technical Details\n\n- **CWE ID**: CWE-94 / CWE-1333\n- **Attack Vector**: Network\n- **Attack Complexity**: Low\n- **Privileges Required**: None\n- **User Interaction**: None\n- **CVSS v3.1**: 9.8 (Critical)\n- **Exploit Status**: None / Theoretical\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- YesWiki < 4.6.6\n- **yeswiki**: < 4.6.6 (Fixed in: `4.6.6`)\n\n## Mitigation\n\n- Upgrade to YesWiki version 4.6.6 or newer.\n- Disable or restrict Bazar form calculator fields if immediate patching is not possible.\n- Deploy Web Application Firewall (WAF) rules to detect and drop requests containing deeply nested parenthesis patterns in formula fields.\n\n**Remediation Steps:**\n1. Identify all active YesWiki installations and determine their current version.\n2. Download the updated release files for version 4.6.6 or apply the patch commit to tools/bazar/fields/CalcField.php.\n3. Verify the fix by ensuring that eval() is no longer invoked inside CalcField.php.\n4. Configure hard limits for pcre.recursion_limit and pcre.backtrack_limit in the system's php.ini configuration file.\n\n## References\n\n- [GHSA-px5m-h76g-p7p8: Unsafe eval() in Bazar Formula Calculator (YesWiki)](https://github.com/YesWiki/yeswiki/security/advisories/GHSA-px5m-h76g-p7p8)\n- [Official Fix Commit](https://github.com/YesWiki/yeswiki/commit/dd2bd8fb099de0d21504bda8a810693b3fcb8e52)\n- [YesWiki Release v4.6.6](https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6)\n- [NVD CVE-2026-52778 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-52778)\n- [CVE.org Entry](https://www.cve.org/CVERecord?id=CVE-2026-52778)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-52778) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-09T22:12:01.772859Z"}, {"uuid": "39e3f3b4-6e41-4d01-8fdc-fc3ad558c8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52722", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaosfab2d2s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52722 \u0432 GStreamer: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0439\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/2F17C375-D0EB-4AC4-8E72-6CF39C69B2B5", "creation_timestamp": "2026-07-09T22:31:52.051215Z"}, {"uuid": "56de434f-4c9b-48b7-8cf4-a2e4776a62b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52720", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaoxyycp52y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52720 \u0432 GStreamer: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/58AAF2E0-162D-449C-9A9F-9E921FB8654B", "creation_timestamp": "2026-07-09T22:34:59.608909Z"}, {"uuid": "89ad388e-4f7b-4f66-b2c4-73440025ebd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52778", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-px5m-h76g-p7p8", "content": "", "creation_timestamp": "2026-07-09T22:35:03.427002Z"}, {"uuid": "ba351c3f-4061-4d72-968c-5afabf9bbdb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52720", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mqaoy5p6ys2s", "content": "\u6df1\u5ea6\u89e3\u6790GStreamer librfb\u5806\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e(CVE-2026-52720)\u53ca\u5176\u5b89\u5168\u5f71\u54cd\n\n\n\nhttps://qian.cx/posts/4FDB7B29-EB2F-425D-8422-344BFDD7CB0F", "creation_timestamp": "2026-07-09T22:35:04.565928Z"}, {"uuid": "bd3e69ac-f10e-4b90-b77e-84598a569e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52777", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-9369-69wj-7m2f", "content": "", "creation_timestamp": "2026-07-09T22:35:05.674107Z"}, {"uuid": "c3c7a61c-33f2-470b-8ecf-d3cb967b53ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52775", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-4pf7-cc4r-g63h", "content": "", "creation_timestamp": "2026-07-09T22:35:07.975221Z"}, {"uuid": "21a2466c-25b0-4a19-93e6-24a123fdf2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52774", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-r5xw-gcgw-hwp5", "content": "", "creation_timestamp": "2026-07-09T22:35:10.218617Z"}, {"uuid": "a11c5ad2-900e-4062-94c3-818ede633ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52773", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-35f3-pg38-486f", "content": "", "creation_timestamp": "2026-07-09T22:35:12.451884Z"}, {"uuid": "b9e46832-67b5-4f48-ab2c-bcd55fbf38ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52772", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-xc7j-3g8q-9vh4", "content": "", "creation_timestamp": "2026-07-09T22:35:14.713662Z"}, {"uuid": "5d5349b1-9990-4f18-bde3-21a0dcc37154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52771", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-8f2v-2qhj-gfwg", "content": "", "creation_timestamp": "2026-07-09T22:35:16.945085Z"}, {"uuid": "77df63ba-dab2-46bd-a7e9-1fc4f45698f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52769", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-vw42-752g-5mrp", "content": "", "creation_timestamp": "2026-07-09T22:35:21.384961Z"}, {"uuid": "c32178e3-63e7-4bfc-8802-baa206a60495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52767", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-mv28-wj57-f57g", "content": "", "creation_timestamp": "2026-07-09T22:35:23.624585Z"}, {"uuid": "a58f7735-2453-42b4-89e1-9c9dcf710c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52763", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-89v6-j5x6-cmj3", "content": "", "creation_timestamp": "2026-07-09T22:35:28.110245Z"}, {"uuid": "3fbe86b0-7387-42ea-a668-41f4b7b05f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52762", "type": "published-proof-of-concept", "source": "https://github.com/YesWiki/yeswiki/security/advisories/GHSA-65p8-9433-jpcp", "content": "", "creation_timestamp": "2026-07-09T22:35:30.371028Z"}, {"uuid": "6bb72867-2b74-4d8f-ab0a-da02c9028bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-09)", "content": "", "creation_timestamp": "2026-07-10T10:00:09.509130Z"}, {"uuid": "b7212533-989b-497b-8f30-54960955763e", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d784fd3e-0101-461a-bb5f-50480bb0d3d4", "content": "", "creation_timestamp": "2026-07-11T01:00:32.305698Z"}, {"uuid": "f05a0e39-a493-4012-8ffb-607bee563e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52969", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdinxgw3m2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52969 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a\u043e\u0435 \u0438 \u043a\u0430\u043a \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430\n\n\n\nhttps://kripta.biz/posts/BFCDE28A-F697-4888-8E83-4FE4EB685C44", "creation_timestamp": "2026-07-11T01:19:59.283887Z"}, {"uuid": "577f4919-1960-4b6c-98a1-b04ba4587dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52974", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdiop6rr52x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52974 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/95A5F783-849C-4558-B5BA-4821520DDF4A", "creation_timestamp": "2026-07-11T01:20:24.160021Z"}, {"uuid": "9f045e54-e5c9-4df3-bd0d-0d4fe88a095f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52981", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdipw6yuu2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52981 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8A7A6A12-C318-464B-AB7B-A1378E7F39FB", "creation_timestamp": "2026-07-11T01:21:05.091202Z"}, {"uuid": "04920cb4-10ae-4a55-8d05-9c6b4d53b87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52976", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdj3uwi7n2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52976 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a\u043e\u0435 \u0438 \u043a\u0430\u043a \u0435\u0451 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438\n\n\n\nhttps://kripta.biz/posts/51C73D3E-173B-4DB5-8C33-DEA440B0E3E0", "creation_timestamp": "2026-07-11T01:27:46.550200Z"}, {"uuid": "eafef921-ff5f-4c3c-be63-b72eea4c4c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52979", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdj4qollq2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52979 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0A34FA11-D2B6-4A98-8020-D09CF9C9FC2F", "creation_timestamp": "2026-07-11T01:28:15.610210Z"}, {"uuid": "1bfb9132-6668-4a97-a97c-1e8690b8c612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52984", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdj5txhfb2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52984 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/71C41CCB-F279-40AD-BA6F-BAB1F4B5446B", "creation_timestamp": "2026-07-11T01:28:53.089869Z"}, {"uuid": "73aae9c6-6279-42b5-a5de-31b307af3fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52986", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdj6nld4m2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52986 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/4E6154E6-734D-40A6-AC8A-7098DE75FA44", "creation_timestamp": "2026-07-11T01:29:19.727837Z"}, {"uuid": "b5f7156b-4dae-4fd1-95f9-e94a0634face", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52977", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdj7fdktj27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52977 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a\u043e\u0435 \u0438 \u043a\u0430\u043a \u0435\u0451 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438\n\n\n\nhttps://kripta.biz/posts/8317EE18-620A-4FAC-8E59-934ABB079727", "creation_timestamp": "2026-07-11T01:29:44.461581Z"}, {"uuid": "0a34e971-d5f0-4b1a-9853-34f703ed8ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52747", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdonhllv32z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52747 \u0432 ModSecurity: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/C4FE5C0B-83B7-40FB-ABE3-99665078E03F", "creation_timestamp": "2026-07-11T03:07:05.262723Z"}, {"uuid": "14dcb439-ab1c-43e7-b062-8743ae23c15b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52761", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdordalpi2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52761 \u0432 ModSecurity: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6515887C-8EEB-4748-857D-97543F8AA3E3", "creation_timestamp": "2026-07-11T03:09:14.982603Z"}, {"uuid": "876e612d-a59a-4ddb-84bb-bfbf8734bef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5252", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30555", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, based on the latest observed activity.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-31900\n\ud83c\udfaf GitHub Action (Black) \u2013 Arbitrary Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Batosay1337Lab/CVE-2026-31900\n\n\ud83e\udde0 Overview\nA vulnerability in GitHub Actions using the Black formatter allows attackers to inject malicious repository references via pyproject.toml, leading to arbitrary code execution in CI environments.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary code execution in CI/CD\n\u2022 Secret leakage risk\n\u2022 Supply chain attack vector\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-29598\n\ud83c\udfaf Acora CMS \u2013 Stored XSS\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/padayali-JD/CVE-2026-29598\n\n\ud83e\udde0 Overview\nMultiple stored XSS vulnerabilities allow attackers to inject malicious scripts via user input fields such as first and last name.\n\n\u2699\ufe0f Impact\n\u2022 Stored XSS\n\u2022 Session hijacking\n\u2022 Persistent client-side attacks\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-22200\n\ud83c\udfaf osTicket \u2013 Arbitrary File Read via PDF Export\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Remnant-DB/CVE-2026-22200\n\n\ud83e\udde0 Overview\nA vulnerability in osTicket allows attackers to embed crafted HTML into tickets, which leads to arbitrary file read when exporting to PDF.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive file disclosure\n\u2022 Server-side data leakage\n\u2022 Unauthorized file access\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21710\n\ud83c\udfaf Node.js HTTP Server \u2013 Potential Exploitation Path\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/dajneem23/CVE-2026-21710\n\n\ud83e\udde0 Overview\nA vulnerability affecting Node.js HTTP servers may allow exploitation depending on server configuration and request handling logic.\n\n\u2699\ufe0f Impact\n\u2022 Server-side exploitation\n\u2022 Application instability\n\u2022 Attack surface expansion\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5252\n\ud83c\udfaf Admin Panel \u2013 Cross-Site Scripting (XSS)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/aydin5245/CVE-2026-5252-CVE-POC-ivanti\n\n\ud83e\udde0 Overview\nA reflected XSS vulnerability allows attackers to execute arbitrary JavaScript through crafted requests targeting message endpoints.\n\n\u2699\ufe0f Impact\n\u2022 Cross-site scripting\n\u2022 Session hijacking\n\u2022 Client-side exploitation\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Real-world PoC validation\n\u2022 CI/CD attack surface analysis\n\u2022 Web vulnerability exploitation patterns\n\u2022 Threat intelligence tracking\n\n\u26a0\ufe0f Important Note\nRecent GitHub trends show increasing risks:\n\u2022 Fake CVE advisories and malicious PoC distribution campaigns targeting developers\n\ud83d\udc49 Always verify PoC code before execution.\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:37.200042Z"}, {"uuid": "d205b196-6d8a-43d8-8815-da0aa9fcb4c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52747", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqemhaqjhj2d", "content": "\ud83d\udfe0 CVE-2026-52747 - High (8.6)\n\nModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, I...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52747/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T12:00:29.254048Z"}, {"uuid": "e136827b-8e5d-483a-84bf-5558332f8799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52715", "type": "published-proof-of-concept", "source": "Telegram/K7zXqOYFd1qXyT9LARXPzqWKeQzalprou3AuwisAGlu--nM", "content": "", "creation_timestamp": "2026-08-16T00:00:48.179033Z"}, {"uuid": "87fb8209-9c17-4f39-b498-7bd7e8068a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52715", "type": "published-proof-of-concept", "source": "Telegram/dKwmYVy2aEc9gRb5YSn4b-auUmO46y6-PGZsT6qcYst_4VQ", "content": "", "creation_timestamp": "2026-08-16T00:00:48.377253Z"}, {"uuid": "5975c2f9-d30b-4f4e-a78a-9ffa5dbacb65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/true_secator/8294", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 0-day \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0441\u0442\u0430\u0432 \u043f\u044f\u0442\u044b\u043c \u043d\u0443\u043b\u0435\u0439, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e CVE-2026-11645, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 Desktop, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Windows (149.0.7827.102), Mac (149.0.7827.103) \u0438 Linux (149.0.7827.102) \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0435\u0439 \u0432 Google.\n\nGoogle \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0438\u043b\u0438 \u043d\u0435\u0434\u0435\u043b\u044c, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0439\u0442\u0438 \u0434\u043e \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Chrome.\n\n\u0412\u043e\u043e\u0431\u0449\u0435, \u044d\u0442\u0430 \u043a\u0440\u0430\u0439\u043d\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 Chrome V8.\n\n\u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f 0-day \u043c\u043e\u0436\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ASLR, \u0447\u0442\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\nGoogle \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2024-0519 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445.\n\n\u0421 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u043d\u0443\u043b\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2026-2441 \u0432 CSSFontFeatureValuesMap, CVE-2026-3909 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 2D-\u0433\u0440\u0430\u0444\u0438\u043a\u0438 Skia, \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 JavaScript \u0438 WebAssembly (CVE-2026-3910), \u0430 \u0442\u0430\u043a\u0436\u0435 use-after-free \u0432\u00a0Dawn\u00a0(CVE-2026-5281).\n\n\u041f\u0440\u043e\u0448\u043b\u044b\u0439 \u0433\u043e\u0434 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0432\u043e\u0441\u0435\u043c\u044c\u044e 0-day , \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043c\u043d\u043e\u0433\u0438\u0445 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 (TAG) \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a spyware.", "creation_timestamp": "2026-07-12T10:00:04.240274Z"}, {"uuid": "30e3697c-f3c7-4435-8007-b3f9e1370bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52886", "type": "published-proof-of-concept", "source": "Telegram/FHR8sTJaHxMdgYZj-FavirPOXM07ovPaeCJ2J24gHjC9VrE", "content": "", "creation_timestamp": "2026-08-07T10:08:45.051187Z"}, {"uuid": "eb8685ea-f4ec-483b-a27e-fded11c3f99d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52747", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqic7nb3ua2j", "content": "CVE-2026-52747 - WAF bypass in ModSecurity <3.0.16. Multipart parser silently removes line breaks, creating parser differential vs backend. CVSS 8.6. No patch available. Upgrade to 3.0.16 immediately. #CVE #ModSecurity #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-52747/", "creation_timestamp": "2026-07-12T23:07:55.119482Z"}, {"uuid": "2b6f3c91-c36d-49b8-aefa-7492591cf64c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/true_secator/8294", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 0-day \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0441\u0442\u0430\u0432 \u043f\u044f\u0442\u044b\u043c \u043d\u0443\u043b\u0435\u0439, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e CVE-2026-11645, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 Desktop, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Windows (149.0.7827.102), Mac (149.0.7827.103) \u0438 Linux (149.0.7827.102) \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0435\u0439 \u0432 Google.\n\nGoogle \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0438\u043b\u0438 \u043d\u0435\u0434\u0435\u043b\u044c, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0439\u0442\u0438 \u0434\u043e \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Chrome.\n\n\u0412\u043e\u043e\u0431\u0449\u0435, \u044d\u0442\u0430 \u043a\u0440\u0430\u0439\u043d\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0447\u0442\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0432 JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 Chrome V8.\n\n\u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f 0-day \u043c\u043e\u0436\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ASLR, \u0447\u0442\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\nGoogle \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2024-0519 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445.\n\n\u0421 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0449\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u043d\u0443\u043b\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2026-2441 \u0432 CSSFontFeatureValuesMap, CVE-2026-3909 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 2D-\u0433\u0440\u0430\u0444\u0438\u043a\u0438 Skia, \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 JavaScript \u0438 WebAssembly (CVE-2026-3910), \u0430 \u0442\u0430\u043a\u0436\u0435 use-after-free \u0432\u00a0Dawn\u00a0(CVE-2026-5281).\n\n\u041f\u0440\u043e\u0448\u043b\u044b\u0439 \u0433\u043e\u0434 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0432\u043e\u0441\u0435\u043c\u044c\u044e 0-day , \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043c\u043d\u043e\u0433\u0438\u0445 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 (TAG) \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a spyware.", "creation_timestamp": "2026-07-13T00:00:46.658876Z"}, {"uuid": "9f17fc27-1335-4a8b-bd00-673429c8098a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-13T06:00:05.993853Z"}, {"uuid": "e7632dd6-5321-4c6e-b3e2-54da41ede0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52923", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk2xedcmj2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52923 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a\u043e\u0435 \u0438 \u043a\u0430\u043a \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430\n\n\n\nhttps://kripta.biz/posts/496551EE-F5C1-42C5-A3D7-8C6ED5BB81DD", "creation_timestamp": "2026-07-13T16:03:20.748984Z"}, {"uuid": "7caa5ae9-2b71-464f-83a9-f894544529a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52101", "type": "seen", "source": "https://t.me/GithubRedTeam/92641", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a -linx-server-vulnerability-report\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a nk7667\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:21:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic disclosure for CVE-2026-52100 (CSRF) & CVE-2026-52101 (SSRF) in linx-server. MITRE assigned the CVEs; this repo provides a public reference and helps affected users understand the risk.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.316127Z"}, {"uuid": "20df3ff6-46d8-4a18-976e-c29dd968453a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52100", "type": "seen", "source": "https://t.me/GithubRedTeam/92641", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a -linx-server-vulnerability-report\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a nk7667\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:21:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic disclosure for CVE-2026-52100 (CSRF) & CVE-2026-52101 (SSRF) in linx-server. MITRE assigned the CVEs; this repo provides a public reference and helps affected users understand the risk.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.361312Z"}, {"uuid": "960ee3db-f557-4ae6-ad89-61de47fc885c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52658", "type": "seen", "source": "https://t.me/GithubRedTeam/92563", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52658\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mirackayikci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 19:58:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-52658 \u2014 AureusERP Stored XSS\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.973175Z"}, {"uuid": "021790b1-1490-4feb-b7d7-d42ef92e0786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "seen", "source": "https://t.me/GithubRedTeam/92219", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52806\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a portbuster1337\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 6  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 16:34:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGogs RCE via argument injection in git rebase (CWE-88) \u2014 Python PoC. CVE-2026-52806\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:11.304055Z"}, {"uuid": "d6f3aeba-bead-4cc2-946c-74bb64592bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "seen", "source": "https://t.me/GithubRedTeam/91530", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52813\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a thecodeb0ss\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 01:25:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGogs has Path Traversal in organization name that results in RCE through Git hooks\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:15.234814Z"}, {"uuid": "6467cddb-4f10-4701-b80e-abe937b082d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52943", "type": "seen", "source": "https://t.me/GithubRedTeam/90393", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #0day #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52943\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a vn-lazyming\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-24 10:06:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis is a Linux Kernel Local Privilege Escalation PoC code for CVE-2026-52943 a use-after-free in skbuff.c, my first 0day found by me in linux kernel\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:19.631367Z"}, {"uuid": "49da3809-18a4-4fcf-b728-7b7bf2cd0fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-14T00:00:06.257782Z"}, {"uuid": "5efa7310-ca17-44b0-a8ca-66ff050e6fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "seen", "source": "https://t.me/GithubRedTeam/91530", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52813\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a thecodeb0ss\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 01:25:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGogs has Path Traversal in organization name that results in RCE through Git hooks\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:32.037534Z"}, {"uuid": "eadae869-992a-4457-8b76-ef1975aa9bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52101", "type": "seen", "source": "https://t.me/GithubRedTeam/92641", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a -linx-server-vulnerability-report\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a nk7667\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:21:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic disclosure for CVE-2026-52100 (CSRF) & CVE-2026-52101 (SSRF) in linx-server. MITRE assigned the CVEs; this repo provides a public reference and helps affected users understand the risk.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:09.764481Z"}, {"uuid": "4e922659-b8e5-4a22-ab85-c2006f33c375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52100", "type": "seen", "source": "https://t.me/GithubRedTeam/92641", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a -linx-server-vulnerability-report\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a nk7667\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:21:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic disclosure for CVE-2026-52100 (CSRF) & CVE-2026-52101 (SSRF) in linx-server. MITRE assigned the CVEs; this repo provides a public reference and helps affected users understand the risk.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:09.806252Z"}, {"uuid": "92df132e-73e1-4c16-8eef-8ccf82bc66ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52658", "type": "seen", "source": "https://t.me/GithubRedTeam/92563", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52658\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mirackayikci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 19:58:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-52658 \u2014 AureusERP Stored XSS\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:10.219955Z"}, {"uuid": "d257c260-70b7-4a57-a89f-13f49cf38b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "seen", "source": "https://t.me/GithubRedTeam/92219", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52806\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a portbuster1337\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 6  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 16:34:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGogs RCE via argument injection in git rebase (CWE-88) \u2014 Python PoC. CVE-2026-52806\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:19.719646Z"}, {"uuid": "ba5b3370-2a84-4cb5-bc39-9c322e03bcd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52943", "type": "seen", "source": "https://t.me/GithubRedTeam/90393", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #0day #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52943\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a vn-lazyming\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-24 10:06:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis is a Linux Kernel Local Privilege Escalation PoC code for CVE-2026-52943 a use-after-free in skbuff.c, my first 0day found by me in linux kernel\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:36.455028Z"}, {"uuid": "a51b7554-87f0-4ab3-a634-d3be3ea9832e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "seen", "source": "https://t.me/bdufstecru/3269", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 internal/database/org.go \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u0430\u043c\u043e\u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Gogs \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-08780\nCVE-2026-52813\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://github.com/gogs/gogs/releases/tag/v0.14.3", "creation_timestamp": "2026-07-14T01:00:05.629399Z"}, {"uuid": "e320e78f-14ab-4a53-912b-e8df0919ebfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "seen", "source": "https://t.me/bdufstecru/3242", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 isInTrustedDirectory() \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f RunDlg.cpp \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 Notepad++ \u0441\u0432\u044f\u0437\u0430\u043d\u0430 c \u043d\u0435\u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u044b\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0443\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-08136\nCVE-2026-52884\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://notepad-plus-plus.org/news/v8962-released/\nhttps://github.com/notepad-plus-plus/notepad-plus-plus/commit/ea1508855e9c4528f6198ce9d345f13cb759ebf4\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\u041a\u0430\u043d\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u0439\u0442\u0435 \u043f\u0443\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e PathCanonicalize() \u0438\u043b\u0438 GetFullPathNameW() \u043f\u0435\u0440\u0435\u0434 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439:\nbool isInTrustedDirectory(const wchar_t* path) {\nwchar_t canonicalPath[MAX_PATH] = {};\n// Resolve .., ., and redundant separators\nif (!PathCanonicalize(canonicalPath, path))\nreturn false;\n// NOW check against trusted directories\nfor (auto& trusted : trustedDirs) {\nif (PathIsPrefix(trusted, canonicalPath))\nreturn true;\n}\nreturn false;\n}", "creation_timestamp": "2026-07-14T01:00:06.375883Z"}, {"uuid": "a66e6575-fe1f-4a56-8f05-5bc79db0bf96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mql3xosge422", "content": "CVE-2026-52824 - kimai\nThe official Kimai Docker image contains a default secret key that can be used by an attacker to take over any account, including administrator accounts. This is a security risk for any\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kimai #composer #CVE #infosec", "creation_timestamp": "2026-07-14T01:54:05.181335Z"}, {"uuid": "4bc6a4a5-584e-4170-a3ae-cd63c6705fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52533", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqmhdbr2fk2t", "content": "CVE-2026-52533\nThe D-Link DIR-1253 router's etc/shadow file is vulnerable to unauthorized access. This could allow an attacker to gain elevated privileges on the router, potentially allowing them to make changes to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T14:50:04.976511Z"}, {"uuid": "2ac9eb46-4afd-4431-a0bc-d1671506929a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqmnea7ypo2l", "content": "CVE-2026-52837 - Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page\nCVE ID : CVE-2026-52837\n \n Published : July 14, 2026, 3:17 p.m. | 13\u00a0minutes ago\n \n Description : Easy!Appointments is a self hosted appointment scheduler. In versions up ...", "creation_timestamp": "2026-07-14T16:37:59.488275Z"}, {"uuid": "5ffcb5c1-0829-402e-881b-db07b906ba31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52806.yaml", "content": "", "creation_timestamp": "2026-08-21T00:00:10.788796Z"}, {"uuid": "7bb0e444-8604-41de-8bb6-fc87d3754bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52021", "type": "seen", "source": "https://gist.github.com/itsmohitnarayan/e456399f083130962bab6c710f208437", "content": "# CVE-2026-52021: Mobile API Authentication Bypass via Unvalidated Auth-Key Header in code100x/cms\n\n## CVE ID\nCVE-2026-52021\n\n## Affected Product\n- Project: code100x/cms (100xDevs CMS)\n- Repository: https://github.com/code100x/cms\n- Live deployment observed: https://app.100xdevs.com\n- Affected component: `src/middleware.ts` (`withMobileAuth` function), which guards routes matched by `/api/mobile/:path*`, including `src/app/api/mobile/search/route.ts`\n\n## Affected Versions\nObserved on the live deployment of app.100xdevs.com and in the public source tree as of 2026-04-30. Re-verified against the current `main` branch (commit 9f3c8f4) on 2026-08-07; the vulnerable code is unchanged. The last commit to modify `src/middleware.ts` was ff3bda3 (2024-12-07), which did not touch this check.\n\n## Patched Versions\nNone. No fix has been observed in the public repository or the live deployment as of 2026-08-07.\n\n## Vulnerability / Problem Type\nCWE-306: Missing Authentication for Critical Function\n\n## Summary\nThe `withMobileAuth` middleware function that protects mobile API routes under `/api/mobile/:path*` grants access based solely on the presence of an `Auth-Key` request header, without validating its value against any server-side secret:\n\n```typescript\nexport const withMobileAuth = async (req: RequestWithUser) => {\n  if (req.headers.get('Auth-Key')) {\n    return NextResponse.next();\n  }\n  const token = req.headers.get('Authorization');\n  ...\n```\n\nAny request that includes an `Auth-Key` header, regardless of its value, bypasses JWT verification entirely. Downstream route handlers, such as `src/app/api/mobile/search/route.ts`, then trust a client-supplied `g` header to identify the \"authenticated\" user, allowing a caller to forge arbitrary user identity as well.\n\n## Impact\nAn unauthenticated attacker can reach protected mobile API endpoints, including the search endpoint, without a legitimate session or valid credentials, by supplying any arbitrary value in the `Auth-Key` header. This exposes data such as course and video titles and internal content identifiers that should require an authenticated, entitled session.\n\n## Proof of Concept\n```bash\ncurl -i -s \\\n  -H 'Auth-Key: anything' \\\n  -H 'g: {\"id\":\"forged-user\",\"email\":\"forged@example.com\"}' \\\n  'https://app.100xdevs.com/api/mobile/search?q=test'\n```\n\nObserved result (captured 2026-04-30): HTTP 200 OK with a JSON array of search results (course/video titles and IDs), rather than a 401/403 rejection.\n\n## Root Cause\n`withMobileAuth` in `src/middleware.ts` treats the mere presence of the `Auth-Key` header as sufficient authorization and never compares it against a server-side secret before calling `NextResponse.next()`.\n\n## Remediation\nValidate `Auth-Key` against a securely stored server-side secret before bypassing JWT verification, and do not trust a client-supplied `g` header for user identity unless it was set by trusted middleware after successful authentication.\n\n## References\n- Source: https://github.com/code100x/cms/blob/main/src/middleware.ts\n- Source: https://github.com/code100x/cms/blob/main/src/app/api/mobile/search/route.ts\n\n## Disclosure Timeline\n- 2026-04-30: Vulnerability identified and verified against source and live deployment.\n- 2026-08-06: CVE service request submitted (request 2084598).\n- 2026-08-07: Vulnerability re-verified as still present and unpatched on the current main branch.\n\n## Reporter\nSamyora (director@samyora.co)\n", "creation_timestamp": "2026-08-07T14:32:36.606227Z"}, {"uuid": "21b48446-b38e-4b73-8c53-b65cd67c6e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5269", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfnw7qtt2i", "content": "CVE-2026-5269 - Navigator NCS and MCP System Accounts with Default Passwords\nCVE ID : CVE-2026-5269\n \n Published : July 14, 2026, 11:17 p.m. | 14\u00a0minutes ago\n \n Description : In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden syste...", "creation_timestamp": "2026-07-14T23:52:54.200306Z"}, {"uuid": "ebc0b1c7-d3cb-4254-a5ff-9a1d3a60cc8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-15T00:00:02.949915Z"}, {"uuid": "ce2af524-7fcb-4009-8e06-ce26c46658a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52943", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90393", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #0day #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52943\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a vn-lazyming\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-24 10:06:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis is a Linux Kernel Local Privilege Escalation PoC code for CVE-2026-52943 a use-after-free in skbuff.c, my first 0day found by me in linux kernel\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:20.100331Z"}, {"uuid": "14e20d54-1e17-41e3-a112-4057e261ee2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91530", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52813\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a thecodeb0ss\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 01:25:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGogs has Path Traversal in organization name that results in RCE through Git hooks\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:27.769883Z"}, {"uuid": "09df90aa-d19f-4337-995a-2044c4be1c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52658", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92563", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52658\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mirackayikci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 19:58:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-52658 \u2014 AureusERP Stored XSS\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:33.412479Z"}, {"uuid": "3b329965-77ad-4865-a7d0-6cd6b256a7e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92219", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52806\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a portbuster1337\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 6  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 16:34:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGogs RCE via argument injection in git rebase (CWE-88) \u2014 Python PoC. CVE-2026-52806\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:30.496947Z"}, {"uuid": "e73421ab-9736-44b2-bd0c-8af344a2e896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3269", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 internal/database/org.go \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u0430\u043c\u043e\u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Gogs \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u043a \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0443. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-08780\nCVE-2026-52813\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://github.com/gogs/gogs/releases/tag/v0.14.3", "creation_timestamp": "2026-07-15T00:00:34.611903Z"}, {"uuid": "1c33dcaa-9450-4e4d-89e6-e88c1051dde2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52884", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3242", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 isInTrustedDirectory() \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f RunDlg.cpp \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 Notepad++ \u0441\u0432\u044f\u0437\u0430\u043d\u0430 c \u043d\u0435\u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u044b\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0443\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-08136\nCVE-2026-52884\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://notepad-plus-plus.org/news/v8962-released/\nhttps://github.com/notepad-plus-plus/notepad-plus-plus/commit/ea1508855e9c4528f6198ce9d345f13cb759ebf4\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\u041a\u0430\u043d\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u0439\u0442\u0435 \u043f\u0443\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e PathCanonicalize() \u0438\u043b\u0438 GetFullPathNameW() \u043f\u0435\u0440\u0435\u0434 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439:\nbool isInTrustedDirectory(const wchar_t* path) {\nwchar_t canonicalPath[MAX_PATH] = {};\n// Resolve .., ., and redundant separators\nif (!PathCanonicalize(canonicalPath, path))\nreturn false;\n// NOW check against trusted directories\nfor (auto& trusted : trustedDirs) {\nif (PathIsPrefix(trusted, canonicalPath))\nreturn true;\n}\nreturn false;\n}", "creation_timestamp": "2026-07-15T00:00:34.112919Z"}, {"uuid": "7a59be54-aade-425a-8e7f-aec8b44ef8bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52101", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92641", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a -linx-server-vulnerability-report\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a nk7667\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:21:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic disclosure for CVE-2026-52100 (CSRF) & CVE-2026-52101 (SSRF) in linx-server. MITRE assigned the CVEs; this repo provides a public reference and helps affected users understand the risk.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:36.252666Z"}, {"uuid": "6dbee600-f1cf-4e95-b3f3-2a45517f4970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52100", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92641", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a -linx-server-vulnerability-report\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a nk7667\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:21:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic disclosure for CVE-2026-52100 (CSRF) & CVE-2026-52101 (SSRF) in linx-server. MITRE assigned the CVEs; this repo provides a public reference and helps affected users understand the risk.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:36.288275Z"}, {"uuid": "777b7c1a-9657-4e9d-bbc1-6bea30771ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5270", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqngczzwyz2x", "content": "CVE-2026-5270 - Authentication Bypass in Navigator and Blue Planet Products\nCVE ID : CVE-2026-5270\n \n Published : July 14, 2026, 11:17 p.m. | 14\u00a0minutes ago\n \n Description : An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Su...", "creation_timestamp": "2026-07-15T00:04:42.778491Z"}, {"uuid": "9f32425d-87b0-443f-a33c-d6d34444d404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52886", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqnoeb25ov2m", "content": "Notepad++ vulnerabilities now have public PoC exploit code. CVE-2026-52886, CVE-2026-54758, and CVE-2026-57233 are fixed in v8.9.7. Update now.\n\n#NotepadPlusPlus #PathTraversal #ZipSlip #CVE #InfoSec", "creation_timestamp": "2026-07-15T02:28:34.291222Z"}, {"uuid": "492bea6e-1ecd-43ab-aec1-8aafc023d163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5270", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqotriltvq2p", "content": "CVE-2026-5270 - navigator ncs\nCiena Navigator and Blue Planet products may allow unauthorized access. This is a serious security risk because attackers can bypass security checks and gain access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#navigatorncs #blueplanet #CVE #infosec", "creation_timestamp": "2026-07-15T13:38:06.767528Z"}, {"uuid": "71a34192-01a9-45df-aabf-484f8989c7ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52747", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqox2yh5ri26", "content": "\ud83d\udccc CVE-2026-52747 - ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 3.0.16, the multipart/form-dat... https://www.cyberhub.blog/cves/CVE-2026-52747", "creation_timestamp": "2026-07-15T14:37:06.358270Z"}, {"uuid": "10f193ec-c50e-4f19-8313-f7132e0ad660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52101", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqp2p7uvac2w", "content": "CVE-2026-52101\nA remote attacker can access sensitive data on an affected Linux server. This is a concern because it could allow unauthorized access to confidential information. To protect your server, update to a newer\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-15T15:42:06.397087Z"}, {"uuid": "5e20e8ab-0d7d-4956-9448-e7bb5f54e228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5269", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqp2wcttif2y", "content": "CVE-2026-5269 - navigator ncs\nCiena's Navigator Network Control Suite and Manage Control Plan have hidden system accounts with easily guessable passwords. These accounts don't have much power on their\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#navigatorncs #ciena #CVE #infosec", "creation_timestamp": "2026-07-15T15:46:04.199980Z"}, {"uuid": "e15f8fc6-5189-469f-9e7c-d57a0e4f7a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52843", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqp62h5zb32c", "content": "CVE-2026-52843 - browser\nLightpanda's fetch() and XMLHttpRequest functions shared session cookies with websites from other domains, potentially allowing attackers to access sensitive information. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#browser #lightpandaio #CVE #infosec", "creation_timestamp": "2026-07-15T16:42:04.178745Z"}, {"uuid": "9bf63c86-3ac5-4403-86a9-6b9743f203f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52842", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqp62iew3x2w", "content": "CVE-2026-52842 - browser\nA security flaw in Lightpanda, a tool used for artificial intelligence and automation, could allow hackers to bypass security restrictions. This means that malicious websites\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#browser #lightpandaio #CVE #infosec", "creation_timestamp": "2026-07-15T16:42:05.533092Z"}, {"uuid": "f23c92d1-b413-4907-9406-899bee934303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52865", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp6emfm6t2m", "content": "CVE-2026-52865 - NGINX Ingress Controller vulnerability\nCVE ID : CVE-2026-52865\n \n Published : July 15, 2026, 2:33 p.m. | 43\u00a0minutes ago\n \n Description : When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permis...", "creation_timestamp": "2026-07-15T16:47:45.347249Z"}, {"uuid": "40bef1ba-3341-4251-a6cc-cf2064605d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52847", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpeunqxad2d", "content": "CVE-2026-52847 - mantisbt\nMantisBT 2.28.3 and earlier has a security flaw in its admin installation page. This allows attackers to trick administrators into giving away their login credentials or being\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mantisbt #composer #CVE #infosec", "creation_timestamp": "2026-07-15T18:44:05.811675Z"}, {"uuid": "d1c603b7-6789-4e95-88fc-3c2faf3c8e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52881", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpey6zobs2c", "content": "CVE-2026-52881 - mantisbt\nA security flaw in MantisBT allows attackers to trick administrators into revealing their login credentials or being redirected to malicious websites. To protect your MantisBT\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mantisbt #composer #CVE #infosec", "creation_timestamp": "2026-07-15T18:46:04.665009Z"}, {"uuid": "21b5ee5d-567d-4134-8882-ecf268dd6336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52843", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpfwtu5la2w", "content": "CVE-2026-52843 - Lightpanda: fetch() and XMLHttpRequest attach session cookies to cross-origin requests regardless of credentials mode\nCVE ID : CVE-2026-52843\n \n Published : July 15, 2026, 5:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : Lightpanda is a headless browser des...", "creation_timestamp": "2026-07-15T19:03:13.135643Z"}, {"uuid": "727880d5-0595-46d2-a873-e77609802206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52842", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpgm3qmkx2s", "content": "CVE-2026-52842 - Lightpanda:URL parser misidentifies page origin for URLs containing @ in the path - Same-Origin Policy bypass\nCVE ID : CVE-2026-52842\n \n Published : July 15, 2026, 5:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : Lightpanda is a headless browser designed fo...", "creation_timestamp": "2026-07-15T19:15:07.196549Z"}, {"uuid": "113f7ddd-2db1-428d-abd0-217ab9bee9ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52870", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpmifoxio25", "content": "\ud83d\udfe0 CVE-2026-52870 - High (7.6)\n\nThe MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52870/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T21:00:25.644730Z"}, {"uuid": "1483f96f-83fc-42a4-9094-737a55f038ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpmoxunof2w", "content": "CVE-2026-52887 - nocobase\nNocoBase's in-app messaging feature allows attackers to inject malicious SQL code. This could potentially give an attacker control over a database and allow them to execute unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nocobase #CVE #infosec", "creation_timestamp": "2026-07-15T21:04:09.596663Z"}, {"uuid": "10446587-7ea4-43a9-800e-78071230b658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqppu2ragj2n", "content": "\ud83d\udd34 CVE-2026-52887 - Critical (10)\n\nNocoBase is an AI-powered no-code/low-code platform for building business applications and enterp...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52887/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T22:00:37.725597Z"}, {"uuid": "d9b24df5-b0bc-434e-b83f-41d64a088c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52891", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpq5spsbr25", "content": "CVE-2026-52891 - wekan\nWekan, an open source project management tool, allows attackers to execute commands on the server by uploading a malicious avatar with special characters. This can lead to unauthorized access and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wekan #CVE #infosec", "creation_timestamp": "2026-07-15T22:06:04.313239Z"}, {"uuid": "485fa4cc-40f8-4b15-be09-c61c09a6d2dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52893", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqptj4dkuq2w", "content": "CVE-2026-52893 - wekan\nWekan users are at risk if their email address is shared with an attacker using an OpenID Connect (OIDC) account. This vulnerability is fixed in Wekan version 9.32, so update to the latest\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wekan #CVE #infosec", "creation_timestamp": "2026-07-15T23:06:04.667647Z"}, {"uuid": "fe9bd7e3-5b62-4a99-8cdb-89ee6174b90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-16T00:00:04.094713Z"}, {"uuid": "33875bd1-2c6b-4cd7-9d2a-5d5f4227abe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52893", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpxqavaqm2i", "content": "CVE-2026-52893 - Wekan: OIDC Account Takeover via Unconditional Email-Based Account Merge in onCreateUser hook\nCVE ID : CVE-2026-52893\n \n Published : July 15, 2026, 10:17 p.m. | 17\u00a0minutes ago\n \n Description : Wekan is open source kanban built with Meteor. Prior to 9.32, the W...", "creation_timestamp": "2026-07-16T00:21:39.248994Z"}, {"uuid": "534b1c66-1e5d-466c-97ee-b40d87f6fa54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpyal2izp2s", "content": "CVE-2026-52891 - Wekan: Shell Injection via Avatar Upload\nCVE ID : CVE-2026-52891\n \n Published : July 15, 2026, 10:17 p.m. | 17\u00a0minutes ago\n \n Description : Wekan is open source kanban built with Meteor. Prior to 9.07, Wekan avatar upload functionality embeds user-supplied fil...", "creation_timestamp": "2026-07-16T00:30:46.914649Z"}, {"uuid": "5d5386bf-7c45-4299-99f4-54f4a58f48bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpzjwga2c2m", "content": "CVE-2026-52887 - NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE\nCVE ID : CVE-2026-52887\n \n Published : July 15, 2026, 9:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : NocoBase is an AI-powered no-code/low-code platform for building business ...", "creation_timestamp": "2026-07-16T00:53:54.505971Z"}, {"uuid": "c196d1e2-da8f-4cb4-9b2f-73cee2fc62e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52933", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mu2nu2y7s425", "content": "CyberMeowfia: Fedora 44, a signedness in io_uring, CVE-2026-52933 - It was introduced in Nov 2022 and fixed upstream in Apr 2026 - local priv esc", "creation_timestamp": "2026-08-27T10:39:42.208419Z"}, {"uuid": "2c9721cc-2f74-4bc8-ac65-afb9807b4cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52923", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrhx7qqr2i", "content": "\u05d4\u05e4\u05e8\u05e6\u05d4 CVE-2026-52923 \u05d1\u05d2\u05e8\u05e2\u05d9\u05df \u05dc\u05d9\u05e0\u05d5\u05e7\u05e1: \u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da?\n\n\n\nhttps://khesef.xyz/posts/28D49D0E-82F8-48C6-8F50-B37E8B79F41F", "creation_timestamp": "2026-07-16T08:02:18.050816Z"}, {"uuid": "e24e3818-2e66-4712-b6c2-5151d7a7c005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52203", "type": "seen", "source": "https://gist.github.com/this1slwl/1bfb6996ca7edf6f5d15b5ebc181f337", "content": "[CVE ID]\nCVE-2026-52203\n[Product]\nMCMS - 6.1.1\n[Version]\nMCMS - 6.1.1\n[Problem Type]\nSSRF\n[Description]\nAn extremely low-privilege account only needs to send a POST request to http://localhost:8080/ms/editor.do with the parameters action=catchimage and source[]=http://localhost:8089/flag.txt. The source[] parameter is the vulnerability point, used to specify the URL.", "creation_timestamp": "2026-07-16T08:34:05.934797Z"}, {"uuid": "2f328e6d-83a2-446d-8693-0fbe68cdc05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52204", "type": "seen", "source": "https://gist.github.com/this1slwl/d975073bb5feaafd09d9383e8351fb55", "content": "[CVE ID]\nCVE-2026-52204\n[Product]\nJeecgBoot - 3.9.2\n[Version]\nJeecgBoot - 3.9.2\n[Problem Type]\nSSRF\n[Description]\nAn issue in JeecgBoot 3.9.2 allows an attacker to execute arbitrary code via the /sys/common/uploadImgByHttp` endpoint. Although the vendor claims to have fixed SSRF issues (CVE-2026-2945, CVE-2026-7605), the fix is incomplete and can be bypassed.", "creation_timestamp": "2026-07-16T08:34:06.047173Z"}, {"uuid": "3dfae0c9-d432-4c07-8a3c-2f50acb3c306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52199", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93550", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52199\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lamaper\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 14:50:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:04.472841Z"}, {"uuid": "9eb670f1-d1cd-4a08-9668-4d6b09a40fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5252", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17110", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, based on the latest observed activity.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-31900\n\ud83c\udfaf GitHub Action (Black) \u2013 Arbitrary Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Batosay1337Lab/CVE-2026-31900\n\n\ud83e\udde0 Overview\nA vulnerability in GitHub Actions using the Black formatter allows attackers to inject malicious repository references via pyproject.toml, leading to arbitrary code execution in CI environments.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary code execution in CI/CD\n\u2022 Secret leakage risk\n\u2022 Supply chain attack vector\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-29598\n\ud83c\udfaf Acora CMS \u2013 Stored XSS\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/padayali-JD/CVE-2026-29598\n\n\ud83e\udde0 Overview\nMultiple stored XSS vulnerabilities allow attackers to inject malicious scripts via user input fields such as first and last name.\n\n\u2699\ufe0f Impact\n\u2022 Stored XSS\n\u2022 Session hijacking\n\u2022 Persistent client-side attacks\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-22200\n\ud83c\udfaf osTicket \u2013 Arbitrary File Read via PDF Export\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Remnant-DB/CVE-2026-22200\n\n\ud83e\udde0 Overview\nA vulnerability in osTicket allows attackers to embed crafted HTML into tickets, which leads to arbitrary file read when exporting to PDF.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive file disclosure\n\u2022 Server-side data leakage\n\u2022 Unauthorized file access\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21710\n\ud83c\udfaf Node.js HTTP Server \u2013 Potential Exploitation Path\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/dajneem23/CVE-2026-21710\n\n\ud83e\udde0 Overview\nA vulnerability affecting Node.js HTTP servers may allow exploitation depending on server configuration and request handling logic.\n\n\u2699\ufe0f Impact\n\u2022 Server-side exploitation\n\u2022 Application instability\n\u2022 Attack surface expansion\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5252\n\ud83c\udfaf Admin Panel \u2013 Cross-Site Scripting (XSS)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/aydin5245/CVE-2026-5252-CVE-POC-ivanti\n\n\ud83e\udde0 Overview\nA reflected XSS vulnerability allows attackers to execute arbitrary JavaScript through crafted requests targeting message endpoints.\n\n\u2699\ufe0f Impact\n\u2022 Cross-site scripting\n\u2022 Session hijacking\n\u2022 Client-side exploitation\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Real-world PoC validation\n\u2022 CI/CD attack surface analysis\n\u2022 Web vulnerability exploitation patterns\n\u2022 Threat intelligence tracking\n\n\u26a0\ufe0f Important Note\nRecent GitHub trends show increasing risks:\n\u2022 Fake CVE advisories and malicious PoC distribution campaigns targeting developers\n\ud83d\udc49 Always verify PoC code before execution.\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:10.797416Z"}, {"uuid": "a31e64cb-2c51-493f-a656-fd9fa2124c0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52923", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/479", "content": "A public PoC for CVE-2026-52923 demonstrates local privilege escalation to root on affected Linux systems.\n\nThe kernel flaw is a use-after-free in SysV IPC, triggered through the checkpoint/restore path and an invalid IPC ID allocation.\n\nCVSS 7.8 \u2014 local attackers can potentially gain kernel-level control.\npoc:\nhttps://github.com/NebuSec/CyberMeowfia/tree/main/security-research/Linux-CVE-2026-52923-RHEL-6.12.0-211.7.3.el10_2", "creation_timestamp": "2026-08-25T17:00:04.447870Z"}, {"uuid": "de669a82-7cb0-4638-abaa-794dc9e65b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52865", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc4ik4ie2t", "content": "\ud83d\udd17 CVE : CVE-2026-42533, CVE-2026-46333, CVE-2026-52865, CVE-2026-55723, CVE-2026-56434, CVE-2026-59762, CVE-2026-60005, CVE-2026-60062, CVE-2026-60065", "creation_timestamp": "2026-07-16T13:00:07.417432Z"}, {"uuid": "e4f1fe18-96f6-4886-8cf0-5c786c7f738f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/462", "content": "CVE-2026-52813\n\nGogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path traversal sequences (../) are accepted by Gogs, and repositories under them are written to paths following these path traversals. This allows storing/retrieving data for repositories at arbitrary locations on the filesystem. By creating nested structure of Git repositories, one can overwrite the other's hooks configuration to result in Remote Code Execution (RCE). This vulnerability is fixed in 0.14.3.", "creation_timestamp": "2026-08-28T00:00:38.150205Z"}, {"uuid": "470787a3-97f2-4044-a680-0d735166b891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52614", "type": "seen", "source": "Telegram/eJTmWIryt99ubO9QtbnCAouqtws-13ZSYrG03ttlIfqzwDU", "content": "", "creation_timestamp": "2026-07-16T19:00:07.748707Z"}, {"uuid": "5aa701cf-b7f0-4317-acc4-22c6ad725b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "seen", "source": "Telegram/mdwtCJyFRkb1eqyOZYOidcQcxHBgNYUJM5jnt7f3fsW0EMg", "content": "", "creation_timestamp": "2026-07-16T19:00:23.740622Z"}, {"uuid": "41e72d93-e9a0-479b-a9fc-0e660edbdc60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52614", "type": "seen", "source": "Telegram/5paqE9BZADOOkHSdC7twZCndT-XIbW43N6J0-aUcERlCO6E", "content": "", "creation_timestamp": "2026-07-16T19:00:08.009641Z"}, {"uuid": "007bc37b-27a6-464a-923a-c0f442c6ed22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52100", "type": "seen", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-16T19:00:15.352482Z"}, {"uuid": "2b703a71-5b51-47df-83cf-cd18e3250ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52101", "type": "seen", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-16T19:00:15.558690Z"}, {"uuid": "60b5afb3-9ac8-4d14-a03e-45640281a8b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52869", "type": "seen", "source": "https://gist.github.com/alon710/1d517629bc176ae6cad3ee2369704fcb", "content": "# CVE-2026-52869: CVE-2026-52869: Session Hijacking and Authorization Bypass in Model Context Protocol (MCP) Python SDK\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-07-16\n> **Full Report:** https://cvereports.com/reports/CVE-2026-52869\n\n## Summary\nAn authorization bypass vulnerability exists in the Model Context Protocol (MCP) Python SDK prior to version 1.27.2. The Server-Sent Events (SSE) and stateful Streamable HTTP transports route incoming JSON-RPC requests based purely on user-controlled session identifiers without validating ownership, enabling authenticated attackers to inject commands into other sessions.\n\n## TL;DR\nThe MCP Python SDK failed to bind active session identifiers to authenticated client principals, allowing any bearer-token-authenticated user to hijack and inject JSON-RPC messages into another client's session by supplying their session ID.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-639\n- **Attack Vector**: Network\n- **CVSS Score**: 7.1 (High)\n- **Exploit Status**: poc\n- **Impact**: Authorization Bypass, Hijacking\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Model Context Protocol (MCP) Python SDK (mcp PyPI package)\n- **mcp (PyPI)**: < 1.27.2 (Fixed in: `1.27.2`)\n\n## Mitigation\n\n- Upgrade Python mcp SDK to 1.27.2 or higher.\n- Configure custom authentication middleware to populate subject, client_id, and issuer claims.\n- Restrict trace and network logs to prevent exposure of active session UUIDs.\n\n**Remediation Steps:**\n1. Verify current package version via 'pip show mcp'.\n2. Execute 'pip install --upgrade mcp' to pull down 1.27.2+.\n3. Audit custom Starlette middleware implementations for compatibility with AuthenticatedUser constructs.\n4. Ensure experimental task management APIs use session-scoped generated IDs instead of global static task IDs.\n\n## References\n\n- [CVE-2026-52869 CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-52869)\n- [GitHub Security Advisory GHSA-jpw9-pfvf-9f58](https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-jpw9-pfvf-9f58)\n- [Official Release v1.27.2](https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.27.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-52869) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-16T20:31:08.551113Z"}, {"uuid": "0f18cfe2-1cfd-4670-8045-626a01037290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52832", "type": "published-proof-of-concept", "source": "https://github.com/nuclio/nuclio/security/advisories/GHSA-wpcj-rmv4-86qg", "content": "", "creation_timestamp": "2026-07-16T20:35:02.492221Z"}, {"uuid": "481dd515-d238-4f55-9086-a12c3e4b8db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52833", "type": "published-proof-of-concept", "source": "https://github.com/nuclio/nuclio/security/advisories/GHSA-3v79-m2cg-89ww", "content": "", "creation_timestamp": "2026-07-16T20:35:04.662251Z"}, {"uuid": "82142bb1-329f-492b-b5b9-886422eae2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52886", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mqsdv3qvdc2r", "content": "Notepad++\u3001v8.9.7\u30675\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63(CVE-2026-54758,CVE-2026-52886)\u904e\u53bb\u306e\u4e2d\u56fd\u7cfbAPT\u4e57\u3063\u53d6\u308a\u4e8b\u4ef6\u3092\u8e0f\u307e\u3048\u8981\u6ce8\u610f\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-07-16T23:04:31.008870Z"}, {"uuid": "9a3e6022-8355-43ac-a19a-e8c7e5141cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52774.yaml", "content": "", "creation_timestamp": "2026-07-17T00:00:07.008586Z"}, {"uuid": "1fde0ac2-64a5-459e-bae6-6df27f8c5032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52614", "type": "published-proof-of-concept", "source": "Telegram/5paqE9BZADOOkHSdC7twZCndT-XIbW43N6J0-aUcERlCO6E", "content": "", "creation_timestamp": "2026-07-17T00:00:09.365063Z"}, {"uuid": "25476b4b-7320-40d2-9165-644a24d7a703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52614", "type": "published-proof-of-concept", "source": "Telegram/eJTmWIryt99ubO9QtbnCAouqtws-13ZSYrG03ttlIfqzwDU", "content": "", "creation_timestamp": "2026-07-17T00:00:09.710783Z"}, {"uuid": "a2cbf884-32e0-4227-97b6-744c62a30abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52100", "type": "seen", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-17T00:00:30.797469Z"}, {"uuid": "5f8ae853-5a3e-4aab-9222-1196bca7eed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52101", "type": "seen", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-17T00:00:30.997579Z"}, {"uuid": "9bb30904-d465-4c2b-8831-aed4061970b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "seen", "source": "Telegram/mdwtCJyFRkb1eqyOZYOidcQcxHBgNYUJM5jnt7f3fsW0EMg", "content": "", "creation_timestamp": "2026-07-17T00:00:40.824387Z"}, {"uuid": "308af27b-adf2-4a29-9ebe-cc095c15ae69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52199", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93550", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52199\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lamaper\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 14:50:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:54.645434Z"}, {"uuid": "ceee62dd-89d8-4432-a90e-225a9f47b7f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52886", "type": "seen", "source": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-57233-cve-2026-52886-e-cve-2026-54758", "content": "", "creation_timestamp": "2026-07-17T16:15:05.429006Z"}, {"uuid": "3818d8a3-094c-4cf1-ae84-848ca7cbf66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquky6dwza23", "content": "CVE-2026-52746 - JSONata: Malicious inputs to \"$toMillis\" function can cause resource exhaustion\nCVE ID : CVE-2026-52746\n \n Published : July 17, 2026, 7:17 p.m. | 21\u00a0minutes ago\n \n Description : JSONata is a JSON query and transformation language. Prior to 2.2.0, malicious non...", "creation_timestamp": "2026-07-17T20:16:45.336970Z"}, {"uuid": "ec5241f0-5866-4efc-9c0b-b85149cbbc77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "published-proof-of-concept", "source": "Telegram/mdwtCJyFRkb1eqyOZYOidcQcxHBgNYUJM5jnt7f3fsW0EMg", "content": "", "creation_timestamp": "2026-07-18T00:00:10.390730Z"}, {"uuid": "cd0474b7-26fc-4b22-ad3a-c65afede9759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52101", "type": "published-proof-of-concept", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-18T00:00:41.881404Z"}, {"uuid": "a3d01034-e19f-4515-9883-454deddee058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52100", "type": "published-proof-of-concept", "source": "Telegram/Tcqh02NKjGxYGJtUMQTkfxPUgRWmBkGud2qg4EWjuqsxH1Q", "content": "", "creation_timestamp": "2026-07-18T00:00:41.966865Z"}, {"uuid": "a6a594e6-cfdd-41ad-90df-bd8c7af69e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52886", "type": "seen", "source": "https://www.acn.gov.it/portale/w/notepad-poc-pubblici-per-lo-sfruttamento-delle-cve-2026-57233-cve-2026-52886-e-cve-2026-54758", "content": "DisponibilI Proof of Concept (PoC) per le vulnerabilit\u00e0 identificate dalle CVE-2026-57233, CVE-2026-52886 e CVE-2026-54758 \u2013 gi\u00e0 sanate dal vendor \u2013 presenti nel software \"Notepad++\", noto editor di testo avanzato per Windows.", "creation_timestamp": "2026-07-18T01:00:52.249849Z"}, {"uuid": "6dec95bb-db51-4cee-ad51-edf0c9570e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqvfustm4y2s", "content": "CVE-2026-52887\nA security issue in NocoBase's notification plugin could allow an authenticated user to execute malicious code on the database. This could lead to unauthorized access and data theft. NocoBase has released a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-18T04:18:03.711327Z"}, {"uuid": "540e8a17-e2ed-454c-90e7-db69cce3f290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52891", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqvfutk4u62a", "content": "CVE-2026-52891\nWekan's avatar upload feature allows hackers to execute server commands if they upload a file with malicious characters. This is a security risk because it could allow hackers to take control of your server. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-18T04:18:04.274959Z"}, {"uuid": "f7fbded5-2b9c-42a5-b8f3-b22288b3b324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52865", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mqw7svhp5q2x", "content": "CVE-2026-52865 [MEDIUM] nginx\n\nWhen NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permission to create or modify Ingress or TransportServer resources can cause the NGINX Ingress Cont\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-52865", "creation_timestamp": "2026-07-18T12:02:16.481316Z"}, {"uuid": "d3f0e1bc-6c07-43e7-809e-0a7040da9bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52746", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwx6vsqzo2d", "content": "\ud83d\udfe0 CVE-2026-52746 - High (7.5)\n\nJSONata is a JSON query and transformation language. Prior to 2.2.0, malicious non-matching input...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52746/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T19:00:35.887540Z"}, {"uuid": "bd427e5a-a56c-482b-8f8c-be377bf50a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52490", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwne2r4gn2b", "content": "CVE-2026-52490\nThe libtiff image library, which many programs use to work with TIFF files, has a flaw in its tiffcrop utility that could allow a malicious user to run any program on the affected system. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T20:20:06.025833Z"}, {"uuid": "b665cf86-b4e3-47d2-b44f-f3d0f809be9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/20489", "content": "New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation \u2014 Patch Released \u2013 thehackernews.com\n\nWed, 01 Apr 2026 19:42:00", "creation_timestamp": "2026-07-19T16:00:05.935176Z"}, {"uuid": "7406b2e1-9c65-43f0-9cea-8b4934095d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://t.me/critical_bug/1686", "content": "\ud83d\udd25 \u041d\u043e\u0432\u044b\u0439 Zero-Day \u0432 Google Chrome: CVE-2026-5281 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435! \ud83d\udd34\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 2026 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438! \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c: CVE-2026-5281 \u2014 \u044d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 Use-After-Free (CWE-416) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Dawn (\u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f WebGPU \u0432 Chromium). \u041e\u0448\u0438\u0431\u043a\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0435\u0441\u043b\u0438 \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043c\u0430\u043d\u0438\u0442\u044c \u0432\u0430\u0441 \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430.\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442: \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u043e\u0431\u0445\u043e\u0434 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. CISA \u0443\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0431\u0430\u0433 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV (Known Exploited Vulnerabilities) \u0441 \u0436\u0435\u0441\u0442\u043a\u0438\u043c \u0434\u0435\u0434\u043b\u0430\u0439\u043d\u043e\u043c \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0434\u043e 15 \u0430\u043f\u0440\u0435\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0434\u0432\u0438\u0436\u043a\u0435 Chromium (Edge, Brave, Opera, Vivaldi).\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 146.0.7680.177/178 (Windows/macOS) \u0438\u043b\u0438 146.0.7680.177 (Linux).\n2\ufe0f\u20e3 \u041e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f!\n3\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u043f\u0430\u0442\u0447 \u043f\u043e\u043a\u0430 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 WebGPU \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443: WebGPUEnabled = false.\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n#Google #Chrome #CVE #ZeroDay #RCE #WebGPU #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-19T16:00:12.596721Z"}, {"uuid": "ab4535af-13aa-4e62-82d3-3de25a81ee4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://t.me/critical_bug/1687", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-5281: Zero-Day \u0432 Google Chrome WebGPU (Dawn)", "creation_timestamp": "2026-07-19T16:00:12.631528Z"}, {"uuid": "820307da-a699-4f44-8c78-3195d8aed070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/20489", "content": "New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation \u2014 Patch Released \u2013 thehackernews.com\n\nWed, 01 Apr 2026 19:42:00", "creation_timestamp": "2026-07-20T00:00:21.385949Z"}, {"uuid": "c9df1646-887b-4852-a1e7-73d57b414f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://t.me/critical_bug/1686", "content": "\ud83d\udd25 \u041d\u043e\u0432\u044b\u0439 Zero-Day \u0432 Google Chrome: CVE-2026-5281 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435! \ud83d\udd34\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 2026 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438! \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c: CVE-2026-5281 \u2014 \u044d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 Use-After-Free (CWE-416) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Dawn (\u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f WebGPU \u0432 Chromium). \u041e\u0448\u0438\u0431\u043a\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0435\u0441\u043b\u0438 \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043c\u0430\u043d\u0438\u0442\u044c \u0432\u0430\u0441 \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430.\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442: \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u043e\u0431\u0445\u043e\u0434 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. CISA \u0443\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0431\u0430\u0433 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV (Known Exploited Vulnerabilities) \u0441 \u0436\u0435\u0441\u0442\u043a\u0438\u043c \u0434\u0435\u0434\u043b\u0430\u0439\u043d\u043e\u043c \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0434\u043e 15 \u0430\u043f\u0440\u0435\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0434\u0432\u0438\u0436\u043a\u0435 Chromium (Edge, Brave, Opera, Vivaldi).\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 146.0.7680.177/178 (Windows/macOS) \u0438\u043b\u0438 146.0.7680.177 (Linux).\n2\ufe0f\u20e3 \u041e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f!\n3\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u043f\u0430\u0442\u0447 \u043f\u043e\u043a\u0430 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 WebGPU \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443: WebGPUEnabled = false.\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n#Google #Chrome #CVE #ZeroDay #RCE #WebGPU #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-20T00:00:25.578252Z"}, {"uuid": "aa9c544f-633c-4176-9e6d-2e140a8a9572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://t.me/critical_bug/1687", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-5281: Zero-Day \u0432 Google Chrome WebGPU (Dawn)", "creation_timestamp": "2026-07-20T00:00:25.612622Z"}, {"uuid": "fc56baba-7144-4595-9430-f4e6df33e663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr23usnfrn2g", "content": "Kimai vulnerability CVE-2026-52824 (CVSS 9.1) lets attackers forge cookies for account takeover via a default Docker APP_SECRET. Update to 2.58.0 now.\n\n#Kimai #AccountTakeover #Docker #CVE202652824 #OpenSource", "creation_timestamp": "2026-07-20T01:02:25.099377Z"}, {"uuid": "50572890-0257-4c36-a695-dffcd4016fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/aub.bsky.social/post/3mr25frgdoc2r", "content": "CVE-2026-5281", "creation_timestamp": "2026-07-20T01:29:46.656638Z"}, {"uuid": "b16a6608-c874-47d2-b20e-e68989a8fdac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mr2mnokguv2j", "content": "Kimai\u306eDocker\u306b\u8106\u5f31\u6027\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u306eAPP_SECRET\u304c\u9732\u898b\u3057\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u304c\u53ef\u80fd\u306b\n\n\u516c\u5f0f\u306eDocker\u30a4\u30e1\u30fc\u30b8\u3067Kimai\u3092\u904b\u7528\u3057\u3066\u3044\u308b\u30e6\u30fc\u30b6\u30fc\u306f\u3001\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-52824\u3001GHSA-jr9p-4h4j-6c58\u3068\u3057\u3066\u8ffd\u8de1\uff09\u304c\u767a\u898b\u3055\u308c\u305f\u3053\u3068\u3092\u53d7\u3051\u3001\u65e9\u6025\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3092\u66f4\u65b0\u3059\u308b\u3088\u3046\u5f37\u304f\u6c42\u3081\u3089\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u516c\u958b\u3055\u308c\u3066\u8ab0\u3067\u3082\u77e5\u308a\u5f97\u308b\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b7\u30fc\u30af\u30ec\u30c3\u30c8\u304c\u4f7f\u308f\u308c\u3066\u3044\u308b...", "creation_timestamp": "2026-07-20T06:02:39.137140Z"}, {"uuid": "1af1e5d8-41f8-4eb1-a753-d191ec37afc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52199", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr42o4g27l2e", "content": "CVE-2026-52199\nA remote attacker can access and control your router by sending a malicious request. This could allow them to change settings, access your network, or even use your router to attack other devices. Update your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-20T19:46:05.548236Z"}, {"uuid": "6b4001e4-0806-4cfc-865a-c1b3361d28d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52618", "type": "seen", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-24T21:00:06.506257Z"}, {"uuid": "4f31612e-d466-4c43-a108-6a99d061d698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52617", "type": "seen", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-24T21:00:06.554382Z"}, {"uuid": "d6f5eeb0-829a-4d51-96cd-b41bcda32507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52830", "type": "seen", "source": "https://t.me/pphm_HackerNews/1828", "content": "\ud83d\udd34 Critical fast-mcp-telegram Vulnerability Lets Attackers Access Telegram Session Without Token\n\nA critical vulnerability in fast-mcp-telegram (CVE-2026-52830, GHSA-rxw2-pc8j-vxwm) allows attackers to access a Telegram MCP session over HTTP without a valid bearer token by abusing a path-traversal flaw in how session files are resolved on disk.\n\nThis breaks the intended high-entropy token boundary and exposes the default Telegram account to full message and MTProto access.\n\nfast-mcp-telegram is a Telegram MCP server that bridges Telegram accounts to AI assistants and HTTP clients via a session-based authentication model.", "creation_timestamp": "2026-08-23T00:00:43.240806Z"}, {"uuid": "09db5532-ac96-4436-a830-0575c7c8e43b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52616", "type": "seen", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-24T21:00:06.286453Z"}, {"uuid": "85f86c5c-0946-40f8-a77d-0a6be9303159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1687", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-5281: Zero-Day \u0432 Google Chrome WebGPU (Dawn)", "creation_timestamp": "2026-07-21T00:00:40.568643Z"}, {"uuid": "4b6b13e4-289e-478b-b012-e8304d2703ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/critical_bug/1686", "content": "\ud83d\udd25 \u041d\u043e\u0432\u044b\u0439 Zero-Day \u0432 Google Chrome: CVE-2026-5281 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435! \ud83d\udd34\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 2026 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438! \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c: CVE-2026-5281 \u2014 \u044d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 Use-After-Free (CWE-416) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Dawn (\u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f WebGPU \u0432 Chromium). \u041e\u0448\u0438\u0431\u043a\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0435\u0441\u043b\u0438 \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043c\u0430\u043d\u0438\u0442\u044c \u0432\u0430\u0441 \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430.\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442: \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u043e\u0431\u0445\u043e\u0434 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430. CISA \u0443\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0431\u0430\u0433 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV (Known Exploited Vulnerabilities) \u0441 \u0436\u0435\u0441\u0442\u043a\u0438\u043c \u0434\u0435\u0434\u043b\u0430\u0439\u043d\u043e\u043c \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0434\u043e 15 \u0430\u043f\u0440\u0435\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0434\u0432\u0438\u0436\u043a\u0435 Chromium (Edge, Brave, Opera, Vivaldi).\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Chrome \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 146.0.7680.177/178 (Windows/macOS) \u0438\u043b\u0438 146.0.7680.177 (Linux).\n2\ufe0f\u20e3 \u041e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f!\n3\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u043f\u0430\u0442\u0447 \u043f\u043e\u043a\u0430 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 WebGPU \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443: WebGPUEnabled = false.\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n#Google #Chrome #CVE #ZeroDay #RCE #WebGPU #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-21T00:00:40.604286Z"}, {"uuid": "2d0bd20d-46c0-4b91-9179-0e691818a205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/462", "content": "CVE-2026-52813\n\nGogs is an open source self-hosted Git service. Prior to 0.14.3, organization names containing path traversal sequences (../) are accepted by Gogs, and repositories under them are written to paths following these path traversals. This allows storing/retrieving data for repositories at arbitrary locations on the filesystem. By creating nested structure of Git repositories, one can overwrite the other's hooks configuration to result in Remote Code Execution (RCE). This vulnerability is fixed in 0.14.3.", "creation_timestamp": "2026-08-27T15:00:04.466810Z"}, {"uuid": "ba54b8b5-0b3c-4d8b-b9cd-6c802aa2e426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/2537", "content": "\ud83d\uddde\ufe0f Google Patches Actively Exploited Chrome Zero-Day CVE-2026-5281 \u2014 Update Now\n\n\ud83c\udfe1 via securebulletin.com \ud83d\udd17 https://ift.tt/kXrI562", "creation_timestamp": "2026-07-21T04:00:07.959876Z"}, {"uuid": "29bf760f-c471-43cd-9174-6246e5441d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52910", "type": "seen", "source": "https://t.me/GithubRedTeam/94427", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ScreenOff\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Dere3046\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 04:52:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-52910 kernel crash PoC. screen goes off.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T06:00:04.998660Z"}, {"uuid": "20736784-90a9-4d17-8758-3f4477cc2aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52824.yaml", "content": "", "creation_timestamp": "2026-07-21T06:00:05.732731Z"}, {"uuid": "9c047c1c-36b3-4945-96a4-2f6a17877502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52394", "type": "seen", "source": "https://gist.github.com/CAPTAIN1275/48a0b7d67d0e58cb05c607e0d715447c", "content": "# CVE-2026-52394 - DeepSeek V4 Multi-Tenant Reasoning Chain Information Disclosure\n\n- **CVE ID**: CVE-2026-52394\n- **CWE**: CWE-201 (Information Exposure Through Sent Data) / CWE-209 (Information Exposure Through an Error Message)\n- **Discoverer**: Deng Zhitao\n- **Date**: 2026-07-24\n- **Status**: Fixed by vendor\n\n## Description\n\nDeepSeek V4 chat interface fails to isolate reasoning/thinking session data when processing malformed thought triggers. Sending the crafted input `?? <think  ????????????` in a new conversation causes the system to return reasoning chain content that was generated in other users' sessions, confirming a multi-tenant session isolation failure.\n\n## Vendor of Product\n\nDeepSeek\n\n## Affected Product Code Base\n\nDeepSeek - V4 (chat interface at https://chat.deepseek.com/)\n\n## Vulnerability Type\n\nCWE-201: Information Exposure Through Sent Data\nCWE-209: Information Exposure Through an Error Message\nIncorrect Access Control (multi-tenant session isolation failure)\n\n## Attack Vectors\n\nAn unauthenticated attacker sends a message with content `?? <think  ????????????` to https://chat.deepseek.com/. The malformed thought trigger bypasses the session context boundary, causing the model's reasoning buffer to return data from other active or cached inference sessions.\n\n## Impact\n\nInformation Disclosure: true\n\nAn attacker can obtain partial or complete reasoning chain content, including prompts, from other users' ongoing or cached conversations. This may expose sensitive information that users have included in their conversation context.\n\n## Proof of Concept\n\n1. Open a new conversation at https://chat.deepseek.com/\n2. Send: `?? <think  ????????????`\n3. The response contains reasoning chain content from another user's session\n\nExample of received response (binomial theorem expansion from another user's conversation):\n\n```\n<think\n\u597d\u7684\uff0c\u6211\u4eec\u4e00\u6b65\u6b65\u6765\u63a8\u7406\u3002\n\n\u4f60\u8981\u6c42\u7684\u662f \u5229\u7528\u4e8c\u9879\u5f0f\u5b9a\u7406 \u5c55\u5f00 (1+2x)^10\uff0c\u5e76\u6c42\u51fa x^3 \u7684\u7cfb\u6570\u3002\n\n1. \u5199\u51fa\u4e8c\u9879\u5f0f\u5b9a\u7406\u516c\u5f0f...\n```\n\nThis content clearly came from another user's conversation, confirming cross-session data leakage.\n\n## Suggested Mitigation\n\nImplement strict session isolation for the reasoning chain buffer at the inference server level. Validate and sanitize the thought trigger format before processing. Ensure each inference request is scoped to its own session context.\n\n## References\n\n- https://chat.deepseek.com/\n- https://deepseek.com\n", "creation_timestamp": "2026-08-23T01:15:28.188365Z"}, {"uuid": "d5561ed2-7947-4667-bafb-1df27e34b9ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52656", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr64tavc2r2y", "content": "CVE-2026-52656\nThe SJCAM camera devices, specifically models SJ4000-Air and Whitelabel versions, have a security weakness that could allow unauthorized users to run any code on the device by sending a specially crafted file.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-21T15:30:05.021838Z"}, {"uuid": "5fd11a98-e5bd-4720-a74a-001b401ec016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mtz36l572x2s", "content": "Chromium CVE-2026-5281 / CVE-2026-11057 Exploit Chain https://packetstorm.news/files/229689 #exploit", "creation_timestamp": "2026-08-26T19:32:53.850393Z"}, {"uuid": "c98248dc-9e3a-431e-ae21-fbf84b916260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52824.yaml", "content": "", "creation_timestamp": "2026-07-22T00:00:02.856111Z"}, {"uuid": "34cf9166-0cba-43bb-835d-39336e268eca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52910", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94427", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ScreenOff\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Dere3046\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 04:52:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-52910 kernel crash PoC. screen goes off.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-22T00:00:30.086509Z"}, {"uuid": "de452e0c-581d-4c54-a9a5-a9aac59ae82d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/2537", "content": "\ud83d\uddde\ufe0f Google Patches Actively Exploited Chrome Zero-Day CVE-2026-5281 \u2014 Update Now\n\n\ud83c\udfe1 via securebulletin.com \ud83d\udd17 https://ift.tt/kXrI562", "creation_timestamp": "2026-07-22T01:00:14.673804Z"}, {"uuid": "0d2e1276-5e73-4c19-a195-ec4a4d8a97c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52618", "type": "published-proof-of-concept", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-25T00:00:06.853257Z"}, {"uuid": "7216b3b1-b684-422a-ab0e-4ea708453a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52617", "type": "published-proof-of-concept", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-25T00:00:06.995713Z"}, {"uuid": "f78c1351-891c-4699-8bcf-a833d0bc567d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52616", "type": "published-proof-of-concept", "source": "Telegram/3uoG5wFLf24Ez4I576aLMwFbbZgYXdBfxkZjcO29_lRuMU0", "content": "", "creation_timestamp": "2026-08-25T00:00:07.243679Z"}, {"uuid": "65d0a600-91fb-48f2-9911-31d06c492601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52837", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7k7xhr5q2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52837 \u0432 Easy!Appointments: \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/B991AE73-3AAC-422A-9659-97F848E0D09F", "creation_timestamp": "2026-07-22T05:02:29.897577Z"}, {"uuid": "880974da-cba6-4c88-b8b9-91674149d1e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52910", "type": "seen", "source": "Telegram/nZl5UlvWmDfGnVyzuctdLXeNPSthYrXPLlU07drZckp1EYQ", "content": "", "creation_timestamp": "2026-07-22T17:00:05.578798Z"}, {"uuid": "36f4d294-1d5a-4ca2-b64f-842d2921ce8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52863", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mraktg4bem2i", "content": "CVE-2026-52863 - Memory corruption could lead to crash and denial of service\nCVE ID : CVE-2026-52863\n \n Published : July 22, 2026, 1:09 p.m. | 36\u00a0minutes ago\n \n Description : In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' mod...", "creation_timestamp": "2026-07-22T14:46:02.509429Z"}, {"uuid": "4c6da14b-b14e-411d-9cbb-401c08e1cd5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "seen", "source": "Telegram/7mI1XR-YBo8-oaXN9qxsH1n50-oEMIH7yLn9iwYoK3prrhI", "content": "", "creation_timestamp": "2026-07-22T17:00:04.964887Z"}, {"uuid": "562a04d5-6a33-4d1f-8a5e-982354a11d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "seen", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "content": "", "creation_timestamp": "2026-07-22T17:00:05.062345Z"}, {"uuid": "d5507520-f502-4cb5-895d-cb16285ac37a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52910", "type": "seen", "source": "Telegram/OHtlgQSf1ttAAdGsPBUI_8rerZBnCKre55WVBLaYQ6LwoQM", "content": "", "creation_timestamp": "2026-07-22T17:00:06.168217Z"}, {"uuid": "02c0928b-afc8-446e-8b1f-28cb68584ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "seen", "source": "https://gist.github.com/Maiwell420/018d87969ae3918e7ee90caad7702d2a", "content": "Gogs instance - public index\n\nhttps://workstation-wedding-particle-valuable.trycloudflare.com\nhttps://workstation-wedding-particle-valuable.trycloudflare.com/user/sign_up\n\nCVE-2026-52806 window: 0.14.2\n", "creation_timestamp": "2026-08-28T00:01:48.875302Z"}, {"uuid": "b4c27815-858d-43d7-b2f5-f80bad39188a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52472", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mratrlnzd52y", "content": "CVE-2026-52472\nAn attacker can exploit a security weakness in Wgcloud 3.6.4 to gain higher access levels on a remote system. This means an attacker could take control of the system and potentially steal sensitive data or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-22T17:26:04.921408Z"}, {"uuid": "4d627b7e-8789-4db7-913f-bac101a531bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52469", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrax4v7usm2q", "content": "CVE-2026-52469\nAn attacker can access sensitive information or take control of the system using the DeviceInfoMapper.xml file. This is a serious risk because it allows an attacker to gain elevated access to the system,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-22T18:26:05.146085Z"}, {"uuid": "b0afbf93-2d3a-4060-a281-366aa01c9adf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52470", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mraxzjxawt2i", "content": "CVE-2026-52470\nA security issue in Crocus v.1.3.44 allows an attacker to gain unauthorized access to sensitive data by manipulating the RecordStateMapper.xml file. This could lead to unauthorized changes to data or system\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-22T18:42:06.312113Z"}, {"uuid": "fa9de667-cb13-487d-9f2d-a1f9e0879963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/cepage98.bsky.social/post/3mrbc6rz4lc2m", "content": "Tech Update: Update your Chrome browser now!\n\nChrome zero-day (CVE-2026-5281) is being actively exploited \u2014 malicious webpages can run code on your device. \n\u2705 Update Chrome now (Settings > About Chrome) \n\u2705 Restart to apply it. \n\nSource: Security Affairs #CyberSecurity #UpdateNow", "creation_timestamp": "2026-07-22T21:44:00.440619Z"}, {"uuid": "0bdd9165-d404-4a89-bee7-08035a975e9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52845", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrbij277pi2s", "content": "\ud83d\udccc CVE-2026-52845 - Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, forward_auth copy_headers deletes the exact client-supplied identity... https://www.cyberhub.blog/cves/CVE-2026-52845", "creation_timestamp": "2026-07-22T23:37:07.052722Z"}, {"uuid": "af43105a-5e03-43bb-8bd6-998ca3f0bf7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52824.yaml", "content": "", "creation_timestamp": "2026-07-23T00:00:03.854592Z"}, {"uuid": "8ad06aee-3ac6-44e6-a942-58ddf6d3c604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52910", "type": "published-proof-of-concept", "source": "Telegram/OHtlgQSf1ttAAdGsPBUI_8rerZBnCKre55WVBLaYQ6LwoQM", "content": "", "creation_timestamp": "2026-07-23T00:00:08.337187Z"}, {"uuid": "57f1cbdb-82a6-4750-843d-7ac0be3a47a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52910", "type": "published-proof-of-concept", "source": "Telegram/nZl5UlvWmDfGnVyzuctdLXeNPSthYrXPLlU07drZckp1EYQ", "content": "", "creation_timestamp": "2026-07-23T00:00:08.838701Z"}, {"uuid": "653119bd-61c7-4f80-8b45-bff1e0befeb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "published-proof-of-concept", "source": "Telegram/7mI1XR-YBo8-oaXN9qxsH1n50-oEMIH7yLn9iwYoK3prrhI", "content": "", "creation_timestamp": "2026-07-23T00:00:09.295104Z"}, {"uuid": "5886c3fd-2fdf-4b35-ba80-8f976a6090a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "published-proof-of-concept", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "content": "", "creation_timestamp": "2026-07-23T00:00:09.460668Z"}, {"uuid": "8fe92fe8-e8c9-4dc0-b669-795aa1db48ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "seen", "source": "https://t.me/GithubRedTeam/94508", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52813-Gogs-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a iqx6889\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 15:33:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-52813 (Gogs Path Traversal \u2192 Git Hooks RCE) defensive writeup: root-cause & patch analysis, Sigma/SIEM detection rules, IOCs, non-intrusive version scanner. No weaponized PoC.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:06.709848Z"}, {"uuid": "2d081d65-573d-4814-855b-bb7d5e55f76c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52923", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/479", "content": "A public PoC for CVE-2026-52923 demonstrates local privilege escalation to root on affected Linux systems.\n\nThe kernel flaw is a use-after-free in SysV IPC, triggered through the checkpoint/restore path and an invalid IPC ID allocation.\n\nCVSS 7.8 \u2014 local attackers can potentially gain kernel-level control.\npoc:\nhttps://github.com/NebuSec/CyberMeowfia/tree/main/security-research/Linux-CVE-2026-52923-RHEL-6.12.0-211.7.3.el10_2", "creation_timestamp": "2026-08-26T00:00:09.967581Z"}, {"uuid": "9f0d11c1-94f7-42ce-a5b8-5962e68b1b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52813", "type": "seen", "source": "https://t.me/GithubRedTeam/94508", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52813-Gogs-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a iqx6889\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 15:33:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-52813 (Gogs Path Traversal \u2192 Git Hooks RCE) defensive writeup: root-cause & patch analysis, Sigma/SIEM detection rules, IOCs, non-intrusive version scanner. No weaponized PoC.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:10.441160Z"}, {"uuid": "a6782479-7e1e-4995-9d7a-69c7baaafa39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52824.yaml", "content": "", "creation_timestamp": "2026-07-24T00:00:08.906257Z"}, {"uuid": "48d7dba4-b976-4f55-bcd3-93e0bbc92ca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52928", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhbbzjc72d", "content": "\ud83d\udd17 CVE : CVE-2025-23131, CVE-2026-23272, CVE-2026-23278, CVE-2026-23302, CVE-2026-31451, CVE-2026-46252, CVE-2026-52928, CVE-2026-53138, CVE-2026-53139, CVE-2026-53157, CVE-2026-53158, CVE-2026-53163, CVE-2026-53167, CVE-2026-53325, CVE-2026-53327, CVE-2026-53359, CVE-2026-53362, CVE-2026-53366", "creation_timestamp": "2026-07-24T13:25:31.743775Z"}, {"uuid": "7ebf707e-781f-490e-bf45-4793fa88ae4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52439", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg63tlg4j2y", "content": "CVE-2026-52439\nA remote attacker can execute malicious code on your system by exploiting a weakness in the xiandafu beetl version 3.20.2. This could allow them to access or manipulate sensitive data. To protect your system,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-24T20:14:04.772961Z"}, {"uuid": "2abb95eb-7cde-49de-991e-ac72356bb1fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mriudssgml24", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-5281: Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the re\u2026\nCVSS 8.8 \u00b7 EPSS 5.0% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-5281\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-25T21:57:34.367380Z"}, {"uuid": "cdc9bcb0-9571-4dcb-8ef9-071c43761a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://t.me/ZerodayAlert/646", "content": "0day \u0432 Chrome: WebGPU \u0441\u0442\u0430\u043b \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430\n\n\u0412 Chrome \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2026-5281, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Dawn, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d WebGPU \u0438 \u0440\u0430\u0431\u043e\u0442\u0430 \u0441 \u0433\u0440\u0430\u0444\u0438\u043a\u043e\u0439 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435. Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 use-after-free. \u0412 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u0442\u0430\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b \u0438\u0437-\u0437\u0430 \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0438 GPU. \u0415\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043b\u043e\u0432\u0438\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043c\u0435\u0436\u0434\u0443 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u043a \u0443\u0436\u0435 \u043d\u0435\u0432\u0430\u043b\u0438\u0434\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u0414\u0430\u043b\u044c\u0448\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\u041f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0441\u0430\u043c \u0432\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438. WebGPU \u2014 \u043d\u043e\u0432\u044b\u0439 \u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0439 \u0441\u043b\u043e\u0439, \u0433\u0434\u0435 \u0435\u0449\u0451 \u043d\u0435 \u0443\u0441\u0442\u043e\u044f\u043b\u0438\u0441\u044c \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u0437\u0430\u0449\u0438\u0442\u044b. \u0418\u043d\u0442\u0435\u0440\u0435\u0441 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u043a \u0442\u0430\u043a\u0438\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c \u0440\u0430\u0441\u0442\u0451\u0442, \u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0431\u0443\u0434\u0443\u0442 \u043f\u043e\u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0432\u0441\u0451 \u0447\u0430\u0449\u0435.\n\n#chrome #webgpu #0day #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:08.386149Z"}, {"uuid": "a8a676a1-abae-4e18-9ed9-2d371c6415c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "exploited", "source": "https://t.me/ZerodayAlert/646", "content": "0day \u0432 Chrome: WebGPU \u0441\u0442\u0430\u043b \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430\n\n\u0412 Chrome \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2026-5281, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 Dawn, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d WebGPU \u0438 \u0440\u0430\u0431\u043e\u0442\u0430 \u0441 \u0433\u0440\u0430\u0444\u0438\u043a\u043e\u0439 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435. Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 use-after-free. \u0412 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u0442\u0435\u043a\u0435 \u0442\u0430\u043a\u0438\u0435 \u0431\u0430\u0433\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b \u0438\u0437-\u0437\u0430 \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0438 GPU. \u0415\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043b\u043e\u0432\u0438\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043c\u0435\u0436\u0434\u0443 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u043a \u0443\u0436\u0435 \u043d\u0435\u0432\u0430\u043b\u0438\u0434\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u0414\u0430\u043b\u044c\u0448\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\u041f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u043d \u0441\u0430\u043c \u0432\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438. WebGPU \u2014 \u043d\u043e\u0432\u044b\u0439 \u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0439 \u0441\u043b\u043e\u0439, \u0433\u0434\u0435 \u0435\u0449\u0451 \u043d\u0435 \u0443\u0441\u0442\u043e\u044f\u043b\u0438\u0441\u044c \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u0437\u0430\u0449\u0438\u0442\u044b. \u0418\u043d\u0442\u0435\u0440\u0435\u0441 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u043a \u0442\u0430\u043a\u0438\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c \u0440\u0430\u0441\u0442\u0451\u0442, \u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0431\u0443\u0434\u0443\u0442 \u043f\u043e\u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0432\u0441\u0451 \u0447\u0430\u0449\u0435.\n\n#chrome #webgpu #0day #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:36.131874Z"}, {"uuid": "84f7fe6a-ce6e-42f4-9cdc-bbdb528534c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "seen", "source": "https://t.me/EchelonEyes/4459", "content": "Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0432 2026 \u0433\u043e\u0434\u0443\n\n\u0422\u0435\u0445\u0433\u0438\u0433\u0430\u043d\u0442 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0435\u0449\u0451 \u043e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome. \u0420\u0435\u0447\u044c \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 CVE-2026-5281, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Dawn \u2013 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 WebGPU, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 Chromium.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u043e\u043c \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u043e\u0435 \u043d\u0435\u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445, \u0433\u0434\u0435 \u0431\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0436\u0434\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/5b0b78 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T02:00:25.049921Z"}, {"uuid": "66989d3a-c13f-4ecc-9701-1d7f59cecb36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52504", "type": "seen", "source": "Telegram/Pju2lk9uaKkbkjso0NTtdRvjd808czCF5fWgGC8yN_eU0QM", "content": "", "creation_timestamp": "2026-07-26T22:00:03.052014Z"}, {"uuid": "cda69b70-0423-459a-9700-1585a9f173ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5252", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17110", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, based on the latest observed activity.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-31900\n\ud83c\udfaf GitHub Action (Black) \u2013 Arbitrary Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Batosay1337Lab/CVE-2026-31900\n\n\ud83e\udde0 Overview\nA vulnerability in GitHub Actions using the Black formatter allows attackers to inject malicious repository references via pyproject.toml, leading to arbitrary code execution in CI environments.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary code execution in CI/CD\n\u2022 Secret leakage risk\n\u2022 Supply chain attack vector\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-29598\n\ud83c\udfaf Acora CMS \u2013 Stored XSS\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/padayali-JD/CVE-2026-29598\n\n\ud83e\udde0 Overview\nMultiple stored XSS vulnerabilities allow attackers to inject malicious scripts via user input fields such as first and last name.\n\n\u2699\ufe0f Impact\n\u2022 Stored XSS\n\u2022 Session hijacking\n\u2022 Persistent client-side attacks\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-22200\n\ud83c\udfaf osTicket \u2013 Arbitrary File Read via PDF Export\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Remnant-DB/CVE-2026-22200\n\n\ud83e\udde0 Overview\nA vulnerability in osTicket allows attackers to embed crafted HTML into tickets, which leads to arbitrary file read when exporting to PDF.\n\n\u2699\ufe0f Impact\n\u2022 Sensitive file disclosure\n\u2022 Server-side data leakage\n\u2022 Unauthorized file access\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21710\n\ud83c\udfaf Node.js HTTP Server \u2013 Potential Exploitation Path\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/dajneem23/CVE-2026-21710\n\n\ud83e\udde0 Overview\nA vulnerability affecting Node.js HTTP servers may allow exploitation depending on server configuration and request handling logic.\n\n\u2699\ufe0f Impact\n\u2022 Server-side exploitation\n\u2022 Application instability\n\u2022 Attack surface expansion\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5252\n\ud83c\udfaf Admin Panel \u2013 Cross-Site Scripting (XSS)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/aydin5245/CVE-2026-5252-CVE-POC-ivanti\n\n\ud83e\udde0 Overview\nA reflected XSS vulnerability allows attackers to execute arbitrary JavaScript through crafted requests targeting message endpoints.\n\n\u2699\ufe0f Impact\n\u2022 Cross-site scripting\n\u2022 Session hijacking\n\u2022 Client-side exploitation\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Real-world PoC validation\n\u2022 CI/CD attack surface analysis\n\u2022 Web vulnerability exploitation patterns\n\u2022 Threat intelligence tracking\n\n\u26a0\ufe0f Important Note\nRecent GitHub trends show increasing risks:\n\u2022 Fake CVE advisories and malicious PoC distribution campaigns targeting developers\n\ud83d\udc49 Always verify PoC code before execution.\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:05.697868Z"}, {"uuid": "22dbe4a8-50bf-4435-83b7-5459d0fcd07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52504", "type": "published-proof-of-concept", "source": "Telegram/Pju2lk9uaKkbkjso0NTtdRvjd808czCF5fWgGC8yN_eU0QM", "content": "", "creation_timestamp": "2026-07-27T00:00:09.007202Z"}, {"uuid": "b0a4181f-353c-4376-972d-42ddca941148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5281", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/4459", "content": "Google \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0432 2026 \u0433\u043e\u0434\u0443\n\n\u0422\u0435\u0445\u0433\u0438\u0433\u0430\u043d\u0442 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0435\u0449\u0451 \u043e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome. \u0420\u0435\u0447\u044c \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 CVE-2026-5281, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Dawn \u2013 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 WebGPU, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 Chromium.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u043e\u043c \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u043e\u0435 \u043d\u0435\u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445, \u0433\u0434\u0435 \u0431\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0436\u0434\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/5b0b78 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-27T00:00:10.931957Z"}, {"uuid": "3596a2ee-375b-4840-b7ee-1e0c0853a77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52688", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mrmcuzglnkeh", "content": "PowerDNS Recursor\u306e\u8106\u5f31\u6027\u60c5\u5831\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\uff08CVE-2026-52688\u3001 CVE-2026-52686\uff09 https://jprs.jp/tech/security/2026-07-27-powerdns-recursor.html", "creation_timestamp": "2026-07-27T06:55:48.602988Z"}, {"uuid": "1ab3476f-0a2b-4218-a385-f6eeb05699b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52686", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mrmcuzglnkeh", "content": "PowerDNS Recursor\u306e\u8106\u5f31\u6027\u60c5\u5831\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\uff08CVE-2026-52688\u3001 CVE-2026-52686\uff09 https://jprs.jp/tech/security/2026-07-27-powerdns-recursor.html", "creation_timestamp": "2026-07-27T06:55:48.649299Z"}, {"uuid": "e3bcfaac-4598-499f-b08c-c018f5517a94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5270", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrmkby3g3q2l", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea: CVE-2026-5270 - \u05e2\u05e7\u05d9\u05e4\u05ea \u05d0\u05d9\u05de\u05d5\u05ea \u05d1-Navigator \u05d5-Blue Planet \u05e9\u05dc Ciena\n\n\n\nhttps://khesef.xyz/posts/C7864C2F-6D2D-4B66-A891-B3370C717407", "creation_timestamp": "2026-07-27T09:08:14.113376Z"}, {"uuid": "fd58b0b8-0600-492a-8dcd-60e178a08b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52101", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlwf44pzr23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52101 \u0432 linux-server andreimarcu: \u0443\u0433\u0440\u043e\u0437\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/73D37875-B604-4B82-B536-DB623829FD21", "creation_timestamp": "2026-07-27T03:12:04.054953Z"}, {"uuid": "4433ce7a-c26d-432e-9b45-5fce60daaaf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52101", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrlwftyrcf2f", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05de\u05d9\u05d3\u05e2 \u05e8\u05d2\u05d9\u05e9 \u05d1-CVE-2026-52101: \u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da?\n\n\n\nhttps://khesef.xyz/posts/D125320A-9C50-442D-9796-2B77887DF6E9", "creation_timestamp": "2026-07-27T03:12:29.438679Z"}, {"uuid": "f422eb1b-3759-46b4-904b-b066e646f9d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5269", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmj2r2nov2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-5269: \u0423\u0433\u0440\u043e\u0437\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0432 Ciena Navigator NCS \u0438 MCP\n\n\n\nhttps://kripta.biz/posts/DE215F2E-0201-4BB1-8ECE-EA0FB0EC34DA", "creation_timestamp": "2026-07-27T08:46:18.025252Z"}, {"uuid": "8ec9f93c-5757-4723-bba9-2ee36f754402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5269", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mrmj2xee4h23", "content": "CVE-2026-5269:Ciena Navigator NCS\u548cMCP\u7cfb\u7edf\u8d26\u6237\u9ed8\u8ba4\u5bc6\u7801\u6f0f\u6d1e\u5206\u6790\u4e0e\u5e94\u5bf9\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/2F7242DD-F06D-4D66-9977-BEDC37BFF436", "creation_timestamp": "2026-07-27T08:46:25.528039Z"}, {"uuid": "32e111ac-7918-4331-81a4-6de75d504393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5270", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmkbyk6yg23", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-5270: \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Ciena Navigator \u0438 Blue Planet\n\n\n\nhttps://kripta.biz/posts/3A6997CD-5B63-46A1-B98D-8D1516F98257", "creation_timestamp": "2026-07-27T09:08:14.827631Z"}, {"uuid": "6264d42c-7a87-4af7-a0b5-1024ca6d91b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5270", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mrmkcgxtp72v", "content": "CVE-2026-5270:Ciena Navigator\u548cBlue Planet\u4ea7\u54c1\u7684\u8eab\u4efd\u9a8c\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\u5206\u6790\u4e0e\u5e94\u5bf9\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/83425CC6-D08C-4905-85CD-F47C2AF7ECB2", "creation_timestamp": "2026-07-27T09:08:30.133990Z"}, {"uuid": "80b0be19-5a26-4e38-b0f6-b7f0d82bc586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52100", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlyuesn4t2p", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52100: CSRF \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 linux-server\n\n\n\nhttps://kripta.biz/posts/48E76E11-E910-4FF6-A667-787990C4B830", "creation_timestamp": "2026-07-27T03:56:24.142974Z"}, {"uuid": "f7265e5f-2876-4569-b25d-441ae005994e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52848", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrmw5a5zbw2x", "content": "\ud83d\udd17 CVE : CVE-2026-47678, CVE-2026-47679, CVE-2026-52848, CVE-2026-53610, CVE-2026-53625, CVE-2026-53629, CVE-2026-55214, CVE-2026-57152", "creation_timestamp": "2026-07-27T12:40:19.681963Z"}, {"uuid": "b689a614-fc87-42b5-a192-e63c49abae6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52490", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu2azgiemb24", "content": "CVE-2026-52490 - tiff\nThe libtiff image library's tiffcrop utility has a flaw that lets a maliciously crafted image cause the program to execute unwanted code. This could let an attacker take control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tiff #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-27T06:50:03.787975Z"}, {"uuid": "a7e4e904-0212-47ef-8b84-580c696162b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52888", "type": "seen", "source": "https://gist.github.com/alon710/f64be2d49b2d7a1297c03bef66babfa4", "content": "# CVE-2026-52888: CVE-2026-52888: Sensitive Data Exposure and Blacklist Bypass in NocoBase SQL Collection Plugin\n\n> **CVSS Score:** 6.8\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-52888\n\n## Summary\nNocoBase, an extensible low-code platform, was found to contain an information exposure vulnerability in its SQL Collection plugin. The validator designed to inspect SQL queries used an incomplete keyword-based blacklist, allowing users with administrative or collection creation privileges to bypass restrictions and execute arbitrary SELECT queries against PostgreSQL system catalogs. This flaw permits unauthenticated or privilege-escalated access to critical system files, active connection listings, and system user password hashes.\n\n## TL;DR\nNocoBase versions prior to 2.1.0-alpha.46 used an incomplete blacklist in checkSQL() validator, enabling privileged users to read system databases, query schema metadata, and extract PostgreSQL MD5/SCRAM password hashes.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-184\n- **Attack Vector**: Network (AV:N)\n- **CVSS Base Score**: 6.8\n- **EPSS Score**: 0.00269\n- **Exploit Maturity**: Proof-of-Concept (PoC)\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- NocoBase low-code/no-code platform\n- NocoBase SQL Collection Plugin (@nocobase/plugin-collection-sql)\n- **@nocobase/plugin-collection-sql**: <= 2.0.59 (Fixed in: `2.1.0-alpha.46`)\n\n## Mitigation\n\n- Upgrade NocoBase installation to version 2.1.0-alpha.46, 2.0.62, or later.\n- Enforce Least Privilege (least-privilege database user configurations) to prevent access to the system catalog.\n- Revoke access rights on 'pg_shadow' and 'pg_authid' tables for the NocoBase connection user.\n\n**Remediation Steps:**\n1. Identify all active NocoBase deployments utilizing PostgreSQL backends.\n2. Apply the patch using the official repository updates or upgrade the Docker container image to tag v2.0.62.\n3. Modify database privileges so that the database user account does not possess 'superuser' or 'rds_superuser' privileges.\n4. Audit active database tables for exposed application tokens and rotate database credentials.\n\n## References\n\n- [NocoBase Security Advisory GHSA-v8vm-cqh8-q87q](https://github.com/nocobase/nocobase/security/advisories/GHSA-v8vm-cqh8-q87q)\n- [NocoBase Patch Commit 87c5489](https://github.com/nocobase/nocobase/commit/87c548969ce9258dd7f0d9571c9453ae10bc3fc4)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-52888) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-28T21:31:27.843543Z"}, {"uuid": "611b173e-484c-4802-b783-edfa582fe21d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52888", "type": "published-proof-of-concept", "source": "https://github.com/nocobase/nocobase/security/advisories/GHSA-v8vm-cqh8-q87q", "content": "", "creation_timestamp": "2026-07-28T22:35:34.813368Z"}, {"uuid": "bbd32b31-ee8f-4535-8a35-6e5aa198b2fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52923", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtvu5dncal2d", "content": "A public PoC for the Linux kernel flaw CVE-2026-52923 allows local attackers to escalate to root privilege. Learn about the patch and technical details.\n\n#Linux #CVE202652923 #CyberSecurity #PrivilegeEscalation #KernelFlaw", "creation_timestamp": "2026-08-25T12:48:57.214996Z"}, {"uuid": "c1d127d4-c4ec-4c54-8aff-6a0b6b9fc32b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "seen", "source": "https://t.me/GithubRedTeam/95672", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52832-PoC-exploit-nuclio-dashboard\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mdvpat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 10:43:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Join, letting an attacker write arbitrary content to any path as root. (CVE-2026-52832, \u22641.15.27)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-29T12:01:54.614045Z"}, {"uuid": "07eede9d-ce54-4cde-9acd-b0c7b6cad23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52837", "type": "published-proof-of-concept", "source": "https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-xgr6-pqjv-3pf8", "content": "", "creation_timestamp": "2026-07-29T18:35:18.519003Z"}, {"uuid": "314d4193-ca01-42f3-bac6-406cd97c22c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "seen", "source": "Telegram/g38DleJHgOgrObzOzogNy-FQ9NoQ3t7D9hzvmW22jIm78xQ", "content": "", "creation_timestamp": "2026-07-29T13:00:06.163822Z"}, {"uuid": "89451881-a58c-45f5-8527-a319984798ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52839", "type": "published-proof-of-concept", "source": "https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-w8xc-8g92-v77h", "content": "", "creation_timestamp": "2026-07-29T18:35:21.013812Z"}, {"uuid": "a7cc3ac3-8dbd-454a-9a35-b286e6e126c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52923", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mu2ldbmhrh25", "content": "CyberMeowfia:  13-year-old UAF in Red Hat Enterprise Linux 10: CVE-2026-52923. - It was introduced in Jan 2013 and fixed upstream in May 2026, backported to RHEL on Aug 11 - local priv esc", "creation_timestamp": "2026-08-27T09:54:32.278140Z"}, {"uuid": "91218e3c-33bb-4395-985d-2ea206e1ae3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52840", "type": "published-proof-of-concept", "source": "https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-pm5p-7w5h-jm5q", "content": "", "creation_timestamp": "2026-07-29T18:35:23.441191Z"}, {"uuid": "eddf208b-3f17-4f4d-a28e-9e943fe77369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52841", "type": "published-proof-of-concept", "source": "https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-8hm4-r66f-29wr", "content": "", "creation_timestamp": "2026-07-29T18:35:16.093651Z"}, {"uuid": "eddb8769-e067-4452-b06a-72a5a4604670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52838", "type": "published-proof-of-concept", "source": "https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-996f-334j-67g7", "content": "", "creation_timestamp": "2026-07-29T18:35:13.657290Z"}, {"uuid": "810f89e2-4acb-4810-bcde-6c23c952e898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "seen", "source": "https://gist.github.com/Maiwell420/018d87969ae3918e7ee90caad7702d2a", "content": "Gogs instance - public index\n\nhttps://workstation-wedding-particle-valuable.trycloudflare.com\nhttps://workstation-wedding-particle-valuable.trycloudflare.com/user/sign_up\n\nCVE-2026-52806 window: 0.14.2\n", "creation_timestamp": "2026-08-27T23:39:08.418315Z"}, {"uuid": "64cd0f91-b1b2-46cc-884f-3863d654b1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "seen", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-29T20:00:04.370411Z"}, {"uuid": "2e49d89c-f017-4ae3-a08b-48f2d8e8fa39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "published-proof-of-concept", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "content": "", "creation_timestamp": "2026-07-30T00:00:09.800759Z"}, {"uuid": "c1ee879d-0d1e-4395-873c-0475fe297cf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52832", "type": "seen", "source": "https://t.me/GithubRedTeam/95672", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52832-PoC-exploit-nuclio-dashboard\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mdvpat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 10:43:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNuclio Dashboard (NOP mode) accepts unauthenticated POST /api/functions. The spec.handler field isn't path-validated, so ../../../../tmp/x.txt:handler escapes the build tempdir via path.Join, letting an attacker write arbitrary content to any path as root. (CVE-2026-52832, \u22641.15.27)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T00:02:05.915955Z"}, {"uuid": "9c39c876-e4f0-44fb-9841-fba3ade5243f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52933", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muewyn7yar2u", "content": "A public proof-of-concept for the CVE-2026-52933 privilege escalation flaw is available. This Linux kernel io_uring exploit carries a CVSS 7.8 score.\n\n#Linux #CVE202652933 #PrivilegeEscalation #KernelExploit #Cybersecurity", "creation_timestamp": "2026-08-31T12:49:57.527266Z"}, {"uuid": "95877b98-df6d-4786-9166-28fd9e5b089f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52933", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mughk2uemv2s", "content": "Linux\u30ab\u30fc\u30cd\u30eb\u306e\u6a29\u9650\u6607\u683c\u8106\u5f31\u6027CVE-2026-52933\u306b\u95a2\u3059\u308b\u6982\u5ff5\u5b9f\u8a3c\uff08PoC\uff09\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f \n\nPoC Published for Linux Kernel Privilege Escalation CVE-2026-52933 Flaw  #DailyCyberSecurity (Aug 31)\n\nsecurityonline.info/cve-2026-529...", "creation_timestamp": "2026-09-01T03:18:41.044741Z"}, {"uuid": "6eb53572-8a95-4bf1-92e9-d7c0036b0ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52923", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities_20260901", "content": "", "creation_timestamp": "2026-09-01T04:45:49.086392Z"}, {"uuid": "6ef5c56f-0ffe-41d2-ae64-0c305b87c530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52956", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities_20260901", "content": "", "creation_timestamp": "2026-09-01T04:45:51.348019Z"}, {"uuid": "b5b782e0-fa95-4865-86f1-556698756b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52972", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities_20260901", "content": "", "creation_timestamp": "2026-09-01T04:45:53.617461Z"}, {"uuid": "89ab3590-7278-4004-bfed-41f9e985422f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5271", "type": "seen", "source": "https://t.me/hacking_Attack/182772", "content": "CWD-Based Module Hijacking in Python pymanager (CVE-2026-5271)\nhttps://letchupkt.medium.com/cwd-based-module-hijacking-in-python-pymanager-cve-2026-5271-2fb57bbc65eb?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:11.577074Z"}, {"uuid": "f6077ca4-b503-4896-bb66-c9fa3721ff91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5271", "type": "seen", "source": "https://t.me/hacking_Attack/182774", "content": "OverviewContinue reading on Medium \u00bb (https://letchupkt.medium.com/cwd-based-module-hijacking-in-python-pymanager-cve-2026-5271-2fb57bbc65eb?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:11.613493Z"}, {"uuid": "61add71a-e2f1-4d6a-8e3d-a6d83a4abe86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5271", "type": "seen", "source": "https://t.me/hacking_Attack/182765", "content": "CWD-Based Module Hijacking in Python pymanager (CVE-2026-5271)\n\nOverviewContinue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-01T20:00:11.920137Z"}, {"uuid": "b5d965c4-1536-424a-962c-51ae97a43145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5271", "type": "seen", "source": "https://t.me/hacking_Attack/182765", "content": "CWD-Based Module Hijacking in Python pymanager (CVE-2026-5271)\n\nOverviewContinue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-02T01:00:28.407538Z"}, {"uuid": "1e04abee-5d51-48d6-bf57-8926d5115871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5271", "type": "seen", "source": "https://t.me/hacking_Attack/182772", "content": "CWD-Based Module Hijacking in Python pymanager (CVE-2026-5271)\nhttps://letchupkt.medium.com/cwd-based-module-hijacking-in-python-pymanager-cve-2026-5271-2fb57bbc65eb?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:28.021307Z"}, {"uuid": "a4fac86d-3784-4d57-b599-076ad6898b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5271", "type": "seen", "source": "https://t.me/hacking_Attack/182774", "content": "OverviewContinue reading on Medium \u00bb (https://letchupkt.medium.com/cwd-based-module-hijacking-in-python-pymanager-cve-2026-5271-2fb57bbc65eb?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:28.067036Z"}, {"uuid": "e03c2385-d460-4267-add0-71c9fd95b98a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52111", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mukfvsw7ef2g", "content": "CVE-2026-52111\nVersions of Fast Note Sync Service up to 2.13.7 reveal a secret authentication key through the admin configuration page. A remote attacker who discovers this key can pretend to be an administrator and gain full\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-02T17:00:06.782216Z"}, {"uuid": "90f60f3a-fe37-4b98-bdfb-95af8e4dbd02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52831", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mukjbuzxri23", "content": "\ud83d\udfe0 CVE-2026-52831 - High (8)\n\nNuclio is a \"Serverless\" framework for Real-Time Events and Data Processing. Prior to version 1.1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52831/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-02T18:00:33.830357Z"}, {"uuid": "b6139075-b346-4b72-aca8-2090f279b883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52831", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mukjqzwl532r", "content": "\ud83d\udfe0 CVE-2026-52831 - High (8)\n\nNuclio is a \"Serverless\" framework for Real-Time Events and Data Processing. Prior to version 1.1...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-52831/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-02T18:09:01.190617Z"}, {"uuid": "c1ea47a9-face-4524-bd76-f9f5073affa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52833", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g3nd4xsdsqnis", "content": "CVE-2026-52833 - Nuclio Java Runtime Template Injection Vulnerability\nCVE ID : CVE-2026-52833\n \n Published : Sept. 2, 2026, 5:17 p.m. | 47\u00a0minutes ago\n \n Description : Nuclio is a \"Serverless\" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio'...", "creation_timestamp": "2026-09-02T18:42:26.267368Z"}, {"uuid": "8eccc1ef-0de5-4af5-9165-ebec7af62d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52831", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2rl3ot2igfiag", "content": "CVE-2026-52831 - Nuclio Controller Command Injection Vulnerability\nCVE ID : CVE-2026-52831\n \n Published : Sept. 2, 2026, 5:17 p.m. | 47\u00a0minutes ago\n \n Description : Nuclio is a \"Serverless\" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio...", "creation_timestamp": "2026-09-02T18:48:25.801377Z"}, {"uuid": "4df33c08-95d3-49d9-aefc-9244d6142c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5271", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/182772", "content": "CWD-Based Module Hijacking in Python pymanager (CVE-2026-5271)\nhttps://letchupkt.medium.com/cwd-based-module-hijacking-in-python-pymanager-cve-2026-5271-2fb57bbc65eb?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T00:00:36.552142Z"}, {"uuid": "39db4c0a-a9fe-49cf-9de3-899b141d50e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5271", "type": "seen", "source": "https://t.me/hacking_Attack/182765", "content": "CWD-Based Module Hijacking in Python pymanager (CVE-2026-5271)\n\nOverviewContinue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-03T00:00:35.402452Z"}, {"uuid": "5802b08d-03e8-429b-bf05-4d376ed4b60b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5271", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/182774", "content": "OverviewContinue reading on Medium \u00bb (https://letchupkt.medium.com/cwd-based-module-hijacking-in-python-pymanager-cve-2026-5271-2fb57bbc65eb?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T00:00:36.515439Z"}, {"uuid": "32d008bb-515c-4b43-a37d-cfd3313b9f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52924", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3munzzbapla2l", "content": "Security researchers released a Linux CVE-2026-52924 PoC exploit. Check flaw details and patch instructions to secure your systems against root takeovers.\n\n#Linux #CyberSecurity #CVE202652924 #PoC #PrivilegeEscalation", "creation_timestamp": "2026-09-04T03:37:56.677765Z"}, {"uuid": "eac52c7b-8536-41b9-aaed-1ebde76adac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52810", "type": "seen", "source": "Telegram/tSCLRB07b57aatS-p2DSf41QV3GSxdafymdAv19o1xopakU", "content": "", "creation_timestamp": "2026-09-04T05:00:04.506761Z"}, {"uuid": "9b0336cb-d0dd-4f94-8132-54b434bcbbfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52924", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117213858733419794", "content": "\u203c\ufe0f Exploit disclosed for CVE-2026-52924... 9.8 CVSS Linux Root Privilege Escalation\nGitHub: https://github.com/NebuSec/CyberMeowfia/tree/main/security-research/Linux-CVE-2026-52924-ubuntu-7.0.0-28/", "creation_timestamp": "2026-09-04T17:05:46.904160Z"}, {"uuid": "b2de3dd2-5ac0-43ef-a834-2979a63ddcce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52810", "type": "published-proof-of-concept", "source": "Telegram/tSCLRB07b57aatS-p2DSf41QV3GSxdafymdAv19o1xopakU", "content": "", "creation_timestamp": "2026-09-05T01:00:38.413281Z"}, {"uuid": "adfaa91c-9f14-4501-b8f6-216f4a504739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muqffu42zr2t", "content": "\ud83d\udea8 CVE-2026-52766 \u2014 CVSS 9.1 CRITICAL\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments}} wiki action (a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-52766\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T02:07:09.702081Z"}, {"uuid": "0869defb-a029-4f3b-9be9-3f66b7f8c905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52777", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muqfg42eoh2g", "content": "\ud83d\udea8 CVE-2026-52777 \u2014 CVSS 9.4 CRITICAL\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, there is an authenticated PHP object injec...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-52777\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T02:07:17.773412Z"}, {"uuid": "6ad59675-b4a5-405b-89c2-7a5e90ae37a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52775", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqlqpyeco2p", "content": "\ud83d\udfe0 CVE-2026-52775 - High (8.8)\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki through the latest devel...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52775/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T04:00:37.608099Z"}, {"uuid": "bbe9773a-6c7f-469d-ab71-1b0ef980d35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqlqwkhx222", "content": "\ud83d\udd34 CVE-2026-52766 - Critical (9.1)\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments}} wiki...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52766/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T04:00:43.771243Z"}, {"uuid": "8b06fe33-6d09-49cd-add5-fbeb34e3c175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52767", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqlr5bgtt2k", "content": "\ud83d\udfe0 CVE-2026-52767 - High (8.2)\n\nYesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, HttpSignatur...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52767/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T04:00:51.997270Z"}, {"uuid": "6074fa27-f225-4fdd-8c98-d8107017ca41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52769", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqskl3epj2m", "content": "\ud83d\udfe0 CVE-2026-52769 - High (8.3)\n\nYesWiki is a wiki system written in PHP. From version 4.6.2 to before version 4.6.6, the POST /ap...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52769/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T06:02:27.174620Z"}, {"uuid": "e375725d-b064-4411-82df-41ab315f2aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52770", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqskrwigk22", "content": "\ud83d\udfe0 CVE-2026-52770 - High (7.5)\n\nYesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki\u2019s public Bazar entry-l...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52770/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T06:02:34.654748Z"}, {"uuid": "5ab7d1ee-cb96-4fd9-abd5-67ac9ed23b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52771", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqsldu7st22", "content": "\ud83d\udfe0 CVE-2026-52771 - High (8.3)\n\nYesWiki is a wiki system written in PHP. From version 4.2.0 to before version 4.6.6, ApiControlle...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52771/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T06:02:53.920245Z"}, {"uuid": "bd304a8f-ec5b-48a2-bacd-39d72d2567e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://t.me/GithubRedTeam/101272", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52774-YESWIKI-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xTerror\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 17:22:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\na reflected XSS vulnerability in YesWiki's Bazar widget handler.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T19:00:02.857623Z"}, {"uuid": "c7fdceee-1392-4e8c-ad6e-3a92c84dcbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101272", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Reflected\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52774-YESWIKI-XSS\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xTerror\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 17:22:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\na reflected XSS vulnerability in YesWiki's Bazar widget handler.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-06T00:00:37.542696Z"}, {"uuid": "19c1d89f-f53f-4215-82be-38edd0d80ebb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52924", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mutcyhgzde2w", "content": "CVE-2026-52924 is trending. Hype score 1, currently #10 on cvemon.\n\nIn the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctp_stream_update() is only invoked when the association is\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-52924", "creation_timestamp": "2026-09-06T06:01:51.480197Z"}, {"uuid": "83e32526-ad26-46fd-8097-0fbfc856d1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-06T08:00:06.254054Z"}, {"uuid": "ab77321d-0926-4b8f-b9c5-6708d55c92bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "published-proof-of-concept", "source": "Telegram/Kn_b6ZfV_Zn3sftMYR5SsyU-8IQ4Qtei0GrxhBA123EDChM", "content": "", "creation_timestamp": "2026-09-07T01:00:24.589351Z"}, {"uuid": "e6946bbe-ce61-41df-99bc-5c3cc106fd32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52914", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260907", "content": "", "creation_timestamp": "2026-09-07T04:45:07.885910Z"}, {"uuid": "8db42a39-4df0-4413-8738-4aa4a8f66fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52771", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muwzvx4f632p", "content": "CVE-2026-52771: YesWiki SQL injection via attacker-controlled page tags in ApiController::deletePage(). CVSS 8.3. Low-privilege users can exploit arbitrary tags to inject SQL. Unpatched\u2014no fix available. Update or disable API if exposed. https://www.valtersit.com/cve/CVE-2026-527", "creation_timestamp": "2026-09-07T17:30:03.060623Z"}, {"uuid": "0c124240-95c3-4677-b64d-4d1df84c25dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52771", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117230941126467449", "content": "CVE-2026-52771: YesWiki SQL injection via attacker-controlled page tags in ApiController::deletePage(). CVSS 8.3. Low-privilege users can exploit arbitrary tags to inject SQL. Unpatched\u2014no fix available. Update or disable API if exposed. https://www.valtersit.com/cve/CVE-2026-527", "creation_timestamp": "2026-09-07T17:30:03.907750Z"}, {"uuid": "bdb24c06-4290-400f-b592-1d4ca97d4ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52923", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-08T20:45:45.791696Z"}, {"uuid": "bc526c97-bfa0-433f-9f2d-cdafc10565be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52973", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-08T20:45:48.070610Z"}, {"uuid": "126e8d0d-80bc-4eed-9eac-05bd252bb6e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52806", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gogs_rebase_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Crypto-Cat\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an argument injection vulnerability (CVE-2026-52806)\\n          in the pull request merge flow of Gogs (< 0.14.3).\\n\\n          The Merge() function in internal/database/pull.go passes the PR\\n          base branch name to `git rebase` without a `--` separator. A\\n          branch named `--exec=` is parsed by Git as the --exec flag\\n          rather than a positional argument, causing `sh -c ` to run\\n          after each replayed commit during the rebase.\\n\\n          Two exploitation methods are supported:\\n\\n          - own_repo: The attacker creates a temporary repository, enables\\n          rebase merge, and operates entirely within their own account.\\n          Any authenticated user who can create repositories (the default)\\n          can exploit this with no interaction from other users required.\\n\\n          - existing_repo: The attacker exploits a repository they already\\n          have write and merge access to, where \\\"Rebase before merging\\\"\\n          is enabled (or the attacker has repo admin permissions to\\n          enable it). This path is useful on instances where repository\\n          creation is restricted.\\n\\n          Both methods use git to push divergent branches (including the\\n          malicious --exec= branch), open a pull request, and trigger a\\n          rebase merge to execute the payload. A local git installation\\n          is required.\\n\\n          On Unix targets, the payload is base64-encoded inline in\\n          the malicious branch name, avoiding the need to commit files\\n          to the repository. On Windows targets, the payload is\\n          delivered via a script file committed to the repository,\\n          since NTFS forbids pipe characters in filenames. Git for\\n          Windows uses MSYS2 sh for --exec commands, enabling\\n          cross-platform exploitation.\\n\\n          Note: a successful rebase merge may leave the server-side\\n          repository in a corrupted git state (mid-rebase). For\\n          own_repo this is inconsequential because the repository is\\n          deleted. For existing_repo this can break the target\\n          repository and prevent re-exploitation against the same repo.\\n\\n          The Gogs API does not support token deletion, so the API\\n          access token created during exploitation cannot be removed\\n          automatically and will persist under the attacker account.\", \"disclosure_date\": \"2026-03-17\", \"fullname\": \"exploit/multi/http/gogs_rebase_rce\", \"is_install_path\": true, \"mod_time\": \"2026-07-10 15:40:12 +0000\", \"name\": \"Gogs Git Rebase Argument Injection RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"config-changes\", \"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/gogs_rebase_rce.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/gogs_rebase_rce\", \"references\": [\"CVE-2026-52806\", \"GHSA-qf6p-p7ww-cwr9\", \"URL-https://www.rapid7.com/blog/post/ve-authenticated-rce-via-argument-injection-gogs-unfixed\", \"URL-https://github.com/gogs/gogs\"], \"rport\": 3000, \"session_types\": false, \"targets\": [\"Unix Command\", \"Windows Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:49.435417Z"}, {"uuid": "54e1f26f-b371-47dd-9c37-b8326becc963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52767", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117235738545754231", "content": "CVE-2026-52767: YesWiki (4.6.2-4.6.5) improper openssl_verify check via loose boolean negation allows auth bypass (CVSS 8.2). Attackers can forge signatures and trigger processActivity(). Unpatched\u2014upgrade to 4.6.6 or disable affected endpoints now. https://www.valtersit.com/cve/", "creation_timestamp": "2026-09-08T13:50:10.090860Z"}, {"uuid": "e1196ec4-5e36-4393-93d2-3c24d9647aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52767", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muz63khtyq2x", "content": "CVE-2026-52767: YesWiki (4.6.2-4.6.5) improper openssl_verify check via loose boolean negation allows auth bypass (CVSS 8.2). Attackers can forge signatures and trigger processActivity(). Unpatched\u2014upgrade to 4.6.6 or disable affected endpoints now. https://www.valtersit.com/cve/", "creation_timestamp": "2026-09-08T13:50:05.981090Z"}, {"uuid": "4a62b5de-ce7d-4d5a-bfc2-8c681f7bd13d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52769", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muyjfv5of62l", "content": "CVE-2026-52769: YesWiki 4.6.2\u20134.6.6 SSRF via HTTP Signature keyId in public API. Unauthenticated attacker forces server-side GET to arbitrary URLs. CVSS 8.3. Unpatched\u2014update to 4.6.6 or restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-52769/ #CVE #YesWiki #in", "creation_timestamp": "2026-09-08T07:40:04.276750Z"}, {"uuid": "4279481b-0945-44c9-a625-5598fddf44ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52769", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117234283410060725", "content": "CVE-2026-52769: YesWiki 4.6.2\u20134.6.6 SSRF via HTTP Signature keyId in public API. Unauthenticated attacker forces server-side GET to arbitrary URLs. CVSS 8.3. Unpatched\u2014update to 4.6.6 or restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-52769/ #CVE #YesWiki #in", "creation_timestamp": "2026-09-08T07:40:05.102576Z"}, {"uuid": "6066d0d4-9e80-4cad-983f-7a1cc9e0877a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52770", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muzyduyq562m", "content": "CVE-2026-52770 - YesWiki <4.6.6 has unauthenticated SQL injection in Bazar APIs (CVSS 7.5). Attackers can extract database data via boolean queries. No patch available. If you run YesWiki, restrict API access or isolate immediately. Details: https://www.valtersit.com/cve/CVE-2026", "creation_timestamp": "2026-09-08T21:40:03.421527Z"}, {"uuid": "c5d9b9b1-608b-45a3-939e-aa93510a3f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52770", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117237586426718586", "content": "CVE-2026-52770 - YesWiki <4.6.6 has unauthenticated SQL injection in Bazar APIs (CVSS 7.5). Attackers can extract database data via boolean queries. No patch available. If you run YesWiki, restrict API access or isolate immediately. Details: https://www.valtersit.com/cve/CVE-2026", "creation_timestamp": "2026-09-08T21:40:02.405927Z"}, {"uuid": "81ed90bf-4810-4ecb-af50-77a3edf938c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52775", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117239081756656483", "content": "CVE-2026-52775: SQL injection in YesWiki < 4.6.6 allows any authenticated user to inject arbitrary SQL via ReactionManager::deleteUserReaction(). CVSS 8.8. No patch confirmed\u2014upgrade to 4.6.6 immediately. Details: https://www.valtersit.com/cve/CVE-2026-52775/ #CVE #infosec #YesWi", "creation_timestamp": "2026-09-09T04:00:20.267049Z"}, {"uuid": "623caf86-8dd5-473a-ada1-e9baa09f50e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52307", "type": "seen", "source": "Telegram/nMh_3ts5dc8zkSwTaV9m7alIl_ypUPowc3P5Zcio_q1A5ss", "content": "", "creation_timestamp": "2026-09-09T04:00:37.023494Z"}, {"uuid": "45000acf-f82d-4137-a678-b7dec3a73faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52775", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv2nmgu5y627", "content": "CVE-2026-52775: SQL injection in YesWiki < 4.6.6 allows any authenticated user to inject arbitrary SQL via ReactionManager::deleteUserReaction(). CVSS 8.8. No patch confirmed\u2014upgrade to 4.6.6 immediately. Details: https://www.valtersit.com/cve/CVE-2026-52775/ #CVE #infosec #YesWi", "creation_timestamp": "2026-09-09T04:00:37.678604Z"}, {"uuid": "469ee141-c17a-4406-9212-9e42c80378fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-52993", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260909", "content": "", "creation_timestamp": "2026-09-09T04:48:49.715297Z"}, {"uuid": "97215295-a8b5-4927-93dd-41d1e6df048d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52924", "type": "seen", "source": "https://t.me/GithubRedTeam/101471", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52924\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Eliot-code\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 04:37:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T05:00:07.033455Z"}, {"uuid": "79398e72-bb39-4c02-a427-de1fbd0e58f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv2smcll3c2l", "content": "CVE-2026-52766: YesWiki <=4.6.5 lets any user delete any wiki page via {{erasespamedcomments}} - no auth check, default write ACL for all. CVSS 9.1. Unpatched. Update now or disable action. https://www.valtersit.com/cve/CVE-2026-52766/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-09T05:30:01.910665Z"}, {"uuid": "33bd6457-9988-4e03-88e5-adfe972a5174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52766", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117239434533714151", "content": "CVE-2026-52766: YesWiki <=4.6.5 lets any user delete any wiki page via {{erasespamedcomments}} - no auth check, default write ACL for all. CVSS 9.1. Unpatched. Update now or disable action. https://www.valtersit.com/cve/CVE-2026-52766/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-09T05:30:02.256429Z"}, {"uuid": "031b07b4-4d96-4873-a519-2e89fdea0686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52307", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mv3srtbm7225", "content": "CVE-2026-52307: Stored XSS in 1CMS v5.6\n\nPosted by \u61d2-\u764c-\u75c7\uff5e via Fulldisclosure on Sep 08CVE-2026-52307: 1CMS v5.6 Authenticated Stored XSS Vulnerability \n\nVulnerability Description \nAn authenticated stored cross-site scripting (XSS) vulnerability exists in the Column Management \u2026\n#hackernews #ml #news", "creation_timestamp": "2026-09-09T15:05:47.343286Z"}, {"uuid": "fbeb840b-736c-41c0-8f42-6a47501ebfb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52482", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/74jqwfkagvmrp", "content": "CVE-2026-52482 - SJRC F11 SJ-GPS-PRO Information Disclosure Vulnerability\nCVE ID : CVE-2026-52482\n \n Published : Sept. 9, 2026, 7:17 p.m. | 18\u00a0minutes ago\n \n Description : An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive in...", "creation_timestamp": "2026-09-09T19:52:51.098978Z"}, {"uuid": "098da5b4-4600-46d4-b807-38dba71e3258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52307", "type": "published-proof-of-concept", "source": "Telegram/nMh_3ts5dc8zkSwTaV9m7alIl_ypUPowc3P5Zcio_q1A5ss", "content": "", "creation_timestamp": "2026-09-10T00:00:24.010020Z"}, {"uuid": "2e4c3804-3af0-4c9c-8c86-5da238d5887f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52924", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101471", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52924\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Eliot-code\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 04:37:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:49.506148Z"}, {"uuid": "9fdd3531-88a1-45ff-871d-f1a913804ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv5bgoodor2x", "content": "CVE-2026-52774: YesWiki < 4.6.6 has a stored XSS via the Bazar widget's id parameter, exploitable without auth. CVSS 6.1. No patch confirmed. Update immediately or restrict access. Details: https://www.valtersit.com/cve/CVE-2026-52774/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-10T05:00:38.754863Z"}, {"uuid": "14c45881-c95c-4ed4-a46e-8a369945e28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52774", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117244981206462808", "content": "CVE-2026-52774: YesWiki < 4.6.6 has a stored XSS via the Bazar widget's id parameter, exploitable without auth. CVSS 6.1. No patch confirmed. Update immediately or restrict access. Details: https://www.valtersit.com/cve/CVE-2026-52774/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-10T05:00:47.317104Z"}, {"uuid": "c6931138-d61b-4b28-9057-b336cce091a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52098", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6qvllffn2j", "content": "CVE-2026-52098\nThe version 3.1.2 of Flowise can be tricked into running any code an attacker sends to its /api/v1/prediction/ address. This could let a remote hacker take control of the server, steal data, or disrupt\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-10T19:10:05.272126Z"}, {"uuid": "79cf58dd-a30e-4a41-8c64-eca8b14ccf5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52098", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6u5vkoqd2f", "content": "\ud83d\udea8 CVE-2026-52098 \u2014 CVSS 9.8 CRITICAL\n\nAn issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/<fl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-52098\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T20:08:25.123970Z"}, {"uuid": "5e782e0a-0891-4019-89be-f185297697f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52777", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117255438530660660", "content": "CVE-2026-52777: Authenticated PHP object injection via unserialize in YesWiki's BazarImportAction. CVSS N/A, unpatched pre-4.6.6. Attackers can exploit to execute arbitrary code. Update immediately to 4.6.6. https://www.valtersit.com/cve/CVE-2026-52777/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-12T01:20:04.216160Z"}, {"uuid": "c90a6abc-3d71-42cf-8985-5418d75eaaf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52777", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvbw2odgv627", "content": "CVE-2026-52777: Authenticated PHP object injection via unserialize in YesWiki's BazarImportAction. CVSS N/A, unpatched pre-4.6.6. Attackers can exploit to execute arbitrary code. Update immediately to 4.6.6. https://www.valtersit.com/cve/CVE-2026-52777/ #CVE #infosec #YesWiki", "creation_timestamp": "2026-09-12T01:20:23.885696Z"}, {"uuid": "063e1580-2601-45b6-840d-a9bf94a0a8e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5294", "type": "seen", "source": "https://t.me/shimiscyberworld/1203", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-5294 \u2014 CVSS 9.8\nCVE-2026-5294: Critical RCE in Geeky Bot WordPress Plugin\n\nCVE-2026-5294 \u2014 The Geeky Bot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.2.2. This is due to a nopriv AJAX route allowing attac\n\n\ud83d\udd34 Critical\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-5294 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:16.668959Z"}, {"uuid": "9434f68c-dc25-401b-a4af-51c1466003a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5294", "type": "seen", "source": "https://t.me/shimiscyberworld/1233", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-05\n\n\ud83d\udcca 52 vulnerabilities detected today \u2014 14 \ud83d\udd34 Critical, 38 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-7411 (10) \u2014 Eclipse BaSyx RCE: Critical Path Traversal in Server SDK\n  \u2022 CVE-2026-5722 (9.8) \u2014 MoreConvert Pro WordPress Plugin Critical Authentication\u2026\n  \u2022 CVE-2025-13618 (9.8) \u2014 CVE-2025-13618: WordPress Mentoring Plugin Allows Admin\u2026\n  \u2022 CVE-2026-5294 (9.8) \u2014 CVE-2026-5294: Critical RCE in Geeky Bot WordPress Plugin\n  \u2022 CVE-2026-7823 (9.8) \u2014 CVE-2026-7823: Critical Command Injection in Totolink\u2026\n  \u2022 CVE-2023-54342 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Allows\u2026\n  \u2022 CVE-2023-54344 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Exposes\u2026\n  \u2022 CVE-2026-7834 (9.8) \u2014 CVE-2026-7834: Critical Stack-Based Buffer Overflow in EFM\u2026\n  \u2026 and 6 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2023-54345 (8.8) \u2014 Frappe Framework ERPNext Sandbox Escape Allows RCE via\u2026\n  \u2022 CVE-2023-54348 (8.8) \u2014 ERPGo SaaS 3.9 CSV Injection Allows RCE via Vendor Fields\n  \u2022 CVE-2026-42434 (8.8) \u2014 OpenClaw Sandbox Escape (CVE-2026-42434) Allows Remote\u2026\n  \u2022 CVE-2026-42435 (8.8) \u2014 OpenClaw CVE-2026-42435: Shell Wrapper Vulnerability Allows\u2026\n  \u2022 CVE-2026-43530 (8.8) \u2014 OpenClaw Vulnerability CVE-2026-43530 Undermines Exec\u2026\n  \u2022 CVE-2026-43569 (8.8) \u2014 OpenClaw Authentication Bypass (CVE-2026-43569) Poses High\u2026\n  \u2022 CVE-2026-43571 (8.8) \u2014 CVE-2026-43571: OpenClaw Plugin Trust Bypass Opens Attack\u2026\n  \u2022 CVE-2026-6261 (8.8) \u2014 Betheme WordPress Arbitrary File Upload RCE (CVE-2026-6261)\n  \u2022 CVE-2026-7855 (8.8) \u2014 D-Link DI-8100 Buffer Overflow - CVE-2026-7855 Public\u2026\n  \u2022 CVE-2026-35228 (8.7) \u2014 Oracle MCP Server Helper Tool Vulnerability Allows\u2026\n  \u2026 and 28 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:16.115535Z"}, {"uuid": "b6e03167-48fb-46da-b5e8-61ab70ab88ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5294", "type": "seen", "source": "https://t.me/shimiscyberworld/1203", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-5294 \u2014 CVSS 9.8\nCVE-2026-5294: Critical RCE in Geeky Bot WordPress Plugin\n\nCVE-2026-5294 \u2014 The Geeky Bot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.2.2. This is due to a nopriv AJAX route allowing attac\n\n\ud83d\udd34 Critical\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-5294 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:34.138004Z"}, {"uuid": "8f339768-ea16-4829-b6a0-74dea9f2b9d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5294", "type": "seen", "source": "https://t.me/shimiscyberworld/1233", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-05\n\n\ud83d\udcca 52 vulnerabilities detected today \u2014 14 \ud83d\udd34 Critical, 38 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-7411 (10) \u2014 Eclipse BaSyx RCE: Critical Path Traversal in Server SDK\n  \u2022 CVE-2026-5722 (9.8) \u2014 MoreConvert Pro WordPress Plugin Critical Authentication\u2026\n  \u2022 CVE-2025-13618 (9.8) \u2014 CVE-2025-13618: WordPress Mentoring Plugin Allows Admin\u2026\n  \u2022 CVE-2026-5294 (9.8) \u2014 CVE-2026-5294: Critical RCE in Geeky Bot WordPress Plugin\n  \u2022 CVE-2026-7823 (9.8) \u2014 CVE-2026-7823: Critical Command Injection in Totolink\u2026\n  \u2022 CVE-2023-54342 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Allows\u2026\n  \u2022 CVE-2023-54344 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Exposes\u2026\n  \u2022 CVE-2026-7834 (9.8) \u2014 CVE-2026-7834: Critical Stack-Based Buffer Overflow in EFM\u2026\n  \u2026 and 6 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2023-54345 (8.8) \u2014 Frappe Framework ERPNext Sandbox Escape Allows RCE via\u2026\n  \u2022 CVE-2023-54348 (8.8) \u2014 ERPGo SaaS 3.9 CSV Injection Allows RCE via Vendor Fields\n  \u2022 CVE-2026-42434 (8.8) \u2014 OpenClaw Sandbox Escape (CVE-2026-42434) Allows Remote\u2026\n  \u2022 CVE-2026-42435 (8.8) \u2014 OpenClaw CVE-2026-42435: Shell Wrapper Vulnerability Allows\u2026\n  \u2022 CVE-2026-43530 (8.8) \u2014 OpenClaw Vulnerability CVE-2026-43530 Undermines Exec\u2026\n  \u2022 CVE-2026-43569 (8.8) \u2014 OpenClaw Authentication Bypass (CVE-2026-43569) Poses High\u2026\n  \u2022 CVE-2026-43571 (8.8) \u2014 CVE-2026-43571: OpenClaw Plugin Trust Bypass Opens Attack\u2026\n  \u2022 CVE-2026-6261 (8.8) \u2014 Betheme WordPress Arbitrary File Upload RCE (CVE-2026-6261)\n  \u2022 CVE-2026-7855 (8.8) \u2014 D-Link DI-8100 Buffer Overflow - CVE-2026-7855 Public\u2026\n  \u2022 CVE-2026-35228 (8.7) \u2014 Oracle MCP Server Helper Tool Vulnerability Allows\u2026\n  \u2026 and 28 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:34.552805Z"}, {"uuid": "84275345-f49b-45d1-b97e-36b1a7cf0210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52910", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102289", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-52910-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yolkfull\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 10:21:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC of cve-2026-52910\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-14T13:00:04.967948Z"}, {"uuid": "84f9ae33-3485-405e-aee6-5d4bf709b850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52630", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvimmkwa5p2t", "content": "CVE-2026-52630\nThe forum software Woltlab WCF (versions up to 6.2.4) can be tricked into altering a user\u2019s account information. An attacker could modify preferences or gain additional access to user accounts, which may affect\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-14T17:20:04.607345Z"}, {"uuid": "a3b04ad0-37c9-4c90-bfca-f8298eab46f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52910", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102289", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-52910-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yolkfull\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 10:21:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC of cve-2026-52910\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T00:00:21.909102Z"}, {"uuid": "28d261f7-61ad-41a1-9f6b-7281920a9bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-52940", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "50f328c5-33d7-488a-bd50-c98dcee7967c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvklnlbnlf2r", "content": "\ud83d\udea8 CVE-2026-52824 \u2014 CVSS 9.1 CRITICAL\n\nKimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APP_SECR...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-52824\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T12:08:04.211575Z"}, {"uuid": "2231ab09-7cc8-444f-8487-de6e31231ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-52947", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "cb41d3ed-4d34-47db-9985-ae43208a9cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-52930", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "9adf874d-27bd-46d0-8380-7bd4186d575b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-52917", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "3013f700-e337-4288-b7c1-68b378647172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-52929", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "2d5a9946-a44a-4920-842d-865eeaf123df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-52910", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "7c825dfd-c6fe-4e26-9690-e72d9ceed84e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-52948", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "b75fc9cd-0e71-4a12-8df6-923621c3669e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-52942", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "8adf9df4-0db8-435c-abeb-7c471c9eb430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-52939", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "db66f34a-ce27-4a62-8652-9b3a0e7da504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-52935", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "ef732e10-aecc-45fa-b024-db37f9e9a366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-52938", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "bdb5d696-5847-4528-8f99-c83b7e7587ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-52908", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "75b9ccb9-f5d1-49f8-aec3-64d33c833c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-52909", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "ba6ba865-7906-4bb7-816c-9427efc10722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52296", "type": "seen", "source": "https://bsky.app/profile/cesnet-certs.mastodonczech.cz.ap.brid.gy/post/3mvl2arrxzcv2", "content": "[[TLP:CLEAR] FFmpeg opravuje 4 zranite\u013enosti]\n\nFFmpeg verziami 4.4.7, 5.1.9, 6.1.5, 7.1.4, 8.0.2, 8.1.1 a 9.0 opravuje 2 zranite\u013enosti \u2b07\ufe0f. Okrem ni\u017e\u0161ie pop\u00edsan\u00fdch zranite\u013enost\u00ed boli zverejnen\u00e9 2 n\u00edzko z\u00e1va\u017en\u00e9 zranite\u013enosti (CVE-2026-52296, CVE-2026-52297), ktor\u00fdch oprava sa nach\u00e1dza iba vo [\u2026]", "creation_timestamp": "2026-09-15T16:29:57.284516Z"}, {"uuid": "af706175-3e44-4f46-b89f-80c34de76472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52297", "type": "seen", "source": "https://bsky.app/profile/cesnet-certs.mastodonczech.cz.ap.brid.gy/post/3mvl2arrxzcv2", "content": "[[TLP:CLEAR] FFmpeg opravuje 4 zranite\u013enosti]\n\nFFmpeg verziami 4.4.7, 5.1.9, 6.1.5, 7.1.4, 8.0.2, 8.1.1 a 9.0 opravuje 2 zranite\u013enosti \u2b07\ufe0f. Okrem ni\u017e\u0161ie pop\u00edsan\u00fdch zranite\u013enost\u00ed boli zverejnen\u00e9 2 n\u00edzko z\u00e1va\u017en\u00e9 zranite\u013enosti (CVE-2026-52296, CVE-2026-52297), ktor\u00fdch oprava sa nach\u00e1dza iba vo [\u2026]", "creation_timestamp": "2026-09-15T16:29:57.362456Z"}, {"uuid": "f0039ca1-e314-414b-958c-e49c8917a615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52098", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvm5v7imdi24", "content": "\ud83d\udccc CVE-2026-52098 - An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via the /api/v1/prediction/ endpoint https://www.cyberhub.blog/cves/CVE-2026-52098", "creation_timestamp": "2026-09-16T03:07:07.673265Z"}, {"uuid": "a4d4b0a2-26cc-4538-9114-dab54de9b923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52836", "type": "seen", "source": "https://gist.github.com/ichintu/4d54d491df96f43f63328c7ac7c50625", "content": "**Executive Summary (Sept 16\u201317, 2026)**\n\nThis threat intelligence digest highlights critical vulnerabilities and urgent patch requirements across major software and infrastructure vendors. Key fixes include:\n* **OpenDDS** (CVE-2026-52836): Remote DoS via malformed RTPS submessage (Fixed: v3.34.0)\n* **Check Point** (CVE-2026-91843): Login stack overflow affecting Management/Log Servers\n* **Dell Server Update Utility** (CVE-2026-56795): Local code execution via uncontrolled search path (Fixed: v26.07.01)\n* **BIND 9**: 14 patched flaws, including an unauthenticated DoS via DNS-over-HTTPS\n* **Cisco ISE & Related Products**: Multiple authentication bypass vulnerabilities patched. **CVE-2026-76460 is actively exploited in the wild** and has been added to the CISA KEV catalog. Patches also cover FTD, FMC, ASA, and Nexus Dashboard.\n\nThe digest also notes community discussions regarding a removed Reddit post, a potential API key image, and a new Claude AI skill for cybersecurity automation. Organizations are strongly advised to immediately apply vendor updates, prioritize actively exploited flaws, and enhance logging and network segmentation.", "creation_timestamp": "2026-09-17T20:01:46.466855Z"}]}