{"vulnerability": "CVE-2026-19444", "sightings": [{"uuid": "5f02c689-a147-4855-b4bd-0a7cd808c433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19444", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwlajs7ga425", "content": "CVE-2026-19444: Kubernetes disclosed a path traversal flaw in the kubectl cp command on Windows. A malicious tar binary in a container can write files to arbitrary local paths. Fixed in kubectl v1.34.12, v1.35.9, and v1.36.5. No exploitation confirmed.", "creation_timestamp": "2026-09-28T11:46:57.655316Z"}, {"uuid": "8b078775-0df0-48d9-90f2-046d7e62007f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19444", "type": "seen", "source": "https://bsky.app/profile/kubernetes.io/post/3mwllnsw5mf2m", "content": "CVE-2026-19444: kubectl cp path traversal on Windows allows arbitrary file writes -", "creation_timestamp": "2026-09-28T15:06:04.348221Z"}, {"uuid": "957b8737-7866-4a42-b290-07eb791831fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19444", "type": "seen", "source": "https://t.me/proxy_bar/3638", "content": "CVE-2026-19444: kubectl\n\ud83d\ude06\ud83d\ude06\ud83d\ude06", "creation_timestamp": "2026-09-28T20:10:22.000000Z"}, {"uuid": "cdd09334-971e-4525-ac3d-6343854d4c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19444", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/49503", "content": "CVE-2026-19444: kubectl\n\ud83d\ude06\ud83d\ude06\ud83d\ude06", "creation_timestamp": "2026-09-28T20:14:01.000000Z"}, {"uuid": "6d9be92c-a4e4-40a1-b48f-f1ab4e6ceb18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19444", "type": "seen", "source": "https://bsky.app/profile/kubernetes.dev/post/3mwmd6ltva52w", "content": "CVE-2026-19444: kubectl cp path traversal on Windows allows arbitrary file writes -", "creation_timestamp": "2026-09-28T22:07:04.026925Z"}]}