{"vulnerability": "CVE-2026-3338", "sightings": [{"uuid": "df07aa4f-aad2-4fc6-805c-2dfbe02c2895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3338", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg4hq4yncd2v", "content": "", "creation_timestamp": "2026-03-03T00:02:44.372259Z"}, {"uuid": "694d5f9c-69f7-4c73-92c7-55ba0e054ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3338", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mg4yvivmwz2m", "content": "", "creation_timestamp": "2026-03-03T05:09:58.081958Z"}, {"uuid": "4127c4a8-4352-4093-9a16-7ac7ceffdc9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3338", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mg6gmajx7a2w", "content": "", "creation_timestamp": "2026-03-03T18:47:59.986315Z"}, {"uuid": "43ad7eca-2114-4b08-ab48-af4d4b3bc166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3338", "type": "seen", "source": "https://bsky.app/profile/alexpulver.bsky.social/post/3mgepqioa4l2z", "content": "", "creation_timestamp": "2026-03-06T06:47:24.453736Z"}, {"uuid": "bbca0369-cefe-4db8-9e1b-e0baa0dc193e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3338", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mg4c4t4iir2t", "content": "", "creation_timestamp": "2026-03-02T22:22:28.101685Z"}, {"uuid": "75525a01-0260-4919-9624-c02273ddcdbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3338", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mgdnz3r4su2h", "content": "", "creation_timestamp": "2026-03-05T20:43:45.684741Z"}, {"uuid": "43829f6a-4ddc-4225-a18d-1fecf7a1373d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-33384", "type": "seen", "source": "https://cert.pl/en/posts/2026/05/CVE-2026-33384", "content": "", "creation_timestamp": "2026-05-29T07:15:00.000000Z"}, {"uuid": "98a1f151-165e-489f-9a09-5d61cfd0b390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-33386", "type": "seen", "source": "https://cert.pl/en/posts/2026/05/CVE-2026-33384", "content": "", "creation_timestamp": "2026-05-29T07:15:00.000000Z"}, {"uuid": "686683d3-b169-4ea0-960d-0800fbc6b66e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33382", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcmrjabny2r", "content": "\ud83d\udfe0 CVE-2026-33382 - High (7.5)\n\nSeveral Grafana API endpoints, some of them unauthenticated, do not limit the size of the request...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-33382/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-10T17:00:54.291397Z"}, {"uuid": "f198f8bb-640f-4234-bf00-dbfaf0fd3c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33382", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd75hwwav2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-33382 \u0432 Grafana: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/161879CE-2273-4851-9DCB-9A4CC851341E", "creation_timestamp": "2026-07-10T22:29:42.433035Z"}, {"uuid": "9e465152-564c-428e-aa95-64b805b99a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33382", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfcy2mhw22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-33382 \u0432 Grafana: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/48C98EB7-5B22-467A-BBF9-AF9FF3707496", "creation_timestamp": "2026-07-11T00:20:09.663425Z"}, {"uuid": "e1818033-112e-4a76-adfc-8e560c00a7fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-33385", "type": "seen", "source": "https://cert.pl/en/posts/2026/07/CVE-2026-33385", "content": "", "creation_timestamp": "2026-07-29T16:15:03.814231Z"}, {"uuid": "5ae1ef19-08b1-43be-8a94-058b9d6f7e5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3338", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-29T20:00:19.433393Z"}, {"uuid": "4df6c1d7-855d-499a-95d1-ad138644e361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3338", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-30T00:00:45.113809Z"}, {"uuid": "a4376277-f9e2-4811-bdff-63f36d107e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3338", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-31T00:00:24.900908Z"}]}