{"vulnerability": "CVE-2026-33937", "sightings": [{"uuid": "e1467240-20df-4a5d-b8a7-2a6d63384917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33937", "type": "seen", "source": "https://bsky.app/profile/clankussy.abu.guru/post/3mi4px3rvdz2e", "content": "", "creation_timestamp": "2026-03-28T13:20:11.036139Z"}, {"uuid": "5506e7b9-8460-4051-bf34-80d93efd24b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-33937", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116303739479236932", "content": "", "creation_timestamp": "2026-03-27T23:30:28.556322Z"}, {"uuid": "ab25a988-d0d4-4ed8-ae2a-1f458afeae41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33937", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mi33cy3ffa2s", "content": "", "creation_timestamp": "2026-03-27T21:38:21.921763Z"}, {"uuid": "ff662d7b-6bb3-4e12-bb7c-5795e6d3e23f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33937", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi36l3khbv2s", "content": "", "creation_timestamp": "2026-03-27T22:36:34.716381Z"}, {"uuid": "8da4f95f-dcc7-4f7a-a333-27125e48a823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-33937", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mi3bliv4a62a", "content": "", "creation_timestamp": "2026-03-27T23:30:30.270847Z"}, {"uuid": "1dbe4d3b-b80e-41ca-95b6-b7d183128a52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33937", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miewlc34no2r", "content": "", "creation_timestamp": "2026-03-31T19:40:09.226934Z"}, {"uuid": "72a57fc5-f56c-487b-a2d0-9f31736b85cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-33937", "type": "seen", "source": "https://bsky.app/profile/breachandbuild.bsky.social/post/3mjjbr2wznt2l", "content": "", "creation_timestamp": "2026-04-15T06:36:05.001455Z"}, {"uuid": "7fc056c4-7c8b-4141-8681-8d21f3c1ee4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33937", "type": "seen", "source": "https://t.me/GithubRedTeam/81272", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-33937\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-22 05:20:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-22T06:00:04.000000Z"}, {"uuid": "b7529b3b-5e04-4b70-b47c-8dd845c917eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33937", "type": "seen", "source": "https://bsky.app/profile/heinen.bsky.social/post/3ml4r3ix3qs2f", "content": "Seeing exploitation of CVE-2026-33937 but....  they target the example URI (/api/email/preview) that is only present in the writeup at github.com/EQSTLab/CVE-... \n\n#dfir #honeypot #infosec #cybersecurity", "creation_timestamp": "2026-05-05T17:56:09.909235Z"}, {"uuid": "285a6083-ee4d-4601-8cad-b9d1dd17c265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33937", "type": "seen", "source": "https://t.me/GithubRedTeam/77685", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-33937\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinhvaren\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-28 16:50:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-28T17:00:04.000000Z"}, {"uuid": "43571300-c5e6-4942-b27c-33f1570e1e9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33937", "type": "published-proof-of-concept", "source": "Telegram/_RteshKRLDCQ4RAmweF2blRppm4mSQiC8GB-jXpC1s6eNw8", "content": "", "creation_timestamp": "2026-03-29T09:00:04.000000Z"}, {"uuid": "41b1a79b-d5bf-4a3b-a88d-2c36b612e1fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33937", "type": "seen", "source": "Telegram/EI25wC4yN3TaatXDJQ6U_03Lar3nhYMfqPNXio5Iaw2cNO8", "content": "", "creation_timestamp": "2026-03-27T23:28:03.000000Z"}]}