{"vulnerability": "CVE-2026-4047", "sightings": [{"uuid": "13026e1b-8295-4f17-a086-fa2a5b41d9f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjq2uskvyj2d", "content": "", "creation_timestamp": "2026-04-17T23:21:32.119877Z"}, {"uuid": "878b6eac-2386-419c-bc0e-fc592df58d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjq4jah7bm26", "content": "", "creation_timestamp": "2026-04-17T23:50:51.624485Z"}, {"uuid": "28d2acbb-01ad-4a33-b1d9-66943fb69dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40470", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6r6bqfnd2e", "content": "", "creation_timestamp": "2026-04-23T19:37:49.409857Z"}, {"uuid": "07305256-2505-4c80-9b59-5d69ed419a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40471", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6rapfj252t", "content": "", "creation_timestamp": "2026-04-23T19:39:10.987123Z"}, {"uuid": "f159b838-2394-419a-ab12-28d876590da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40472", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6rawsxnu2n", "content": "", "creation_timestamp": "2026-04-23T19:39:18.250607Z"}, {"uuid": "3cce2cdc-6387-4d36-9ab2-0e434ecd63c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkeoktpjsf2p", "content": "", "creation_timestamp": "2026-04-26T04:07:08.249705Z"}, {"uuid": "6d5a0565-4d1a-428d-b667-51a9532bcc64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4047", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mklibcksvu2g", "content": "", "creation_timestamp": "2026-04-28T21:03:03.043745Z"}, {"uuid": "1a68a21a-fd8e-4d10-a030-0dd438878c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgbprwahy2v", "content": "", "creation_timestamp": "2026-04-26T19:22:34.213578Z"}, {"uuid": "3cbd736e-b0a2-4ef8-8010-019bb3d1b43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40474", "type": "published-proof-of-concept", "source": "Telegram/pKVsSWpOH4ztPjCePA6f2TZasDjFWE2MPBTfIhx3aN4UBbI", "content": "", "creation_timestamp": "2026-04-17T23:20:20.000000Z"}, {"uuid": "e424e7c5-37ed-48e6-a52d-bfdd8c355f34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40477", "type": "published-proof-of-concept", "source": "Telegram/pKVsSWpOH4ztPjCePA6f2TZasDjFWE2MPBTfIhx3aN4UBbI", "content": "", "creation_timestamp": "2026-04-17T23:20:20.000000Z"}, {"uuid": "4cbfc5bf-0d7d-484b-b34c-116ab8e4d880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "published-proof-of-concept", "source": "Telegram/tNtN6ajST1i0h_Z4W2szdcVpxF1Em9wIkkVyc-W9Ntpka1A", "content": "", "creation_timestamp": "2026-04-17T23:20:34.000000Z"}, {"uuid": "420152f8-a1ed-4f03-a668-a5486b483de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40472", "type": "seen", "source": "Telegram/9MQPqn6NQB4yNQwBhEjQmfZAQamilmjjvNDDQhjtzrN-0VE", "content": "", "creation_timestamp": "2026-04-24T15:22:14.000000Z"}, {"uuid": "c148b51e-90f1-4f46-a7e1-cfe8a728b471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40471", "type": "seen", "source": "Telegram/9MQPqn6NQB4yNQwBhEjQmfZAQamilmjjvNDDQhjtzrN-0VE", "content": "", "creation_timestamp": "2026-04-24T15:22:14.000000Z"}, {"uuid": "9de5ab68-6509-4e8f-812f-bb2b4fab8e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40470", "type": "seen", "source": "Telegram/Bxx4Kvf1Gmaaa81k5PUypqzMfdenJ80qW1o9nmI140z5ZT8", "content": "", "creation_timestamp": "2026-04-24T15:21:54.000000Z"}, {"uuid": "4b9e9881-5eb9-4c76-9fb3-47d697340d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/brianvermeer.nl/post/3mknezhgwys25", "content": "A high CVSS score does not always mean \"all hands on deck.\" It is wiser to assess the situation first before rushing into stress mode. For example, examine CVE-2026-40478 in Thymeleaf.\n\nsnyk.io/blog/thymele...", "creation_timestamp": "2026-04-29T15:10:23.346735Z"}, {"uuid": "bd55fe42-a878-44d4-a505-863439b0967c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mkoildefdb2g", "content": "The latest update for #Snyk includes \"'A Mini Shai-Hulud Has Appeared': Bun-Based Stealer Hits #SAP @cap-js and mbt npm Packages\" and \"Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)\".\n \n#CyberSecurity #DevOps #OpenSource https://opsmtrs.com/3yzKsZo", "creation_timestamp": "2026-04-30T01:46:38.614063Z"}, {"uuid": "114fa46a-92cf-42b6-ae21-6868d8e50b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4047", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mkompalp7h2d", "content": "Hackers exploited two auth bypass flaws (CVE-2026-3965 & CVE-2026-4047) in Qinglong task scheduler to deploy cryptominers via RCE starting Feb 7. Fix applied after initial mitigation proved insufficient. #Qinglong #RemoteExecution #China", "creation_timestamp": "2026-04-30T03:00:25.778607Z"}, {"uuid": "a1c1da05-1389-4cb8-beb1-b377e9d26dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40478", "type": "seen", "source": "https://bsky.app/profile/foojay.io/post/3mm4iszh7u224", "content": "New post from @brianvermeer.nl on Foojay: A practical look at the Thymeleaf template injection vulnerability (CVE-2026-40478) and why understanding the context matters more than the panic.\n\nfoojay.io/today/dont-p...\n\n#Java #Security #Thymeleaf", "creation_timestamp": "2026-05-18T08:53:27.990287Z"}, {"uuid": "18828c0e-d374-4cb8-80fa-a075bd7ce931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40479", "type": "published-proof-of-concept", "source": "https://github.com/kimai/kimai/security/advisories/GHSA-g82g-m9vx-vhjg", "content": "", "creation_timestamp": "2026-04-14T14:03:14.000000Z"}, {"uuid": "4d7c8e79-4dde-47b8-aca8-0ba61cce9712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-40474", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-xppv-4jrx-qf8m", "content": "", "creation_timestamp": "2026-04-16T01:35:16.000000Z"}, {"uuid": "0f031d20-6802-4bb3-80b5-9240aa8867ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "seen", "source": "https://t.me/GithubRedTeam/92636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40473\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:16:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40473: Apache Camel camel-mina MinaConverter.toObjectInput unsafe deserialization (RCE over TCP/UDP)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.675865Z"}, {"uuid": "2fe31851-d00b-4b6b-a9f2-0a90546fcdd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40473", "type": "seen", "source": "https://t.me/GithubRedTeam/92636", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-40473\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 08:16:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-40473: Apache Camel camel-mina MinaConverter.toObjectInput unsafe deserialization (RCE over TCP/UDP)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:10.029821Z"}]}