{"vulnerability": "CVE-2026-44024", "sightings": [{"uuid": "e36e597c-ffa7-4f34-a192-0ab363523979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44024", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96724", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-44024_exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 08:55:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T10:00:06.023788Z"}, {"uuid": "3f8e47e6-66c3-4c5e-8a1a-525f21cea0b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44024", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96724", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-44024_exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xdak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 08:55:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T00:00:47.359788Z"}, {"uuid": "cb0ede9c-a391-47b7-bdcd-c6a42eb3adbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44024", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpkdqg3p5g2l", "content": "Four Fluentd vulnerabilities are fixed in v1.19.3, including a 9.8 RCE (CVE-2026-44024) and SSRF (CVE-2026-44161). Patch now.\n\n#Fluentd #RCE #SSRF #CVE #Cybersecurity #Infosec", "creation_timestamp": "2026-07-01T01:15:20.303619Z"}, {"uuid": "49ec25e0-149c-4223-884c-ef8e7ff96d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44024", "type": "seen", "source": "https://jvn.jp/en/jp/JVN36011274", "content": "", "creation_timestamp": "2026-07-01T02:49:02.497644Z"}, {"uuid": "89d95cfe-75e0-4302-9f38-ffb140b1eb33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44024", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq64oc5txt2w", "content": "CVE-2026-44024 - fluentd\nFluentd, a logging tool, has a security flaw that allows an attacker to inject malicious files onto a system if it receives logs from untrusted sources. This could lead to a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fluentd #fluent #Ruby #CVE #infosec", "creation_timestamp": "2026-07-08T22:02:07.052660Z"}, {"uuid": "a4854bbd-fb41-4ed6-b414-ef502eef25de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44024", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq7swhtwtq2n", "content": "CVE-2026-44024 - Critical RCE in Fluentd. Unvalidated ${tag} placeholder enables path traversal and arbitrary file write. CVSS 9.8. No patch available. Mitigate immediately. #CVE #infosec #Fluentd\n\nhttps://www.valtersit.com/cve/CVE-2026-44024/", "creation_timestamp": "2026-07-09T14:13:03.811191Z"}, {"uuid": "e769c65d-fc7f-4075-bba3-aaf809d62e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44024", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mql6emvljp2d", "content": "\ud83d\udccc CVE-2026-44024 - Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd allow... https://www.cyberhub.blog/cves/CVE-2026-44024", "creation_timestamp": "2026-07-14T02:37:06.855121Z"}, {"uuid": "d213c3dd-d8c3-480e-85f2-9bb41176688f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44024", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqld7rvev42e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-44024 \u0432 Fluentd: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/AF068CD8-410F-4717-9A24-76DE2B48C66C", "creation_timestamp": "2026-07-14T04:03:52.951279Z"}, {"uuid": "5b3ab653-8e99-4ddb-88eb-90e35e0c2297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44024", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqslghwpm2i", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1-Fluentd - CVE-2026-44024 \u05d5\u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/65EA545C-9F94-4F54-8A29-BD096DF6DA0B", "creation_timestamp": "2026-07-16T08:22:08.524315Z"}, {"uuid": "8f327f0a-3669-4ba2-8af6-7873c3204ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44024", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrjbncdgbs2b", "content": "\u30ed\u30b0\u53ce\u96c6\u30c4\u30fc\u30eb\u300cFluentd\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\n\u30af\u30e9\u30a6\u30c9\u74b0\u5883\u306a\u3069\u306e\u30ed\u30b0\u53ce\u96c6\u306b\u6d3b\u7528\u3055\u308c\u3066\u3044\u308b\u300cFluentd\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u4fe1\u983c\u3067\u304d\u306a\u3044\u9001\u4fe1\u5143\u304b\u3089\u30ed\u30b0\u3092\u53d7\u4fe1\u3057\u3066\u3044\u308b\u5834\u5408\u306a\u3069\u306b\u3001\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2026-44024\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002\n\n\u52d5\u7684\u306b\u30d5\u30a1\u30a4\u30eb\u30d1\u30b9\u3092\u6307\u5b9a\u3067\u304d\u308b\u6a5f\u80fd\u306b\u304a\u3044\u3066\u691c\u8a3c\u306e\u4e0d\u5099\u304c\u5b58\u5728\u3002\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u66f8\u304d\u8fbc\u307e\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u8a2d\u5b9a\u3084\u5b9f\u884c\u6a29\u9650\u306b\u3088\u3063\u3066\u306f\u3001\u91cd\u8981\u306a\u30b7\u30b9\u30c6\u30e0\u30d5\u30a1\u30a4\u30eb\u306e\u4e0a\u66f8\u304d\u3084\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u5909\u66f4\u3001\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u633f\u5165\u306a\u3069\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a...", "creation_timestamp": "2026-07-26T01:55:31.277478Z"}, {"uuid": "b3eb888a-c1a7-497a-a37f-35ae436041ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44024", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0375", "content": "Oracle heeft 31 kwetsbaarheden verholpen in diverse Oracle Communications-producten, waaronder Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Security Edge Protection Proxy, Oracle Communications MetaSolv Solution Module - ASR, Oracle Communications Service Catalog and Design en Oracle Communications Operations Monitor. De kwetsbaarheden betreffen verschillende beveiligingsproblemen in Oracle Communications-producten, waaronder mogelijkheden voor niet-geauthenticeerde en laaggeprivilegieerde kwaadwillenden om via netwerktoegang ongeautoriseerde acties uit te voeren. De kwetsbaarheden hebben CVSS-scores vari\u00ebrend van laag tot kritiek. Van de in totaal 31 kwetsbaarheden zijn vier als kritiek aangemerkt en kunnen 23 kwetsbaarheden zonder authenticatie op afstand worden misbruikt. Succesvol misbruik kan onder meer leiden tot het verkrijgen van ongeautoriseerde toegang tot gevoelige informatie, het wijzigen van gegevens en het verstoren van de beschikbaarheid van getroffen systemen. Sommige kwetsbaarheden vereisen gebruikersinteractie of voorafgaande toegangsrechten, terwijl andere volledig op afstand en zonder authenticatie kunnen worden misbruikt.\n\nDe vier kwetsbaarheden die als kritiek zijn aangemerkt, CVE-2026-44024, CVE-2026-17544, CVE-2026-71290 en CVE-2026-73194, hebben een CVSS-score van 9,1 of hoger en bevinden zich in verschillende Core-componenten van Oracle Communications Unified Assurance, waaronder Fluentd, PHP, Apache HttpClient en DBI. Deze kwetsbaarheden kunnen zonder authenticatie op afstand worden misbruikt en kunnen een hoge impact hebben op de vertrouwelijkheid en, afhankelijk van de kwetsbaarheid, de integriteit en beschikbaarheid van getroffen systemen.\n\nHet NCSC adviseert om de beveiligingsupdates voor de kritieke kwetsbaarheden met voorrang toe te passen.", "creation_timestamp": "2026-09-16T16:00:44.545545Z"}, {"uuid": "8c36f8b9-9c7a-48f9-add4-ef02ca035d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44024", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0375", "content": "Oracle heeft 31 kwetsbaarheden verholpen in diverse Oracle Communications-producten, waaronder Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Security Edge Protection Proxy, Oracle Communications MetaSolv Solution Module - ASR, Oracle Communications Service Catalog and Design en Oracle Communications Operations Monitor. De kwetsbaarheden betreffen verschillende beveiligingsproblemen in Oracle Communications-producten, waaronder mogelijkheden voor niet-geauthenticeerde en laaggeprivilegieerde kwaadwillenden om via netwerktoegang ongeautoriseerde acties uit te voeren. De kwetsbaarheden hebben CVSS-scores vari\u00ebrend van laag tot kritiek. Van de in totaal 31 kwetsbaarheden zijn vier als kritiek aangemerkt en kunnen 23 kwetsbaarheden zonder authenticatie op afstand worden misbruikt. Succesvol misbruik kan onder meer leiden tot het verkrijgen van ongeautoriseerde toegang tot gevoelige informatie, het wijzigen van gegevens en het verstoren van de beschikbaarheid van getroffen systemen. Sommige kwetsbaarheden vereisen gebruikersinteractie of voorafgaande toegangsrechten, terwijl andere volledig op afstand en zonder authenticatie kunnen worden misbruikt.\n\nDe vier kwetsbaarheden die als kritiek zijn aangemerkt, CVE-2026-44024, CVE-2026-17544, CVE-2026-71290 en CVE-2026-73194, hebben een CVSS-score van 9,1 of hoger en bevinden zich in verschillende Core-componenten van Oracle Communications Unified Assurance, waaronder Fluentd, PHP, Apache HttpClient en DBI. Deze kwetsbaarheden kunnen zonder authenticatie op afstand worden misbruikt en kunnen een hoge impact hebben op de vertrouwelijkheid en, afhankelijk van de kwetsbaarheid, de integriteit en beschikbaarheid van getroffen systemen.\n\nHet NCSC adviseert om de beveiligingsupdates voor de kritieke kwetsbaarheden met voorrang toe te passen.", "creation_timestamp": "2026-09-17T01:00:39.093385Z"}]}