{"vulnerability": "CVE-2026-4410", "sightings": [{"uuid": "42a29a92-2508-47ca-9fcf-dc29ba0d2118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44101", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtxrdmjwf2e", "content": "CVE-2026-44101\nAn attacker can access and change the CHARX OCPP Agent service settings without a password, potentially disrupting service and exposing sensitive information. This is a concern because it could allow an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T07:58:06.647953Z"}, {"uuid": "fb43c330-75d3-4b10-aaa4-293a2c2afbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44104", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtxuuxerm22", "content": "CVE-2026-44104\nThe firmware update process for the charging controller doesn't properly check the integrity of new firmware, allowing an attacker to send malicious updates that could compromise the entire system. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T08:00:05.971557Z"}, {"uuid": "026b0e3d-58ce-4795-a500-9e66937ac791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44108", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrtxuwcbra2z", "content": "CVE-2026-44108\nWhen shutting down a Windows system, the firewall is stopped too early, creating a brief window where internal services can be accessed from the internet. This could allow an unauthorized person to access and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-30T08:00:06.561196Z"}, {"uuid": "1b059311-bdf1-460a-8ce0-b3ce12ea5802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44106", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5ezikuschqdok", "content": "CVE-2026-44106 - Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file\nCVE ID : CVE-2026-44106\n \n Published : July 30, 2026, 7:16 a.m. | 28\u00a0minutes ago\n \n Description : A privilege escalation vulnerability in the init-script for us...", "creation_timestamp": "2026-07-30T08:02:22.552813Z"}, {"uuid": "8cdb8835-cb14-4066-9d12-bebc9ba28433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44107", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jncl6mqz47wuj", "content": "CVE-2026-44107 - Exposed Reboot via Modbus\nCVE ID : CVE-2026-44107\n \n Published : July 30, 2026, 7:16 a.m. | 28\u00a0minutes ago\n \n Description : A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is ...", "creation_timestamp": "2026-07-30T08:08:22.417214Z"}, {"uuid": "42c8a971-abb7-481f-a913-039dbfce2ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44108", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7p476i2nf33ay", "content": "CVE-2026-44108 - Firewall bypass during shutdown\nCVE ID : CVE-2026-44108\n \n Published : July 30, 2026, 7:16 a.m. | 28\u00a0minutes ago\n \n Description : Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. Th...", "creation_timestamp": "2026-07-30T08:14:22.521517Z"}, {"uuid": "18815e04-bbec-403e-9a68-b9691e58150c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44108", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mru6mtgyum2d", "content": "\ud83d\udd34 CVE-2026-44108 - Critical (9.8)\n\nDue to a flaw in the execution order of scripts during shutdown, the firewall is terminated prema...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44108/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T10:00:51.740184Z"}, {"uuid": "f1c16064-123b-40f2-8a26-d8f18e5e66cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44106", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mru6mgr24o2j", "content": "\ud83d\udfe0 CVE-2026-44106 - High (7.8)\n\nA privilege escalation vulnerability in the init-script for user-applications allows a low-privil...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44106/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T10:00:39.074305Z"}, {"uuid": "95ba3939-3498-4c72-8c69-5d8e2bc20fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44107", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mru6mn2ne72a", "content": "\ud83d\udfe0 CVE-2026-44107 - High (7.5)\n\nA reboot of the charging controller can be triggered via Modbus TCP without authentication. There...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44107/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T10:00:45.042111Z"}, {"uuid": "50e8b61a-7bdf-44bf-9a6b-36c7ead35f8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44109", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kuqcrbd2r", "content": "\ud83d\udd34 CVE-2026-44109 - Critical (9.8)\n\nOpenClaw before 2026.4.15 contains an authentication bypass vulnerability in Feishu webhook and c...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44109/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:42:57.743612Z"}, {"uuid": "8f209deb-9d50-4936-b15f-fc48ede99f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44109", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml7qbd6xes2c", "content": "CVE-2026-44109 - OpenClaw Feishu Webhook Authentication Bypass Vulnerability\nCVE ID : CVE-2026-44109\n \n Published : May 6, 2026, 8:16 p.m. | 23\u00a0minutes ago\n \n Description : OpenClaw before 2026.4.15 contains an authentication bypass vulnerability in Feishu webhook and card-act...", "creation_timestamp": "2026-05-06T22:19:28.481053Z"}, {"uuid": "7a62eb28-3f61-4234-a139-61542ce5e48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44109", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlc4ov7bzi2w", "content": "\ud83d\udccc CVE-2026-44109 - OpenClaw before 2026.4.15 contains an authentication bypass vulnerability in Feishu webhook and card-action validation that allows unauthenticated req... https://www.cyberhub.blog/cves/CVE-2026-44109", "creation_timestamp": "2026-05-07T21:07:07.779301Z"}, {"uuid": "dfcbc519-7492-4766-91b4-050d5895e72f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44109", "type": "seen", "source": "Telegram/BjOi3LD-ITdETd5g9YWEmnh3F0P_JQYm-8pZfXqVFfSR720", "content": "", "creation_timestamp": "2026-05-07T03:00:12.000000Z"}, {"uuid": "78a1ebc5-a999-4cdc-95d6-1d4413caa04a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4410", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3mm7mwuckyx2k", "content": "IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service (CVE-2026-4410) https://tinyurl.com/23mf7cz6", "creation_timestamp": "2026-05-19T14:45:07.943102Z"}, {"uuid": "7dc4add8-b801-4319-9a26-af5905827e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44102", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mspvfaxfz72c", "content": "Weekly CVE Roundup: Aug 2, 2026. We're analyzing the critical Next.js Server Actions RCE (CVE-2026-44102) and modern prototype pollution threats. Stay informed: https://cvedatabase.com/blog/weekly-cve-roundup-critical-next-js-rce-and-shifting-web-security-paradigms-aug--2026-08-02", "creation_timestamp": "2026-08-10T10:30:06.373942Z"}, {"uuid": "aac73347-4136-45c4-9934-d9160bbfd2e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44109", "type": "seen", "source": "https://t.me/shimiscyberworld/1252", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-44109 \u2014 CVSS 9.8\nOpenClaw Authentication Bypass: Critical Vulnerability in Feishu Webhook\n\nCVE-2026-44109 \u2014 OpenClaw before 2026.4.15 contains an authentication bypass vulnerability in Feishu webhook and card-action validation that allows unauthenticated requests to reac\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-44109 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:14.216851Z"}, {"uuid": "2396196a-40ff-469f-bea4-c69a50055c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44109", "type": "seen", "source": "https://t.me/shimiscyberworld/1252", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-44109 \u2014 CVSS 9.8\nOpenClaw Authentication Bypass: Critical Vulnerability in Feishu Webhook\n\nCVE-2026-44109 \u2014 OpenClaw before 2026.4.15 contains an authentication bypass vulnerability in Feishu webhook and card-action validation that allows unauthenticated requests to reac\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-44109 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:35.866018Z"}]}