{"vulnerability": "CVE-2026-4889", "sightings": [{"uuid": "cd5e6023-938a-44ad-99f5-d3f1263bb1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48896", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:35.824498Z"}, {"uuid": "9f49be4c-05ab-48b2-8e88-14f1e7806f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48897", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:35.972604Z"}, {"uuid": "19059e7f-3d8e-4ceb-9f86-c8aa0257099c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48898", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:36.151211Z"}, {"uuid": "433e339c-c216-4b08-b012-3fa4ecc9c727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48899", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "creation_timestamp": "2026-05-27T14:35:36.428729Z"}, {"uuid": "a2d7b259-b988-432b-ad9c-ab345ab1c576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48895", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3monnubysps2k", "content": "CVE-2026-48895: Apache APISIX: Cas-auth Host header influence on CAS service URL", "creation_timestamp": "2026-06-19T15:29:14.663025Z"}, {"uuid": "701b12e1-310c-4359-8e76-ac1500d3aa7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48898", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou5uunp2t2b", "content": "\ud83d\udea8  ALERT: CVE-2026-48898\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nAn improper access check allows privilege escalation through the com_users batch task.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Joomla\\!\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n  ", "creation_timestamp": "2026-06-22T05:31:52.464230Z"}, {"uuid": "ccf3f634-e832-44e9-b034-6e0482ef6f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48899", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mou5v3jzmx27", "content": "\ud83d\udea8  ALERT: CVE-2026-48899\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nAn improper access check allows privilege escalation through the com_users batch task.\n\n\ud83c\udfaf WHO'S AFFECTED:\n  \u2022 Joomla\\!\n\n\u2694\ufe0f HOW IT'S EXPLOITED:\nAttack vector: unknown\nImpact: high impact on confidentiality, integrity, availability\n\n\u2705 WHAT TO DO:\n  ", "creation_timestamp": "2026-06-22T05:31:59.499346Z"}, {"uuid": "bc0ad59a-65ce-4df0-b5f2-d1d03d2aaff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48892", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2jnxkscc2t", "content": "CVE-2026-48892: Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options", "creation_timestamp": "2026-07-07T11:44:14.705738Z"}, {"uuid": "80068cdc-ffc0-45fe-8121-c203773328f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48891", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2jwvygdg2y", "content": "CVE-2026-48891: Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target", "creation_timestamp": "2026-07-07T11:48:56.039120Z"}, {"uuid": "55e48f25-839a-41ab-b847-91169c35cd58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48892", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2kw5rdo32e", "content": "CVE-2026-48892 - Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options\nCVE ID : CVE-2026-48892\n \n Published : July 7, 2026, 10:16 a.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : The Config API in Apache Airflow surfaced per-key sec...", "creation_timestamp": "2026-07-07T12:06:24.407418Z"}, {"uuid": "c748e297-a0ad-4134-a6dc-f30518d9eff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq2l747p7b2y", "content": "CVE-2026-48891 - Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target\nCVE ID : CVE-2026-48891\n \n Published : July 7, 2026, 10:16 a.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : A bug in Apache Airflow's `/ui...", "creation_timestamp": "2026-07-07T12:11:27.734881Z"}]}