{"vulnerability": "CVE-2026-5433", "sightings": [{"uuid": "01bcb103-213e-47cc-9e52-7fcca9bd01c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5433", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmejlbg5wi2v", "content": "CVE-2026-5433 - Improper Sanitization in CNM Web Interface\nCVE ID : CVE-2026-5433\n \n Published : May 21, 2026, 9:16 a.m. | 3\u00a0hours, 1\u00a0minute ago\n \n Description : Honeywell Control\nNetwork Module (CNM)\u00a0contains command injection vulnerability\nin the web interface. An attacker c...", "creation_timestamp": "2026-05-21T13:28:16.352655Z"}, {"uuid": "e8231d91-e67b-4356-965c-2b2554145ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54330", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh7ac24k26", "content": "\ud83d\udd17 CVE : CVE-2025-30156, CVE-2026-39944, CVE-2026-50152, CVE-2026-54330", "creation_timestamp": "2026-08-20T14:25:25.221992Z"}, {"uuid": "50553ce5-3795-4066-9fb1-7ee365d81f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54330", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtjiko2z7r2t", "content": "\ud83d\udc1b VULNERABILITIES (CVSS 8.2) CVE-2026-54330:  \u2014 severity important \u2014 Red Hat Security Data (JSON)\nhttps://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-54330.json #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-08-20T14:49:42.531520Z"}, {"uuid": "85fcd950-7505-40c5-a2ce-3693a4143e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54337", "type": "seen", "source": "https://t.me/GithubRedTeam/89729", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54337-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4qu4r1um\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-20 03:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54337 - Unauthenticated File Write/Overwrite PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:22.577694Z"}, {"uuid": "23cdb902-738a-4a89-a6fc-5abb31d942d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54337", "type": "seen", "source": "https://t.me/GithubRedTeam/89729", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54337-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4qu4r1um\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-20 03:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54337 - Unauthenticated File Write/Overwrite PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:38.376204Z"}, {"uuid": "02f131ee-b54e-40f9-af48-2050a8b78b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54337", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89729", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54337-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4qu4r1um\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-20 03:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54337 - Unauthenticated File Write/Overwrite PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:18.096577Z"}, {"uuid": "f535de54-2048-41c1-96bc-9a0ccfee4473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqux7yi36n2j", "content": "CVE-2026-54335 - Feathersjs: Prototype pollution in @feathersjs/commons _.merge via JSON-parsed __proto__\nCVE ID : CVE-2026-54335\n \n Published : July 17, 2026, 10:17 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Feathersjs is a framework for creating web APIs and real-time ap...", "creation_timestamp": "2026-07-17T23:55:52.379401Z"}, {"uuid": "126a8ff0-b33a-43ee-a24c-43e8a47174d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54335", "type": "seen", "source": "https://bsky.app/profile/amadeustech.bsky.social/post/3mquxhjsacv2x", "content": "The recent CVE-2026-54335 vulnerability in Feathersjs highlights the importance of secure coding practices in high-performance trading infrastructure, particularly in our Cortex Trading Systems where we utilize optimized CLOB architecture to minimize latency and maximize eff", "creation_timestamp": "2026-07-18T00:00:07.386999Z"}, {"uuid": "230f579d-7e17-4fee-9249-af1185949cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54338", "type": "seen", "source": "https://gist.github.com/alon710/4b4569a59147cbf248fba613069c312c", "content": "# CVE-2026-54338: CVE-2026-54338: JupyterHub Unauthenticated Denial of Service via Unbounded Username Logging\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54338\n\n## Summary\nJupyterHub is vulnerable to an unauthenticated Denial of Service (DoS) vulnerability. Prior to version 5.5.0, form-based authenticators failed to restrict the size of the username input field on failed logins, allowing remote attackers to exhaust host storage and memory resources.\n\n## TL;DR\nUnauthenticated remote attackers can trigger a Denial of Service on JupyterHub by sending oversized username strings to form-based login endpoints, exhausting system log storage and server memory.\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **EPSS Score**: 0.00282 (Percentile: 20.17%)\n- **Impact**: Denial of Service, Log Injection\n- **Exploit Status**: None\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- JupyterHub\n- **jupyterhub**: < 5.5.0 (Fixed in: `5.5.0`)\n\n## Mitigation\n\n- Upgrade to JupyterHub version 5.5.0 or later\n- Transition to third-party non-form authenticators like OAuthenticator\n- Apply reverse proxy rate limiting on the /hub/login route\n- Implement filesystem isolated log rotation and storage quotas\n\n**Remediation Steps:**\n1. Check current JupyterHub installation version using 'jupyterhub --version'\n2. Update JupyterHub deployment packages to version 5.5.0 or higher\n3. Restart the JupyterHub service to load the patched code paths\n4. Configure disk write quotas and log rotation for the logging volume\n\n## References\n\n- [GHSA-p43p-whwx-q52h](https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-p43p-whwx-q52h)\n- [Fix Commit](https://github.com/jupyterhub/jupyterhub/commit/d6dc595f84b7509969686da31d87d6d69e7fce0a)\n- [NVD Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-54338)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-54338)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54338) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-25T20:33:25.238008Z"}, {"uuid": "c3f71b1a-b11a-4455-b9a5-006929cf3b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54332", "type": "published-proof-of-concept", "source": "https://github.com/gopacket/gopacket/security/advisories/GHSA-g6v3-7xmc-w563", "content": "", "creation_timestamp": "2026-07-28T18:35:11.073817Z"}]}