{"vulnerability": "CVE-2026-5551", "sightings": [{"uuid": "ac37b2d0-5dbc-4221-8b5e-6cd77d692841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5551", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miqraiqbun2i", "content": "", "creation_timestamp": "2026-04-05T12:36:35.131553Z"}, {"uuid": "d355caaa-cf02-4ec0-9399-7428ca960638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5551", "type": "published-proof-of-concept", "source": "Telegram/8Kty84VYI9Md0M9SNY3xGd7cM29Jpy_2z-fm4_LFUn2UMmE", "content": "", "creation_timestamp": "2026-04-05T11:15:53.000000Z"}, {"uuid": "b723c8d2-631f-4e8d-acb6-99c11f99255b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55518", "type": "published-proof-of-concept", "source": "https://github.com/avo-hq/avo/security/advisories/GHSA-8fq9-273g-6mrg", "content": "", "creation_timestamp": "2026-06-17T06:07:29.000000Z"}, {"uuid": "9cf6c18a-e1fa-4a5f-9b3c-cb43af810657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55517", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgnfq24fu2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55517 \u0432 Deno: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E123D248-1B7C-46BD-B2C4-6A64645F44D2", "creation_timestamp": "2026-06-29T13:57:39.345833Z"}, {"uuid": "682e09c0-68db-4f14-b73e-5be9c0b1c706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55510", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmcuixr5u2q", "content": "CVE-2026-55510 - ImageMagick: Use-After-Free in crafted 8BIM when identifying an image\nCVE ID : CVE-2026-55510\n \n Published : July 1, 2026, 6:53 p.m. | 52\u00a0minutes ago\n \n Description : ImageMagick is free and open-source software used for editing and manipulating digital images...", "creation_timestamp": "2026-07-01T20:05:14.950961Z"}, {"uuid": "ee22008f-b58f-4c85-87d3-eb918a932e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55510", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnxz7kr5g2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55510 \u0432 ImageMagick: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6CD89260-F434-4F05-95EA-5155A4FB8AFA", "creation_timestamp": "2026-07-02T11:56:08.746179Z"}, {"uuid": "e27a4c7b-1e38-46c2-94d6-cec397a0305a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55510", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnh3mwpl2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55510 \u0432 ImageMagick: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/28341F67-1CD2-4FB3-B52A-0186E584984D", "creation_timestamp": "2026-07-03T13:25:03.678858Z"}, {"uuid": "8b3b51c5-282b-46a4-9999-90840bf2638a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55516", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqczwdg25w26", "content": "CVE-2026-55516 - Snipe-IT: Cross-company asset maintenance re-parenting via API update\nCVE ID : CVE-2026-55516\n \n Published : July 10, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Snipe-IT is an IT asset/license management system. Prior to 8.6.2, PATCH or PUT /api/v1/main...", "creation_timestamp": "2026-07-10T20:56:14.302604Z"}, {"uuid": "6632f8ea-4b3c-4f70-b3bd-af09bdb818bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55516", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhxyfvrz2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55516 \u0432 Snipe-IT: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/407C4271-2516-4DBA-B391-4395B325EC9F", "creation_timestamp": "2026-07-11T01:07:42.133763Z"}, {"uuid": "41f860b1-14eb-4cb0-b9e1-19f7434ba98e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55516", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqf5aabh3i2d", "content": "\ud83d\udfe0 CVE-2026-55516 - High (7.7)\n\nSnipe-IT is an IT asset/license management system. Prior to 8.6.2, PATCH or PUT /api/v1/maintenan...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55516/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T17:00:47.606304Z"}, {"uuid": "192d5c8c-f5e4-441a-b5f7-7601008f1303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55516", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mqf63wsngo2x", "content": "\ud83d\udfe0 CVE-2026-55516 - High (7.7)\n\nSnipe-IT is an IT asset/license management system. Prior to 8.6.2, PATCH or PUT /api/v1/maintenan...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-55516/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T17:16:16.925867Z"}, {"uuid": "8beeaf63-f143-455b-a1d9-7d5a0cb462e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55513", "type": "published-proof-of-concept", "source": "https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-g4x6-jcvr-9m3g", "content": "", "creation_timestamp": "2026-07-14T22:35:04.853151Z"}, {"uuid": "d511b184-da17-4545-a512-8c6a62cacfcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55512", "type": "published-proof-of-concept", "source": "https://github.com/forgekeep/nebula-mesh/security/advisories/GHSA-m3cx-mwpg-32jg", "content": "", "creation_timestamp": "2026-07-14T22:35:07.036952Z"}, {"uuid": "0d9a6f09-84df-46a2-83a4-cbcd37e25da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55511", "type": "seen", "source": "https://t.me/GithubRedTeam/93447", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-55511\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a junfuture1103\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 00:53:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-55511 poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:06.563292Z"}, {"uuid": "badbf0a6-7eab-4e5f-b4e6-e4c8066ce22f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55511", "type": "seen", "source": "Telegram/rNnuPZSkZWDVpEPnyDrVrJ0tq_HAdHjPuF4Jq-SaqH-76iI", "content": "", "creation_timestamp": "2026-07-16T19:00:06.985341Z"}, {"uuid": "ae61b1aa-0857-4a9c-8a93-834af61a405f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55511", "type": "seen", "source": "Telegram/K7c5CNbbPswTRSTuPJgh_t71PDUsbT0WBZTkPH1O8-oYBF8", "content": "", "creation_timestamp": "2026-07-16T19:00:07.091985Z"}, {"uuid": "2288c8ae-271d-453d-9682-edd75265603c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55511", "type": "published-proof-of-concept", "source": "Telegram/K7c5CNbbPswTRSTuPJgh_t71PDUsbT0WBZTkPH1O8-oYBF8", "content": "", "creation_timestamp": "2026-07-17T00:00:10.635293Z"}, {"uuid": "4f3696eb-3ed2-4df5-9046-bd06e8dbbcc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55511", "type": "published-proof-of-concept", "source": "Telegram/rNnuPZSkZWDVpEPnyDrVrJ0tq_HAdHjPuF4Jq-SaqH-76iI", "content": "", "creation_timestamp": "2026-07-17T00:00:10.899997Z"}, {"uuid": "ad609b9b-ebc7-4ee2-900e-239dcd83e817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55511", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93447", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-55511\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a junfuture1103\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 00:53:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-55511 poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:53.048308Z"}, {"uuid": "fa86f717-4586-4df0-bfea-edf79bedbcab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55518", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mquomye4t32s", "content": "CVE-2026-55518 - avo\nAvo's association attach endpoint has a missing authorization check, allowing low-privileged users to create unauthorized relationships and potentially escalate privileges or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avo #adrianmarin #Ruby #CVE #infosec", "creation_timestamp": "2026-07-17T21:22:04.718637Z"}, {"uuid": "9ec3a05b-a4ae-4a2e-aa16-517492f220a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55518", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mquqsqj7yy2w", "content": "\ud83d\udd34 CVE-2026-55518 - Critical (9.6)\n\nAvo is a framework to create admin panels for Ruby on Rails apps. Prior to 3.32.1 and 4.0.0.beta....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55518/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-17T22:01:05.974118Z"}, {"uuid": "75976d1a-b94c-4850-bd6b-55f071b58f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55518", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mquut76s4h2t", "content": "CVE-2026-55518 - Critical privilege escalation in Avo admin panel. Ruby on Rails users: authorization bypass in association attach workflow lets authenticated low-privilege users mutate associations. CVSS 9.6. No patch yet - monitor updates...\n\nhttps://www.valtersit.com/cve/CVE-2026-55518/", "creation_timestamp": "2026-07-17T23:12:56.012095Z"}, {"uuid": "06487d60-75dc-4dde-b9f3-5586ecb25f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55518", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116937850284003911", "content": "CVE-2026-55518 - Critical privilege escalation in Avo admin panel. Ruby on Rails users: authorization bypass in association attach workflow lets authenticated low-privilege users mutate associations. CVSS 9.6. No patch yet - monitor updates. #CVE #RubyOnRails #infosec\nhttps://www.valtersit.com/cve/CVE-2026-55518/", "creation_timestamp": "2026-07-17T23:13:12.408713Z"}, {"uuid": "801421d1-f929-41ef-bf14-0e330adcb94c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55518", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquxmhc7qh2g", "content": "CVE-2026-55518 - Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation\nCVE ID : CVE-2026-55518\n \n Published : July 17, 2026, 9:17 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : Avo is a framework t...", "creation_timestamp": "2026-07-18T00:02:50.711837Z"}]}