{"vulnerability": "CVE-2026-5567", "sightings": [{"uuid": "83c9aeca-35d9-49d2-86ee-49bacd2df371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5567", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116347502875060524", "content": "", "creation_timestamp": "2026-04-04T17:00:07.726029Z"}, {"uuid": "ff47b991-f1cf-4240-81fa-29ef7ebfbc74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5567", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mir2vgf34d2l", "content": "", "creation_timestamp": "2026-04-05T15:29:21.020890Z"}, {"uuid": "d2f140e7-6603-49e7-ad91-df6deb26ad0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5567", "type": "published-proof-of-concept", "source": "Telegram/bba5KoRxZjw4aUqHfMWZuI7ux276_2ZWKOY2q9V8MiGPKQ0", "content": "", "creation_timestamp": "2026-04-05T15:16:27.000000Z"}, {"uuid": "072c87d3-7777-43b0-96df-dbf700ebad17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5567", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkrcl3qwyi26", "content": "\ud83d\udccc CVE-2026-5567 - A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the compo... https://www.cyberhub.blog/cves/CVE-2026-5567", "creation_timestamp": "2026-05-01T04:37:07.802666Z"}, {"uuid": "f850965f-e3df-4a27-ac7a-9913cacfd03c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55676", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtmky3ryds24", "content": "~Cybergcca~\nCanadian Cyber Centre published 5 advisories covering Splunk, Apple, Mozilla, Zimbra, and Malcolm vulnerabilities.\n-\nIOCs: CVE-2026-73570, CVE-2026-55676, CVE-2026-63133\n-\n#CVE #ThreatIntel #VulnManagement", "creation_timestamp": "2026-08-21T20:10:59.662070Z"}, {"uuid": "3e896cc3-de17-43d7-b941-661a8a4341fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55676", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-cisa-security-advisory-av26-841", "content": "", "creation_timestamp": "2026-08-21T20:15:12.043234Z"}, {"uuid": "9823c441-200e-4d4b-822b-345524aa4f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55676", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtezer436f2m", "content": "~Cisa~\nCISA Malcolm network traffic analysis tool has multiple vulnerabilities allowing DoS and arbitrary code execution.\n-\nIOCs: CVE-2026-55676, CVE-2026-63133, CVE-2026-63134\n-\n#CISA #CVE #Malcolm #ThreatIntel", "creation_timestamp": "2026-08-18T20:07:19.801119Z"}, {"uuid": "1ae450f9-3023-4267-bcdc-a47ca9dca216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55677", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7kwlsngg2x", "content": "CVE-2026-55677 - Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files\nCVE ID : CVE-2026-55677\n \n Published : June 26, 2026, 4:15 p.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router an...", "creation_timestamp": "2026-06-26T18:24:46.097975Z"}, {"uuid": "020b01fd-c07e-4bbb-93ca-5528d21f5a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55674", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtcc75ptta25", "content": "\ud83d\udea8 CVE-2026-55674 \u2014 CVSS 9.3 CRITICAL\n\nDiscourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, an un...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-55674\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T18:07:15.764514Z"}, {"uuid": "68c79603-2a92-477f-8f79-af6627829952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55674", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtchx2hric25", "content": "CVE-2026-55674 - discourse\nDiscourse's color scheme cookies were not properly secured, allowing an attacker to inject malicious code into a user's browser without needing a login. This could lead to visitors'\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#discourse #CVE #infosec", "creation_timestamp": "2026-08-17T19:50:06.409046Z"}, {"uuid": "94e0d20e-cdd2-4bdb-984e-e57e92d834dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55671", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfarohti2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55671 \u0432 ZITADEL: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A2C49B68-300E-4756-A3A7-C29A6FDDD5F7", "creation_timestamp": "2026-07-11T00:18:55.777186Z"}, {"uuid": "8ef2031c-2f9a-4f7b-876d-9af499cad1cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55672", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfbfdqjr2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55672 \u0432 ZITADEL: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9F88CB54-326F-4B2D-B42C-CDEC4C7286D3", "creation_timestamp": "2026-07-11T00:19:16.940039Z"}, {"uuid": "996a10f8-c6f1-46c5-89c7-a8bcb2242a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55670", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfdy3lxe2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55670 \u0432 ZITADEL: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/73C47652-D9F5-4CDA-A533-03B59B86E74E", "creation_timestamp": "2026-07-11T00:20:43.158964Z"}, {"uuid": "87b14f8b-1d5d-473e-8083-b0b1eea26565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55676", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mstmihp3qw27", "content": "\ud83d\udfe0 CVE-2026-55676 - High (8.8)\n\nMalcolm is a network traffic analysis tool suite. The file-upload component (FilePond PHP backend...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55676/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-11T22:01:30.059403Z"}, {"uuid": "262c9f44-4983-49df-a65d-16c0b53c40b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55678", "type": "seen", "source": "https://gist.github.com/alon710/f6616451da7f3f1b989952d24a3d867c", "content": "# CVE-2026-55678: CVE-2026-55678: Unauthenticated Node Registration and Credential Leakage in Arc Enterprise Clustering\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55678\n\n## Summary\nCVE-2026-55678 defines a critical security vulnerability in the Enterprise clustering implementation of Arc, an open-source SQL-native time-series database. When clustering is enabled but a shared secret is not defined, the cluster coordinator fails to enforce authentication on cluster join requests and node status updates. Remote, unauthenticated attackers can exploit this behavior to register a rogue node, hijack telemetry routing, and harvest sensitive client authentication headers.\n\n## TL;DR\nUnauthenticated remote attackers can register rogue nodes in Arc database clusters, enabling silent query interception and extraction of administrative API keys.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-287, CWE-284, CWE-306\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 6.9 (Medium)\n- **Exploit Status**: Proof of Concept (PoC) available\n- **CISA KEV Status**: Not Listed\n- **Ransomware Association**: No known utilization in ransomware campaigns\n\n## Affected Systems\n\n- Arc Enterprise Cluster Coordinator\n- **arc**: >= 26.02.1, < 26.06.2 (Fixed in: `26.06.2`)\n\n## Mitigation\n\n- Mandatory upgrade of all cluster members and coordinators to Arc v26.06.2 or later.\n- Enforce strong administrative secrets across clustering endpoints by declaring ARC_CLUSTER_SHARED_SECRET via host environment variables.\n- Utilize network access control lists (ACLs) to block external requests to coordinator port 9100.\n- Enable TLS transport security for all peer-to-peer and coordinator-to-node telemetry traffic.\n\n**Remediation Steps:**\n1. Generate a cryptographically secure 32-byte shared secret using commands such as 'openssl rand -hex 32'.\n2. Configure the environment variable 'ARC_CLUSTER_SHARED_SECRET' with the generated value across all cluster hosts.\n3. Perform a coordinated rolling upgrade of the Arc database package to v26.06.2.\n4. Verify cluster synchronization logs to confirm that all nodes are establishing signed heartbeat tunnels successfully.\n\n## References\n\n- [GHSA-p378-jp5r-gpgw: Arc Unauthenticated Join and Spoofing Advisory](https://github.com/Basekick-Labs/arc/security/advisories/GHSA-p378-jp5r-gpgw)\n- [Arc Coordinator Patch Commit](https://github.com/Basekick-Labs/arc/commit/38402ad2ebddd32c15bf4a0fc9c22c920e5685df)\n- [Arc v26.06.2 Release Changelog](https://github.com/Basekick-Labs/arc/releases/tag/v26.06.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55678) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-28T21:31:53.803596Z"}, {"uuid": "e1205ac7-fb65-42e7-ab9e-c7550ca13952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55678", "type": "published-proof-of-concept", "source": "https://github.com/Basekick-Labs/arc/security/advisories/GHSA-p378-jp5r-gpgw", "content": "", "creation_timestamp": "2026-08-28T22:35:03.558887Z"}]}