{"vulnerability": "CVE-2026-5674", "sightings": [{"uuid": "f2d0b901-d926-49aa-8033-c10848da247a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5674", "type": "seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mrv43klb3xb2", "content": "Escaping Linux Sandboxes via PipeWire (CVE-2026-5674) https://embracethered.com/blog/posts/2026/pipewire-flatpak-linux-sandbox-escape-cve-2026-5674/", "creation_timestamp": "2026-07-30T18:48:07.303780Z"}, {"uuid": "7c9132fb-8da7-42ce-b732-db2b81f6e7b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5674", "type": "seen", "source": "Telegram/TTzWJ4_sBjK4Z-3pv6pIQiCmYccl62Gtw2a5-B-3SGOS4tqR", "content": "", "creation_timestamp": "2026-07-30T19:00:04.247323Z"}, {"uuid": "2f783cd4-aa44-4ab4-94ae-a6552c77856c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5674", "type": "published-proof-of-concept", "source": "Telegram/TTzWJ4_sBjK4Z-3pv6pIQiCmYccl62Gtw2a5-B-3SGOS4tqR", "content": "", "creation_timestamp": "2026-07-31T00:00:24.036764Z"}, {"uuid": "d9ea5956-86ea-4277-923b-545f9f3d64ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5674", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mrwfok2kr32p", "content": "[RSS] Escaping Linux Sandboxes via PipeWire (CVE-2026-5674)\n\n\n embracethered.com -> \n\n\nOriginal->", "creation_timestamp": "2026-07-31T07:12:24.461280Z"}, {"uuid": "c0c18ff4-1fa2-423e-bf6f-d1cec6819860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56745", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o", "content": "\ud83d\udd17 CVE : CVE-2018-11798, CVE-2019-0205, CVE-2020-13949, CVE-2026-43869, CVE-2026-45205, CVE-2026-54291, CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-56819, CVE-2026-59898, CVE-2026-59899, CVE-2026-59900, CVE-2026-59901, CVE-2026-59921", "creation_timestamp": "2026-08-10T13:20:13.722691Z"}, {"uuid": "8420e88d-0326-4158-8641-44401ce43d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56746", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o", "content": "\ud83d\udd17 CVE : CVE-2018-11798, CVE-2019-0205, CVE-2020-13949, CVE-2026-43869, CVE-2026-45205, CVE-2026-54291, CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-56819, CVE-2026-59898, CVE-2026-59899, CVE-2026-59900, CVE-2026-59901, CVE-2026-59921", "creation_timestamp": "2026-08-10T13:20:13.774354Z"}, {"uuid": "89d1fadb-538f-4846-afb7-6640f3606e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56745", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991", "content": "", "creation_timestamp": "2026-08-13T08:46:04.968437Z"}, {"uuid": "38025427-2f2f-4568-9ab2-84b9bdfea5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56746", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991", "content": "", "creation_timestamp": "2026-08-13T08:46:45.219302Z"}, {"uuid": "efb44613-f7a6-430e-8497-e1ebd8dd93a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5674", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mqrgbdys5a2o", "content": "A flaw in PipeWire, the audio server on most Linux desktops (CVE-2026-5674), lets a sandboxed app load a malicious library and escape its Flatpak or Snap sandbox.\n\nLocal, and no exploit reported yet.\n\nFix: disable optional audio module loading, then patch.", "creation_timestamp": "2026-07-16T14:14:25.786259Z"}, {"uuid": "e401fb6b-bc19-4087-a8ca-e85c9d37578f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5674", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116930114006202187", "content": "We have just added an important vulnerability affecting Red Hat PipeWire (CVE-2026-5674) https://vuldb.com/vuln/379530", "creation_timestamp": "2026-07-16T14:25:45.353282Z"}, {"uuid": "a726e43e-5521-4000-95ac-018dc15268d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5674", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqriagxaqx2x", "content": "CVE-2026-5674 - Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading\nCVE ID : CVE-2026-5674\n \n Published : July 16, 2026, 2:16 p.m. | 17\u00a0minutes ago\n \n Description : A flaw was found in PipeWire, a multimedia server. This vulnerability ...", "creation_timestamp": "2026-07-16T14:49:42.755859Z"}, {"uuid": "9a1821d6-faed-4df4-a0c7-27ed761d8a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquyl3hgcb2a", "content": "CVE-2026-56741 - JLine: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry\nCVE ID : CVE-2026-56741\n \n Published : July 17, 2026, 10:17 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.1...", "creation_timestamp": "2026-07-18T00:19:58.455414Z"}, {"uuid": "a07a965c-0190-4b15-8a54-88df28e6f563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquytzuy6y2i", "content": "CVE-2026-56740 - JLine: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables\nCVE ID : CVE-2026-56740\n \n Published : July 17, 2026, 10:17 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : JLine is a Java library for handling console input. Prior to 3...", "creation_timestamp": "2026-07-18T00:24:58.865751Z"}, {"uuid": "df70f7ee-c5a2-43cc-8636-b85e0bd3235b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56740", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqviazwau42g", "content": "\ud83d\udfe0 CVE-2026-56740 - High (7.5)\n\nJLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56740/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T05:00:42.046733Z"}, {"uuid": "d4b9d581-379b-4eab-9233-45c883640762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56741", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvibaehij2c", "content": "\ud83d\udfe0 CVE-2026-56741 - High (7.5)\n\nJLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56741/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T05:00:48.180499Z"}, {"uuid": "45f25a08-fffd-463f-9d50-b8ce2e6edfc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56740", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqvw5hjsmf23", "content": "CVE-2026-56740 - DoS in JLine Telnet server. Unauthenticated attackers can flood env variables to exhaust JVM heap memory. CVSS 7.5. No patch yet - disable telnet module if possible. #CVE #infosec #Java\n\nhttps://www.valtersit.com/cve/CVE-2026-56740/", "creation_timestamp": "2026-07-18T09:09:13.498674Z"}, {"uuid": "d1843bc9-3924-4d5e-9eac-ed0cf3b6a5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56740", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116940194970389086", "content": "CVE-2026-56740 - DoS in JLine Telnet server. Unauthenticated attackers can flood env variables to exhaust JVM heap memory. CVSS 7.5. No patch yet - disable telnet module if possible. #CVE #infosec #Java\nhttps://www.valtersit.com/cve/CVE-2026-56740/", "creation_timestamp": "2026-07-18T09:09:28.946255Z"}, {"uuid": "db89214c-5cc7-42b9-9019-0cb19738fb7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56741", "type": "published-proof-of-concept", "source": "https://github.com/jline/jline3/security/advisories/GHSA-2r2c-cx56-8933", "content": "", "creation_timestamp": "2026-07-20T22:37:21.807718Z"}, {"uuid": "e30ce41d-936b-428e-87bb-d662bd2a1ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56740", "type": "published-proof-of-concept", "source": "https://github.com/jline/jline3/security/advisories/GHSA-47qp-hqvx-6r3f", "content": "", "creation_timestamp": "2026-07-20T22:37:24.157349Z"}, {"uuid": "729a44c4-9c40-4b60-918c-8eebf2ec8573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56747", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrnwjsjoem2m", "content": "Cribl Stream 4.18.2\u672a\u6e80\u3002JSON Pointer-to-accessor\u30b3\u30f3\u30d1\u30a4\u30e9\u306e\u4e0d\u9069\u5207\u306a\u30b3\u30fc\u30c9\u751f\u6210\u5236\u5fa1\u3002\u7de8\u96c6\u6a29\u9650\u3092\u6301\u3064\u30ea\u30e2\u30fc\u30c8\u8a8d\u8a3c\u6e08\u307f\u653b\u6483\u8005\u304c\u3001\u7d30\u5de5\u3057\u305f\u8a2d\u5b9a\u5024\u3067\u30b5\u30fc\u30d0\u30fc\u3067\u4efb\u610f\u2026\nCVE-2026-56747 CVSS 8.8 | HIGH", "creation_timestamp": "2026-07-27T22:20:02.030890Z"}]}