{"vulnerability": "CVE-2026-56815", "sightings": [{"uuid": "bb77d6ee-bb88-4b09-8d0d-d95844fc7376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56815", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moxt6vyz4g2t", "content": "CVE-2026-56815 - Pwnlift Symlink Following Vulnerability\nCVE ID : CVE-2026-56815\n \n Published : June 23, 2026, 1:57 p.m. | 1\u00a0hour, 46\u00a0minutes ago\n \n Description : pwnlift before d7a9544, in a privileged deployment, contains a symlink following vulnerability in the upload handl...", "creation_timestamp": "2026-06-23T16:31:17.332805Z"}, {"uuid": "76d42e7e-2c1c-4af4-8a4f-b0eff7c41c62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56815", "type": "seen", "source": "https://bsky.app/profile/payloadforge.io/post/3moydyj6t6s2m", "content": "Thanks - MITRE assigned CVE-2026-56815 today, same day the oss-security post went live. The blank ID field lasted 53 days and two CNA rejections. Apparently the fix for process friction is publishing without one.", "creation_timestamp": "2026-06-23T21:31:57.867501Z"}, {"uuid": "97bb23c6-dfff-4668-8273-deb4ad808a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56815", "type": "seen", "source": "https://bsky.app/profile/r-redteamsec.bsky.social/post/3mozte4uvvb2k", "content": "From CRTO lab finding to CVE-2026-56815", "creation_timestamp": "2026-06-24T11:39:31.685434Z"}, {"uuid": "295f8b6d-409a-4ab9-9baf-f8f21eeb174a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56815", "type": "seen", "source": "https://t.me/hacking_Attack/187921", "content": "From CRTO lab finding to CVE-2026-56815\nhttps://www.reddit.com/r/redteamsec/comments/1ue9fhz/from_crto_lab_finding_to_cve202656815/\n\nIn my CRTO retrospective posted here a few weeks ago, I mentioned finding and reporting two security issues in the lab platform. One of them is now fixed and public, so this is the technical follow-up. I got declined by one CNA on scope, rejected twice by GitHub as \u201cappears to be a test\u201d, then MITRE assigned CVE-2026-56815. The original post still stands as the timeline of how weirdly hard it was to get there.    submitted by    /u/blahmemeblah  (https://www.reddit.com/user/blahmemeblah) \n [link] (https://payloadforge.io/beyond-crto-pwnlift)   [comments] (https://www.reddit.com/r/redteamsec/comments/1ue9fhz/from_crto_lab_finding_to_cve202656815/)", "creation_timestamp": "2026-09-01T20:00:07.587768Z"}, {"uuid": "3705e743-f53a-4761-9990-92c07764c0c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56815", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/187921", "content": "From CRTO lab finding to CVE-2026-56815\nhttps://www.reddit.com/r/redteamsec/comments/1ue9fhz/from_crto_lab_finding_to_cve202656815/\n\nIn my CRTO retrospective posted here a few weeks ago, I mentioned finding and reporting two security issues in the lab platform. One of them is now fixed and public, so this is the technical follow-up. I got declined by one CNA on scope, rejected twice by GitHub as \u201cappears to be a test\u201d, then MITRE assigned CVE-2026-56815. The original post still stands as the timeline of how weirdly hard it was to get there.    submitted by    /u/blahmemeblah  (https://www.reddit.com/user/blahmemeblah) \n [link] (https://payloadforge.io/beyond-crto-pwnlift)   [comments] (https://www.reddit.com/r/redteamsec/comments/1ue9fhz/from_crto_lab_finding_to_cve202656815/)", "creation_timestamp": "2026-09-02T01:00:21.295768Z"}]}