{"vulnerability": "cve-2026-1005", "sightings": [{"uuid": "e57f87e1-e026-405e-8a1f-988efa500302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1005", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhgmozfhv52n", "content": "", "creation_timestamp": "2026-03-19T18:23:24.464737Z"}, {"uuid": "1b0c4d8f-2958-4ff7-8e9d-e559bfba0a3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-10057", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10942-2b78b-2.html", "content": "", "creation_timestamp": "2026-05-29T01:15:00.000000Z"}, {"uuid": "97757fbc-16d3-4842-a1e5-8cdffe48ec52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-10058", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10942-2b78b-2.html", "content": "", "creation_timestamp": "2026-05-29T01:15:00.000000Z"}, {"uuid": "aa992c88-31d4-4ee5-a346-9473dd4f5188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10059", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bxonml2lzenjs", "content": "CVE-2026-10059 - Cluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via clustercurator serviceaccount token\nCVE ID : CVE-2026-10059\n \n Published : Aug. 5, 2026, 9:18 a.m. | 31\u00a0minutes ago\n \n Description : A fl...", "creation_timestamp": "2026-08-05T10:16:50.642764Z"}, {"uuid": "12c15ee4-49d3-4a5a-bd1d-eaad9e0c73df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10059", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msdcmcvyui2l", "content": "CVE-2026-10059\nA security flaw in the Multicluster Engine for Kubernetes allows a tenant administrator with limited permissions to gain full control over the cluster. This could happen if an attacker creates a special type of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-05T10:22:05.576680Z"}, {"uuid": "adeca3c6-ff67-44a2-96b6-515b5009a1c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10056", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mn4hshnjrt27", "content": "\ud83d\udfe0 CVE-2026-10056 - High (7.5)\n\nCORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10056/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-31T02:00:24.801361Z"}, {"uuid": "9ed2dfc2-d2d2-4bc0-9a48-3b29afea3cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10059", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msdggljkwv2u", "content": "Multicluster Engine for Kubernetes ClusterCurator controller\u306b\u8106\u5f31\u6027\u3002Namespace\u6a29\u9650\u3092\u6301\u3064\u30c6\u30ca\u30f3\u30c8\u7ba1\u7406\u8005\u304cClusterCurat\u2026\nCVE-2026-10059 CVSS 9.1 | CRITICAL", "creation_timestamp": "2026-08-05T11:30:28.722334Z"}, {"uuid": "496d64c9-8db6-471b-b3dc-4e965f4044dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10050", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msmm66wcux2o", "content": "\ud83d\udccc CVE-2026-10050 - In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes.\n\n\n\nThis was done because the initia... https://www.cyberhub.blog/cves/CVE-2026-10050", "creation_timestamp": "2026-08-09T03:07:07.252728Z"}, {"uuid": "14a4a089-ce35-4c61-8706-869148d9c75c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpqgb2rrz72w", "content": "CVE-2026-10055 - Eclipse Theia Request Service Server-Side Request Forgery\nCVE ID : CVE-2026-10055\n \n Published : July 3, 2026, 10:30 a.m. | 42\u00a0minutes ago\n \n Description : In Eclipse Theia since version 1.26.0, the backend /services/request-service RPC accepts an attacker-con...", "creation_timestamp": "2026-07-03T11:16:24.121212Z"}, {"uuid": "7ef6a600-a3a3-467a-9125-91de9214296a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10054", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpqgjz7j5523", "content": "CVE-2026-10054 - Eclipse Theia: Insecure WebSocket Terminal Access\nCVE ID : CVE-2026-10054\n \n Published : July 3, 2026, 10:11 a.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : In affected versions of Eclipse Theia (1.8.1 and later), the browser backend exposes privileged terminal ...", "creation_timestamp": "2026-07-03T11:21:24.470387Z"}, {"uuid": "c9f72b48-f972-4b6b-b866-91f9103533a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10055", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116855932778535722", "content": "Server-Side Request Forgery (SSRF) in Eclipse Theia 1.26.0 (CVE-2026-10055, HIGH, CVSS 8.5). Attackers with access to the service connection can target internal resources. Restrict access now. https://radar.offseq.com/threat/cve-2026-10055-cwe-918-server-side-request-forgery-66116bce3c83a4f6 #OffSeq #SSRF #EclipseTheia #Cybersecurity", "creation_timestamp": "2026-07-03T12:00:29.708411Z"}, {"uuid": "fd93f6db-c9d4-470d-b877-f5341e8179c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10055", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mpqipwypqs2t", "content": "SSRF flaw (HIGH, CVE-2026-10055) in Eclipse Theia 1.26.0 lets attackers reach internal endpoints if service is exposed to untrusted users. Restrict access until a fix is available. https://radar.offseq.com/threat/cve-2026-10055-cwe-918-server-side-request-forgery-66116bce3c83a4f6 #OffSeq #SSRF #E...", "creation_timestamp": "2026-07-03T12:00:33.050505Z"}, {"uuid": "689fbcc8-a191-4247-a0f2-9d7665b62ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10055", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mprgw76fnj2k", "content": "\ud83d\udfe0 CVE-2026-10055 - High (8.5)\n\nIn Eclipse Theia since version 1.26.0, the backend /services/request-service RPC accepts an attac...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10055/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-03T21:00:54.065997Z"}, {"uuid": "6d1433a5-93bb-40ef-88d2-061d4bb52041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10055", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprsilk3ai2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10055 \u0432 Eclipse Theia: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FE5E6AEB-0297-4879-99FE-002B99307732", "creation_timestamp": "2026-07-04T00:28:01.914759Z"}, {"uuid": "b5f4348e-99f7-4bfa-b818-2945c39ec717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10054", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprsjpvlng2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10054 \u0432 Eclipse Theia: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B556CBA8-B15A-4858-8150-5CE72D49BC10", "creation_timestamp": "2026-07-04T00:28:39.278374Z"}, {"uuid": "b034bfb7-48f1-4fea-953e-a2198963237e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10054", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpwl7evzoe2d", "content": "\ud83d\udfe0 CVE-2026-10054 - High (8.8)\n\nIn affected versions of Eclipse Theia (1.8.1 and later), the browser backend exposes privileged t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10054/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-05T22:00:55.728905Z"}, {"uuid": "3a1d7777-f324-4930-9c40-04442aca8eb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10051", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2k53gkmh2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10051 \u0432 Eclipse Jetty: \u0443\u0433\u0440\u043e\u0437\u0430 HTTP/1.1 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/10691D1C-6A71-474A-B841-9FB449FFEF1F", "creation_timestamp": "2026-07-20T05:17:34.800028Z"}, {"uuid": "9c03b2a1-516c-4874-8b96-87453b2adb4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10051", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mr2k57hgfq2c", "content": "\u6df1\u5165\u89e3\u6790Eclipse Jetty HTTP/1.1\u5934\u90e8\u6ce8\u5165\u6f0f\u6d1e(CVE-2026-10051)\u53ca\u5176\u5b89\u5168\u9632\u62a4\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/CA2DC5D5-D261-4F57-A1FE-51A7519D39DF", "creation_timestamp": "2026-07-20T05:17:38.961569Z"}, {"uuid": "8156ca16-ab82-4ec4-8f61-bf7224fbcb63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-10050", "type": "published-proof-of-concept", "source": "https://github.com/jetty/jetty.project/security/advisories/GHSA-2fvj-hgj9-j2gr", "content": "", "creation_timestamp": "2026-07-23T00:35:03.073154Z"}]}