{"vulnerability": "cve-2026-25555", "sightings": [{"uuid": "da5fccc7-5135-47cf-81f4-6ad6be6fcf33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25555", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnsgrf6fel23", "content": "CVE-2026-25555 - OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header\nCVE ID : CVE-2026-25555\n \n Published : June 8, 2026, 5:16 p.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API k...", "creation_timestamp": "2026-06-08T19:40:54.373974Z"}, {"uuid": "e87c147a-77af-4f56-ad96-3a5098a2edab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25555", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-25555.yaml", "content": "", "creation_timestamp": "2026-06-16T03:30:23.000000Z"}, {"uuid": "b92cea3d-586b-41a2-aa2f-2eefc69a5c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25555", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnwzjsrp2l", "content": "\ud83d\udea8  ALERT: CVE-2026-25555\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nOpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin access by supplying an empty X-Api-Key header value. Attackers can explo", "creation_timestamp": "2026-06-22T00:46:44.713793Z"}, {"uuid": "7f78f33f-3431-4902-9e9b-c7066d6f5781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25555", "type": "seen", "source": "https://t.me/GithubRedTeam/92114", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-25555\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a thecodeb0ss\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 01:48:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin access by supplying an empty X-Api-Key header value.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:11.843097Z"}, {"uuid": "ae8a88a6-1845-4efa-9b2b-17349dcea74a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25555", "type": "seen", "source": "https://t.me/GithubRedTeam/92114", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-25555\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a thecodeb0ss\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 01:48:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin access by supplying an empty X-Api-Key header value.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:20.186947Z"}, {"uuid": "d65e46c9-7a55-4de9-b6a9-a007877cbdfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25555", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92114", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-25555\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a thecodeb0ss\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 01:48:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middleware that allows unauthenticated attackers to gain admin access by supplying an empty X-Api-Key header value.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:30.047621Z"}, {"uuid": "951cab0d-1888-4bcc-8bf1-3ee07ab2a3c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25555", "type": "seen", "source": "Telegram/weN5BIEcpzWRP-culIl-ZBjR5vCD_HYHl8jd7V-2oU2RFQY", "content": "", "creation_timestamp": "2026-07-16T19:00:20.893612Z"}, {"uuid": "64fa68b7-71b5-45d4-a5e0-9a968a75c876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25555", "type": "seen", "source": "Telegram/5Cry1FJDeHbut_79LMEaf3MInVLEcfdTWn4cBcOWsJicSS4", "content": "", "creation_timestamp": "2026-07-16T19:00:20.937323Z"}, {"uuid": "faa944f1-da5f-4f60-89ae-42624588ce54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25555", "type": "seen", "source": "Telegram/weN5BIEcpzWRP-culIl-ZBjR5vCD_HYHl8jd7V-2oU2RFQY", "content": "", "creation_timestamp": "2026-07-17T00:00:37.303001Z"}, {"uuid": "1ee5b50f-92fa-41d8-a487-340cc177c823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25555", "type": "seen", "source": "Telegram/5Cry1FJDeHbut_79LMEaf3MInVLEcfdTWn4cBcOWsJicSS4", "content": "", "creation_timestamp": "2026-07-17T00:00:37.347078Z"}, {"uuid": "5ee29019-614e-4867-a0b5-65602b3f232f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25555", "type": "published-proof-of-concept", "source": "Telegram/5Cry1FJDeHbut_79LMEaf3MInVLEcfdTWn4cBcOWsJicSS4", "content": "", "creation_timestamp": "2026-07-18T00:00:23.166147Z"}, {"uuid": "8e5d7f02-2002-4b67-817b-1b4da6b6ba70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25555", "type": "published-proof-of-concept", "source": "Telegram/weN5BIEcpzWRP-culIl-ZBjR5vCD_HYHl8jd7V-2oU2RFQY", "content": "", "creation_timestamp": "2026-07-18T00:00:23.245538Z"}]}