{"vulnerability": "cve-2026-33001", "sightings": [{"uuid": "8de7727f-204f-4df0-adb7-3c60c750f8cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33001", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116262886448432101", "content": "", "creation_timestamp": "2026-03-20T18:21:00.579271Z"}, {"uuid": "f80fbd33-78ed-46b2-a136-545d108a345a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33001", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mhj4zqho54j2", "content": "", "creation_timestamp": "2026-03-20T18:21:06.679124Z"}, {"uuid": "df69815e-7da5-484b-a9d8-46c13353a3fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33001", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mhlorq4jdy2i", "content": "", "creation_timestamp": "2026-03-21T18:44:01.784536Z"}, {"uuid": "59caedf9-3da1-4ea8-b08c-7f479e2f69d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33001", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3msqb54w5do24", "content": "\ud83d\udea8 EUVD-2026-55615\n\ud83d\udcca 6.5/10\n\n\ud83d\udcdd An incomplete patch for CVE-2026-33001 in Jenkins Project Jenkins through LTS 2.555.3 allows an authenticated remote attacker with Item/Configure permission to read...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-55615\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-08-10T14:00:18.564910Z"}, {"uuid": "185ea9fd-a191-453e-976f-48e68c809b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33001", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msr7bjomdw2m", "content": "CVE-2026-33001 is trending. Hype score 2, currently #9 on cvemon.\n\nJenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives, allowing crafted archives to write files\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-33001", "creation_timestamp": "2026-08-10T22:59:38.307165Z"}, {"uuid": "5dc3c0a3-ef8c-4c50-a79e-c749d444b2a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33001", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msrcbmtv622n", "content": "CVE-2026-19429 is trending. Hype score 2, currently #9 on cvemon.\n\nJenkins FilePath.untarFrom() in all versions, including those with the CVE-2026-33001 patch applied, validates symlink destinations but not targets. The CVE-2026-33001 fix enforces\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19429", "creation_timestamp": "2026-08-10T23:53:23.296683Z"}]}