{"vulnerability": "cve-2026-4186", "sightings": [{"uuid": "48badf58-d35a-43a4-a8ca-dce482cab101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41863", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmr36kjewo2b", "content": "\ud83d\udd17 CVE : CVE-2026-41863", "creation_timestamp": "2026-05-26T13:15:13.609220Z"}, {"uuid": "2620bbda-2133-4443-beb4-e34c2790e4b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41860", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mngo5dkpkj2f", "content": "CVE-2026-41860 - BOSH Basic-Auth Credential Disclosure via SSL Verification Bypass\nCVE ID : CVE-2026-41860\n \n Published : June 4, 2026, 1:40 a.m. | 1\u00a0hour, 33\u00a0minutes ago\n \n Description : CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA t...", "creation_timestamp": "2026-06-04T03:20:28.537749Z"}, {"uuid": "c513ad0a-4085-4aee-a250-48371878aaf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41860", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mngqeycd7q2k", "content": "\ud83d\udfe0 CVE-2026-41860 - High (8.8)\n\nCWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token req...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41860/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-04T04:00:33.931193Z"}, {"uuid": "f2fd034b-8fc6-4650-9d3b-4d7970ea93f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41860", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnhbj7o3qy25", "content": "CVE-2026-41860 - Supply chain MITM in BOSH (CWE-326). Hard-coded SSL verify none allows credential theft and token hijacking. CVSS 8.8. No patch yet for all versions before v282.1.9. Update to v282.1.9+ immediately. #CVE #BOSH #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-41860/", "creation_timestamp": "2026-06-04T09:07:08.316951Z"}, {"uuid": "b2630a3c-a1ec-46eb-b86c-0d6937f3980a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41862", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaoi3n5f2d", "content": "\ud83d\udd17 CVE : CVE-2026-40985, CVE-2026-40986, CVE-2026-40987, CVE-2026-40992, CVE-2026-40994, CVE-2026-40995, CVE-2026-40996, CVE-2026-40997, CVE-2026-40998, CVE-2026-40999, CVE-2026-41000, CVE-2026-41862", "creation_timestamp": "2026-06-11T12:40:07.962170Z"}, {"uuid": "ea4f0514-294e-438d-9712-21723f2ee9f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41862", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moymtyjg6x2a", "content": "CVE-2026-41862 - Spring Statemachine Deserialisation Vulnerability\nCVE ID : CVE-2026-41862\n \n Published : June 23, 2026, 8:59 p.m. | 2\u00a0hours, 11\u00a0minutes ago\n \n Description : Spring Statemachine's Kryo-based persistence backends (JPA, MongoDB, Redis and ZooKeeper) deserialise p...", "creation_timestamp": "2026-06-24T00:10:28.175394Z"}, {"uuid": "7216c147-89fa-4558-bedb-31869a93842f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41862", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moyn7dmgrb2l", "content": "CVE-2026-41862 - Spring Statemachine Deserialisation Vulnerability\nCVE ID : CVE-2026-41862\n \n Published : June 23, 2026, 8:59 p.m. | 2\u00a0hours, 45\u00a0minutes ago\n \n Description : Spring Statemachine's Kryo-based persistence backends (JPA, MongoDB, Redis and ZooKeeper) deserialise p...", "creation_timestamp": "2026-06-24T00:16:48.947826Z"}, {"uuid": "f8cdfe80-611b-4d7a-be5f-19fa3244ec37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41869", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6qdsomat2t", "content": "CVE-2026-41869 - apache nutch\nThe Nutch web service (versions 1.10 to 1.22) does not check who can send commands, so anyone who can reach the API could shut down the service or interrupt running\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachenutch #apachefoundation #CVE #infosec", "creation_timestamp": "2026-09-10T19:00:08.396272Z"}]}