{"vulnerability": "cve-2026-44182", "sightings": [{"uuid": "a884bf8c-3911-4360-9084-317a56254d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44182", "type": "published-proof-of-concept", "source": "https://github.com/jupyter-server/enterprise_gateway/security/advisories/GHSA-cfw7-6c5v-2wjq", "content": "", "creation_timestamp": "2026-06-03T02:54:53.000000Z"}, {"uuid": "b9372aaf-d324-4234-953a-3f23fb0f0003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44182", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116726974749666744", "content": "Posted yesterday.\nThis relates to CVE-2026-44182, CVE-2026-44181, and CVE-2026-44180.\nOrca: Critical Jupyter Enterprise Gateway Vulnerabilities Enable Full Kubernetes Cluster Takeover https://orca.security/resources/blog/jupyter-enterprise-gateway-vulnerabilities/ #Kubernetes #infosec #vulnerability #opensource", "creation_timestamp": "2026-06-10T17:25:03.417577Z"}, {"uuid": "dc30a78e-cb57-4c0f-a6c6-61eb8b229fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44182", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqseuovgok2l", "content": "CVE-2026-44182 - jupyter_enterprise_gateway\nAttackers can inject malicious data into Kubernetes manifests, potentially creating unauthorized resources like privileged pods. This is possible because Jupyter\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jupyterserver #pip #CVE #infosec", "creation_timestamp": "2026-07-16T23:22:06.672017Z"}, {"uuid": "1ec89252-9df1-449b-8de0-973c34e13358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44182", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsiwhveh32n", "content": "CVE-2026-44182 - Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering\nCVE ID : CVE-2026-44182\n \n Published : July 16, 2026, 11:16 p.m. | 18\u00a0minutes ago\n \n Description : Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels ac...", "creation_timestamp": "2026-07-17T00:34:41.356264Z"}, {"uuid": "e58caf69-d4ba-4559-81c9-cb76adb54516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44182", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116933435409691310", "content": "CVE-2026-44182: CRITICAL YAML injection in jupyter-server enterprise_gateway <3.3.0 \ud83d\udea8 Untrusted env vars in manifests can let attackers create/modify Kubernetes resources, incl. privileged pods. Upgrade to 3.3.0+ ASAP. https://radar.offseq.com/threat/cve-2026-44182-cwe-74-improper-neutralization-of-s-6b0aef4923a88d9e #OffSeq #CVE202644182 #Kubernetes", "creation_timestamp": "2026-07-17T04:30:25.986752Z"}, {"uuid": "cfdb3c5b-a9ce-41f7-8c50-b300f45483bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-44182", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqsw42qojn2c", "content": "jupyter-server enterprise_gateway <3.3.0 hit by CRITICAL YAML injection (CVE-2026-44182). Attackers can create privileged Kubernetes pods. Upgrade to 3.3.0+ now. https://radar.offseq.com/threat/cve-2026-44182-cwe-74-improper-neutralization-of-s-6b0aef4923a88d9e #OffSeq #CVE202644182 #Kubernetes", "creation_timestamp": "2026-07-17T04:30:27.691187Z"}]}