{"vulnerability": "cve-2026-4477", "sightings": [{"uuid": "f1b84284-0566-457b-8d62-135756e0792e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44774", "type": "seen", "source": "https://bsky.app/profile/dbt3.ch/post/3mlow66ezsf2e", "content": "Traefik v2.11.46 patches CVE-2026-44774 and fixes cross-provider namespace handling in Kubernetes. Read the migration guide before upgrading. #selfhosted #homelab\n\nhttps://github.com/traefik/traefik/releases/tag/v2.11.46", "creation_timestamp": "2026-05-12T23:15:01.081981Z"}, {"uuid": "9ad3dcf7-f8a4-4e22-a586-2d7022fa74b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44775", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrowzbcq62e", "content": "CVE-2026-44775 - Kavita: No authentication at /api/Reader/image\nCVE ID : CVE-2026-44775\n \n Published : 26 mai 2026 17:27 | 35\u00a0minutes ago\n \n Description : Kavita is a cross platform reading server. Prior to 0.9.0, the ReaderController.GetImage endpoint is decorated with [Allow...", "creation_timestamp": "2026-05-26T19:08:55.497077Z"}, {"uuid": "72b0e3fe-e5e6-4d1b-93a2-10933441e4da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44776", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrpifmdkq2k", "content": "CVE-2026-44776 - Kavita: IDOR in /api/Download/*\nCVE ID : CVE-2026-44776\n \n Published : 26 mai 2026 17:29 | 32\u00a0minutes ago\n \n Description : Kavita is a cross platform reading server. Prior to 0.9.0, the download, size-check, and chapter metadata endpoints do not enforce librar...", "creation_timestamp": "2026-05-26T19:18:38.971847Z"}, {"uuid": "9ef7fcdc-d4c5-4648-9958-095151d20c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44774", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-96qj-4jj5-wcjc", "content": "", "creation_timestamp": "2026-05-11T15:10:49.000000Z"}, {"uuid": "f4121eee-b3be-4ff7-9015-67ca87585bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44772", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998", "content": "", "creation_timestamp": "2026-08-13T08:47:22.188406Z"}, {"uuid": "628e2c32-7bf8-402b-ae2e-50b16f4a94ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44772", "type": "seen", "source": "https://bsky.app/profile/thefactum.ai/post/3mst3oj5nyy2k", "content": "SAP Patches CVSS 10 Auth Bypass and Three Other Critical Flaws in August 2026 Release\n\nPublic exploit code for CVE-2026-44772 will appear within 45 days and trigger at least 500 exploitat\n\nhttps://thefactum.ai/articles/323c1146-74bb-4ee0-b649-ec7ab9124299\n\n#TheFactum #SENTINEL", "creation_timestamp": "2026-08-11T17:00:38.298870Z"}, {"uuid": "175f56fa-2662-413b-a16d-046c84f79299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44771", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mql3n7l5ug2w", "content": "CVE-2026-44771 - Missing Authorization check in SAP S/4HANA (Draft operation)\nCVE ID : CVE-2026-44771\n \n Published : July 14, 2026, 1:16 a.m. | 14\u00a0minutes ago\n \n Description : SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user...", "creation_timestamp": "2026-07-14T01:48:13.707572Z"}, {"uuid": "77f6a531-b57e-4ee5-8f40-1a3fa3bf66a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mql4yccs3r27", "content": "CVE-2026-44770 - Missing Authorization check in SAP S/4 HANA (Create Single Payment)\nCVE ID : CVE-2026-44770\n \n Published : July 14, 2026, 1:16 a.m. | 14\u00a0minutes ago\n \n Description : SAP Create Single Payment does not perform necessary authorization checks for an authenticated...", "creation_timestamp": "2026-07-14T02:12:19.621305Z"}, {"uuid": "068d93e7-03b7-4508-82ee-aa0a4c624342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44772", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvfp252kys2l", "content": "SAP\u304c\u91cd\u5927\u306a\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u304a\u3088\u3073\u30e1\u30e2\u30ea\u7834\u640d\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u9069\u7528\n\nSAP\u304c2026\u5e748\u6708\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u30c7\u30fc\u3067\u516c\u958b\u3057\u305f\u30ce\u30fc\u30c8\u306e\u3046\u30614\u3064\u306f\u3001\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u89e3\u6c7a\u3059\u308b\u3082\u306e\u3067\u3001\u305d\u306e\u4e2d\u3067\u6700\u3082\u6df1\u523b\u306a\u306e\u306fCVE-2026-58231\uff08CVSS\u30b9\u30b3\u30a210/10\uff09\u3067\u3001SAP Commerce Cloud\uff08\u30c7\u30fc\u30bf\u30cf\u30d6\u30a2\u30c0\u30d7\u30bf\uff09\u306b\u304a\u3051\u308b\u4e0d\u9069\u5207\u306a\u8a8d\u8a3c\u306e\u554f\u984c\u3067\u3059\u3002\n\n...\n\nSAP\u306f\u307e\u305f\u3001\u88fd\u9020\u7d71\u5408\u304a\u3088\u3073\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u306b\u304a\u3051\u308b2\u3064\u306e\u91cd\u5927\u306a\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-44772\uff08CVSS\u30b9\u30b3\u30a29.9/10\uff09\u304a\u3088\u3073CVE-2026-44758\uff08CVSS\u30b9\u30b3\u30a29.1/10\uff09...", "creation_timestamp": "2026-09-13T13:25:31.314731Z"}]}