{"vulnerability": "cve-2026-4498", "sightings": [{"uuid": "1ca8c0d8-f156-4a57-b7ac-53603ecad2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4498", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miyylbxgtj2o", "content": "", "creation_timestamp": "2026-04-08T19:09:11.256827Z"}, {"uuid": "53030bc2-2673-4082-8303-669e4409d84a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4498", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2h2erxn62s", "content": "", "creation_timestamp": "2026-04-09T09:00:49.952310Z"}, {"uuid": "8615eea9-d5f1-4bb1-a7b4-877ff803bf58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4498", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tlogbtp2z", "content": "", "creation_timestamp": "2026-04-09T12:45:15.411984Z"}, {"uuid": "2fbdd052-ce01-4fd8-9b79-e018dd95dd7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4498", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjg6vwbsro2t", "content": "", "creation_timestamp": "2026-04-14T01:07:07.723517Z"}, {"uuid": "37b44272-3f0c-485e-8a7d-de473b34c477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4498", "type": "seen", "source": "Telegram/ZztUGlJiiCH0mZAuu7v3RF9KN1NNH1_hWH4kt4dDN5ep1QI", "content": "", "creation_timestamp": "2026-04-08T23:32:47.000000Z"}, {"uuid": "3e8c6af0-6997-4c20-906a-afd3677af690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44987", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlfb5itfpr2n", "content": "CVE-2026-44987 - SysReptor: Privilege Escalation from User Admin to Superuser\nCVE ID : CVE-2026-44987\n \n Published : May 8, 2026, 11:16 p.m. | 1\u00a0hour, 28\u00a0minutes ago\n \n Description : SysReptor is a fully customizable pentest reporting platform. Prior to version 2026.29, users ...", "creation_timestamp": "2026-05-09T03:04:52.527253Z"}, {"uuid": "1868ca50-643a-4cbc-948f-a732185a31e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44983", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsco5lniw2k", "content": "CVE-2026-44983 - smallbitvec: Safe API Triggered Heap Buffer Overflow via Integer Overflow\nCVE ID : CVE-2026-44983\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : smallbitvec is a growable bit-vector for Rust, optimized for size. From 1.0.1 t...", "creation_timestamp": "2026-05-27T01:01:52.911504Z"}, {"uuid": "191a15fb-5bc9-41fa-bd93-73dc0b90fb9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44985", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsd3b27g32n", "content": "CVE-2026-44985 - Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication\nCVE ID : CVE-2026-44985\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : Dozzle is a realtime log viewer for docker containers. Pr...", "creation_timestamp": "2026-05-27T01:09:20.586775Z"}, {"uuid": "8e6aaddc-0db0-4458-9272-7f290ada7193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44985", "type": "published-proof-of-concept", "source": "https://github.com/amir20/dozzle/security/advisories/GHSA-j643-x8pv-8m67", "content": "", "creation_timestamp": "2026-05-06T12:29:00.000000Z"}, {"uuid": "a58ed607-4982-4206-b50c-0d5043822691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44983", "type": "published-proof-of-concept", "source": "https://github.com/servo/smallbitvec/security/advisories/GHSA-97wc-2hqc-cjgr", "content": "", "creation_timestamp": "2026-05-06T11:59:16.000000Z"}, {"uuid": "8b3e43f9-994b-4218-bff0-e5b62fde7880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44985", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motn5np3ny2s", "content": "\ud83d\udea8  ALERT: CVE-2026-44985\n\nCVSS 9.6/10\n\n\ud83d\udccb WHAT IT IS:\nDozzle is a realtime log viewer for docker containers. Prior to 10.5.2, he WebSocket upgrader for the /exec and /attach endpoints uses CheckOrigin: func(r *http.Request) bool { return true }, accepting upgrade requests from any origin. Combined wi", "creation_timestamp": "2026-06-22T00:32:33.320627Z"}, {"uuid": "5b4d8b3b-455e-46a4-9473-108b98c450f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44985", "type": "seen", "source": "https://bsky.app/profile/smit-artem.bsky.social/post/3mpwkt33ho42q", "content": "Heads up: an important security fix just landed for Amirraminfar Dozzle. Open its settings and let it update. A couple of taps now keeps your data safer. CVE-2026-44985", "creation_timestamp": "2026-07-05T21:54:02.964945Z"}, {"uuid": "20ffc410-6524-4514-bd25-b88f4ff7f258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44986", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqp2zwwfih2x", "content": "CVE-2026-44986 - penpot\nPenpot, a design tool, had a security weakness that allowed a registered user to take over any non-blocked account by using an invitation token. This meant that an attacker could gain access to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#penpot #CVE #infosec", "creation_timestamp": "2026-07-15T15:48:05.820266Z"}, {"uuid": "58cca795-a2ad-4e76-b332-51fb4c3cc78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44986", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqqurwh7u42e", "content": "CVE-2026-44986 - Critical Auth Bypass in Penpot. CVSS 9.9. Attackers can hijack any non-blocked account. Update to 2.14.5 immediately. #CVE #infosec #Penpot\n\nhttps://www.valtersit.com/cve/CVE-2026-44986/", "creation_timestamp": "2026-07-16T09:01:34.285999Z"}, {"uuid": "a8d00df6-3e1b-4d99-8fdc-fe445afc4109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44986", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116928840317268735", "content": "CVE-2026-44986 - Critical Auth Bypass in Penpot. CVSS 9.9. Attackers can hijack any non-blocked account. Update to 2.14.5 immediately. #CVE #infosec #Penpot\nhttps://www.valtersit.com/cve/CVE-2026-44986/", "creation_timestamp": "2026-07-16T09:01:50.850421Z"}, {"uuid": "2631ad4b-a543-4ca4-a505-7acae45d0deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44981", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqscsh5n662e", "content": "CVE-2026-44981 - CrowdSec LAPI: Denial of Service via Unbounded Gzip Decompression\nCVE ID : CVE-2026-44981\n \n Published : July 16, 2026, 8:16 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : CrowdSec offers crowdsourced protection against malicious IPs. From 1.7.0 until 1.7.8, ...", "creation_timestamp": "2026-07-16T22:45:06.832227Z"}]}