{"vulnerability": "cve-2026-4515", "sightings": [{"uuid": "5a87fe05-ddeb-49d8-917b-0d4487115b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45153", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxz7ebj62a", "content": "\ud83d\udd17 CVE : CVE-2026-45153, CVE-2026-45154, CVE-2026-45155, CVE-2026-45156, CVE-2026-45157, CVE-2026-45159, CVE-2026-45282, CVE-2026-45284, CVE-2026-45285, CVE-2026-45286", "creation_timestamp": "2026-05-12T14:15:29.371774Z"}, {"uuid": "96c6ecc0-310a-4c4b-bef3-dd4c66078700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45154", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxz7ebj62a", "content": "\ud83d\udd17 CVE : CVE-2026-45153, CVE-2026-45154, CVE-2026-45155, CVE-2026-45156, CVE-2026-45157, CVE-2026-45159, CVE-2026-45282, CVE-2026-45284, CVE-2026-45285, CVE-2026-45286", "creation_timestamp": "2026-05-12T14:15:29.525332Z"}, {"uuid": "2e85c7d3-e47f-470a-846a-30648e7a3e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45155", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxz7ebj62a", "content": "\ud83d\udd17 CVE : CVE-2026-45153, CVE-2026-45154, CVE-2026-45155, CVE-2026-45156, CVE-2026-45157, CVE-2026-45159, CVE-2026-45282, CVE-2026-45284, CVE-2026-45285, CVE-2026-45286", "creation_timestamp": "2026-05-12T14:15:29.735266Z"}, {"uuid": "71f7bca1-5d68-4b4b-a7d1-6a1b91eea9b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45156", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxz7ebj62a", "content": "\ud83d\udd17 CVE : CVE-2026-45153, CVE-2026-45154, CVE-2026-45155, CVE-2026-45156, CVE-2026-45157, CVE-2026-45159, CVE-2026-45282, CVE-2026-45284, CVE-2026-45285, CVE-2026-45286", "creation_timestamp": "2026-05-12T14:15:29.890229Z"}, {"uuid": "76a62970-f7df-4976-969d-8cde2f9925eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45157", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxz7ebj62a", "content": "\ud83d\udd17 CVE : CVE-2026-45153, CVE-2026-45154, CVE-2026-45155, CVE-2026-45156, CVE-2026-45157, CVE-2026-45159, CVE-2026-45282, CVE-2026-45284, CVE-2026-45285, CVE-2026-45286", "creation_timestamp": "2026-05-12T14:15:30.059905Z"}, {"uuid": "98418cca-6d91-46e2-b3e0-187333771e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45159", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnxz7ebj62a", "content": "\ud83d\udd17 CVE : CVE-2026-45153, CVE-2026-45154, CVE-2026-45155, CVE-2026-45156, CVE-2026-45157, CVE-2026-45159, CVE-2026-45282, CVE-2026-45284, CVE-2026-45285, CVE-2026-45286", "creation_timestamp": "2026-05-12T14:15:30.221046Z"}, {"uuid": "c1a7ac54-c057-44b1-88bf-14fb3e115e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45158", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mlrtadfcod2g", "content": "CRITICAL: OPNsense core < 26.1.8 hit by command injection (DHCP config) flaw \u2014 root RCE risk! Upgrade to 26.1.8+ now. https://radar.offseq.com/threat/cve-2026-45158-cwe-88-improper-neutralization-of-a-59c85f26 #OffSeq #OPNsense #Security", "creation_timestamp": "2026-05-14T03:00:32.063946Z"}, {"uuid": "00d2c60e-779b-43b8-9f35-41f15f91c896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-45158", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116570693909390630", "content": "\ud83d\udea8 CRITICAL: OPNsense core < 26.1.8 has CVE-2026-45158 \u2014 command injection in DHCP config allows root RCE. Upgrade to 26.1.8+ now to prevent full system compromise. Details: https://radar.offseq.com/threat/cve-2026-45158-cwe-88-improper-neutralization-of-a-59c85f26 #OffSeq #OPNsense #Vuln #Cybersecurity", "creation_timestamp": "2026-05-14T03:02:48.491749Z"}, {"uuid": "73244f64-acc0-4077-91e6-f0490355a044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45158", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mlrygxaxcz25", "content": "OPNsense Critical Root RCE (CVE-2026-44194 & CVE-2026-45158) Details and PoC Disclosed", "creation_timestamp": "2026-05-14T04:33:42.706120Z"}, {"uuid": "47da6487-a0ce-4013-b5f4-567c7008b076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45158", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlryv364as2n", "content": "\ud83d\udd34 CVE-2026-45158 - Critical (9.1)\n\nOPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user inpu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45158/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-14T04:46:28.611276Z"}, {"uuid": "182a28ed-55d9-4723-8f47-a7a35968d5f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45158", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlvuoqb5z42q", "content": "\ud83d\udccc CVE-2026-45158 - OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configur... https://www.cyberhub.blog/cves/CVE-2026-45158", "creation_timestamp": "2026-05-15T17:37:07.496314Z"}, {"uuid": "0a74f4e0-d4b6-4a00-9306-8abef144692b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45152", "type": "published-proof-of-concept", "source": "https://github.com/uniget-org/cli/security/advisories/GHSA-qqq4-5773-pmw5", "content": "", "creation_timestamp": "2026-05-08T05:58:32.000000Z"}, {"uuid": "66cda2d6-a516-4db3-95e4-5ef31256a268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45152", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumf5pusa2l", "content": "\ud83d\udfe0 CVE-2026-45152 - High (7.8)\n\nuniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a command inj...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45152/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-27T23:01:08.600160Z"}, {"uuid": "b0bc56c4-f6f8-4d31-b8db-058d0b2b8528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45152", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmunmy42lr2i", "content": "CVE-2026-45152 - uniget: Command Injection in tool.Check Leading to Arbitrary Code Execution\nCVE ID : CVE-2026-45152\n \n Published : May 27, 2026, 10:16 p.m. | 15\u00a0minutes ago\n \n Description : uniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a ...", "creation_timestamp": "2026-05-27T23:23:24.400363Z"}, {"uuid": "9628312a-28b2-4336-9093-e4a742920f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmzj2gvkuo2d", "content": "CVE-2026-45151 - NanoMQ: NULL Pointer Dereference\nCVE ID : CVE-2026-45151\n \n Published : May 29, 2026, 8:16 p.m. | 16\u00a0minutes ago\n \n Description : NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. In 0.24.8 and earlier, quic_stream_recv can dereference a nu...", "creation_timestamp": "2026-05-29T21:44:45.869513Z"}, {"uuid": "4a1eed68-9d2c-499a-9455-1fd520320cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45156", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnanw7diq62q", "content": "\ud83d\udfe0 CVE-2026-45156 - High (8.1)\n\nNextcloud is an open source content collaboration platform. From versions 0.3.0 to before 3.1.0, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45156/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-01T18:00:31.993693Z"}, {"uuid": "0123439f-8c2b-4cf8-81d9-1d5efd1554a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45156", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnauzfzuso2n", "content": "CVE-2026-45156 - Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC\nCVE ID : CVE-2026-45156\n \n Published : June 1, 2026, 5:17 p.m. | 1\u00a0hour, 56\u00a0minutes ago\n \n Description : Nextcloud is an open source content collaboration pl...", "creation_timestamp": "2026-06-01T20:07:35.053499Z"}, {"uuid": "15eed412-d6bf-4758-9751-f020441735ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45152", "type": "seen", "source": "https://gist.github.com/alon710/714a45d6d9776f210b84a676518696fb", "content": "# GHSA-FHGH-WQ4Q-R37X: GHSA-FHGH-WQ4Q-R37X: Remote Code Execution via Sigstore Signature Verification Bypass in uniget CLI\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/GHSA-FHGH-WQ4Q-R37X\n\n## Summary\nA high-severity logic inversion flaw in the uniget CLI completely bypasses Sigstore cryptographic signature verification on metadata files by default. If an attacker can poison the package metadata cache or repository, they can execute arbitrary OS commands under the privileges of the active user.\n\n## TL;DR\nA programming mistake in the uniget CLI reversed the check for disabling metadata signature verification. As a result, the application only verifies cryptographic signatures when the user explicitly requests to ignore them, allowing unauthenticated remote code execution via poisoned metadata in default installations.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-347\n- **Attack Vector**: Local\n- **CVSS v3.1**: 7.8\n- **Impact**: Remote Code Execution (RCE)\n- **Exploit Status**: Proof of Concept\n- **CISA KEV Status**: No\n\n## Affected Systems\n\n- uniget CLI\n- **gitlab.com/uniget-org/cli**: >= 0.27.4, < 0.28.9 (Fixed in: `0.28.9`)\n\n## Mitigation\n\n- Upgrade the uniget CLI to version 0.28.9 or later to restore default signature verification.\n- For vulnerable versions, define the UNIGET_IGNORE_METADATA_SIGNATURE environment variable to force signature checking.\n- Sanitize local cache paths and verify file permissions on ~/.cache/uniget/ to prevent unauthorized metadata tampering.\n\n**Remediation Steps:**\n1. Confirm the currently installed version by running a version check command on a trusted machine.\n2. Update the executable binary using the official vendor release channels.\n3. Remove temporary environment variable workarounds once the upgrade to version 0.28.9 is complete.\n\n## References\n\n- [GHSA-FHGH-WQ4Q-R37X: Bypass of metadata signature verification](https://github.com/advisories/GHSA-fhgh-wq4q-r37x)\n- [uniget CLI Release v0.28.9](https://github.com/uniget-org/cli/releases/tag/v0.28.9)\n- [Associated Command Injection Vulnerability (CVE-2026-45152)](https://github.com/advisories/GHSA-qqq4-5773-pmw5)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-FHGH-WQ4Q-R37X) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-17T20:32:43.412229Z"}, {"uuid": "00938ac5-8fed-4f44-999c-ae02e6a893a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45156", "type": "seen", "source": "https://t.me/GithubRedTeam/90309", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-45156-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cybertechajju\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-23 19:08:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis repository contains the Proof of Concept (PoC) exploit script for CVE-2026-45156\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:20.784861Z"}, {"uuid": "d99ee807-8163-46e2-b51f-632df67edb19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45156", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90309", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-45156-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cybertechajju\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-23 19:08:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis repository contains the Proof of Concept (PoC) exploit script for CVE-2026-45156\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:19.786763Z"}]}