{"vulnerability": "cve-2026-4671", "sightings": [{"uuid": "c0c1a77a-7c61-4249-96ea-2529db958653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46712", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j6xxqshilthsi", "content": "CVE-2026-46712 - Misskey: Lack of proper permission checks in Direct Messaging feature\nCVE ID : CVE-2026-46712\n \n Published : Aug. 3, 2026, 9:29 p.m. | 28\u00a0minutes ago\n \n Description : Misskey is an open source, federated social media platform. Versions 2025.3.2 and later, but ...", "creation_timestamp": "2026-08-03T22:26:17.088006Z"}, {"uuid": "42fe2218-a324-433d-a7d9-bbd7e91c7b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46713", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7lsq36if2b", "content": "CVE-2026-46713\nVersions of the Misskey social media platform released between 12.37.0 and 2026.5.4 are at risk of accepting fake social media activities as real. This can lead to misinformation and compromised user trust.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-03T22:56:07.827530Z"}, {"uuid": "31dae770-fbe0-4a4a-a9ff-f7a702aed11b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46716", "type": "published-proof-of-concept", "source": "https://github.com/nezhahq/nezha/security/advisories/GHSA-99gv-2m7h-3hh9", "content": "", "creation_timestamp": "2026-05-17T02:58:20.000000Z"}, {"uuid": "5d08efbd-de3e-4281-9bc7-bdb67f18d387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46717", "type": "published-proof-of-concept", "source": "https://github.com/nezhahq/nezha/security/advisories/GHSA-w4g9-mxgg-j532", "content": "", "creation_timestamp": "2026-05-17T02:58:21.000000Z"}, {"uuid": "dd9c710b-c0a3-4686-8a43-8a4850c15c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46715", "type": "published-proof-of-concept", "source": "https://github.com/pallets-eco/flask-security/security/advisories/GHSA-97r5-pg8x-p63p", "content": "", "creation_timestamp": "2026-05-17T02:47:08.000000Z"}, {"uuid": "b31545ec-a921-4f83-840a-67125d80c9f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46716", "type": "seen", "source": "https://t.me/GithubRedTeam/86474", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC_CVE-2026-46716\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HAERIN-L\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-30 02:56:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-30T03:00:04.000000Z"}, {"uuid": "501190ba-3125-405b-a28f-d97e8e97eb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46718", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnco32yoiu2o", "content": "CVE-2026-46718 - Apache Calcite: A user-controled model can load arbitrary classes, leading to code execution\nCVE ID : CVE-2026-46718\n \n Published : June 2, 2026, 10:16 a.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : Use of Externally-Controlled Input to Select Classes or Code...", "creation_timestamp": "2026-06-02T13:08:33.392173Z"}, {"uuid": "f4c6d842-37c1-4a91-a310-9d99fa8e3c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46716", "type": "seen", "source": "Telegram/X2dA0tgQQ05xP7yWCllZovOEtdq7OAXxm5s8B1aGs6Ig-EU", "content": "", "creation_timestamp": "2026-05-30T07:00:13.000000Z"}, {"uuid": "e3b6ac7e-690a-4079-a2e9-f3a23fc4543a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46716", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116740209204595402", "content": "\ud83d\udea8 CRITICAL: CVE-2026-46716 in nezhahq nezha Monitoring (<2.0.8) lets RoleMember users inject OS commands on all servers, breaching tenant isolation. Upgrade to 2.0.8+ ASAP. RCE and data exposure risk! https://radar.offseq.com/threat/cve-2026-46716-cwe-78-improper-neutralization-of-s-991afd28 #OffSeq #infosec #vuln #CVE202646716", "creation_timestamp": "2026-06-13T01:30:28.345215Z"}, {"uuid": "e32ffe2c-66f7-4c90-b77f-93106037688b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46717", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo5hwpjwq22y", "content": "\ud83d\udfe0 CVE-2026-46717 - High (7.7)\n\nNezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. F...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46717/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-13T05:02:44.253266Z"}, {"uuid": "b6c6a99f-b108-4275-8420-9d87968bd726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46710", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7wzuqcse27", "content": "CVE-2026-46710 - Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Path\nCVE ID : CVE-2026-46710\n \n Published : June 26, 2026, 8:16 p.m. | 1\u00a0hour, 28\u00a0minutes ago\n \n Description : Notepad++ is a free and open-source source code editor. From 8.9....", "creation_timestamp": "2026-06-26T22:01:20.999255Z"}, {"uuid": "74c9870a-29e4-417d-a4d4-71673d2e4a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46710", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpwzbige2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-46710 \u0432 Notepad++: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E7B47411-9210-4E0F-8A4C-E847826A26ED", "creation_timestamp": "2026-06-29T14:43:07.225079Z"}, {"uuid": "106573b2-16e1-447e-8fe7-3e411f1d7210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4671", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2mbkvv227", "content": "\ud83d\udfe0 CVE-2026-4671 - High (7.5)\n\njusthtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector ha...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-4671/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T15:01:22.971242Z"}, {"uuid": "66922478-86f3-4012-b7c8-184703a55dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4671", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtr4bk7ikr2b", "content": "justhtml 1.18.0\u672a\u6e80\u3067\u306f\u3001CSS\u30bb\u30ec\u30af\u30bf\u51e6\u7406\u3084\u30ea\u30f3\u30af\u5316\u306b\u8907\u6570\u306e\u4f4e\u6df1\u523b\u5ea6DoS\u8106\u5f31\u6027\u3002CPU/\u30e1\u30e2\u30ea\u6d88\u8cbb\u5897\u5927\u306e\u53ef\u80fd\u6027\u3002\nCVE-2026-4671 CVSS 7.5 | HIGH", "creation_timestamp": "2026-08-23T15:31:09.200586Z"}, {"uuid": "c2d1d901-589b-4378-8cb3-ae4eca1b76f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4671", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mtt7sklh442o", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-4671\n\njusthtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkification. Applications that evalua...", "creation_timestamp": "2026-08-24T11:39:40.802231Z"}]}