{"vulnerability": "cve-2026-4804", "sightings": [{"uuid": "87cd18f5-9674-4454-a031-994f37097ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48040", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mniecjvsyh2f", "content": "CVE-2026-48040 - netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access\nCVE ID : CVE-2026-48040\n \n Published : June 4, 2026, 6:16 p.m. | 16\u00a0minutes ago\n \n Description : The netty incubator...", "creation_timestamp": "2026-06-04T19:29:45.011951Z"}, {"uuid": "4c5de49d-52d9-4e2d-adb7-dbaad9db16e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48041", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnrrjchxit2q", "content": "\ud83d\udd17 CVE : CVE-2026-48041", "creation_timestamp": "2026-06-08T13:20:09.844142Z"}, {"uuid": "370dd32b-c743-4a9d-b830-538e17234bd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48048", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msqla5euj52a", "content": "\ud83d\udfe0 CVE-2026-48048 - High (7.5)\n\nXWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hj...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48048/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T17:00:57.433646Z"}, {"uuid": "3dc5b9dd-9ea7-43c5-825e-4c82cf18342f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48048", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msqsi6nwdv2o", "content": "XWiki Platform (6.2.1\uff5e18.0.0RC1\u300117.10.13\u300117.4.9\u300116.10.17)\u3067\u3001LiveTableResults\u306e\u30de\u30af\u30ed\u306b\u7d30\u5de5\u3055\u308c\u305f\u30d1\u30e9\u30e1\u30fc\u30bf\u3092\u6e21\u3059\u3068\u3001\u30d1\u30b9\u30ef\u30fc\u2026\nCVE-2026-48048 CVSS 7.5 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-48048", "creation_timestamp": "2026-08-10T19:10:43.251537Z"}, {"uuid": "796154de-8e2c-4413-846d-5688eed2e22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4804", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpqdpnlyva2w", "content": "CVE-2026-4804 - Zakra\nCVE ID : CVE-2026-4804\n \n Published : July 3, 2026, 7:53 a.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : The Zakra theme for WordPress is vulnerable to Stored Cross-Site Scripting via post meta values in all versions up to, and including, 4.2.0. This is du...", "creation_timestamp": "2026-07-03T10:30:52.476025Z"}, {"uuid": "f1c82712-11b6-4bdc-849c-a2c496c90a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4804", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprnjmuj732d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-4804 \u0432 \u0442\u0435\u043c\u0435 Zakra \u0434\u043b\u044f WordPress: \u0443\u0433\u0440\u043e\u0437\u0430 Stored XSS \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E2EEE9DE-1C44-45CD-B9B3-FF214020F125", "creation_timestamp": "2026-07-03T22:59:07.479450Z"}, {"uuid": "21283438-71e5-4072-97cb-f85818f1c818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48046", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7sruf6cwnc4tr", "content": "CVE-2026-48046 - Streambert Vulnerable to Remote Code Execution (RCE) via Unvalidated Auto-Updater IPC Handler\nCVE ID : CVE-2026-48046\n \n Published : Aug. 11, 2026, 2:17 p.m. | 14\u00a0minutes ago\n \n Description : Streambert is a cross-platform Electron Desktop App to stream and do...", "creation_timestamp": "2026-08-11T15:12:13.071904Z"}, {"uuid": "4be55ef9-98fd-44fd-b4fd-b9ee2531772f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48046", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mssw2p47rs2r", "content": "CVE-2026-48046\nStreambert versions before 2.5.0 have a security issue that lets hackers trick the app into downloading and running malicious code. This could allow an attacker to take control of your computer. To stay safe,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-11T15:20:04.982371Z"}, {"uuid": "8524be35-cfe9-4fc8-b0cb-937249631145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48043", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcjc5vizd2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48043 \u0432 Netty: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0918A6A2-3BF9-44EB-827C-C249E4B911CF", "creation_timestamp": "2026-07-10T15:58:37.523669Z"}, {"uuid": "5c9b06fc-8afe-4177-a8a0-70a466601943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48045", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqulyhoe352b", "content": "CVE-2026-48045 - Zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood\nCVE ID : CVE-2026-48045\n \n Published : July 17, 2026, 7:17 p.m. | 21\u00a0minutes ago\n \n Description : Zeroconf is a pure Python implementation of multicast DNS servic...", "creation_timestamp": "2026-07-17T20:34:48.730978Z"}, {"uuid": "2650103f-1826-452a-9ee4-396542fa008c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48049", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquwpzspbm2i", "content": "CVE-2026-48049 - @hapi/inert: Static-file confinement bypass via sibling-prefix path\nCVE ID : CVE-2026-48049\n \n Published : July 17, 2026, 10:17 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : @hapi/inert provides static file and directory handlers for hapi.js. From 4.0.0 to 7....", "creation_timestamp": "2026-07-17T23:46:56.988033Z"}]}