{"vulnerability": "cve-2026-4878", "sightings": [{"uuid": "2d386485-83ab-4b34-b787-f40935b28ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhcqfm6j26", "content": "", "creation_timestamp": "2026-04-14T13:10:07.654303Z"}, {"uuid": "93ec91fe-a421-4690-b6f5-0ab0f59aa545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3ms4z67gzeb25", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-4878](https://access.redhat.com/errata/RHSA-2026:12423)\nA flaw was found in libcap. A l...\nhttps://access.redhat.com/errata/RHSA-2026:12423 #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-08-02T22:17:09.719952Z"}, {"uuid": "3acd8788-cb90-4a59-a768-bb4d3ec33141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3ms4nkhrq6k25", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-4878 \u0432 libcap: \u043a\u0430\u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 Time-of-Check-to-Time-of-Use (TOCTOU)\n\n\n\nhttps://kripta.biz/posts/A129D52E-2546-4098-BDB0-A2BB8906D06D", "creation_timestamp": "2026-08-02T18:49:16.005476Z"}, {"uuid": "eebdf0ae-913d-4063-9126-ea6fc6dd55da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3ms4nkr3tlp2b", "content": "CVE-2026-4878: \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-libcap \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05dc\u05d0 \u05de\u05d5\u05e8\u05e9\u05d9\u05dd \u05dc\u05e0\u05e6\u05dc \u05ea\u05e7\u05d5\u05e4\u05ea \u05d1\u05d3\u05d9\u05e7\u05d4 \u05dc\u05d6\u05de\u05df (TOCTOU) \u05d5\u05dc\u05d4\u05e9\u05d9\u05d2 \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d2\u05d1\u05d5\u05d4\u05d5\u05ea\n\n\n\nhttps://khesef.xyz/posts/7D3F3886-BC16-456B-BAC3-B5C6D00F9B5A", "creation_timestamp": "2026-08-02T18:49:25.767394Z"}, {"uuid": "db7254f2-c2b3-424d-ae56-9edf4ae91b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48784", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtaxwk33y23", "content": "\ud83d\udd10 CVE-2026-48784: UrlGenerator Encoding Skips Every Other Chained ../ or ./: Generated URL Collapses Off-Route\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48784-urlgenerator-encoding-skips-every-other-chained-or-generated-url-collapses-off-route", "creation_timestamp": "2026-05-27T10:04:13.294454Z"}, {"uuid": "85ff01c7-f163-4ef3-8bbc-d2a49b474bbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48784", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h", "content": "\ud83d\udd17 CVE : CVE-2026-48489, CVE-2026-48736, CVE-2026-48747, CVE-2026-48760, CVE-2026-48761, CVE-2026-48784", "creation_timestamp": "2026-05-27T14:35:08.840628Z"}, {"uuid": "fa9ad410-5fbc-464a-902b-69a8b91c1922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48785", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mo665pux3s2w", "content": "\ud83d\udc27 Proteja seu Apptainer no Fedora! Script + mitiga\u00e7\u00e3o + comandos reais para verificar e corrigir a falha CVE-2026-48785. Conte\u00fado perene: \u00fatil por anos.  Saiba mais: -> tinyurl.com/ymky4h28  #Fedora", "creation_timestamp": "2026-06-13T11:39:48.380992Z"}, {"uuid": "7f203008-56b1-4347-b394-8fa9bff01a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48780", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mog67gafbm25", "content": "\ud83d\udfe0 CVE-2026-48780 - High (8.2)\n\nForem is open source software for building communities. Prior to commit a2ab6d4, a maliciously cr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48780/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T16:00:31.108978Z"}, {"uuid": "ff9483d0-835b-49b5-947c-f717c04c4765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48780", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogf2rqlzg2c", "content": "CVE-2026-48780 - Forem vulnerable to bypass of email address domain restrictions\nCVE ID : CVE-2026-48780\n \n Published : June 16, 2026, 3:16 p.m. | 1\u00a0hour, 52\u00a0minutes ago\n \n Description : Forem is open source software for building communities. Prior to commit a2ab6d4, a malicio...", "creation_timestamp": "2026-06-16T18:03:10.686368Z"}, {"uuid": "38fa3e06-7edd-427c-a026-4db2c573c100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48788", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogyvk4rbf2f", "content": "CVE-2026-48788 - Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing\nCVE ID : CVE-2026-48788\n \n Published : June 16, 2026, 10:29 p.m. | 1\u00a0hour, 3\u00a0minutes ago\n \n Description : Remark42 is a self-hosted comment engine for blogs, articles, or any other p...", "creation_timestamp": "2026-06-16T23:58:10.425749Z"}, {"uuid": "bee121c0-7248-4192-a00f-940cd52ef817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48781", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogz6imvsz26", "content": "CVE-2026-48781 - Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery\nCVE ID : CVE-2026-48781\n \n Published : June 16, 2026, 9:31 p.m. | 2\u00a0hours, 1\u00a0minute ago\n \n Description : Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the S...", "creation_timestamp": "2026-06-17T00:03:10.891073Z"}, {"uuid": "4178373b-50ab-499b-a7ab-c75d5428c7af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogznfyenc2x", "content": "CVE-2026-48783 - Postiz has an unauthenticated billing-enforcement bypass via /public/modify-subscription\nCVE ID : CVE-2026-48783\n \n Published : June 16, 2026, 9:38 p.m. | 1\u00a0hour, 54\u00a0minutes ago\n \n Description : Postiz is an AI social media scheduling tool. Versions prior to 2...", "creation_timestamp": "2026-06-17T00:11:30.602099Z"}, {"uuid": "293dcc04-fd0a-4aaf-9d55-678d1a8a8cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogzzvej3z22", "content": "CVE-2026-48782 - pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)\nCVE ID : CVE-2026-48782\n \n Published : June 16, 2026, 10:49 p.m. | 43\u00a0minutes ago\n \n Description : Pydantic AI is a Python agent...", "creation_timestamp": "2026-06-17T00:18:29.322657Z"}, {"uuid": "542cd58d-f8a8-465d-99f0-93cf1a4577d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48787", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moodetdjam2g", "content": "CVE-2026-48787 - gin-vue-admin vulnerable to RCE\nCVE ID : CVE-2026-48787\n \n Published : June 19, 2026, 7:46 p.m. | 1\u00a0hour, 56\u00a0minutes ago\n \n Description : gin-vue-admin is an AI-assisted basic development platform. In version 2.9.1, an authenticated attacker with access to the...", "creation_timestamp": "2026-06-19T21:54:18.158597Z"}, {"uuid": "76379a7c-b178-444f-916c-88c99e1efd93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48788", "type": "seen", "source": "https://gist.github.com/alon710/89044faa74c1d9de479703a9098fa939", "content": "# CVE-2026-48788: CVE-2026-48788: Cross-Site Scripting and Content-Type Spoofing in Remark42 Image Proxy\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-06-26\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48788\n\n## Summary\nA critical-severity Cross-Site Scripting (XSS) and Content-Type spoofing vulnerability in Remark42 (versions 1.6.0 through 1.15.0) allows remote attackers to execute arbitrary client-side script code via a crafted image proxy request.\n\n## TL;DR\nRemark42 is vulnerable to an interpretation conflict where a malicious remote server spoofing a png content-type header can bypass download filters, forcing Remark42's image proxy to serve executable HTML payloads.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-436, CWE-79\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 8.2 (High)\n- **EPSS Score**: 0.00251\n- **Exploit Status**: PoC\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Remark42 Comment Engine\n- **remark42**: >= 1.6.0, < 1.16.0 (Fixed in: `1.16.0`)\n\n## Mitigation\n\n- Upgrade to version 1.16.0 or higher\n- Enforce X-Content-Type-Options: nosniff header on reverse proxies\n- Disable the image proxy feature if not strictly required\n\n**Remediation Steps:**\n1. Update the Remark42 container image to tag v1.16.0 or higher\n2. Clear any front-end CDN caches associated with /api/v1/img\n3. Verify the presence of X-Content-Type-Options headers in proxy responses\n\n## References\n\n- [NVD CVE-2026-48788 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-48788)\n- [GHSA-4c8j-mgm4-qqvp Advisory](https://github.com/umputun/remark42/security/advisories/GHSA-4c8j-mgm4-qqvp)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48788) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-26T19:42:06.282996Z"}, {"uuid": "e0032036-4f3b-4bda-8ae2-e0cc2dc19c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48788", "type": "published-proof-of-concept", "source": "https://github.com/umputun/remark42/security/advisories/GHSA-4c8j-mgm4-qqvp", "content": "", "creation_timestamp": "2026-06-26T20:35:05.391662Z"}, {"uuid": "d5fd934f-ca4d-46c7-8c05-56dd26bd4fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T06:56:42.006018Z"}, {"uuid": "4f07483a-aa75-4ba8-85dd-041779bfa8c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpkug7wr2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-4878 \u0432 libcap: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/94DDFEA8-8A81-41CC-B46F-E86CB355CDC7", "creation_timestamp": "2026-07-02T09:24:57.595061Z"}, {"uuid": "ad81f241-e568-4c85-a720-6379374e0d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcibht6h62x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-4878 \u0432 libcap: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0E093D72-9926-462B-9EA9-F43AA738E56F", "creation_timestamp": "2026-07-10T15:40:20.538068Z"}, {"uuid": "4860c3db-75f6-4ad0-91c1-b6c37a36e593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4878", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrj2tm6y2y2o", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-4878](https://access.redhat.com/errata/RHSA-2026:12423)\nA flaw was found in libcap. A l...\nhttps://access.redhat.com/errata/RHSA-2026:12423 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-25T23:53:46.842401Z"}]}