{"vulnerability": "cve-2026-4897", "sightings": [{"uuid": "84832968-e6a1-4f51-9086-6fc7962fc63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4897", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mi73cjshg52r", "content": "", "creation_timestamp": "2026-03-29T11:48:45.541580Z"}, {"uuid": "b0a5fd15-995a-4c8d-8a2a-ad9e26033feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4897", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhy5xpk5qr25", "content": "", "creation_timestamp": "2026-03-26T17:47:45.450102Z"}, {"uuid": "1a9a9712-4a67-44f8-a927-2aeacacbbea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4897", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tlhrxnc2b", "content": "", "creation_timestamp": "2026-04-09T12:45:08.925148Z"}, {"uuid": "8ae23c8d-4de5-455e-a07e-5050785864b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48972", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtrmcxtdz2r", "content": "\ud83d\udfe0 CVE-2026-48972 - High (7.5)\n\nImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48972/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-27T15:01:58.098943Z"}, {"uuid": "2f82df88-6e49-4269-8bd7-48bb31eddbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48979", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojfmgmp232z", "content": "CVE-2026-48979 - PHP Standard Library: HTTP/2 server-side missing content-length validation enables request smuggling\nCVE ID : CVE-2026-48979\n \n Published : June 17, 2026, 8:43 p.m. | 59\u00a0minutes ago\n \n Description : PHP Standard Library (PSL) is set of APIs covering async, col...", "creation_timestamp": "2026-06-17T22:51:06.018972Z"}, {"uuid": "d5c02c67-1019-4a69-8c28-4ec592530ab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48979", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moncap53le2e", "content": "CVE-2026-48979 - HTTP/2 request smuggling in PHP standard library (PSL). Unvalidated DATA frame bytes allow content overflow. CVSS 7.5. No patch yet; disable PSL H2 servers or upgrade if fix released. #CVE #PHP #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48979/", "creation_timestamp": "2026-06-19T12:01:26.020687Z"}, {"uuid": "1d5262ba-d12d-437d-9aa4-8ae9e782f12c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48970", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mov6jlwa6l2v", "content": "CVE-2026-48970 really-simple-ssl (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-22T15:16:08.317926Z"}, {"uuid": "2a981e57-5582-473c-96d7-070250db1603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48970", "type": "seen", "source": "https://t.me/OpsShadowStrik3/238", "content": "\ud83c\uddfa\ud83c\uddf8 Jeppesen Sanderson, Inc. Has Been Owned By TheSweetNight X #OpsShadowStrike\n\nTarget: https://taam[.]jeppesen[.]com\n\nAtt4ck: CVE-2026-48970\n\n\ud83e\udd1d [Collaboration] \nTengkorakCyberCrew \u2022 MalaysiaH*cktivist \u2022\nEagleCyberCrew \u2022 CyberActivistMalaysia \u2022 AskarBadai \u2022 TheSweetNight \u2022 Noheartz \n\n[Supporters] \n- Jaring - QueenOfTheDarkness - John - D3ath - K16 - KaytoKID - \nSuh4iryil_31 - krypsec1x1 - AnonymousMatrix - AtomicSamurai - Reporter -\n Gengster\n\n#OpIsra3l\n#OpInd1a\n#TakeDownEveryZi0nistPuppet\n#SavePalestine\n#StandWithPalestine\n#OpJerusalem\n#OpsShadowStrike\n#NoMoreVictimCardForJ3ws\n\n\n [Disclaimer]\nThis\n content is provided to raise awareness about security \nvulnerabilities.We will not be liable for any damages, loss of data, or \nlegal action arising from the use or misuse of the information in this \nmaterial.intended for educational purposes only.", "creation_timestamp": "2026-06-23T02:27:53.000000Z"}, {"uuid": "5e8eb241-4291-4c23-a838-57948a4f1877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48974", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117398529807718653", "content": "CVE-2026-48974 HomeBox: any authenticated user can force other accounts into their group, leaking names and emails. CVSS 5.4. Patch under review, so restrict access now. https://www.valtersit.com/cve/CVE-2026-48974/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-10-07T07:50:03.374389Z"}]}