{"vulnerability": "cve-2026-49952", "sightings": [{"uuid": "0e55c864-13e9-437b-81f2-d449b923fcd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-49952.yaml", "content": "", "creation_timestamp": "2026-07-31T00:00:05.504345Z"}, {"uuid": "29733a91-66dd-4239-9f9c-c12c4834fa5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-49952.yaml", "content": "", "creation_timestamp": "2026-08-01T00:00:06.684431Z"}, {"uuid": "fa7d6474-22cc-4abc-bf75-9798e94d6d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moe4bl2zhh2j", "content": "\ud83d\udea8 CRITICAL ALERT: CVE-2026-49952\n\nCVSS 9.1/10\n\n\ud83d\udccb WHAT IT IS:\nDiscuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to gain unauthorized access to database backup and restore functionality by exploiting a shared cr", "creation_timestamp": "2026-06-15T20:20:35.420220Z"}, {"uuid": "4607a7ac-6853-4c8a-914b-dde002107dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe5sedrap22", "content": "CVE-2026-49952 - Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle\nCVE ID : CVE-2026-49952\n \n Published : June 15, 2026, 6:43 p.m. | 58\u00a0minutes ago\n \n Description : Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability...", "creation_timestamp": "2026-06-15T20:47:52.368807Z"}, {"uuid": "598c5cb3-de82-463f-9a44-34c26952e1c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "seen", "source": "https://t.me/GithubRedTeam/89268", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49952\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a passwa11\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 09:05:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nChaining Security Bugs in Discuz! X5.0: from Race Condition to Pre-Auth RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:24.670996Z"}, {"uuid": "99ae0d42-a2f0-47c5-b17f-70ec508e9ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "seen", "source": "https://t.me/GithubRedTeam/89268", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49952\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a passwa11\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 09:05:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nChaining Security Bugs in Discuz! X5.0: from Race Condition to Pre-Auth RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:40.136529Z"}, {"uuid": "e95563d3-f748-4b7e-be00-c71d2c5e75b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89268", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49952\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a passwa11\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 09:05:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nChaining Security Bugs in Discuz! X5.0: from Race Condition to Pre-Auth RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:08.095425Z"}, {"uuid": "74a828fa-be98-4fa8-864d-5fd4dca56c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "seen", "source": "https://t.me/GithubRedTeam/95010", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Discuz-X5.0-Authentication-Bypass-Exploit-Framework\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CerberusMrXi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 18:49:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDiscuz! X5.0 Authentication Bypass Exploit Framework (CVE-2026-49952) - Critical vulnerability allowing unauthenticated database backup access via UC_KEY encryption oracle token reuse. CVSS 9.1. Full-featured tool with version detection, multi-payload attacks, interactive shell, and automated exploitation. Authorized testing only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T20:00:04.142228Z"}, {"uuid": "e368c7c9-a5be-46f0-aa67-69b7cbfed252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "seen", "source": "Telegram/7a9rM5ns0y14XDgXZyurQ1oDS3LIYmiCMbM668oDFSCiWuE", "content": "", "creation_timestamp": "2026-07-24T21:00:03.816484Z"}, {"uuid": "9d21c508-6a11-45d5-9fc1-747f2919d662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrgfqfluxe2j", "content": "\ud83e\udd16 CVE-2026-49952 (CVSS 9.1): Critical auth bypass in Discuz! X5.0 via UC_KEY oracle token reuse. Unauthenticated DB dump. PoC exploit published.\n\nhttps://github.com/CerberusMrXi/Discuz-X5.0-Authentication-Bypass-Exploit-Framework", "creation_timestamp": "2026-07-24T22:30:51.125191Z"}, {"uuid": "b7982eb7-302d-47a1-a2e2-5462b41ad23f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "seen", "source": "Telegram/g675v-UH8DF27WnjgWKKSkETruqTm270nowLOMEt8RLgjhY", "content": "", "creation_timestamp": "2026-07-25T00:00:09.063246Z"}, {"uuid": "b3eda24b-0a34-4ff2-9f4b-dfff57699180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "published-proof-of-concept", "source": "Telegram/7a9rM5ns0y14XDgXZyurQ1oDS3LIYmiCMbM668oDFSCiWuE", "content": "", "creation_timestamp": "2026-07-25T00:00:09.392975Z"}, {"uuid": "34d9bbb5-dde8-4276-925e-d5c77d33461b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95010", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Discuz-X5.0-Authentication-Bypass-Exploit-Framework\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CerberusMrXi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-24 18:49:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDiscuz! X5.0 Authentication Bypass Exploit Framework (CVE-2026-49952) - Critical vulnerability allowing unauthenticated database backup access via UC_KEY encryption oracle token reuse. CVSS 9.1. Full-featured tool with version detection, multi-payload attacks, interactive shell, and automated exploitation. Authorized testing only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-25T00:00:09.473512Z"}, {"uuid": "1571c26b-697d-47a9-aa31-b8bbf27da5d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "published-proof-of-concept", "source": "Telegram/g675v-UH8DF27WnjgWKKSkETruqTm270nowLOMEt8RLgjhY", "content": "", "creation_timestamp": "2026-07-26T00:00:47.669523Z"}, {"uuid": "de485e55-3d8b-4c87-afbd-a68f9bb1d075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-49952.yaml", "content": "", "creation_timestamp": "2026-07-29T09:00:04.795684Z"}, {"uuid": "7b00b4b9-db5d-4ee4-acd1-b55a04e376ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49952", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-49952.yaml", "content": "", "creation_timestamp": "2026-07-30T00:00:04.253791Z"}]}