{"vulnerability": "cve-2026-5274", "sightings": [{"uuid": "e2d73df0-9d39-49c4-89c6-d6c7998ee70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mih665csgb2s", "content": "", "creation_timestamp": "2026-04-01T17:01:18.716916Z"}, {"uuid": "618b2d69-f333-4eff-9c48-13b43a66f054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "0afff58d-339a-423e-b009-039eff12eb50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "d7ebc1f5-7371-4dfb-9efc-2482a364b813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0392/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "c8c4c382-75ef-458b-b407-0d1a60938be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260413", "content": "", "creation_timestamp": "2026-04-12T20:00:00.000000Z"}, {"uuid": "d9b3466d-156b-4cfc-b09d-3a13e4437d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "60ac0641-079d-4186-8b76-6af89cc90559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5274", "type": "seen", "source": "Telegram/4zYpYE5e9_2FkC7Z53Af8gCedtL6FpkxFD5yjbQn9BVECOM", "content": "", "creation_timestamp": "2026-04-01T15:25:32.000000Z"}, {"uuid": "e22ed912-11f6-4e34-9cd7-3d1e06e0190b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52747", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpwu4jxh6o2t", "content": "Two ModSecurity vulnerabilities let attackers slip past WAF rules via a multipart parser bug (CVE-2026-52747). Update to ModSecurity v3.0.16 now.\n\n#ModSecurity #WAF #WAFBypass #OWASP #CVE202652747 #CVE202652761 #Vulnerability", "creation_timestamp": "2026-07-06T00:40:23.981746Z"}, {"uuid": "0a34e971-d5f0-4b1a-9853-34f703ed8ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52747", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdonhllv32z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-52747 \u0432 ModSecurity: \u0443\u0433\u0440\u043e\u0437\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/C4FE5C0B-83B7-40FB-ABE3-99665078E03F", "creation_timestamp": "2026-07-11T03:07:05.262723Z"}, {"uuid": "d205b196-6d8a-43d8-8815-da0aa9fcb4c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52747", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqemhaqjhj2d", "content": "\ud83d\udfe0 CVE-2026-52747 - High (8.6)\n\nModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, I...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52747/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T12:00:29.254048Z"}, {"uuid": "eb8685ea-f4ec-483b-a27e-fded11c3f99d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52747", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqic7nb3ua2j", "content": "CVE-2026-52747 - WAF bypass in ModSecurity <3.0.16. Multipart parser silently removes line breaks, creating parser differential vs backend. CVSS 8.6. No patch available. Upgrade to 3.0.16 immediately. #CVE #ModSecurity #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-52747/", "creation_timestamp": "2026-07-12T23:07:55.119482Z"}, {"uuid": "71a34192-01a9-45df-aabf-484f8989c7ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52747", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqox2yh5ri26", "content": "\ud83d\udccc CVE-2026-52747 - ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Prior to 3.0.16, the multipart/form-dat... https://www.cyberhub.blog/cves/CVE-2026-52747", "creation_timestamp": "2026-07-15T14:37:06.358270Z"}, {"uuid": "3818d8a3-094c-4cf1-ae84-848ca7cbf66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquky6dwza23", "content": "CVE-2026-52746 - JSONata: Malicious inputs to \"$toMillis\" function can cause resource exhaustion\nCVE ID : CVE-2026-52746\n \n Published : July 17, 2026, 7:17 p.m. | 21\u00a0minutes ago\n \n Description : JSONata is a JSON query and transformation language. Prior to 2.2.0, malicious non...", "creation_timestamp": "2026-07-17T20:16:45.336970Z"}, {"uuid": "d3f0e1bc-6c07-43e7-809e-0a7040da9bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52746", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwx6vsqzo2d", "content": "\ud83d\udfe0 CVE-2026-52746 - High (7.5)\n\nJSONata is a JSON query and transformation language. Prior to 2.2.0, malicious non-matching input...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52746/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T19:00:35.887540Z"}]}