{"vulnerability": "cve-2026-5282", "sightings": [{"uuid": "a189594b-5eef-42c0-8234-13a82eab8947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5282", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mig7yd45t522", "content": "", "creation_timestamp": "2026-04-01T08:01:09.743782Z"}, {"uuid": "91563f76-1881-44fa-b39e-c27bf4c32ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5282", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3migz54wo7r2r", "content": "", "creation_timestamp": "2026-04-01T15:31:15.340089Z"}, {"uuid": "0c7927a7-7014-4018-b258-943995f58893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5282", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/", "content": "", "creation_timestamp": "2026-03-31T17:00:00.000000Z"}, {"uuid": "ae750296-8452-4e04-830b-e14adffc654f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-5282", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260402", "content": "", "creation_timestamp": "2026-04-01T18:00:00.000000Z"}, {"uuid": "a66e6575-fe1f-4a56-8f05-5bc79db0bf96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mql3xosge422", "content": "CVE-2026-52824 - kimai\nThe official Kimai Docker image contains a default secret key that can be used by an attacker to take over any account, including administrator accounts. This is a security risk for any\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kimai #composer #CVE #infosec", "creation_timestamp": "2026-07-14T01:54:05.181335Z"}, {"uuid": "fc56baba-7144-4595-9430-f4e6df33e663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr23usnfrn2g", "content": "Kimai vulnerability CVE-2026-52824 (CVSS 9.1) lets attackers forge cookies for account takeover via a default Docker APP_SECRET. Update to 2.58.0 now.\n\n#Kimai #AccountTakeover #Docker #CVE202652824 #OpenSource", "creation_timestamp": "2026-07-20T01:02:25.099377Z"}, {"uuid": "b16a6608-c874-47d2-b20e-e68989a8fdac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mr2mnokguv2j", "content": "Kimai\u306eDocker\u306b\u8106\u5f31\u6027\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u306eAPP_SECRET\u304c\u9732\u898b\u3057\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u304c\u53ef\u80fd\u306b\n\n\u516c\u5f0f\u306eDocker\u30a4\u30e1\u30fc\u30b8\u3067Kimai\u3092\u904b\u7528\u3057\u3066\u3044\u308b\u30e6\u30fc\u30b6\u30fc\u306f\u3001\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-52824\u3001GHSA-jr9p-4h4j-6c58\u3068\u3057\u3066\u8ffd\u8de1\uff09\u304c\u767a\u898b\u3055\u308c\u305f\u3053\u3068\u3092\u53d7\u3051\u3001\u65e9\u6025\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3092\u66f4\u65b0\u3059\u308b\u3088\u3046\u5f37\u304f\u6c42\u3081\u3089\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u516c\u958b\u3055\u308c\u3066\u8ab0\u3067\u3082\u77e5\u308a\u5f97\u308b\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b7\u30fc\u30af\u30ec\u30c3\u30c8\u304c\u4f7f\u308f\u308c\u3066\u3044\u308b...", "creation_timestamp": "2026-07-20T06:02:39.137140Z"}, {"uuid": "20736784-90a9-4d17-8758-3f4477cc2aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52824.yaml", "content": "", "creation_timestamp": "2026-07-21T06:00:05.732731Z"}, {"uuid": "c98248dc-9e3a-431e-ae21-fbf84b916260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52824.yaml", "content": "", "creation_timestamp": "2026-07-22T00:00:02.856111Z"}]}