{"vulnerability": "cve-2026-5441", "sightings": [{"uuid": "2c224ec0-a4e7-4072-832e-ee9a6def292c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5441", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3akbtzvd2t", "content": "", "creation_timestamp": "2026-04-09T16:37:07.462138Z"}, {"uuid": "47196fa2-d701-4380-8d72-423e0f79bc77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5441", "type": "published-proof-of-concept", "source": "Telegram/_P20Htht508gPcGtfhYsw3BkHMYZAVXCzBRlMvbh3o3mGtY", "content": "", "creation_timestamp": "2026-04-14T20:03:14.000000Z"}, {"uuid": "da054cb5-7e34-4907-85b0-07dfa4238369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54410", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mobhcwfd6s2w", "content": "\ud83d\udfe0 CVE-2026-54410 - High (8.6)\n\nnanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header() functi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54410/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-14T19:00:13.712381Z"}, {"uuid": "bf0a254a-c37c-465c-9a12-659dd00fb7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54411", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mobkbbokgq2b", "content": "CVE-2026-54411 - Linux-PAM pam_userdb Plaintext Password Recovery Timing Vulnerability\nCVE ID : CVE-2026-54411\n \n Published : June 14, 2026, 6:17 p.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the p...", "creation_timestamp": "2026-06-14T19:52:58.811314Z"}, {"uuid": "e1fa77f6-b233-4d56-9483-2d1eb36e9a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mobkka4mwn22", "content": "CVE-2026-54413 - DriftRegion UDS Integer Underflow Out-of-Bounds Read\nCVE ID : CVE-2026-54413\n \n Published : June 14, 2026, 6:17 p.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : driftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds read in...", "creation_timestamp": "2026-06-14T19:57:59.055472Z"}, {"uuid": "8784d772-7dc2-4c3a-b06d-f7805ce177d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54413", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116750236419774889", "content": "\ud83d\udea8 CVE-2026-54413 (HIGH, CVSS 7.8): Integer underflow in driftregion iso14229 \u22640.9.0 lets remote attackers crash automotive, IoT, and industrial UDS servers via crafted 0x27 requests. Validate input, monitor traffic, and restrict access. https://radar.offseq.com/threat/cve-2026-54413-cwe-191-integer-underflow-wrap-or-w-c8e3fde3 #OffSeq #vuln #UDS #infosec", "creation_timestamp": "2026-06-14T20:00:31.792868Z"}, {"uuid": "06787299-31ec-4263-94e0-83e8f366ea23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54413", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mobkosmlty2i", "content": "\ud83d\udea8 driftregion iso14229 \u22640.9.0 hit by HIGH severity integer underflow (CVE-2026-54413). Remote attackers can crash UDS servers in automotive & IoT. Validate 0x27 requests, monitor traffic, restrict access until patched. https://radar.offseq.com/threat/cve-2026-54413-cwe-191-integer-underflow-wrap-...", "creation_timestamp": "2026-06-14T20:00:33.456232Z"}, {"uuid": "6b9fbb98-2d87-4be1-b880-183a720da3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54410", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mobkt6lb7w2r", "content": "CVE-2026-54410 - nanoMODBUS TCP Server Off-by-One Buffer Overflow\nCVE ID : CVE-2026-54410\n \n Published : June 14, 2026, 6:17 p.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header() function of th...", "creation_timestamp": "2026-06-14T20:02:59.349998Z"}, {"uuid": "8eddcad0-bd8f-46d7-976f-0cf6ccd4c9d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mobl44ylsv2f", "content": "CVE-2026-54412 - MQTT-C Heap Out-of-Bounds Read and Integer Underflow\nCVE ID : CVE-2026-54412\n \n Published : June 14, 2026, 6:17 p.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : LiamBindle MQTT-C through version 1.1.6 contains a heap-based out-of-bounds read and integer underflo...", "creation_timestamp": "2026-06-14T20:07:59.846706Z"}, {"uuid": "961dc509-0a23-4b03-99bf-e089214039c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54412", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moby5ha7xq2w", "content": "\ud83d\udfe0 CVE-2026-54412 - High (8.2)\n\nLiamBindle MQTT-C through version 1.1.6 contains a heap-based out-of-bounds read and integer unde...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54412/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T00:01:24.148976Z"}, {"uuid": "776371f4-fdcc-4eff-8a75-e9e6520ef68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54413", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3moby5oh7p32e", "content": "\ud83d\udfe0 CVE-2026-54413 - High (8.2)\n\ndriftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds rea...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54413/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-15T00:01:31.156826Z"}, {"uuid": "18b838e2-3994-4ea1-afcb-89e5891e0618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54411", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116754190976961198", "content": "Our CTI team identified a lot of activities targeting Linux-PAM (CVE-2026-54411) https://vuldb.com/vuln/370870/cti", "creation_timestamp": "2026-06-15T12:46:17.570634Z"}, {"uuid": "9adde229-2833-4dd0-950c-55cdc71b8a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiv74u5gc2t", "content": "CVE-2026-54415 - Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover\nCVE ID : CVE-2026-54415\n \n Published : June 17, 2026, 2:04 p.m. | 3\u00a0hours, 4\u00a0minutes ago\n \n Description : Missing Authorization in the server management routes (routes/admin.php) in Azu...", "creation_timestamp": "2026-06-17T17:57:16.146591Z"}, {"uuid": "f618af83-32a7-4b1a-9a7d-7cd07e59172b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moks6clrea23", "content": "CVE-2026-54415 - Missing Authorization in Azuriom CMS. Authenticated admin can create server tokens, take over user accounts via API. CVSS 8.1. No patch yet. Disable AzLink endpoints until update. #CVE #Azuriom #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-54415/", "creation_timestamp": "2026-06-18T12:08:27.593530Z"}, {"uuid": "739d1dfa-a722-4880-8048-dae8aad61c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mokt35ifeb2z", "content": "CVE-2026-54419 - PIAF-HMS multiple unauthenticated SQL injection vulnerabilities via mysql_query\nCVE ID : CVE-2026-54419\n \n Published : June 18, 2026, 10:21 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no rele...", "creation_timestamp": "2026-06-18T12:24:39.032738Z"}, {"uuid": "230f29ac-c970-4104-a5b6-fe152ad9da75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54414", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3momsieefw62x", "content": "CVE-2026-54414 - FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover\nCVE ID : CVE-2026-54414\n \n Published : June 19, 2026, 5:41 a.m. | 1\u00a0hour, 27\u00a0minutes ago\n \n Description : FileRise before 3.16.0 is vulnerable to path traversal in the ...", "creation_timestamp": "2026-06-19T07:19:23.609204Z"}, {"uuid": "35880e4d-1461-4441-94d5-0373f2ccd551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54414", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116775598633883960", "content": "CVE-2026-54414: Critical path traversal in FileRise <3.16.0 allows attackers with a valid shared-folder upload link to write files outside the intended dir \u2014 can lead to admin takeover & RCE. Patch to 3.16.0+ ASAP. https://radar.offseq.com/threat/cve-2026-54414-cwe-22-improper-limitation-of-a-pat-b161bf82d6c29f3c #OffSeq #vuln #FileRise", "creation_timestamp": "2026-06-19T07:30:28.372134Z"}, {"uuid": "ff373e0d-1eed-4e63-9c7d-beb294bace33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54414", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3momt47f4ci2f", "content": "Critical path traversal in FileRise <3.16.0 (CVE-2026-54414): attackers with upload-enabled links can overwrite files, risking admin takeover/RCE. Update to 3.16.0+ now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-54414-cwe-22-improper-limitation-of-a-pat-b161bf82d6c29f3c #OffSeq #FileRise #infosec", "creation_timestamp": "2026-06-19T07:30:30.188873Z"}, {"uuid": "2b496d8f-e76d-47f2-b9c7-fa7554e30ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "https://t.me/GithubRedTeam/91884", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54415-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54415 \u2014 Azuriom CMS (<1.2.11) Broken Access Control \u2192 account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:12.934787Z"}, {"uuid": "47c270c8-4218-46f5-be08-1dc5aa75ecbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "https://t.me/GithubRedTeam/91884", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54415-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54415 \u2014 Azuriom CMS (<1.2.11) Broken Access Control \u2192 account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:20.927462Z"}, {"uuid": "7cf96d70-d257-4a94-a869-799872c00871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91884", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54415-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdugafforov-bobur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 11:15:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-54415 \u2014 Azuriom CMS (<1.2.11) Broken Access Control \u2192 account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.294944Z"}, {"uuid": "f344c0b9-56f4-45d4-b553-549e95466400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-16T19:00:22.097951Z"}, {"uuid": "4a67869c-3b8b-4c87-bf8d-a7376f6ce677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/W5amUvjZQLp7x5QJxedoGRrfTMixYmkVE9L_7wilXlBm52k", "content": "", "creation_timestamp": "2026-07-16T19:00:22.291600Z"}, {"uuid": "b7955fe2-6979-479e-959c-e6b7218d3952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-17T00:00:38.573281Z"}, {"uuid": "c18c7885-ae9d-4c6e-bbb5-d75084a3a973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "seen", "source": "Telegram/W5amUvjZQLp7x5QJxedoGRrfTMixYmkVE9L_7wilXlBm52k", "content": "", "creation_timestamp": "2026-07-17T00:00:38.749073Z"}, {"uuid": "e8a5ba9c-2886-46fc-95ce-8b5d362ba1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "Telegram/W5amUvjZQLp7x5QJxedoGRrfTMixYmkVE9L_7wilXlBm52k", "content": "", "creation_timestamp": "2026-07-18T00:00:21.914081Z"}, {"uuid": "5484ff03-e7e0-4cc0-bdd8-eea6a7a18b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54415", "type": "published-proof-of-concept", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-18T00:00:22.172137Z"}]}