{"vulnerability": "cve-2026-5456", "sightings": [{"uuid": "66eb87f4-1a7f-43dc-88d7-81a9d63c3405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5456", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3milckx2ssm2s", "content": "", "creation_timestamp": "2026-04-03T08:30:41.037962Z"}, {"uuid": "a5c40f05-204c-47df-a0fb-c71ed7a0a2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54560", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp5yw2ad72s", "content": "CVE-2026-54560 - Cloudreve: OAuth access tokens bypass scope enforcement due to missing client_id claim\nCVE ID : CVE-2026-54560\n \n Published : July 15, 2026, 2:40 p.m. | 37\u00a0minutes ago\n \n Description : Cloudreve is a self-hosted file management and sharing system. From 4.12.0 ...", "creation_timestamp": "2026-07-15T16:41:12.865413Z"}, {"uuid": "04ba5586-1792-4206-b296-b254b183198d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54562", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp6ah3co52i", "content": "CVE-2026-54562 - Cloudreve: Non-admin remote download users can SSRF loopback/internal services and read imported responses\nCVE ID : CVE-2026-54562\n \n Published : July 15, 2026, 2:37 p.m. | 40\u00a0minutes ago\n \n Description : Cloudreve is a self-hosted file management and sharing ...", "creation_timestamp": "2026-07-15T16:45:25.631593Z"}, {"uuid": "e91d9b66-0d5d-4047-b5ab-6745b9893c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7zq7njw22", "content": "CVE-2026-54563 - Cloudreve: Path Traversal / Broken Access Control in Cloudreve WebDAV (`/dav`) \u2014 scoped DAV credential escapes its configured account root\nCVE ID : CVE-2026-54563\n \n Published : July 15, 2026, 2:38 p.m. | 38\u00a0minutes ago\n \n Description : Cloudreve is a self-hos...", "creation_timestamp": "2026-07-15T17:17:27.605477Z"}, {"uuid": "7356027c-9f3e-4480-b4ab-b37fd986343d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54567", "type": "published-proof-of-concept", "source": "https://github.com/jugmac00/flask-reuploaded/security/advisories/GHSA-937x-gpqr-72gg", "content": "", "creation_timestamp": "2026-07-17T22:35:08.204309Z"}]}