{"vulnerability": "cve-2026-5476", "sightings": [{"uuid": "2e726f64-6728-433d-9fce-f7761bc7e1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5476", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mimjg3nusb22", "content": "", "creation_timestamp": "2026-04-03T20:05:53.752969Z"}, {"uuid": "96e8afea-71f9-4e3c-b1b5-305a938fde14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54768", "type": "published-proof-of-concept", "source": "https://github.com/wp-graphql/wp-graphql/security/advisories/GHSA-jhh7-832h-f8hv", "content": "", "creation_timestamp": "2026-08-01T00:35:06.259371Z"}, {"uuid": "8f362fcb-38f3-4d0b-9469-51721536bc02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54768", "type": "seen", "source": "https://gist.github.com/alon710/662b2c487ba3f86d2983484c0e6fc728", "content": "# CVE-2026-54768: CVE-2026-54768: User Enumeration and Profile Leak in WPGraphQL via Deprecated Field Resolver\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-07-31\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54768\n\n## Summary\nAn observable response discrepancy vulnerability in WPGraphQL versions 2.0.0 through 2.15.0 allows unauthenticated remote attackers to enumerate users and extract public profile metadata. Although the password reset mutation is designed to return a uniform success response to prevent enumeration, a legacy deprecated field resolver bypasses this mechanism by resolving the associated user profile if the target account exists.\n\n## TL;DR\nA deprecated field resolver in WPGraphQL's password reset mutation leaks user existence and profile metadata, undermining anti-enumeration controls.\n\n## Technical Details\n\n- **CWE ID**: CWE-204\n- **Attack Vector**: Network\n- **CVSS v4.0**: 6.9 (Medium)\n- **Exploit Status**: Proof of Concept Available\n- **CISA KEV Status**: Not Listed\n- **Ransomware Association**: No Known Use\n- **Impact**: Unauthenticated Username Enumeration and Metadata Disclosure\n\n## Affected Systems\n\n- WPGraphQL (WordPress Plugin) versions 2.0.0 through 2.15.0\n- **WPGraphQL**: >= 2.0.0, < 2.15.1 (Fixed in: `2.15.1`)\n\n## Mitigation\n\n- Upgrade the WPGraphQL plugin to the non-vulnerable version 2.15.1 or later.\n- Apply a manual code hotfix to prevent the deprecated resolver from processing the internal ID field.\n- Implement WAF rules to block incoming queries matching the enumeration mutation signature.\n\n**Remediation Steps:**\n1. Locate the active installation of WPGraphQL on your WordPress server.\n2. Perform a clean update to version 2.15.1 using the WordPress Admin interface, WP-CLI, or Composer.\n3. If manual hotfixing is necessary, open 'src/Deprecated.php' and locate the 'SendPasswordResetEmailPayload' configuration.\n4. Modify the 'resolve' callback on the 'user' field definition to return null unconditionally.\n5. Open 'src/Mutation/SendPasswordResetEmail.php' and set the returned 'id' field to null in the success payload return array.\n6. Deploy WAF rule pattern 'mutation.*sendPasswordResetEmail.*user\\s*\\{' to reject unauthorized enumeration requests.\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54768) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-01T01:31:13.245707Z"}, {"uuid": "aaa192d3-53d8-4054-b078-213c26a70c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54761", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-3g6v-2r68-prfc", "content": "", "creation_timestamp": "2026-06-11T08:30:06.000000Z"}, {"uuid": "74dde648-7aa3-442f-a9a0-b5e50b638d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54762", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3moni2ltzwt22", "content": "\ud83d\udd17 CVE : CVE-2026-54762", "creation_timestamp": "2026-06-19T13:45:23.690235Z"}, {"uuid": "d421e97c-7dbf-4b64-b0a4-3f8354743eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54761", "type": "seen", "source": "https://bsky.app/profile/dbt3.ch/post/3monpld2twq2x", "content": "Traefik v3.6.21 patches CVE-2026-54761 and fixes TLS routing issues including routers with same host on different entryPoints and SNI checks for host-less routers #selfhosted #homelab\n\nhttps://github.com/traefik/traefik/releases/tag/v3.6.21\n", "creation_timestamp": "2026-06-19T16:00:01.124069Z"}, {"uuid": "6095ce4e-820d-424c-bc51-01a4f265d822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54762", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-4mr2-fg2p-w63c", "content": "", "creation_timestamp": "2026-06-19T08:27:41.000000Z"}, {"uuid": "454751cf-da8d-4356-9f4d-d567c18d3d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54763", "type": "seen", "source": "https://gist.github.com/alon710/b0c30693be99e5683b1b7fa34bf1c9d1", "content": "# CVE-2026-54763: CVE-2026-54763: Authentication Bypass and Identity Spoofing in Traefik Middlewares via Header Normalization Discrepancies\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-08-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54763\n\n## Summary\nA critical authentication bypass and context spoofing vulnerability exists in Traefik's BasicAuth, DigestAuth, and ForwardAuth middlewares prior to versions 2.11.51, 3.6.22, and 3.7.6. The flaw arises because Traefik's header cleanup mechanisms rely on Go's standard library header canonicalization, which does not modify or delete headers containing underscores. Consequently, unauthenticated remote attackers can inject custom underscore-variant headers (e.g., X_Auth_User) that bypass Traefik's stripping filters and reach backend application servers. When downstream backends normalize both hyphens and underscores into the same environment variables, the attacker's spoofed identity value is processed as trusted authorization data.\n\n## TL;DR\nTraefik's authentication middlewares fail to strip client-supplied headers containing underscores, permitting remote unauthenticated attackers to bypass identity controls and spoof authenticated metadata on backend systems that normalize hyphens and underscores identically.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-178, CWE-290, CWE-345\n- **Attack Vector**: Network (Unauthenticated)\n- **CVSS v3.1 Score**: 10.0 (Critical)\n- **EPSS Score**: 0.002 (Percentile: 9.96%)\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Traefik Proxy (BasicAuth, DigestAuth, ForwardAuth middlewares)\n- Python WSGI/ASGI application servers (Gunicorn, uWSGI)\n- PHP-FPM and CGI-based application containers\n- Ruby Rack and thin-server deployment environments\n- **Traefik**: < 2.11.51 (Fixed in: `2.11.51`)\n- **Traefik**: >= 3.0.0-beta1, < 3.6.22 (Fixed in: `3.6.22`)\n- **Traefik**: >= 3.7.0-ea.1, < 3.7.6 (Fixed in: `3.7.6`)\n\n## Mitigation\n\n- Upgrade Traefik instances to 2.11.51, 3.6.22, or 3.7.6.\n- Explicitly configure the entrypoint `underscoreHeadersStrategy` to 'delete' or 'reject' in the configuration.\n- Deploy Web Application Firewall (WAF) rules to inspect and block client-supplied HTTP headers containing underscores.\n- Implement cryptographically signed identity assertions (such as JWTs) between Traefik and internal backend servers.\n\n**Remediation Steps:**\n1. Identify all entrypoint definitions within the Traefik dynamic/static configuration files (toml, yaml, or CLI flags).\n2. Add the configuration parameter `underscoreHeadersStrategy: delete` to all active HTTP entrypoints.\n3. Restart the Traefik service and verify that requests carrying underscore-variant headers are sanitized before reaching backend systems.\n4. Audit downstream backend frameworks to ensure they do not accept unauthenticated environment variables for identity evaluation.\n\n## References\n\n- [NVD - CVE-2026-54763 Detail](https://nvd.nist.gov/vuln/detail/CVE-2026-54763)\n- [GitHub Security Advisory GHSA-x677-9fxg-v5c5](https://github.com/traefik/traefik/security/advisories/GHSA-x677-9fxg-v5c5)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54763) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-06T17:31:27.871972Z"}, {"uuid": "469d73f8-9538-4799-85f4-e6be316ebfb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54763", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-x677-9fxg-v5c5", "content": "", "creation_timestamp": "2026-08-06T18:35:03.977637Z"}, {"uuid": "dcb61498-3624-4993-a468-1c70dc970af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54765", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-6p8f-p8j2-rqmv", "content": "", "creation_timestamp": "2026-08-06T18:35:11.158677Z"}, {"uuid": "6257bb87-d6cb-4b11-8207-9609a1f2c7ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54764", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-3q9r-p662-5j8m", "content": "", "creation_timestamp": "2026-08-06T18:35:15.820479Z"}, {"uuid": "0d8edd70-275b-4662-9b38-1079d8dcb0f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54763", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6o6mhfq2e", "content": "\ud83d\udd17 CVE : CVE-2026-54763, CVE-2026-54764, CVE-2026-54765", "creation_timestamp": "2026-07-02T13:55:14.909350Z"}, {"uuid": "fee36cd9-8ba1-4d08-bcae-7ae3350cf5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54764", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6o6mhfq2e", "content": "\ud83d\udd17 CVE : CVE-2026-54763, CVE-2026-54764, CVE-2026-54765", "creation_timestamp": "2026-07-02T13:55:14.957386Z"}, {"uuid": "e9e9ef72-1f4b-4519-84e9-5d526a085e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54765", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6o6mhfq2e", "content": "\ud83d\udd17 CVE : CVE-2026-54763, CVE-2026-54764, CVE-2026-54765", "creation_timestamp": "2026-07-02T13:55:14.995092Z"}, {"uuid": "58e7b367-f8d7-444f-831b-a7dda7cf2fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54760", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpyzx77jwz2l", "content": "CVE-2026-54760 - langroid\nA security flaw in PostgreSQL's SQLChatAgent allows hackers to bypass safety checks and execute malicious queries. This can lead to unauthorized access to sensitive data. To fix this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langroid #pip #CVE #infosec", "creation_timestamp": "2026-07-06T21:30:06.170592Z"}, {"uuid": "79183189-b43b-4c86-bbb6-30e757f799b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54769", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpz22qfgd22g", "content": "CVE-2026-54769 - langroid\nLangroid's TableChatAgent is vulnerable to a critical security flaw that allows attackers to execute unauthorized code on the host system. This means an attacker could potentially take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langroid #pip #CVE #infosec", "creation_timestamp": "2026-07-06T21:32:04.606206Z"}, {"uuid": "d86480c4-1b6c-451e-88e4-7383b2c60360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54769", "type": "published-proof-of-concept", "source": "https://github.com/langroid/langroid/security/advisories/GHSA-q9p7-wqxg-mrhc", "content": "", "creation_timestamp": "2026-07-06T22:35:25.116138Z"}, {"uuid": "61411a5e-6ffe-4a05-a4a7-b1a1f11fb558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54769", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqawqmhsco2b", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-54769](https://github.com/langroid/langroid/security/advisories/GHSA-q9p7-wqxg-mrhc)\nLa...\nhttps://github.com/langroid/langroid/security/advisories/GHSA-q9p7-wqxg-mrhc #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-10T00:54:01.802055Z"}, {"uuid": "77340e19-5cca-4b06-9303-a611e29b9983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54769", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqax4hnaiu2c", "content": "\ud83d\udd34 CVE-2026-54769 - Critical (10)\n\nLangroid is a framework for building large-language-model-powered applications. Versions prior to...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54769/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-10T01:00:41.335014Z"}, {"uuid": "49971494-76a2-499d-9e47-5080eb108908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54769", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqb4s6ba2f2e", "content": "CVE-2026-54769 - Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent\nCVE ID : CVE-2026-54769\n \n Published : July 10, 2026, 12:16 a.m. | 1\u00a0hour, 30\u00a0minutes ago\n \n Description : Langroid is a framework for building large-languag...", "creation_timestamp": "2026-07-10T02:42:16.301490Z"}, {"uuid": "a6d8b7a6-b832-419e-b42a-9dcb1cb36633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqb534o76s2x", "content": "CVE-2026-54760 - Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls\nCVE ID : CVE-2026-54760\n \n Published : July 10, 2026, 12:16 a.m. | 1\u00a0hour, 30\u00a0minutes ago\n \n Description : Langroid is a framework for buildi...", "creation_timestamp": "2026-07-10T02:47:16.835479Z"}, {"uuid": "fc1e7136-f185-42c3-9764-c7784bd9bc75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54769", "type": "seen", "source": "https://bsky.app/profile/roguelogics.bsky.social/post/3mqcjsn4rhg2g", "content": "\ud83d\udea8 Attention security teams: CVE-2026-54769 is a critical Sandbox Escape vulnerability in Langroid, leading to Remote Code Execution. Patch to version 0.65.2 or later immediately to mitigate risk. #CyberSecurity #PatchNow", "creation_timestamp": "2026-07-10T16:07:51.172258Z"}, {"uuid": "9c87476d-de9e-4175-922a-f9c81a9ec21d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54769", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcwiory5s2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54769 \u0432 Langroid: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/299C35E6-A38C-4067-9260-D40035E916DC", "creation_timestamp": "2026-07-10T19:54:55.375383Z"}, {"uuid": "376d39ea-d78e-4bc7-b06c-0085005d752e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54761", "type": "seen", "source": "https://t.me/GithubRedTeam/89650", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54761-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 13:38:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:22.701557Z"}, {"uuid": "6353c3c0-c21b-4431-8eb1-db4bdcceb7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54761", "type": "seen", "source": "https://t.me/GithubRedTeam/89650", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54761-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 13:38:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:38.496202Z"}, {"uuid": "1342f90b-3986-482d-ba67-c9e918473213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54761", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89650", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54761-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Saku0512\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 13:38:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:17.963803Z"}]}