{"vulnerability": "cve-2026-5478", "sightings": [{"uuid": "a663230b-2728-4b50-b455-992c3b509822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5478", "type": "seen", "source": "https://bsky.app/profile/hurayraiit.com/post/3mjweiuy63s2n", "content": "", "creation_timestamp": "2026-04-20T11:29:53.319212Z"}, {"uuid": "8447d6ad-adcc-44c7-85ed-c70e9d372b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5478", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxcd233br2c", "content": "", "creation_timestamp": "2026-04-20T20:23:25.092183Z"}, {"uuid": "d59ce35b-5aa7-4721-ae15-8d920802a063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5478", "type": "published-proof-of-concept", "source": "Telegram/OLcxrKJ5zAhC__DZ5T6GCelVB_zr2kWns3QejwnSLKnpZyw", "content": "", "creation_timestamp": "2026-04-20T21:22:19.000000Z"}, {"uuid": "044e5b4e-c87a-45bb-9b5c-736d0348013d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54786", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo37ghk3y22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54786 \u0432 Wasmtime: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WebAssembly\n\n\n\nhttps://kripta.biz/posts/42A2F6AA-355C-43C9-BC5A-A553D65D5219", "creation_timestamp": "2026-07-02T12:53:18.671769Z"}, {"uuid": "341fb038-ba1a-4053-8e1f-bbdd333aac2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54786", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqj2yuukt2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54786 \u0432 Wasmtime: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WebAssembly\n\n\n\nhttps://kripta.biz/posts/F77F0A65-ED35-41F0-8927-5548BA0C940C", "creation_timestamp": "2026-07-03T12:06:42.181945Z"}, {"uuid": "39e54b18-9e7f-449f-89be-f9793da2a61a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54786", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqnmccsm52b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54786 \u0432 Wasmtime: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WebAssembly\n\n\n\nhttps://kripta.biz/posts/73BC507F-DB2F-4CC1-9FEF-C1A8249784F0", "creation_timestamp": "2026-07-03T13:27:57.775241Z"}, {"uuid": "e85742bb-33ab-43a6-a9a6-427c4033a095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54782", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq6a55zdqv2t", "content": "CVE-2026-54782 - corewcf.primitives\nAn attacker can use a known vulnerability in CoreWCF to pretend to be any user, including administrators, if they have access to the service and the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#corewcfprimitives #corewcf #dotnet #CVE #infosec", "creation_timestamp": "2026-07-08T23:04:07.092383Z"}, {"uuid": "3cd4f82f-266a-4bed-aaad-a95365c907b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6hv3t6nv2i", "content": "CVE-2026-54784 - CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality\nCVE ID : CVE-2026-54784\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to ...", "creation_timestamp": "2026-07-09T01:22:46.293585Z"}, {"uuid": "4bf90a53-e505-495b-a3ef-df65b576ab0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54781", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6iurvqor2z", "content": "CVE-2026-54781 - CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced\nCVE ID : CVE-2026-54781\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Windows Communication Foundation ...", "creation_timestamp": "2026-07-09T01:40:29.764841Z"}, {"uuid": "0e0371a4-21d1-4f8d-9b94-094569fdbeef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54780", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6j4hinzz2z", "content": "CVE-2026-54780 - CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass\nCVE ID : CVE-2026-54780\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. P...", "creation_timestamp": "2026-07-09T01:44:47.410861Z"}, {"uuid": "019b19dc-8f14-478b-90c0-7ccec1275fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6jffzamm2x", "content": "CVE-2026-54782 - CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation\nCVE ID : CVE-2026-54782\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF...", "creation_timestamp": "2026-07-09T01:49:47.860532Z"}, {"uuid": "5b60f0c8-93d1-404c-90a0-6d017c262753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq6kabger32x", "content": "CVE-2026-54783 - CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages\nCVE ID : CVE-2026-54783\n \n Published : July 8, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : CoreWCF is a port of the serv...", "creation_timestamp": "2026-07-09T02:04:49.113795Z"}, {"uuid": "c0386e13-4c3f-4458-9077-dde31abcff1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54782", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mq6qptuo322j", "content": "\ud83d\udd34 CVE-2026-54782 - Critical (10)\n\nCoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Pri...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54782/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-09T04:00:54.682812Z"}]}