{"vulnerability": "cve-2026-5583", "sightings": [{"uuid": "43c095ec-4868-473f-9808-52ad55e9b40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5583", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miriiodh7a2i", "content": "", "creation_timestamp": "2026-04-05T19:32:45.523272Z"}, {"uuid": "ae6cb43b-361d-4dce-a97a-ae6126a92add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55839", "type": "published-proof-of-concept", "source": "https://github.com/kestra-io/kestra/security/advisories/GHSA-34pm-923j-7wf8", "content": "", "creation_timestamp": "2026-08-18T18:35:18.043936Z"}, {"uuid": "0e0f42b0-aa45-43e4-8629-9a3dccb6df4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55832", "type": "published-proof-of-concept", "source": "https://github.com/sonos/tract/security/advisories/GHSA-h668-6x6g-f8r5", "content": "", "creation_timestamp": "2026-06-18T07:13:10.000000Z"}, {"uuid": "dcdb50c7-e7a9-4559-a0ba-722329f626aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55837", "type": "published-proof-of-concept", "source": "https://github.com/dbt-labs/dbt-mcp/security/advisories/GHSA-jr33-mw75-7j8f", "content": "", "creation_timestamp": "2026-06-16T11:06:21.000000Z"}, {"uuid": "5259a3e8-57ca-4863-8c4f-dd82c878b313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55831", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o", "content": "\ud83d\udd17 CVE : CVE-2018-11798, CVE-2019-0205, CVE-2020-13949, CVE-2026-43869, CVE-2026-45205, CVE-2026-54291, CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-56819, CVE-2026-59898, CVE-2026-59899, CVE-2026-59900, CVE-2026-59901, CVE-2026-59921", "creation_timestamp": "2026-08-10T13:20:13.602131Z"}, {"uuid": "a312878f-8bb6-476c-a2a4-a03d8a0109cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55833", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o", "content": "\ud83d\udd17 CVE : CVE-2018-11798, CVE-2019-0205, CVE-2020-13949, CVE-2026-43869, CVE-2026-45205, CVE-2026-54291, CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-56819, CVE-2026-59898, CVE-2026-59899, CVE-2026-59900, CVE-2026-59901, CVE-2026-59921", "creation_timestamp": "2026-08-10T13:20:13.667483Z"}, {"uuid": "edb18ef3-c131-47f1-9de7-293f4b3aa478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55833", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991", "content": "", "creation_timestamp": "2026-08-13T08:46:11.853977Z"}, {"uuid": "4017c338-3dc4-4777-921d-abc03e36a149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55831", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991", "content": "", "creation_timestamp": "2026-08-13T08:46:18.641754Z"}, {"uuid": "ebbd324c-89c1-44f2-abf2-1a8bd4e8d227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55830", "type": "seen", "source": "https://gist.github.com/alon710/22a4ad184aa24d8d445652214edf1b78", "content": "# CVE-2026-55830: CVE-2026-55830: Complete Sandbox Escape via Positional-Only Arguments in RestrictedPython\n\n> **CVSS Score:** 8.3\n> **Published:** 2026-08-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55830\n\n## Summary\nA critical security flaw was identified in RestrictedPython prior to version 8.3 where positional-only arguments introduced in Python 3.8 were not properly validated. This allowed an attacker executing code within the sandbox to shadow critical security guards like `_write_` and `_getattr_`, leading to a complete sandbox escape and arbitrary code execution on the underlying server.\n\n## TL;DR\nIncomplete validation of positional-only arguments in RestrictedPython allowed attackers to shadow security hooks and escape the sandbox.\n\n## Technical Details\n\n- **CWE ID**: CWE-184\n- **Attack Vector**: Network\n- **CVSS v3.1**: 8.3 (High)\n- **EPSS Score**: 0.00401 (Percentile: 33.04%)\n- **Exploit Status**: Proof of Concept (PoC)\n- **CISA KEV Status**: Not Listed\n- **Impact**: Arbitrary Code Execution (ACE) via Sandbox Escape\n\n## Affected Systems\n\n- RestrictedPython\n- Zope\n- Plone\n\n## Mitigation\n\n- Upgrade RestrictedPython to 8.3 or higher\n- Implement AST preprocessing to block positional-only parameters containing leading underscores\n\n**Remediation Steps:**\n1. Identify all python environments utilizing RestrictedPython.\n2. Update RestrictedPython dependency to at least version 8.3 using standard package managers.\n3. Implement defensive AST validation logic in administrative input validation pipelines if legacy versions must remain in use.\n4. Configure restricted execution environments with minimal container-level permissions.\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55830) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-29T00:32:03.644523Z"}, {"uuid": "886749ae-2984-415c-87ab-1fbfbefc2582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55830", "type": "published-proof-of-concept", "source": "https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-ffg3-p8fm-mjx2", "content": "", "creation_timestamp": "2026-08-29T00:35:03.632143Z"}, {"uuid": "b3b2730f-90d6-4633-94d6-01b1811619bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55833", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4qlzdkjo2o", "content": "CVE-2026-55833 - Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation\nCVE ID : CVE-2026-55833\n \n Published : July 21, 2026, 12:17 a.m. | 1\u00a0hour, 27\u00a0minutes ago\n \n Description : Netty is a network application framework for development of proto...", "creation_timestamp": "2026-07-21T02:18:37.816857Z"}, {"uuid": "8040f781-6632-41d4-b3f4-7b3d5d2c77be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55831", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4rqebgbg2x", "content": "CVE-2026-55831 - Netty SPDY SETTINGS frame count materializes unbounded settings map\nCVE ID : CVE-2026-55831\n \n Published : July 21, 2026, 12:17 a.m. | 1\u00a0hour, 27\u00a0minutes ago\n \n Description : Netty is a network application framework for development of protocol servers and clie...", "creation_timestamp": "2026-07-21T02:38:57.069522Z"}, {"uuid": "93d7cb40-4953-4398-b959-2e79b5d8ac98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55833", "type": "seen", "source": "https://t.me/bdufstecru/3334", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SPDY \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 Netty \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-10163\nCVE-2026-55833\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c", "creation_timestamp": "2026-07-22T16:00:04.316382Z"}, {"uuid": "85506320-defc-45c0-b5d5-aed84ae9d1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55833", "type": "published-proof-of-concept", "source": "https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c", "content": "", "creation_timestamp": "2026-07-22T22:35:22.161955Z"}, {"uuid": "ba21f10c-f406-46d7-bb98-1919efa85237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55831", "type": "published-proof-of-concept", "source": "https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w", "content": "", "creation_timestamp": "2026-07-22T22:35:24.461876Z"}, {"uuid": "556c613d-e719-4ac3-a238-d775e05f8ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55833", "type": "seen", "source": "https://t.me/bdufstecru/3334", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SPDY \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 Netty \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-10163\nCVE-2026-55833\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c", "creation_timestamp": "2026-07-23T00:00:22.710810Z"}, {"uuid": "63b29891-78a3-46df-94ff-3149f7d734b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55834", "type": "published-proof-of-concept", "source": "https://github.com/pocket-id/pocket-id/security/advisories/GHSA-2wvm-8mvp-22qv", "content": "", "creation_timestamp": "2026-08-28T18:35:34.780655Z"}]}