{"vulnerability": "cve-2026-5588", "sightings": [{"uuid": "39b67a73-792d-4a73-b5ee-b85a0ca0f087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5588", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjjxtqoczn2t", "content": "", "creation_timestamp": "2026-04-15T13:11:16.733078Z"}, {"uuid": "73d9d7c6-5cb3-4c28-b3d1-8959866b3dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5588", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116483286321859891", "content": "", "creation_timestamp": "2026-04-28T16:34:47.769854Z"}, {"uuid": "095d1207-418f-4d9a-ae28-593cb301c430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55886", "type": "published-proof-of-concept", "source": "https://github.com/xdan/jodit/security/advisories/GHSA-vpmm-x3fm-qr5c", "content": "", "creation_timestamp": "2026-06-16T19:07:20.000000Z"}, {"uuid": "8861a146-cf89-4a34-9c1b-2a60996eff1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55885", "type": "published-proof-of-concept", "source": "https://github.com/getgrav/grav/security/advisories/GHSA-2f86-9cp8-6hcf", "content": "", "creation_timestamp": "2026-06-17T19:15:53.000000Z"}, {"uuid": "5527814d-a62b-4368-826c-517c0f588b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55886", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpo33qzbo72u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55886 \u0432 Jodit Editor: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/042552B2-261B-4CAC-A63D-BC2111919584", "creation_timestamp": "2026-07-02T12:51:15.593402Z"}, {"uuid": "699bad25-90cd-42d7-8259-0b046e8e3a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55884", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqd6f43taq2v", "content": "CVE-2026-55884 - tilt-dev\nA security issue in the Tilt HUD server allows network attackers to access sensitive information and control the Tilt environment. This is because the server does not require\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tiltdev #Golang #CVE #infosec", "creation_timestamp": "2026-07-10T22:16:04.773409Z"}, {"uuid": "155c7887-58d2-45ab-bf8e-ba114a25f9e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55885", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdapxlil62s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55885 \u0432 Grav: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0432\u0435\u0431-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\n\n\n\nhttps://kripta.biz/posts/51FAD0CA-9657-4986-9F48-D2B244E78BC7", "creation_timestamp": "2026-07-10T22:57:56.742593Z"}, {"uuid": "5c893554-9432-4c60-bc31-e6a1590d8c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55885", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdd6ldysy2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55885 \u0432 Grav: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0432\u0435\u0431-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\n\n\n\nhttps://kripta.biz/posts/E610A8EB-CBC8-46D1-9407-FA996311BB68", "creation_timestamp": "2026-07-10T23:41:55.663887Z"}, {"uuid": "23eaedae-19ec-4f75-abc3-6c53e4d43995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55883", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqdfagtiqy2i", "content": "CVE-2026-55883 - Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream\nCVE ID : CVE-2026-55883\n \n Published : July 10, 2026, 10:16 p.m. | 16\u00a0minutes ago\n \n Description : Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.24.0 through 0.37.3...", "creation_timestamp": "2026-07-11T00:18:44.462730Z"}, {"uuid": "53d63d73-856d-4e5e-b1c2-4413adaba5e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55884", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqdgaqaa6427", "content": "CVE-2026-55884 - Tilt: Missing authentication on the network-exposed Tilt HUD server\nCVE ID : CVE-2026-55884\n \n Published : July 10, 2026, 10:16 p.m. | 16\u00a0minutes ago\n \n Description : Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.20.8 throug...", "creation_timestamp": "2026-07-11T00:36:48.076661Z"}, {"uuid": "e9d695c0-e2a5-4fe3-88e6-bc05a16ed5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-55884", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116898753740967653", "content": "CVE-2026-55884: tilt-dev tilt (0.20.8 \u2013 0.37.3) has a CRITICAL auth bypass. Exposes dev resources & session tokens if HUD is bound to non-loopback. Upgrade to 0.37.4 ASAP. https://radar.offseq.com/threat/cve-2026-55884-cwe-306-missing-authentication-for--2fea89f00bf19b8f #OffSeq #Vulnerability #Kubernetes #Infosec", "creation_timestamp": "2026-07-11T01:30:25.809541Z"}, {"uuid": "90697fed-3ee5-4973-b78d-c27404096e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-55884", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqdjao6m3k23", "content": "CRITICAL: tilt-dev tilt (0.20.8 \u2013 0.37.3) is vulnerable to auth bypass (CVE-2026-55884). Remote attackers can access dev resources & session tokens. Upgrade to 0.37.4 now! \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-55884-cwe-306-missing-authentication-for--2fea89f00bf19b8f #OffSeq #Vulnerability ...", "creation_timestamp": "2026-07-11T01:30:27.559829Z"}, {"uuid": "73d013b7-a43b-4f38-af1c-13a894c023c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55880", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdmjdujz22s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55880 \u0432 OpenReplay: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B8B37B53-017E-4693-89BF-266609BA3960", "creation_timestamp": "2026-07-11T02:29:00.051683Z"}, {"uuid": "8d71cea9-4e9f-41ed-bf4f-c3a46eda3ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55881", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdmmtbe2t2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55881 \u0432 OpenReplay: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0578550E-4312-425C-A67D-EBAF32591FF4", "creation_timestamp": "2026-07-11T02:30:56.259420Z"}, {"uuid": "15aba586-db71-41ea-b5f3-1139fecee7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55883", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdq7ecayc2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55883 \u0432 Tilt: \u0443\u0433\u0440\u043e\u0437\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043c\u0438\u043a\u0440\u043e\u0441\u0435\u0440\u0432\u0438\u0441\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 Kubernetes\n\n\n\nhttps://kripta.biz/posts/0F56A36C-A9C3-4BB1-94EB-2B45E6FA6D29", "creation_timestamp": "2026-07-11T03:34:59.342667Z"}, {"uuid": "d51f4b50-c815-48ae-9017-8092e0a708c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55884", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqdv3jbumv2p", "content": "Daily IT Security Digest \u2014 2026-07-11\n# Daily IT Security Digest \u2014 2026-07-11\n\n1. **Tilt HUD Multiple Vulnerabilities (CVE-2026-55884, CVSS 9.2\u20138.3)** \u2014 Tilt, the Kubernetes dev-environment tool, suffers from three critical issues in versions 0.19.5\u20130.37.3. The HUD HTTP server allows", "creation_timestamp": "2026-07-11T05:02:19.147815Z"}, {"uuid": "17f687aa-02f1-4080-9e89-2f1225562b93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55881", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqldxubalv2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55881 \u0432 OpenReplay: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3212A0E7-7EBD-4826-A02C-7165682CAA85", "creation_timestamp": "2026-07-14T04:17:20.777615Z"}, {"uuid": "761b8095-f7c8-477e-8f07-7207f87c64c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55881", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqslxs47t2z", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05de\u05e2\u05e8\u05db\u05ea OpenReplay - CVE-2026-55881 \u05d5\u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/EC713A03-00B0-457C-80FF-242128FAC8EA", "creation_timestamp": "2026-07-16T08:22:26.534883Z"}]}