{"vulnerability": "CVE-2026-4363", "sightings": [{"uuid": "efcc369f-af45-40fc-95a7-6e8f33681496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4363", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260326", "content": "", "creation_timestamp": "2026-03-26T03:00:00.000000Z"}, {"uuid": "2cdd3eb4-f167-4008-a974-2f84875dbbd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4363", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-high-severity-vulnerabilities-gitlab-patch-immediately", "content": "", "creation_timestamp": "2026-03-27T10:02:46.000000Z"}, {"uuid": "7f65143c-fe13-4c9b-a22d-42206e375c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4363", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhvchlod2p25", "content": "", "creation_timestamp": "2026-03-25T14:30:14.721543Z"}, {"uuid": "ac5a37bf-e9bd-4377-8533-2e1e90dce32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4363", "type": "seen", "source": "https://about.gitlab.com/releases/2026/03/25/patch-release-gitlab-18-10-1-released/", "content": "", "creation_timestamp": "2026-03-26T03:00:15.000000Z"}, {"uuid": "e2ff98fc-7d0e-4dd0-aa60-899334d687cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43637", "type": "published-proof-of-concept", "source": "Telegram/UBJmie2uo-nhNRmzuL-Rvz_YulwxG1KXQPPCce6f2SyQJL0", "content": "", "creation_timestamp": "2026-08-03T16:00:05.849013Z"}, {"uuid": "04b9e562-ba71-445c-8a87-b3ae2ad78830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43637", "type": "published-proof-of-concept", "source": "Telegram/fRn9WLRC1KE6ry6fn3owOvcDc4IpJXFhnXNgjnu-Gc8v93I", "content": "", "creation_timestamp": "2026-08-03T16:00:05.378566Z"}, {"uuid": "5a3a5d30-6550-4e54-849c-c0023df9bfa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43639", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvhlnan72e", "content": "\ud83d\udfe0 CVE-2026-43639 - High (8)\n\nBitwarden Server prior to v2026.4.0 contains a missing authorization vulnerability that allows a ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43639/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T18:24:24.832783Z"}, {"uuid": "c15cfc8e-6a22-4652-b679-49d7cad6fd99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43637", "type": "published-proof-of-concept", "source": "Telegram/fRn9WLRC1KE6ry6fn3owOvcDc4IpJXFhnXNgjnu-Gc8v93I", "content": "", "creation_timestamp": "2026-08-04T00:00:33.627242Z"}, {"uuid": "3a766e29-064c-41ea-b6c9-258f834ea2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43634", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm7xbcixbu2e", "content": "CVE-2026-43634 - HestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Header\nCVE ID : CVE-2026-43634\n \n Published : May 19, 2026, 3:16 p.m. | 28\u00a0minutes ago\n \n Description : HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated...", "creation_timestamp": "2026-05-19T17:49:55.377053Z"}, {"uuid": "3ae9c8db-353b-4d61-a17d-a9a92cdba9dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43634", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmalyh2pwc2k", "content": "\ud83d\udfe0 CVE-2026-43634 - High (7.5)\n\nHestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenti...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43634/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-20T00:01:30.423444Z"}, {"uuid": "aed275bc-cb3c-479c-b635-fba2fe017397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43637", "type": "published-proof-of-concept", "source": "Telegram/UBJmie2uo-nhNRmzuL-Rvz_YulwxG1KXQPPCce6f2SyQJL0", "content": "", "creation_timestamp": "2026-08-04T01:00:14.391408Z"}, {"uuid": "284ed6a2-f69c-4044-9fac-5521097a5450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43633", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motneopfss2b", "content": "\ud83d\udea8  ALERT: CVE-2026-43633\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nHestiaCP versions 1.9.0 through 1.9.4 contain a deserialization vulnerability in the web terminal component caused by a session format mismatch between PHP and Node.js that allows unauthenticated remote attackers to achieve root-level code execut", "creation_timestamp": "2026-06-22T00:36:29.335568Z"}, {"uuid": "ab5a9158-6183-415a-b65e-d6f370adf1c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43632", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshcua4zoj2a", "content": "LLama-server Trips, Crashes, and Calls It Enterprise Readiness\nPANIC 48% | Lag 0.0h | CVE-2026-43632 affects llama.cpp llama-server builds b7492 through b9060 and can cause data corrupti\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-07T00:37:09.683365Z"}, {"uuid": "f3da27ed-5d17-4cce-9376-70ebd21c2f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43631", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mshcuej42h2o", "content": "Idle Llama, Remote Control, and the Usual Extinction-Level Confidence\nPANIC 72% | Lag 0.0h | CVE-2026-43631 affects Llama Server versions b7492 through b9060 when idle and a specific feature is\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-07T00:37:14.275164Z"}, {"uuid": "51cbeafa-796d-4688-810d-9113a0c96ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43637", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp53jr3ru2c", "content": "CVE-2026-43637 - Cornac\nCVE ID : CVE-2026-43637\n \n Published : July 15, 2026, 2:18 p.m. | 16\u00a0minutes ago\n \n Description : Cornac before 2.6.0 contains a path traversal (Tar Slip) vulnerability that allows attackers to write arbitrary files outside the intended cache directory ...", "creation_timestamp": "2026-07-15T16:24:46.933110Z"}, {"uuid": "8875eb77-71fb-44d6-823f-7381964d8f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43632", "type": "seen", "source": "https://t.me/hacking_Attack/192751", "content": "llama-cpp-security-patches \u2014 Updated!\n\nSecurity patches for unpatched llama.cpp vulnerabilities (CVE-2026-43626 through CVE-2026-43632) \u2014 Cyera Research\nRead more...", "creation_timestamp": "2026-09-06T14:00:05.703703Z"}, {"uuid": "74c00bcd-c652-49a2-96d3-3873a2c917d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43632", "type": "seen", "source": "https://t.me/hacking_Attack/192751", "content": "llama-cpp-security-patches \u2014 Updated!\n\nSecurity patches for unpatched llama.cpp vulnerabilities (CVE-2026-43626 through CVE-2026-43632) \u2014 Cyera Research\nRead more...", "creation_timestamp": "2026-09-07T01:00:13.324927Z"}, {"uuid": "c17aad25-f62e-41cb-bf36-123d6e7c1b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43639", "type": "seen", "source": "https://t.me/shimiscyberworld/1364", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-11\n\n\ud83d\udcca 17 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 16 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42864 (9.9) \u2014 CVE-2026-42864: Unauthenticated RCE in FireFighter Incident\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-45006 (8.8) \u2014 OpenClaw Improper Access Control Bypasses Denylist, Allows\u2026\n  \u2022 CVE-2026-45223 (8.8) \u2014 CVE-2026-45223: Crabbox Authentication Bypass Allows Admin\u2026\n  \u2022 CVE-2026-42858 (8.5) \u2014 Open edX Platform SSRF via Unvalidated URL Parameter\u2026\n  \u2022 CVE-2026-42860 (8.5) \u2014 Open edX Enterprise Service Vulnerability Allows SSRF via\u2026\n  \u2022 CVE-2026-42313 (8.3) \u2014 CVE-2026-42313: pyLoad Proxy Bypass Exposes Outbound Traffic\n  \u2022 CVE-2026-44413 (8.2) \u2014 JetBrains TeamCity CVE-2026-44413: Authenticated Exposure\u2026\n  \u2022 CVE-2026-42315 (8.1) \u2014 CVE-2026-42315: pyLoad Directory Traversal Puts Data at Risk\n  \u2022 CVE-2026-43640 (8.1) \u2014 Bitwarden Server CVE-2026-43640: SCIM API Key Exposed\u2026\n  \u2022 CVE-2026-41431 (8) \u2014 CVE-2026-41431: Zen Browser Updater Strips Signature\u2026\n  \u2022 CVE-2026-43639 (8) \u2014 Bitwarden Server CVE-2026-43639 Allows Organization\u2026\n  \u2026 and 6 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:07.638446Z"}, {"uuid": "0ba1323c-395e-4c61-ae81-69de46302ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43639", "type": "seen", "source": "https://t.me/shimiscyberworld/1364", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-11\n\n\ud83d\udcca 17 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 16 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42864 (9.9) \u2014 CVE-2026-42864: Unauthenticated RCE in FireFighter Incident\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-45006 (8.8) \u2014 OpenClaw Improper Access Control Bypasses Denylist, Allows\u2026\n  \u2022 CVE-2026-45223 (8.8) \u2014 CVE-2026-45223: Crabbox Authentication Bypass Allows Admin\u2026\n  \u2022 CVE-2026-42858 (8.5) \u2014 Open edX Platform SSRF via Unvalidated URL Parameter\u2026\n  \u2022 CVE-2026-42860 (8.5) \u2014 Open edX Enterprise Service Vulnerability Allows SSRF via\u2026\n  \u2022 CVE-2026-42313 (8.3) \u2014 CVE-2026-42313: pyLoad Proxy Bypass Exposes Outbound Traffic\n  \u2022 CVE-2026-44413 (8.2) \u2014 JetBrains TeamCity CVE-2026-44413: Authenticated Exposure\u2026\n  \u2022 CVE-2026-42315 (8.1) \u2014 CVE-2026-42315: pyLoad Directory Traversal Puts Data at Risk\n  \u2022 CVE-2026-43640 (8.1) \u2014 Bitwarden Server CVE-2026-43640: SCIM API Key Exposed\u2026\n  \u2022 CVE-2026-41431 (8) \u2014 CVE-2026-41431: Zen Browser Updater Strips Signature\u2026\n  \u2022 CVE-2026-43639 (8) \u2014 Bitwarden Server CVE-2026-43639 Allows Organization\u2026\n  \u2026 and 6 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:51.368806Z"}]}