{"vulnerability": "CVE-2026-54433", "sightings": [{"uuid": "51630cf4-1ee8-42dc-b74d-16b0b8e32888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms2mjo3jtk2o", "content": "\u30a6\u30a7\u30d6\u30e1\u30fc\u30eb\u300cRoundcube\u300d\u3001\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u8907\u6570\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\n\u30a6\u30a7\u30d6\u30e1\u30fc\u30eb\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u300cRoundcube Webmail\u300d\u306e\u958b\u767a\u30c1\u30fc\u30e0\u306f\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u3092\u89e3\u6d88\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\n\n...\n\n\u5177\u4f53\u7684\u306b\u306f\u6dfb\u4ed8\u30d5\u30a1\u30a4\u30eb\u306e\u691c\u8a3c\u8b66\u544a\u753b\u9762\u306b\u304a\u3044\u3066\u3001MIME\u30bf\u30a4\u30d7\u304c\u9069\u5207\u306b\u30a8\u30b9\u30b1\u30fc\u30d7\u3055\u308c\u305a\u3001\u683c\u7d0d\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u653b\u6483\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2026-54432\u300d\u3092\u4fee\u6b63\u3057\u305f\n\n\u30d7\u30ec\u30fc\u30f3\u30c6\u30ad\u30b9\u30c8\u306e\u30ec\u30f3\u30c0\u30ea\u30f3\u30b0\u51e6\u7406\u306b\u304a\u3044\u3066\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u308b\u30af\u30ea\u30c3\u30af\u64cd\u4f5c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u3001\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u5b9f\u884c\u3055\u305b\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u683c\u7d0d\u578bXSS\u8106\u5f31\u6027\u300cCVE-2026-54433\u300d...", "creation_timestamp": "2026-08-01T23:25:37.464594Z"}, {"uuid": "ddf06b6e-ded0-457b-8742-32cf5818b961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "seen", "source": "https://t.me/GithubRedTeam/98057", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54433\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aramosf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 14:24:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54433 Roundcube plain-text email stored XSS PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-14T16:00:23.134858Z"}, {"uuid": "a8cef8b3-c591-4e26-be45-152b750b1aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "seen", "source": "https://t.me/GithubRedTeam/98057", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54433\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aramosf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 14:24:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54433 Roundcube plain-text email stored XSS PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-15T00:00:47.433221Z"}, {"uuid": "4dec13c4-1396-439d-982c-9064ab0141b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "seen", "source": "Telegram/K7zXqOYFd1qXyT9LARXPzqWKeQzalprou3AuwisAGlu--nM", "content": "", "creation_timestamp": "2026-08-15T08:00:04.230531Z"}, {"uuid": "e9a2757a-1842-474a-a732-b3f78a134edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpyab3woyr2p", "content": "\ud83d\udd17 CVE : CVE-2026-54432, CVE-2026-54433", "creation_timestamp": "2026-07-06T13:50:20.838129Z"}, {"uuid": "4dda02a8-e53f-4bce-a943-207f1f54e2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq7vmy67ro2v", "content": "A Roundcube zero-click XSS, CVE-2026-54433, lets an email run script with no click. Roundcube 1.7.2 also fixes a second stored XSS. Update now.\n\n#Roundcube #XSS #ZeroClick #Webmail #StoredXSS #CyberSecurity #Vulnerability #InfoSec", "creation_timestamp": "2026-07-09T15:01:27.199485Z"}, {"uuid": "17c92c74-3ca6-46b8-b908-91e93f020e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98057", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54433\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aramosf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 14:24:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-54433 Roundcube plain-text email stored XSS PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-16T00:00:48.999412Z"}, {"uuid": "d42ee640-818c-4fc1-8ebd-c75c4806737e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54433", "type": "published-proof-of-concept", "source": "Telegram/K7zXqOYFd1qXyT9LARXPzqWKeQzalprou3AuwisAGlu--nM", "content": "", "creation_timestamp": "2026-08-16T00:00:48.227432Z"}]}