{"vulnerability": "cve-2026-4364", "sightings": [{"uuid": "ec932e27-5d3a-4322-bfd7-66ace589e5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mihr4eta2w22", "content": "", "creation_timestamp": "2026-04-01T22:40:19.042564Z"}, {"uuid": "2a82ce95-6e5c-48df-ad6f-8da2977db9fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43646", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ml5mkh2nvi25", "content": "CVE-2026-43646: Apache Wicket: crafted URLs can bypass PackageResourceGuard", "creation_timestamp": "2026-05-06T02:07:40.148381Z"}, {"uuid": "411409d7-db9c-4146-a4bb-09282fa80fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43646", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76yfunya2r", "content": "\ud83d\udfe0 CVE-2026-43646 - High (7.5)\n\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Wicket.\n\nThis ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43646/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T17:10:18.749409Z"}, {"uuid": "81336988-01c5-4ec9-ab60-95504fb30d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43640", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv3ug34r2k", "content": "\ud83d\udfe0 CVE-2026-43640 - High (8.1)\n\nBitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retri...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43640/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T18:17:51.432800Z"}, {"uuid": "c2e196ab-f577-4342-bde6-9b130179e957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43640", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlygtcyt2i26", "content": "\ud83d\udccc CVE-2026-43640 - Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrieving or rotating an organization's SCIM API key, all... https://www.cyberhub.blog/cves/CVE-2026-43640", "creation_timestamp": "2026-05-16T18:07:08.982098Z"}, {"uuid": "9b2a7953-5d3f-4d52-90c4-989722f2f4c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43640", "type": "seen", "source": "https://t.me/shimiscyberworld/1364", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-11\n\n\ud83d\udcca 17 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 16 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42864 (9.9) \u2014 CVE-2026-42864: Unauthenticated RCE in FireFighter Incident\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-45006 (8.8) \u2014 OpenClaw Improper Access Control Bypasses Denylist, Allows\u2026\n  \u2022 CVE-2026-45223 (8.8) \u2014 CVE-2026-45223: Crabbox Authentication Bypass Allows Admin\u2026\n  \u2022 CVE-2026-42858 (8.5) \u2014 Open edX Platform SSRF via Unvalidated URL Parameter\u2026\n  \u2022 CVE-2026-42860 (8.5) \u2014 Open edX Enterprise Service Vulnerability Allows SSRF via\u2026\n  \u2022 CVE-2026-42313 (8.3) \u2014 CVE-2026-42313: pyLoad Proxy Bypass Exposes Outbound Traffic\n  \u2022 CVE-2026-44413 (8.2) \u2014 JetBrains TeamCity CVE-2026-44413: Authenticated Exposure\u2026\n  \u2022 CVE-2026-42315 (8.1) \u2014 CVE-2026-42315: pyLoad Directory Traversal Puts Data at Risk\n  \u2022 CVE-2026-43640 (8.1) \u2014 Bitwarden Server CVE-2026-43640: SCIM API Key Exposed\u2026\n  \u2022 CVE-2026-41431 (8) \u2014 CVE-2026-41431: Zen Browser Updater Strips Signature\u2026\n  \u2022 CVE-2026-43639 (8) \u2014 Bitwarden Server CVE-2026-43639 Allows Organization\u2026\n  \u2026 and 6 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:07.825702Z"}, {"uuid": "a4ded400-201d-4602-8c63-fff4eaaab8dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43641", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4zc3tmwt2r", "content": "CVE-2026-43641 - virtualizor\nThe Virtualizor control panel (versions before 3.2.9) can be tricked into running any command on the server without a password. This gives a remote attacker full control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#virtualizor #softaculous #CVE #infosec", "creation_timestamp": "2026-09-22T20:00:07.545214Z"}, {"uuid": "53b50183-2b4a-4fe5-8896-f626ccb1ef52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43642", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4zc65rb52j", "content": "CVE-2026-43642 - virtualizor\nThe Virtualizor control panel (versions before 3.2.9 and 3.0.0) lets anyone on the internet send specially crafted data to its billing feature, causing the server to run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#virtualizor #softaculous #CVE #infosec", "creation_timestamp": "2026-09-22T20:00:09.969563Z"}, {"uuid": "b86b5bcd-3f62-4461-9b41-3935ff62907a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43642", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4zrsuqn625", "content": "\ud83d\udea8 CVE-2026-43642 \u2014 CVSS 9.2 CRITICAL\n\nSoftaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains a PHP object injection vulnerability in t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-43642\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T20:08:53.937912Z"}, {"uuid": "7074a7be-ac75-4005-acef-cd78c4dc25a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43641", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4zrjr4v62b", "content": "\ud83d\udea8 CVE-2026-43641 \u2014 CVSS 9.3 CRITICAL\n\nSoftaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an OS command injection vulnerability in ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-43641\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T20:08:44.369910Z"}]}