{"vulnerability": "cve-2026-4401", "sightings": [{"uuid": "e5add874-7e20-4790-92b6-6bf71a5bc926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4401", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miwytkwmbm2z", "content": "", "creation_timestamp": "2026-04-08T00:08:29.703559Z"}, {"uuid": "478999cf-56a0-424a-85ab-f25df4d513b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4401", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4401", "content": "", "creation_timestamp": "2026-04-07T15:16:05.000000Z"}, {"uuid": "015668f7-9a5b-4682-90f2-d8c1f043ac4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4401", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjwsd4fjsv2s", "content": "", "creation_timestamp": "2026-04-20T15:37:06.820802Z"}, {"uuid": "5f445b42-1714-432c-9402-ca1d09e9d09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44010", "type": "seen", "source": "https://www.acn.gov.it/portale/w/craft-cms-disponibili-poc-per-lo-sfruttamento-delle-cve-2026-44010-e-cve-2026-44011", "content": "Disponibili Proof of Concept (PoC) per le vulnerabilit\u00e0 CVE-2026-44010 e CVE-2026-44011 - gi\u00e0 sanate dal vendor - presenti in Craft CMS. Tali vulnerabilit\u00e0, qualora sfruttate, potrebbe consentire ad un utente malintenzionato remoto di eseguire codice arbitrario o di accedere ad informazioni sensibili sui sistemi interessati.", "creation_timestamp": "2026-05-14T12:17:47.000000Z"}, {"uuid": "056e09e6-9deb-4dde-9d19-a0470a9dd8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "seen", "source": "https://www.acn.gov.it/portale/w/craft-cms-disponibili-poc-per-lo-sfruttamento-delle-cve-2026-44010-e-cve-2026-44011", "content": "Disponibili Proof of Concept (PoC) per le vulnerabilit\u00e0 CVE-2026-44010 e CVE-2026-44011 - gi\u00e0 sanate dal vendor - presenti in Craft CMS. Tali vulnerabilit\u00e0, qualora sfruttate, potrebbe consentire ad un utente malintenzionato remoto di eseguire codice arbitrario o di accedere ad informazioni sensibili sui sistemi interessati.", "creation_timestamp": "2026-05-14T12:17:47.000000Z"}, {"uuid": "dce28f31-54fb-4df3-8133-3b9abc228523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44015", "type": "published-proof-of-concept", "source": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-wr32-99hh-6f35", "content": "", "creation_timestamp": "2026-04-22T11:15:44.000000Z"}, {"uuid": "5b581bf8-16c4-4e1b-aba8-7ed6ded967c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44010", "type": "published-proof-of-concept", "source": "https://github.com/craftcms/cms/security/advisories/GHSA-gj2p-p9m4-c8gw", "content": "", "creation_timestamp": "2026-04-27T20:09:30.000000Z"}, {"uuid": "75540112-5036-4709-8c91-40424ba30742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44012", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mtbinmwrzz2n", "content": "\ud83d\udd12 Security Alert: A critical RCE in Fast-API-Router (CVE-2026-44012) is making waves. Our latest roundup covers the technical breakdown and remediation steps you need to secure your API infrastructure. Check it out: https://cvedatabase.com/blog/weekly-cve-roundup-critical-rce-in-f...", "creation_timestamp": "2026-08-17T10:30:04.723070Z"}, {"uuid": "6bc375c1-b399-4b1a-b0e5-a7ac6eb3849d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44016", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp2vv5x5om2p", "content": "CVE-2026-44016 - Docling: Unsafe Playwright-based HTML Rendering\nCVE ID : CVE-2026-44016\n \n Published : June 24, 2026, 5:42 p.m. | 3\u00a0hours, 28\u00a0minutes ago\n \n Description : Docling simplifies document processing by parsing diverse formats and providing integrations with the gen...", "creation_timestamp": "2026-06-24T21:57:30.648617Z"}, {"uuid": "fad54fd5-01da-4296-af63-0be3c8416b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44019", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqse4yoyu52o", "content": "CVE-2026-44019 - Docling Core has insufficient validation of image reference URIs\nCVE ID : CVE-2026-44019\n \n Published : July 16, 2026, 9:17 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : Docling Core defines core data types and transformations for the document processing appl...", "creation_timestamp": "2026-07-16T23:08:51.287793Z"}, {"uuid": "f66c355a-f46a-4faf-932d-2c313e88e8c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44016", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr2huq63ax2y", "content": "\ud83d\udccc CVE-2026-44016 - Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82.0,... https://www.cyberhub.blog/cves/CVE-2026-44016", "creation_timestamp": "2026-07-20T04:37:06.885322Z"}, {"uuid": "d3f1acae-9222-4e82-a2b2-bbf5cc32ff37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103500", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-44011-craftcms-auth-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4xura\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 06:57:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe PoC of CVE-2026-44011: Craft CMS, from 4.0.0 to before 4.17.12 and 5.9.18, contains an input-handling flaw in a Yii object creation path that let any authenticated user inject malicious configuration and execute arbitrary commands on the server.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T07:00:07.000000Z"}, {"uuid": "7509b923-9444-47f8-87f1-3467af9f20d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103581", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-44011-craft-rce-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cyberuser-hash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 20:41:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-44011-craft-rce-poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T21:00:08.000000Z"}, {"uuid": "b66620e2-75c6-41bb-b00d-aec81428f5bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103571", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-44011-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DENNISDGR\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 19:02:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAuthenticated Craft CMS RCE PoC for CVE-2026-44011\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-27T19:07:02.000000Z"}, {"uuid": "4f11adba-ca75-481e-bbed-952cec426a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "seen", "source": "https://t.me/GithubRedTeam/103594", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-44011-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a khush-613\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 22:11:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T00:00:08.000000Z"}, {"uuid": "4bbbb7a1-4fad-4a02-a78f-47f2af980d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103594", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-44011-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a khush-613\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-27 22:11:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-28T00:00:08.000000Z"}, {"uuid": "b80520dc-cc62-443a-b543-e4ffcecf5067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "seen", "source": "Telegram/yXVzrAnyMVzUsfnjfkALrfBcKxKGxOpo3xtfae2jh7WYEoo", "content": "", "creation_timestamp": "2026-09-28T09:00:04.000000Z"}, {"uuid": "357575a7-1ba6-44b6-84ee-e922c3c86c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "seen", "source": "Telegram/ZYEgVbVs2lphQ2UloJblawcxk2rWuZEAzuuZc6khwnlTmkQ", "content": "", "creation_timestamp": "2026-09-28T03:00:16.000000Z"}, {"uuid": "4169ef0b-30ca-46ae-b99a-b9db91285211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "seen", "source": "Telegram/OlS7mOCYJDdHF5bGuQyV5ccTCVSJsR8ZTmdToM9KjFzseyE", "content": "", "creation_timestamp": "2026-09-28T03:00:06.000000Z"}, {"uuid": "5ade2b9a-7482-4db2-86fe-c453fb2d9b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "seen", "source": "Telegram/8MEljeuzrAecwW2JZuMlZ_8lhVdmg06Hvcm7mYkrERJsk-Q", "content": "", "creation_timestamp": "2026-09-27T23:00:16.000000Z"}, {"uuid": "9039e05d-45e4-4160-9948-18db287afd1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "seen", "source": "Telegram/CdF6JMV09WezdbaZoReYlkMDU3Zc8hBRHWgcu5NeqT62-1A", "content": "", "creation_timestamp": "2026-09-27T15:00:07.000000Z"}, {"uuid": "93c3e36a-42b4-418f-b748-dd578c2ab139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "published-proof-of-concept", "source": "Telegram/OlS7mOCYJDdHF5bGuQyV5ccTCVSJsR8ZTmdToM9KjFzseyE", "content": "", "creation_timestamp": "2026-09-28T03:00:06.000000Z"}, {"uuid": "4ce90506-eec3-4817-897d-fb2d458bc0ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "published-proof-of-concept", "source": "Telegram/ZYEgVbVs2lphQ2UloJblawcxk2rWuZEAzuuZc6khwnlTmkQ", "content": "", "creation_timestamp": "2026-09-28T03:00:16.000000Z"}, {"uuid": "a70d6f4c-38b5-4e81-8c9d-cf927bcc3906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "published-proof-of-concept", "source": "Telegram/8MEljeuzrAecwW2JZuMlZ_8lhVdmg06Hvcm7mYkrERJsk-Q", "content": "", "creation_timestamp": "2026-09-27T23:00:16.000000Z"}, {"uuid": "97f1b127-e7b1-43bd-96dc-ac203160b349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "published-proof-of-concept", "source": "Telegram/yXVzrAnyMVzUsfnjfkALrfBcKxKGxOpo3xtfae2jh7WYEoo", "content": "", "creation_timestamp": "2026-09-28T09:00:04.000000Z"}, {"uuid": "e1ea76fd-bf88-461a-9e89-de3203cf1c97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "published-proof-of-concept", "source": "Telegram/CdF6JMV09WezdbaZoReYlkMDU3Zc8hBRHWgcu5NeqT62-1A", "content": "", "creation_timestamp": "2026-09-27T15:00:07.000000Z"}, {"uuid": "a9f16e86-f9e9-40e3-b53b-be59ba420bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104051", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CraftCMS-CVE-2026-44011-PoC-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xyngtg\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-02 10:47:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis is a PoC of the CVE-2026-44011 found by precicom-vincent-tl. For more details check: https://github.com/advisories/GHSA-qrgm-p9w5-rrfw\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-02T11:00:13.000000Z"}, {"uuid": "480ddba3-150c-4f4f-aa90-ed78002f326e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "seen", "source": "Telegram/QJcp8mMVwkckmWy2vNERi0JIp0XH67UiGqcKrYMaZc7iixE", "content": "", "creation_timestamp": "2026-10-02T21:00:04.000000Z"}, {"uuid": "5af6933b-27fb-4220-aaff-a826e8840a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "published-proof-of-concept", "source": "Telegram/QJcp8mMVwkckmWy2vNERi0JIp0XH67UiGqcKrYMaZc7iixE", "content": "", "creation_timestamp": "2026-10-02T21:00:04.000000Z"}]}