{"vulnerability": "cve-2026-4982", "sightings": [{"uuid": "09fdad25-9e41-4ba2-b01a-5c3dc9d48bcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4982", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi2kshkcor2q", "content": "", "creation_timestamp": "2026-03-27T16:42:47.510796Z"}, {"uuid": "ed44514f-19fb-44da-a3b3-1e7bb59e0474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4982", "type": "seen", "source": "Telegram/LBnoZEkIgYZcAalPk_uHtbpp5d2DNhQfVZICyQC_gDXFXXQ", "content": "", "creation_timestamp": "2026-03-27T15:17:36.000000Z"}, {"uuid": "0aad087d-89d7-42f2-a09c-f95c5410ae7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49821", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxflcnabj26", "content": "CVE-2026-49821 - Fission: Cross-namespace Environment reference in Package allows build-time command execution and SA token exfiltration\nCVE ID : CVE-2026-49821\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an open-source, Kubernetes-nati...", "creation_timestamp": "2026-06-10T19:02:29.091430Z"}, {"uuid": "e4c0b14b-53ad-47c5-b992-aebe6a6939ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49824", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxfttjf2f2q", "content": "CVE-2026-49824 - Fission: Cross-namespace Environment reference via unvalidated EnvironmentRef in Function admission webhook\nCVE ID : CVE-2026-49824\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an open-source, Kubernetes-native serverles...", "creation_timestamp": "2026-06-10T19:07:15.097912Z"}, {"uuid": "fa499135-ebb5-46d6-98c1-c9b78db11111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49822", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxgbtrwgb2e", "content": "CVE-2026-49822 - Fission: Cross-namespace event leakage via KubernetesWatchTrigger allows persistent tenant surveillance\nCVE ID : CVE-2026-49822\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an open-source, Kubernetes-native serverless fr...", "creation_timestamp": "2026-06-10T19:15:07.139798Z"}, {"uuid": "5cf79990-dcc1-4444-a3ae-e00ccc7fd5f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49823", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnxgkin2lm2i", "content": "CVE-2026-49823 - Fission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhook\nCVE ID : CVE-2026-49823\n \n Published : June 10, 2026, 6:17 p.m. | 23\u00a0minutes ago\n \n Description : Fission is an open-source, Kubernetes-native serverless framework t...", "creation_timestamp": "2026-06-10T19:19:55.587666Z"}, {"uuid": "1aa457f5-c5fa-4d5a-94fc-47305dd71c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49823", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnyumzfwqu27", "content": "CVE-2026-49823 - Supply Chain Attack in Fission. Unvalidated PackageRef.Namespace allows cross-namespace access. CVSS 7.7. Patch to 1.24.0 immediately. #CVE #Kubernetes #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-49823/", "creation_timestamp": "2026-06-11T09:04:32.414082Z"}, {"uuid": "b031e2ab-e774-47e3-b5b4-f63845c51145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49827", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117088441310734712", "content": "CVE-2026-49827: SMEWebify WebErpMesv2 \u22641.19 has a CRITICAL vuln \u2014 improper input validation lets any self-registered user achieve unauth'd RCE via PHP file upload (scan_file param). Patch with commit 5c54862fa044b363fd2be03d586750e81afd6818 https://radar.offseq.com/threat/cve-2026-49827-cwe-20-improper-input-validation-in-smewebify-weberpmesv2-aa8118e842cafb70 #OffSeq #CVE202649827 #infosec", "creation_timestamp": "2026-08-13T13:30:28.346074Z"}, {"uuid": "471fe7cf-bd9a-4f02-b799-03fe3cc10cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49827", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msxquljl252n", "content": "SMEWebify WebErpMesv2 \u22641.19 CRITICAL flaw: unauthenticated RCE possible via PHP upload in HR Expense. Patch now with commit 5c54862fa044b363fd2be03d586750e81afd6818 https://radar.offseq.com/threat/cve-2026-49827-cwe-20-improper-input-validation-in-smewebify-weberpmesv2-aa8118e842cafb70 #OffSeq #C...", "creation_timestamp": "2026-08-13T13:30:30.092656Z"}, {"uuid": "6c7c63de-98ec-4b24-961a-4f6f8a524010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49827", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msxsm26xxa2o", "content": "\ud83d\udd34 CVE-2026-49827 - Critical (9.8)\n\nWebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Version...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49827/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-13T14:01:31.349157Z"}, {"uuid": "6e0847ee-9eee-4f9b-82b9-ccb0adbe4d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49827", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxt3ecoeu2e", "content": "CVE-2026-49827\nVersions 1.19 and earlier of WebErpMesv2's HR Expense feature allow anyone to upload their own PHP files, potentially allowing an attacker to execute their own code on the system. This is a concern because it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-13T14:10:04.750834Z"}]}