{"vulnerability": "cve-2026-5344", "sightings": [{"uuid": "48d4573e-48b6-4e6c-ac27-6372530e522e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53441", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnwzyzpdpy2j", "content": "CVE-2026-53441 - Jenkins Stored Cross-Site Scripting\nCVE ID : CVE-2026-53441\n \n Published : June 10, 2026, 2:16 p.m. | 23\u00a0minutes ago\n \n Description : Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided d...", "creation_timestamp": "2026-06-10T15:35:24.733030Z"}, {"uuid": "5114463d-efa4-48c2-adc5-349d624243ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53442", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities_20260617", "content": "", "creation_timestamp": "2026-06-16T18:00:00.000000Z"}, {"uuid": "be406691-7d33-4dd6-a09a-2c4f463f9e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53440", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities_20260617", "content": "", "creation_timestamp": "2026-06-16T18:00:00.000000Z"}, {"uuid": "bfa004fe-184a-46ac-a3f3-1ef604a6e6fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53441", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities_20260617", "content": "", "creation_timestamp": "2026-06-16T18:00:00.000000Z"}, {"uuid": "1f01d159-2d34-4943-8577-50a1ab2b7792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53449", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxlbbnuh2i", "content": "CVE-2026-53449 - Coturn: Arbitrary File Write via CLI psd Command\nCVE ID : CVE-2026-53449\n \n Published : July 10, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, the psd print sessions dump...", "creation_timestamp": "2026-07-10T20:14:15.390874Z"}, {"uuid": "11d09db3-8c77-4b21-a77a-9cd8a2363968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53448", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcye5a7lo27", "content": "CVE-2026-53448 - Coturn: SQL Injection in HTTPS Admin Panel Delete Operations\nCVE ID : CVE-2026-53448\n \n Published : July 10, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.12.0, the coturn HTTP...", "creation_timestamp": "2026-07-10T20:28:10.036656Z"}, {"uuid": "8e2e9584-7690-4a42-bfa1-a727b3db8f8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53449", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhnsjwyw2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53449 \u0432 Coturn: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/04C9F04D-9831-4FDF-A23A-FDE67880CEDD", "creation_timestamp": "2026-07-11T01:02:00.327651Z"}, {"uuid": "5fb6a00c-dad5-4a8b-88fb-9fe10be82054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53448", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdi2a3mob22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53448 \u0432 Coturn: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/CA12350D-1402-4BC9-839F-4CB13A0E3D16", "creation_timestamp": "2026-07-11T01:08:57.534312Z"}, {"uuid": "bb77e9f3-f3e7-4cb4-9b5d-ad01965311e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53449", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlfv66yxs2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53449 \u0432 Coturn: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E58ECDCA-7720-4197-8804-AF3A2043812F", "creation_timestamp": "2026-07-14T04:51:38.244219Z"}, {"uuid": "3323393e-d930-4fe4-bd5c-432dacc1b4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53441", "type": "seen", "source": "https://t.me/pphm_HackerNews/1485", "content": "\ud83d\udd34 Jenkins Patches High-Severity Flaws That Could Lead to Server Takeover\n\nJenkins has released security updates addressing seven vulnerabilities, including a high-severity deserialization flaw (CVE-2026-53435) that could allow attackers to impersonate users, read arbitrary files, and potentially execute code through the Script Console. Another high-severity issue (CVE-2026-53441) enables stored XSS attacks, while additional flaws include open redirects, permission bypasses, and exposure of plaintext secrets. Organizations running Jenkins 2.567 or earlier and LTS 2.555.2 or earlier are urged to upgrade immediately.", "creation_timestamp": "2026-07-22T05:00:04.387005Z"}]}