{"vulnerability": "cve-2026-5366", "sightings": [{"uuid": "5cfacb90-f761-4815-802b-c9cd67c12dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53661", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnzr2bnmce25", "content": "CVE-2026-53661 - boruta-server sent sensitive session cookies without the Secure attribute\nCVE ID : CVE-2026-53661\n \n Published : June 11, 2026, 2:16 p.m. | 2\u00a0hours, 48\u00a0minutes ago\n \n Description : Boruta is a standalone authorization server that aims to implement OAuth 2.0 an...", "creation_timestamp": "2026-06-11T17:33:01.997351Z"}, {"uuid": "bd724169-559b-48b5-999f-c92ecf092935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5366", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moqngff2oa2u", "content": "CVE-2026-5366 - Git Argument Injection in prefecthq/prefect\nCVE ID : CVE-2026-5366\n \n Published : June 20, 2026, 4:43 p.m. | 2\u00a0hours, 59\u00a0minutes ago\n \n Description : Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input...", "creation_timestamp": "2026-06-20T19:59:27.604188Z"}, {"uuid": "ba7661d4-f981-460b-8e0f-562ecad2c7c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5366", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116785154318795848", "content": "CVE-2026-5366 (CRITICAL, CVSS 9.9): prefecthq/prefect 3.6.23 lets users with deployment creation rights inject git flags via commit_sha/directories in GitRepository, enabling remote code exec. Restrict permissions & monitor updates. https://radar.offseq.com/threat/cve-2026-5366-cwe-94-improper-control-of-generatio-ef5838b1259ff631 #OffSeq #CVE20265366 #infosec", "creation_timestamp": "2026-06-21T00:00:42.065702Z"}, {"uuid": "e1417af8-e243-46f4-853c-3ddd8b377be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53662", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116802848530420895", "content": "immich-app suffers CRITICAL reflected XSS (CVE-2026-53662) in /auth/login (commits 4ffa26c9 \u2013 4eb1003). Exploitation = persistent account takeover via API key minting. Update to commit 4eb1003 or later. https://radar.offseq.com/threat/cve-2026-53662-cwe-79-improper-neutralization-of-i-088d09407e2bf58b #OffSeq #CVE202653662 #XSS #infosec", "creation_timestamp": "2026-06-24T03:00:29.307456Z"}, {"uuid": "9a7f0178-3a16-444f-a40e-c0bd665ba6a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5366", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnklw3gq72y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-5366 \u0432 Prefect 3.6.23: \u0443\u0433\u0440\u043e\u0437\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\n\n\n\nhttps://kripta.biz/posts/B5F13C49-5E41-4B3F-94AF-5338A01CA2F1", "creation_timestamp": "2026-07-02T07:56:04.149129Z"}, {"uuid": "d873f20c-be82-4a08-91ae-5aa1ab30287a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5366", "type": "seen", "source": "https://t.me/GithubRedTeam/90845", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a prefect-cve-2026-5366\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a renat0z3r0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-27 13:44:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-5366: git argument injection in Prefect's GitRepository leading to RCE on the worker.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:18.284346Z"}, {"uuid": "5540748c-2c51-4dfe-b6b3-75e73bf0eb41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5366", "type": "seen", "source": "https://t.me/GithubRedTeam/90845", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a prefect-cve-2026-5366\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a renat0z3r0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-27 13:44:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-5366: git argument injection in Prefect's GitRepository leading to RCE on the worker.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:34.603158Z"}, {"uuid": "745798d8-faac-4629-89e9-8e691669b77e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5366", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90845", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a prefect-cve-2026-5366\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a renat0z3r0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-27 13:44:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-5366: git argument injection in Prefect's GitRepository leading to RCE on the worker.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:21.484658Z"}, {"uuid": "6e472da2-6827-4fa4-a1ad-ecf87c08680f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5366", "type": "seen", "source": "Telegram/om3YhtaPu5txmcqgS2vE6wxr9r90wWmyuf596mxiJ-5mabI", "content": "", "creation_timestamp": "2026-07-16T19:00:29.746868Z"}, {"uuid": "7715989d-c843-4399-8814-1d4de24f2dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5366", "type": "seen", "source": "Telegram/ChI_-_yuP3aEKC_gSwO4QBcx90clvJ_NicXYpP6AzBpj5p0", "content": "", "creation_timestamp": "2026-07-16T19:00:29.705642Z"}, {"uuid": "61e69cd3-98f9-447f-acbf-9cc5ffac0b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5366", "type": "seen", "source": "Telegram/ChI_-_yuP3aEKC_gSwO4QBcx90clvJ_NicXYpP6AzBpj5p0", "content": "", "creation_timestamp": "2026-07-17T00:00:46.341097Z"}, {"uuid": "8b9d784c-f52b-4afa-a145-aba84f7ad864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5366", "type": "seen", "source": "Telegram/om3YhtaPu5txmcqgS2vE6wxr9r90wWmyuf596mxiJ-5mabI", "content": "", "creation_timestamp": "2026-07-17T00:00:46.391576Z"}, {"uuid": "432bddb5-c2f0-4941-a96e-8054f0798795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5366", "type": "published-proof-of-concept", "source": "Telegram/om3YhtaPu5txmcqgS2vE6wxr9r90wWmyuf596mxiJ-5mabI", "content": "", "creation_timestamp": "2026-07-18T02:00:05.542108Z"}, {"uuid": "406948c0-6ca2-437a-88ad-4e705b8834b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5366", "type": "published-proof-of-concept", "source": "Telegram/ChI_-_yuP3aEKC_gSwO4QBcx90clvJ_NicXYpP6AzBpj5p0", "content": "", "creation_timestamp": "2026-07-18T02:00:05.624666Z"}, {"uuid": "05d57bf0-5ab4-4ab6-b562-30b0edf90532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5366", "type": "published-proof-of-concept", "source": "Telegram/om3YhtaPu5txmcqgS2vE6wxr9r90wWmyuf596mxiJ-5mabI", "content": "", "creation_timestamp": "2026-07-19T00:00:40.368544Z"}, {"uuid": "4b965292-ff6c-4816-b387-60b985388dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5366", "type": "published-proof-of-concept", "source": "Telegram/ChI_-_yuP3aEKC_gSwO4QBcx90clvJ_NicXYpP6AzBpj5p0", "content": "", "creation_timestamp": "2026-07-19T00:00:40.450617Z"}, {"uuid": "077bc255-2a50-4efc-b731-0e6724b48828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53668", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mro7glu6nf2x", "content": "CVE-2026-53668 - React Router: Open redirect can lead to XSS\nCVE ID : CVE-2026-53668\n \n Published : July 27, 2026, 10:17 p.m. | 1\u00a0hour, 39\u00a0minutes ago\n \n Description : React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications ...", "creation_timestamp": "2026-07-28T00:59:17.547207Z"}]}