{"vulnerability": "cve-2026-5456", "sightings": [{"uuid": "66eb87f4-1a7f-43dc-88d7-81a9d63c3405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5456", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3milckx2ssm2s", "content": "", "creation_timestamp": "2026-04-03T08:30:41.037962Z"}, {"uuid": "a5c40f05-204c-47df-a0fb-c71ed7a0a2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54560", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp5yw2ad72s", "content": "CVE-2026-54560 - Cloudreve: OAuth access tokens bypass scope enforcement due to missing client_id claim\nCVE ID : CVE-2026-54560\n \n Published : July 15, 2026, 2:40 p.m. | 37\u00a0minutes ago\n \n Description : Cloudreve is a self-hosted file management and sharing system. From 4.12.0 ...", "creation_timestamp": "2026-07-15T16:41:12.865413Z"}, {"uuid": "04ba5586-1792-4206-b296-b254b183198d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54562", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp6ah3co52i", "content": "CVE-2026-54562 - Cloudreve: Non-admin remote download users can SSRF loopback/internal services and read imported responses\nCVE ID : CVE-2026-54562\n \n Published : July 15, 2026, 2:37 p.m. | 40\u00a0minutes ago\n \n Description : Cloudreve is a self-hosted file management and sharing ...", "creation_timestamp": "2026-07-15T16:45:25.631593Z"}, {"uuid": "e91d9b66-0d5d-4047-b5ab-6745b9893c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7zq7njw22", "content": "CVE-2026-54563 - Cloudreve: Path Traversal / Broken Access Control in Cloudreve WebDAV (`/dav`) \u2014 scoped DAV credential escapes its configured account root\nCVE ID : CVE-2026-54563\n \n Published : July 15, 2026, 2:38 p.m. | 38\u00a0minutes ago\n \n Description : Cloudreve is a self-hos...", "creation_timestamp": "2026-07-15T17:17:27.605477Z"}, {"uuid": "c27fbdf9-19c4-44d6-ac72-d06298c01551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54569", "type": "published-proof-of-concept", "source": "https://github.com/senaite/senaite.core/security/advisories/GHSA-jrw6-7x4q-w25j", "content": "", "creation_timestamp": "2026-08-26T16:35:06.033833Z"}, {"uuid": "c396090d-ca34-4a0c-bb70-05547ec30a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54563", "type": "published-proof-of-concept", "source": "https://github.com/cloudreve/cloudreve/security/advisories/GHSA-w5fv-7x5q-g8qp", "content": "", "creation_timestamp": "2026-08-26T16:35:10.977252Z"}, {"uuid": "7356027c-9f3e-4480-b4ab-b37fd986343d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54567", "type": "published-proof-of-concept", "source": "https://github.com/jugmac00/flask-reuploaded/security/advisories/GHSA-937x-gpqr-72gg", "content": "", "creation_timestamp": "2026-07-17T22:35:08.204309Z"}, {"uuid": "f6be9f81-03ed-413e-b6de-89bc0f0c6748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54569", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtywgakaxb2t", "content": "\ud83d\udea8 CVE-2026-54569 \u2014 CVSS 9.8 CRITICAL\n\nSENAITE.CORE is the core framework for the SENAITE laboratory information management system. From 2.0.0 to ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54569\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-26T18:07:52.209254Z"}, {"uuid": "4239582c-a46b-4c80-991d-b2d49b8de1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54569", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzgtizrlp27", "content": "\ud83d\udd34 CVE-2026-54569 - Critical (9.8)\n\nSENAITE.CORE is the core framework for the SENAITE laboratory information management system. From...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54569/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T23:01:27.913218Z"}, {"uuid": "2b9200ab-18e4-47bb-962a-9d5e4c6f36d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54569", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6347h3c52f", "content": "CVE-2026-54569 - senaite.core\nVersions 2.0.0 to 2.6.0 of the SENAITE laboratory system allow anyone on the network to send specially crafted requests that cause the server to execute arbitrary code. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#senaitecore #pip #CVE #infosec", "creation_timestamp": "2026-09-10T12:40:04.916397Z"}]}