{"vulnerability": "cve-2026-5471", "sightings": [{"uuid": "764c1427-8a88-4fcc-b7eb-91fe6bd14e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54712", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoahe26gl2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54712 \u0432 OpenTelemetry Java Instrumentation: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/CD0C985B-497F-45A3-8458-46D3E2BFA6E0", "creation_timestamp": "2026-07-02T14:27:13.117115Z"}, {"uuid": "d1abc36d-06c8-4ba6-8b94-db64eb324045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54712", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7i5u4ck2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54712 \u0432 OpenTelemetry Java Instrumentation: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B6570F91-13C4-4BD5-B3EF-1C74B152A684", "creation_timestamp": "2026-07-03T09:15:06.444880Z"}, {"uuid": "70ae3131-e630-496a-8872-1f816c7749aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54714", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdlbcoelt2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54714 \u0432 Logto: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E53E343E-A208-4454-86B4-EA3B9BC2BD5C", "creation_timestamp": "2026-07-11T02:06:36.026315Z"}, {"uuid": "0e7e4deb-3a43-4c98-9b5f-75d707c9ad91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54713", "type": "seen", "source": "https://gist.github.com/alon710/95bf554559835da78ddd9ef64b2fd7a2", "content": "# CVE-2026-54713: CVE-2026-54713: Idempotency Key Collision and Silent Job Dropping in cakephp/queue\n\n> **CVSS Score:** 3.7\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54713\n\n## Summary\nAn incomplete array comparison vulnerability in cakephp/queue version 0.1.11 through 2.3.0 allows unauthenticated attackers to cause key collisions in unique job deduplication. This is caused by standard array value sorting that discards associative keys, normalizing different payload keys to identical arrays and leading to a denial of service (DoS) by dropping legitimate jobs.\n\n## TL;DR\nA key-erasure flaw in cakephp/queue's deduplication mechanism allows distinct job parameters to resolve to identical unique hashes, enabling attackers to silently drop legitimate background jobs.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1023\n- **Attack Vector**: Network (AC: High)\n- **CVSS Score**: 3.7\n- **EPSS Score**: 0.00\n- **Impact**: Availability (Low)\n- **Exploit Status**: Proof-of-Concept / None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- cakephp/queue\n- **cakephp/queue**: >= 0.1.11, < 2.3.1 (Fixed in: `2.3.1`)\n\n## Mitigation\n\n- Upgrade cakephp/queue to version 2.3.1 or newer\n- Implement strict validation schemas for job parameters to prevent arbitrary key injections\n- Avoid utilizing user-controlled values directly in background job arguments when duplicate prevention is enabled\n\n**Remediation Steps:**\n1. Locate composer.json in your application root directory\n2. Update the dependency version: change 'cakephp/queue' requirement to '^2.3.1' or newer\n3. Run 'composer update cakephp/queue' to fetch and apply the updated dependency package\n4. Execute unit and integration tests to ensure that existing queue configurations work correctly with recursive key sorting\n\n## References\n\n- [GitHub Security Advisory GHSA-r5pm-vrc5-3m73](https://github.com/cakephp/queue/security/advisories/GHSA-r5pm-vrc5-3m73)\n- [Fix Commit](https://github.com/cakephp/queue/commit/13890591e248acc8824becb24ba1939fa061bd34)\n- [Pull Request #188](https://github.com/cakephp/queue/pull/188)\n- [Tag / Release v2.3.1](https://github.com/cakephp/queue/releases/tag/2.3.1)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-54713)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54713) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-28T01:31:29.551350Z"}, {"uuid": "a357fccf-23a0-4e3f-b5d8-01101423f13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54718", "type": "seen", "source": "https://gist.github.com/alon710/bec19cdcf2926727440026551fd338c7", "content": "# CVE-2026-54718: CVE-2026-54718: Remote Code Execution via Advanced Workflow Email Template in Silverstripe\n\n> **CVSS Score:** 7.2\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54718\n\n## Summary\nA Server-Side Template Injection (SSTI) vulnerability in the Silverstripe Advanced Workflow module allows authenticated attackers with workflow authoring permissions to achieve arbitrary code execution. By manipulating the NotifyUsersWorkflowAction.EmailTemplate field, attackers can inject template code that dynamically executes arbitrary PHP commands via the core translation helper interpolation path.\n\n## TL;DR\nAn authenticated template injection vulnerability in Silverstripe Advanced Workflow allows high-privileged users to achieve Remote Code Execution via translation tag interpolation.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1336\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 7.2 (High)\n- **EPSS Score**: N/A (Recently Disclosed)\n- **Impact**: Remote Code Execution (RCE)\n- **Exploit Status**: PoC Available in Regression Tests\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Silverstripe CMS installations utilizing Advanced Workflow module (< 6.4.5, 7.x < 7.1.3, 7.2.x < 7.2.1)\n- **silverstripe-advancedworkflow**: < 6.4.5 (Fixed in: `6.4.5`)\n- **silverstripe-advancedworkflow**: >= 7.0.0, < 7.1.3 (Fixed in: `7.1.3`)\n- **silverstripe-advancedworkflow**: >= 7.2.0, < 7.2.1 (Fixed in: `7.2.1`)\n\n## Mitigation\n\n- Upgrade Silverstripe core packages to versions incorporating the hardened template parser engine.\n- Restrict raw web-writable execution patterns inside standard public directories.\n- Deploy Web Application Firewall rules targeting translation-tag nesting structures.\n\n**Remediation Steps:**\n1. Navigate to the root directory of the Silverstripe project.\n2. Run 'composer update silverstripe/framework silverstripe/template-engine symbiote/silverstripe-advancedworkflow'.\n3. Verify that silverstripe/template-engine is version 1.0.1 or higher (v6 projects) or silverstripe/framework is 5.4.30 or higher (v5 projects).\n4. Rebuild the template manifest using 'sake dev/build' or '?flush=all' in the browser.\n\n## References\n\n- [GitHub Security Advisory GHSA-39mm-rwm3-29jp](https://github.com/silverstripe/silverstripe-advancedworkflow/security/advisories/GHSA-39mm-rwm3-29jp)\n- [Pull Request #629](https://github.com/silverstripe/silverstripe-advancedworkflow/pull/629)\n- [Pull Request #630](https://github.com/silverstripe/silverstripe-advancedworkflow/pull/630)\n- [Silverstripe Core Security Bulletin CVE-2026-54718](https://www.silverstripe.org/download/security-releases/cve-2026-54718)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54718) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-27T20:32:16.461677Z"}, {"uuid": "a5403097-2c2d-4b97-bf9c-814f8a2463c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54719", "type": "seen", "source": "https://gist.github.com/alon710/9b8006195456ffdcd967a102fe0db5d4", "content": "# CVE-2026-54719: CVE-2026-54719: Access Control List Authorization Bypass in goshs via bulk ZIP Download Route\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54719\n\n## Summary\nCVE-2026-54719 is a high-severity Access Control List (ACL) authorization bypass vulnerability in goshs, a lightweight HTTPS-capable server used for file sharing. The issue allows unauthenticated network attackers to completely bypass file-level and directory-level authentication mechanisms and blocklists by requesting protected resources via the bulk ZIP-download route (?bulk). This vulnerability represents a residual flaw following a partial remediation attempt for CVE-2026-40189.\n\n## TL;DR\nUnauthenticated network attackers can completely bypass directory-level basic authentication and file blocklists in goshs by requesting protected files via the ?bulk ZIP-download route. This flaw is resolved in version 2.1.1.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862, CWE-863\n- **Attack Vector**: Network\n- **CVSS Base Score**: 7.5 (High)\n- **EPSS Score**: 0.00% (Insufficient telemetry data)\n- **Impact**: Unauthenticated arbitrary file read under the server's webroot\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- goshs (goshs-labs)\n- **goshs**: < 2.1.1 (Fixed in: `v2.1.1`)\n\n## Mitigation\n\n- Upgrade goshs to version 2.1.1 or newer\n- Apply global basic authentication via the server's command-line configuration arguments (-b)\n- Block bulk-download query parameters using a reverse proxy or Web Application Firewall (WAF)\n\n**Remediation Steps:**\n1. Audit all deployed goshs systems to identify instances running versions prior to 2.1.1\n2. Download and compile goshs version 2.1.1 or pull the updated release binary from the official repository\n3. If updating cannot be completed immediately, modify reverse proxy configurations to intercept and drop HTTP requests containing the '?bulk' query parameter\n4. Deploy global basic authentication configuration keys to ensure all requests undergo centralized validation before routing\n\n## References\n\n- [GHSA-rmxw-pq4x-3fvh: ACL authorization bypass via ?bulk](https://github.com/goshs-labs/goshs/security/advisories/GHSA-rmxw-pq4x-3fvh)\n- [Fix Commit: Add ACL/Blocklist verification to bulkDownload](https://github.com/goshs-labs/goshs/commit/7cf911a26ace737e1a55b7dc073e307a25f7fd1d)\n- [goshs v2.1.1 Release Notes](https://github.com/goshs-labs/goshs/releases/tag/v2.1.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54719) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-28T22:30:56.630790Z"}, {"uuid": "9528a3fa-caf2-4d6a-9d3e-a2c4a8ea25a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54719", "type": "published-proof-of-concept", "source": "https://github.com/goshs-labs/goshs/security/advisories/GHSA-rmxw-pq4x-3fvh", "content": "", "creation_timestamp": "2026-07-28T22:35:03.730787Z"}, {"uuid": "8c82b4f1-e43e-4085-b171-1e6aa21d6cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54719", "type": "seen", "source": "https://gist.github.com/alon710/9b8006195456ffdcd967a102fe0db5d4", "content": "# CVE-2026-54719: CVE-2026-54719: Access Control List Authorization Bypass in goshs via bulk ZIP Download Route\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54719\n\n## Summary\nCVE-2026-54719 is a high-severity Access Control List (ACL) authorization bypass vulnerability in goshs, a lightweight HTTPS-capable server used for file sharing. The issue allows unauthenticated network attackers to completely bypass file-level and directory-level authentication mechanisms and blocklists by requesting protected resources via the bulk ZIP-download route (?bulk). This vulnerability represents a residual flaw following a partial remediation attempt for CVE-2026-40189.\n\n## TL;DR\nUnauthenticated network attackers can completely bypass directory-level basic authentication and file blocklists in goshs by requesting protected files via the ?bulk ZIP-download route. This flaw is resolved in version 2.1.1.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862, CWE-863\n- **Attack Vector**: Network\n- **CVSS Base Score**: 7.5 (High)\n- **EPSS Score**: 0.00% (Insufficient telemetry data)\n- **Impact**: Unauthenticated arbitrary file read under the server's webroot\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- goshs (goshs-labs)\n- **goshs**: < 2.1.1 (Fixed in: `v2.1.1`)\n\n## Mitigation\n\n- Upgrade goshs to version 2.1.1 or newer\n- Apply global basic authentication via the server's command-line configuration arguments (-b)\n- Block bulk-download query parameters using a reverse proxy or Web Application Firewall (WAF)\n\n**Remediation Steps:**\n1. Audit all deployed goshs systems to identify instances running versions prior to 2.1.1\n2. Download and compile goshs version 2.1.1 or pull the updated release binary from the official repository\n3. If updating cannot be completed immediately, modify reverse proxy configurations to intercept and drop HTTP requests containing the '?bulk' query parameter\n4. Deploy global basic authentication configuration keys to ensure all requests undergo centralized validation before routing\n\n## References\n\n- [GHSA-rmxw-pq4x-3fvh: ACL authorization bypass via ?bulk](https://github.com/goshs-labs/goshs/security/advisories/GHSA-rmxw-pq4x-3fvh)\n- [Fix Commit: Add ACL/Blocklist verification to bulkDownload](https://github.com/goshs-labs/goshs/commit/7cf911a26ace737e1a55b7dc073e307a25f7fd1d)\n- [goshs v2.1.1 Release Notes](https://github.com/goshs-labs/goshs/releases/tag/v2.1.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54719) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T00:00:29.211206Z"}, {"uuid": "d9460be9-917e-4e69-84c5-95445dae2f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54719", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqmn3mrjz2d", "content": "\ud83d\udfe0 CVE-2026-54719 - High (7.5)\n\ngoshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.1,...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54719/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T00:00:53.945782Z"}, {"uuid": "4b6fade2-855a-4a0a-b939-d52f819ce3e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54712", "type": "seen", "source": "https://gist.github.com/alon710/e40fc20ed683aaeeae74fc5b1a713445", "content": "# CVE-2026-54712: CVE-2026-54712: Uncontrolled Resource Consumption in OpenTelemetry Javaagent RMI Context Propagation\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-07-29\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54712\n\n## Summary\nAn uncontrolled resource consumption vulnerability in the OpenTelemetry Javaagent RMI context propagation mechanism allows remote unauthenticated attackers to cause a Denial of Service (DoS) via heap memory exhaustion.\n\n## TL;DR\nOpenTelemetry Javaagent prior to 2.27.0 allows unauthenticated remote attackers to trigger heap memory exhaustion and Denial of Service (DoS) by sending oversized RMI context propagation payloads.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **Vulnerability Type**: Uncontrolled Resource Consumption\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- OpenTelemetry Javaagent\n- OpenTelemetry Java Instrumentation\n- **OpenTelemetry Java Instrumentation**: >= 2.26.1, < 2.27.0 (Fixed in: `2.27.0`)\n\n## Mitigation\n\n- Upgrade OpenTelemetry Javaagent to version 2.27.0 or later.\n- Disable RMI instrumentation via configuration.\n- Restrict network access to RMI ports using firewalls and security groups.\n\n**Remediation Steps:**\n1. Identify all JVM instances running with the OpenTelemetry Javaagent in versions >= 2.26.1 and < 2.27.0.\n2. If immediate upgrade is possible, download the 2.27.0 Javaagent jar and replace the existing agent jar.\n3. If immediate upgrade is not possible, apply the JVM system property `-Dotel.instrumentation.rmi.enabled=false` or set the environment variable `OTEL_INSTRUMENTATION_RMI_ENABLED=false`.\n4. Restart the affected Java Virtual Machine to apply the changes.\n5. Verify that RMI registry and endpoint ports are firewalled and inaccessible to untrusted external networks.\n\n## References\n\n- [GHSA-fq3f-m5qm-99f5: Uncontrolled Resource Consumption in OpenTelemetry Javaagent RMI Context Propagation](https://github.com/open-telemetry/opentelemetry-java-instrumentation/security/advisories/GHSA-fq3f-m5qm-99f5)\n- [Remediation Patch Pull Request (#17870)](https://github.com/open-telemetry/opentelemetry-java-instrumentation/pull/17870)\n- [Remediation Commit (6ef1880)](https://github.com/open-telemetry/opentelemetry-java-instrumentation/commit/6ef18806d5daa4913619e4cb33d2d7ed6a853c22)\n- [Official Release v2.27.0](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/tag/v2.27.0)\n- [NVD Official Vulnerability Record (CVE-2026-54712)](https://nvd.nist.gov/vuln/detail/CVE-2026-54712)\n- [CVE.org Authoritative Vulnerability Detail](https://www.cve.org/CVERecord?id=CVE-2026-54712)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54712) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T20:31:26.638418Z"}]}