{"uuid": "4766f035-e088-4b0e-b41e-eb869690919f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49819", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117085256775668473", "content": "CVE-2026-49819: UpSnap (4.4.1 \u2013 5.3.5) has a CRITICAL flaw (CVSS 9.8) \u2014 unauthenticated attackers can register a superuser & achieve root RCE via POST /api/upsnap/init-superuser. Upgrade to 5.4.0 ASAP. https://radar.offseq.com/threat/cve-2026-49819-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-f2cf5294c0d169b6 #OffSeq #Vuln #Infosec #RCE", "creation_timestamp": "2026-08-13T00:00:36.805886Z"}