{"uuid": "79f0fa50-6942-4976-9b55-e8f76c3453ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49869", "type": "seen", "source": "https://bsky.app/profile/nik-kale.bsky.social/post/3mvdsx4hdlh23", "content": "Kestra: CVE-2026-49869 authentication bypass, then container discovery and mining.\n\nPost-compromise looked the same each time. Environment variables harvested, Postgres connection strings pulled, XMRig deployed, SSH keys added, cron edited.", "creation_timestamp": "2026-09-12T19:30:02.718255Z"}