{"vulnerability": "CVE-2026-4364", "sightings": [{"uuid": "ec932e27-5d3a-4322-bfd7-66ace589e5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mihr4eta2w22", "content": "", "creation_timestamp": "2026-04-01T22:40:19.042564Z"}, {"uuid": "2a82ce95-6e5c-48df-ad6f-8da2977db9fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43646", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ml5mkh2nvi25", "content": "CVE-2026-43646: Apache Wicket: crafted URLs can bypass PackageResourceGuard", "creation_timestamp": "2026-05-06T02:07:40.148381Z"}, {"uuid": "411409d7-db9c-4146-a4bb-09282fa80fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43646", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml76yfunya2r", "content": "\ud83d\udfe0 CVE-2026-43646 - High (7.5)\n\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Wicket.\n\nThis ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43646/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T17:10:18.749409Z"}, {"uuid": "81336988-01c5-4ec9-ab60-95504fb30d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43640", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv3ug34r2k", "content": "\ud83d\udfe0 CVE-2026-43640 - High (8.1)\n\nBitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retri...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43640/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T18:17:51.432800Z"}, {"uuid": "7ab3025f-6ec7-44b2-8d17-925b72df42e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43640", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv3ug34r2k", "content": "\ud83d\udfe0 CVE-2026-43640 - High (8.1)\n\nBitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retri...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43640/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T18:17:51.444383Z"}, {"uuid": "c2e196ab-f577-4342-bde6-9b130179e957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43640", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlygtcyt2i26", "content": "\ud83d\udccc CVE-2026-43640 - Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrieving or rotating an organization's SCIM API key, all... https://www.cyberhub.blog/cves/CVE-2026-43640", "creation_timestamp": "2026-05-16T18:07:08.982098Z"}, {"uuid": "9b2a7953-5d3f-4d52-90c4-989722f2f4c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43640", "type": "seen", "source": "https://t.me/shimiscyberworld/1364", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-11\n\n\ud83d\udcca 17 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 16 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42864 (9.9) \u2014 CVE-2026-42864: Unauthenticated RCE in FireFighter Incident\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-45006 (8.8) \u2014 OpenClaw Improper Access Control Bypasses Denylist, Allows\u2026\n  \u2022 CVE-2026-45223 (8.8) \u2014 CVE-2026-45223: Crabbox Authentication Bypass Allows Admin\u2026\n  \u2022 CVE-2026-42858 (8.5) \u2014 Open edX Platform SSRF via Unvalidated URL Parameter\u2026\n  \u2022 CVE-2026-42860 (8.5) \u2014 Open edX Enterprise Service Vulnerability Allows SSRF via\u2026\n  \u2022 CVE-2026-42313 (8.3) \u2014 CVE-2026-42313: pyLoad Proxy Bypass Exposes Outbound Traffic\n  \u2022 CVE-2026-44413 (8.2) \u2014 JetBrains TeamCity CVE-2026-44413: Authenticated Exposure\u2026\n  \u2022 CVE-2026-42315 (8.1) \u2014 CVE-2026-42315: pyLoad Directory Traversal Puts Data at Risk\n  \u2022 CVE-2026-43640 (8.1) \u2014 Bitwarden Server CVE-2026-43640: SCIM API Key Exposed\u2026\n  \u2022 CVE-2026-41431 (8) \u2014 CVE-2026-41431: Zen Browser Updater Strips Signature\u2026\n  \u2022 CVE-2026-43639 (8) \u2014 Bitwarden Server CVE-2026-43639 Allows Organization\u2026\n  \u2026 and 6 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:07.825702Z"}, {"uuid": "04546a47-78d2-47fe-818d-747e2394f63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43640", "type": "seen", "source": "https://t.me/shimiscyberworld/1364", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-11\n\n\ud83d\udcca 17 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 16 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42864 (9.9) \u2014 CVE-2026-42864: Unauthenticated RCE in FireFighter Incident\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-45006 (8.8) \u2014 OpenClaw Improper Access Control Bypasses Denylist, Allows\u2026\n  \u2022 CVE-2026-45223 (8.8) \u2014 CVE-2026-45223: Crabbox Authentication Bypass Allows Admin\u2026\n  \u2022 CVE-2026-42858 (8.5) \u2014 Open edX Platform SSRF via Unvalidated URL Parameter\u2026\n  \u2022 CVE-2026-42860 (8.5) \u2014 Open edX Enterprise Service Vulnerability Allows SSRF via\u2026\n  \u2022 CVE-2026-42313 (8.3) \u2014 CVE-2026-42313: pyLoad Proxy Bypass Exposes Outbound Traffic\n  \u2022 CVE-2026-44413 (8.2) \u2014 JetBrains TeamCity CVE-2026-44413: Authenticated Exposure\u2026\n  \u2022 CVE-2026-42315 (8.1) \u2014 CVE-2026-42315: pyLoad Directory Traversal Puts Data at Risk\n  \u2022 CVE-2026-43640 (8.1) \u2014 Bitwarden Server CVE-2026-43640: SCIM API Key Exposed\u2026\n  \u2022 CVE-2026-41431 (8) \u2014 CVE-2026-41431: Zen Browser Updater Strips Signature\u2026\n  \u2022 CVE-2026-43639 (8) \u2014 Bitwarden Server CVE-2026-43639 Allows Organization\u2026\n  \u2026 and 6 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:51.304828Z"}]}