{"vulnerability": "CVE-2026-4401", "sightings": [{"uuid": "e5add874-7e20-4790-92b6-6bf71a5bc926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4401", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miwytkwmbm2z", "content": "", "creation_timestamp": "2026-04-08T00:08:29.703559Z"}, {"uuid": "478999cf-56a0-424a-85ab-f25df4d513b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4401", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4401", "content": "", "creation_timestamp": "2026-04-07T15:16:05.000000Z"}, {"uuid": "dce28f31-54fb-4df3-8133-3b9abc228523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44015", "type": "published-proof-of-concept", "source": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-wr32-99hh-6f35", "content": "", "creation_timestamp": "2026-04-22T11:15:44.000000Z"}, {"uuid": "5f445b42-1714-432c-9402-ca1d09e9d09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44010", "type": "seen", "source": "https://www.acn.gov.it/portale/w/craft-cms-disponibili-poc-per-lo-sfruttamento-delle-cve-2026-44010-e-cve-2026-44011", "content": "Disponibili Proof of Concept (PoC) per le vulnerabilit\u00e0 CVE-2026-44010 e CVE-2026-44011 - gi\u00e0 sanate dal vendor - presenti in Craft CMS. Tali vulnerabilit\u00e0, qualora sfruttate, potrebbe consentire ad un utente malintenzionato remoto di eseguire codice arbitrario o di accedere ad informazioni sensibili sui sistemi interessati.", "creation_timestamp": "2026-05-14T12:17:47.000000Z"}, {"uuid": "056e09e6-9deb-4dde-9d19-a0470a9dd8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44011", "type": "seen", "source": "https://www.acn.gov.it/portale/w/craft-cms-disponibili-poc-per-lo-sfruttamento-delle-cve-2026-44010-e-cve-2026-44011", "content": "Disponibili Proof of Concept (PoC) per le vulnerabilit\u00e0 CVE-2026-44010 e CVE-2026-44011 - gi\u00e0 sanate dal vendor - presenti in Craft CMS. Tali vulnerabilit\u00e0, qualora sfruttate, potrebbe consentire ad un utente malintenzionato remoto di eseguire codice arbitrario o di accedere ad informazioni sensibili sui sistemi interessati.", "creation_timestamp": "2026-05-14T12:17:47.000000Z"}, {"uuid": "015668f7-9a5b-4682-90f2-d8c1f043ac4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4401", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjwsd4fjsv2s", "content": "", "creation_timestamp": "2026-04-20T15:37:06.820802Z"}, {"uuid": "5b581bf8-16c4-4e1b-aba8-7ed6ded967c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44010", "type": "published-proof-of-concept", "source": "https://github.com/craftcms/cms/security/advisories/GHSA-gj2p-p9m4-c8gw", "content": "", "creation_timestamp": "2026-04-27T20:09:30.000000Z"}]}