{"vulnerability": "CVE-2026-4443", "sightings": [{"uuid": "42c87c2a-82b4-4a28-b7a5-cf09c9e862fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4443", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmpmkibrq2u", "content": "", "creation_timestamp": "2026-03-22T04:31:41.949674Z"}, {"uuid": "3d00c006-2c3e-456f-a653-95d951f9f19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4443", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260324", "content": "", "creation_timestamp": "2026-03-24T01:00:00.000000Z"}, {"uuid": "9ec435bd-be33-4dc5-99e7-5652528c1065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44431", "type": "seen", "source": "https://bsky.app/profile/releaseport.com/post/3mlpdu7su4t23", "content": "Local Deep Research 1.6.10 patches CVE-2026-44431\nSSRF parser-differential bypass fix closes attack vector exploiting parser differences.\nUpgrade carefully.\n\n\u2192 releaseport.com/r/learningcircuit-local-deep-research/v1-6-10", "creation_timestamp": "2026-05-13T03:20:00.074483Z"}, {"uuid": "98404913-d952-4b31-b939-ffdc8fb56571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44431", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlrc3kjxjt2o", "content": "CVE-2026-44431 - urllib3: Sensitive headers forwarded across origins in proxied low-level redirects\nCVE ID : CVE-2026-44431\n \n Published : May 13, 2026, 4:16 p.m. | 4\u00a0hours, 8\u00a0minutes ago\n \n Description : urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0,...", "creation_timestamp": "2026-05-13T21:53:37.704871Z"}, {"uuid": "1dcb38a6-6844-4459-b1a2-24203ed5ab70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlu6biqaqu2t", "content": "CVE-2026-44430 - MCP Registry: Unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist\nCVE ID : CVE-2026-44430\n \n Published : May 14, 2026, 9:16 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : The MC...", "creation_timestamp": "2026-05-15T01:23:21.421075Z"}, {"uuid": "38f3511d-5f18-4a12-b3f8-75a06de89e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44431", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3h6v5lm2e", "content": "\ud83d\udd17 CVE : CVE-2026-34956, CVE-2026-44431, CVE-2026-46483, CVE-2026-41091, CVE-2026-45498, CVE-2026-45584, CVE-2026-34956, CVE-2026-41091, CVE-2026-44431, CVE-2026-45498, CVE-2026-45584, CVE-2026-46483", "creation_timestamp": "2026-05-20T14:10:07.720068Z"}, {"uuid": "7fcf8e9c-0780-4847-9c71-4a96bb06b243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44432", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mmeepj5mw62c", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-44432 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/521 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-05-21T12:01:09.754679Z"}, {"uuid": "63587dc0-3e98-49b2-b96e-06ef9efc279c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44431", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mmeepg5y472v", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-44431 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/520 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-05-21T12:01:06.554255Z"}, {"uuid": "7163c10d-d54a-408c-818e-2f04610004f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44430", "type": "published-proof-of-concept", "source": "https://github.com/modelcontextprotocol/registry/security/advisories/GHSA-r48c-v28r-pf6v", "content": "", "creation_timestamp": "2026-05-04T14:46:47.000000Z"}, {"uuid": "b2af0c71-60a7-4fbf-8959-f4b5a762234c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44431", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mplm5jmhxk2r", "content": "\ud83d\udea8 Administradores Rocky Linux 8: RLSA-2026:32992 corrige duas vulnerabilidades cr\u00edticas no python3.12-urllib3: vazamento de headers sens\u00edveis (CVE-2026-44431) e DoS por amplifica\u00e7\u00e3o de descompress\u00e3o (CVE-2026-44432). Saiba mais: -> tinyurl.com/yc8aeujn #RockyLinux", "creation_timestamp": "2026-07-01T13:18:32.263917Z"}, {"uuid": "d6458342-27af-410a-afa7-18397be3a3e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44432", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mplm5jmhxk2r", "content": "\ud83d\udea8 Administradores Rocky Linux 8: RLSA-2026:32992 corrige duas vulnerabilidades cr\u00edticas no python3.12-urllib3: vazamento de headers sens\u00edveis (CVE-2026-44431) e DoS por amplifica\u00e7\u00e3o de descompress\u00e3o (CVE-2026-44432). Saiba mais: -> tinyurl.com/yc8aeujn #RockyLinux", "creation_timestamp": "2026-07-01T13:18:32.306548Z"}, {"uuid": "e26e13b8-2271-4086-bcd7-b8f145877222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsi3ly4ji2o", "content": "CVE-2026-44435 - Quicly: Remote Denial of Service via assertion failure when CRYPTO stream handshake data exceeds 32KB\nCVE ID : CVE-2026-44435\n \n Published : July 16, 2026, 11:16 p.m. | 18\u00a0minutes ago\n \n Description : Quicly is an IETF QUIC protocol implementation intended pri...", "creation_timestamp": "2026-07-17T00:19:40.501263Z"}, {"uuid": "a2d50ab9-c751-4ac3-9840-40e7cc337bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44436", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqshsngfzf2s", "content": "CVE-2026-44436 - Quicly is vulnerable to connection state corruption\nCVE ID : CVE-2026-44436\n \n Published : July 16, 2026, 11:16 p.m. | 18\u00a0minutes ago\n \n Description : Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior t...", "creation_timestamp": "2026-07-17T00:14:39.099157Z"}, {"uuid": "a7c362f5-a3df-40ac-be9b-2659743de931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44433", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsiekmvuy2e", "content": "CVE-2026-44433 - Quicly is vulnerable to memory exhaustion\nCVE ID : CVE-2026-44433\n \n Published : July 16, 2026, 11:16 p.m. | 18\u00a0minutes ago\n \n Description : Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8...", "creation_timestamp": "2026-07-17T00:24:39.866509Z"}, {"uuid": "7c5b7613-3580-49fc-80eb-681d4caaf423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44434", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsinjcw2422", "content": "CVE-2026-44434 - Quicly is vulnerable to stateless reset injection\nCVE ID : CVE-2026-44434\n \n Published : July 16, 2026, 11:16 p.m. | 18\u00a0minutes ago\n \n Description : Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to ...", "creation_timestamp": "2026-07-17T00:29:40.641028Z"}, {"uuid": "a00d17af-0fa2-4241-acd1-e072f0a6f80b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44436", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116935695382326647", "content": "CVE-2026-44436 - High-severity DoS in Quicly (H2O HTTP server). Connection ID handling flaw can corrupt state. CVSS 7.5. No patch available yet. Monitor for updates. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-44436/", "creation_timestamp": "2026-07-17T14:05:12.799427Z"}]}