{"vulnerability": "CVE-2026-4458", "sightings": [{"uuid": "1b9f9312-6b17-44e2-b4c5-ccdcef11f01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4458", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmakgu54z26", "content": "", "creation_timestamp": "2026-03-22T00:02:04.941458Z"}, {"uuid": "fa440393-29f7-4f3f-9f3a-905c3d19662a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4458", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260324", "content": "", "creation_timestamp": "2026-03-24T01:00:00.000000Z"}, {"uuid": "66f4add0-19c1-41a8-9acf-cc7ea9fe7d78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4458", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116260295615191694", "content": "", "creation_timestamp": "2026-03-20T07:22:07.626073Z"}, {"uuid": "2f48febe-2f4a-43b6-9a1c-275d4306b03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44581", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mlcfbrg7m62h", "content": "#NextJS and #React Server Components hit with 12 vulnerabilities with 3 high-severity vulns (CVE-2026-44574, CVE-2026-44578, CVE-2026-44581) requiring the most urgent attention and impacting virtually every production NextJS deployment - patch now!", "creation_timestamp": "2026-05-07T23:40:51.848273Z"}, {"uuid": "5ecf479d-94a4-4477-a4bc-27e7fac68668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44582", "type": "published-proof-of-concept", "source": "https://t.me/htfgtps/1107", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-\n2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-\n44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576,\nCVE-2026-44582, CVE-2026-44572\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-05-11T06:42:58.000000Z"}, {"uuid": "98db7cea-02fd-46e4-88ba-1186939142db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44580", "type": "published-proof-of-concept", "source": "https://t.me/htfgtps/1107", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-\n2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-\n44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576,\nCVE-2026-44582, CVE-2026-44572\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-05-11T06:42:58.000000Z"}, {"uuid": "7cd9ef22-53d5-4993-910d-f06d9c4933a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44587", "type": "published-proof-of-concept", "source": "https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-7g26-2qgj-chfg", "content": "", "creation_timestamp": "2026-05-23T05:40:33.000000Z"}, {"uuid": "c0110a23-7d93-443e-b6e8-a3b226675117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44588", "type": "published-proof-of-concept", "source": "https://github.com/siyuan-note/siyuan/security/advisories/GHSA-25rp-h46x-2hjm", "content": "", "creation_timestamp": "2026-05-05T05:57:59.000000Z"}, {"uuid": "48637b85-34d1-4f07-9691-630711351d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44587", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mohfhrsnfp2j", "content": "CVE-2026-44587 - CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters\nCVE ID : CVE-2026-44587\n \n Published : June 16, 2026, 11:10 p.m. | 2\u00a0hours, 31\u00a0minutes ago\n \n Description : CarrierWave is a framework to upload files from Ruby applications. I...", "creation_timestamp": "2026-06-17T03:43:06.524653Z"}, {"uuid": "38a1d75c-bd35-458b-bca7-c22e4efe4c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44580", "type": "seen", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-09T03:00:04.659207Z"}, {"uuid": "1e4b747a-83cc-49b4-8b99-538cf07204f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44582", "type": "seen", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-09T03:00:04.782877Z"}, {"uuid": "c6a89d35-2396-4b1a-b832-cac0a66f717e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44581", "type": "seen", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-09T03:00:04.878032Z"}, {"uuid": "dc439bea-a826-4124-a47b-d3bb323def04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44580", "type": "seen", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-10T00:00:11.775293Z"}, {"uuid": "fc01e890-566e-4e26-8768-19d0d9d526b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44582", "type": "seen", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-10T00:00:11.935969Z"}, {"uuid": "799a21ee-49aa-4086-88ec-510dab98f302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44581", "type": "seen", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-10T00:00:12.052902Z"}, {"uuid": "f617cc41-8d61-4cf6-87bf-8f35c4ec19c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44581", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-11T09:00:04.324603Z"}, {"uuid": "94d5cf12-a1cb-46a9-9278-bde29854a9ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44582", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-11T09:00:04.432973Z"}, {"uuid": "63738310-593f-456f-a98a-4485a8a3cf3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44580", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-11T09:00:04.545929Z"}, {"uuid": "c1a84904-1e0d-46c6-a2b7-be27c939fc03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44581", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-12T00:00:52.994830Z"}, {"uuid": "e9574dec-80e0-4d02-a352-13a66e49d9ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44582", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-12T00:00:53.109176Z"}, {"uuid": "8c9fa39b-5813-4e24-8342-c8197677b655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44580", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2701", "content": "CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572\n\nhttps://github.com/dwisiswant0/next-16.2.4-pocs", "creation_timestamp": "2026-07-12T00:00:53.227831Z"}, {"uuid": "c39b8f66-e1b1-4a0f-a44f-13dc03e7735e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44583", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4bzhro4d2i", "content": "CVE-2026-44583 - Paymenter: Blind Unauthenticated SSRF on the Paypal gateway module\nCVE ID : CVE-2026-44583\n \n Published : July 20, 2026, 9:16 p.m. | 28\u00a0minutes ago\n \n Description : Paymenter is a free and open-source webshop solution for management of hosting services. In ver...", "creation_timestamp": "2026-07-20T21:57:42.923484Z"}, {"uuid": "57cee65e-f2ec-49a3-a8fa-effda981620a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4cci3qkg23", "content": "CVE-2026-44584 - Paymenter doesn't reset email verification status after email change\nCVE ID : CVE-2026-44584\n \n Published : July 20, 2026, 9:16 p.m. | 28\u00a0minutes ago\n \n Description : Paymenter is a free and open-source webshop solution for management of hosting services. In v...", "creation_timestamp": "2026-07-20T22:02:45.161166Z"}, {"uuid": "db08f169-a980-49df-92c6-24ec630289c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44585", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4duk7rjn2g", "content": "CVE-2026-44585 - Paymenter: Broken object level authorization via service reference manipulation on ticket creation\nCVE ID : CVE-2026-44585\n \n Published : July 20, 2026, 9:16 p.m. | 28\u00a0minutes ago\n \n Description : Paymenter is a free and open-source webshop solution for manage...", "creation_timestamp": "2026-07-20T22:30:45.416879Z"}]}