{"vulnerability": "CVE-2026-5357", "sightings": [{"uuid": "d8c36658-727c-4e31-bb9c-d4006f3a04e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5357", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mizwjg3uwt24", "content": "", "creation_timestamp": "2026-04-09T04:05:00.761597Z"}, {"uuid": "ff9e0cad-a3d3-4da4-b6ca-efef9eca2144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5357", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjtk5zr37f2c", "content": "", "creation_timestamp": "2026-04-19T08:33:07.057881Z"}, {"uuid": "5c17a8c7-4e06-4c29-8456-f3aba7051c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53571", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-fx2h-pf6j-xcff", "content": "", "creation_timestamp": "2026-06-15T17:17:45.000000Z"}, {"uuid": "579e9266-799c-4243-a10e-6f413e23f775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53571", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3movzya3cb62w", "content": "CVE-2026-53571 - Vite: `server.fs.deny` bypass on Windows alternate paths\nCVE ID : CVE-2026-53571\n \n Published : June 22, 2026, 4:10 p.m. | 6\u00a0hours, 59\u00a0minutes ago\n \n Description : Vite is a frontend tooling framework for JavaScript. Prior to 8.0.16, 7.3.5, and 6.4.3, the cont...", "creation_timestamp": "2026-06-22T23:27:29.590594Z"}, {"uuid": "c8d29760-9a26-40f1-a938-89b836c7d4d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7xlajhsm2c", "content": "CVE-2026-53576 - Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass\nCVE ID : CVE-2026-53576\n \n Published : June 26, 2026, 8:54 p.m. | 51\u00a0minutes ago\n \n Description : Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21,...", "creation_timestamp": "2026-06-26T22:11:07.058367Z"}, {"uuid": "62bcdbd0-072d-4346-bae9-903ec875020c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53577", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp7xqoommh2c", "content": "CVE-2026-53577 - Kestra: Cross-Execution File Read via Preview Endpoint (IDOR)\nCVE ID : CVE-2026-53577\n \n Published : June 26, 2026, 8:52 p.m. | 53\u00a0minutes ago\n \n Description : Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the previ...", "creation_timestamp": "2026-06-26T22:14:06.892725Z"}, {"uuid": "1ed10e2f-2fba-4d4d-bc68-271f43658b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpcar4z6g52m", "content": "\ud83d\udd34 CVE-2026-53576 - Critical (10)\n\nKestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the au...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-53576/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-27T20:00:45.761022Z"}, {"uuid": "19bb0ffb-ed27-46b9-8a40-8f719d07919d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53577", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7bzbop323", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53577 \u0432 Kestra: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/80FDDF47-D10D-440A-B6AF-B6A2A5BABB2F", "creation_timestamp": "2026-06-29T19:17:43.961565Z"}, {"uuid": "20bc9422-d9a2-48b7-a0ff-ef944d902917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph7ptxd372g", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53576 \u0432 Kestra: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1BEFAC14-C675-4AE0-85E9-34FD8CEEDED6", "creation_timestamp": "2026-06-29T19:25:26.475312Z"}, {"uuid": "4e94baed-8072-40b0-bdb4-c27a128db7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53571", "type": "seen", "source": "https://bsky.app/profile/schalkneethling.com/post/3mpjckjjgns2u", "content": "CVE-2026-53571 - GitHub Advisory Database | vite: `server.fs.deny` bypass on Windows alternate paths | github.com/advisories/G...", "creation_timestamp": "2026-06-30T15:21:29.912413Z"}, {"uuid": "2c64f270-c428-46af-9c3a-60599f7c4826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplmbxn6nz2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53576 \u0432 Kestra: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/E6570207-92D9-4D2E-AFF9-AA2B23045554", "creation_timestamp": "2026-07-01T13:20:58.219622Z"}, {"uuid": "fbb1cb71-7efd-4cca-b3d3-1d90e318b604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53577", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplmeplavi24", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53577 \u0432 Kestra: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FC9C0D6E-0FB4-4B8F-8157-E7CCEA02D082", "creation_timestamp": "2026-07-01T13:22:30.601544Z"}, {"uuid": "82a03a71-9d3a-4fd5-98e2-261ca4ba039b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53576", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpmyrl7qpd2y", "content": "\ud83d\udccc CVE-2026-53576 - Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, the authentication filter for the REST API (@Filter(\"/api/v... https://www.cyberhub.blog/cves/CVE-2026-53576", "creation_timestamp": "2026-07-02T02:37:06.786969Z"}, {"uuid": "91f470d2-d88d-4f9e-be43-0895d9635bba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53572", "type": "published-proof-of-concept", "source": "https://github.com/kedacore/keda/security/advisories/GHSA-6w3m-4hhp-775q", "content": "", "creation_timestamp": "2026-07-08T00:35:03.232071Z"}, {"uuid": "763b8409-5bf3-453c-9632-23c6ade9cbcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53571", "type": "seen", "source": "https://t.me/GithubRedTeam/92600", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53571\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TazmiDev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 02:02:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53571 `server.fs.deny` bypass on Windows alternate paths PoC.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.584205Z"}, {"uuid": "ec4229ba-e7e1-4950-9176-c3d0bf14ac77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53571", "type": "seen", "source": "https://t.me/GithubRedTeam/92600", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53571\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TazmiDev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 02:02:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53571 `server.fs.deny` bypass on Windows alternate paths PoC.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:09.969574Z"}, {"uuid": "31955672-1dfd-4bc4-abe2-32122c8ba97e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53571", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92600", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53571\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TazmiDev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 02:02:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53571 `server.fs.deny` bypass on Windows alternate paths PoC.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:33.718979Z"}, {"uuid": "49d88db5-76ba-44dd-b4b0-a9176092370d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53571", "type": "seen", "source": "Telegram/6m6dGls3SVbnMfcPh4fTGVTtq9PM_FkzO8XLFj_ObpdXkqs", "content": "", "creation_timestamp": "2026-07-16T19:00:15.723016Z"}, {"uuid": "b1f28e1e-d1b5-4662-8d98-fbd996511c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53571", "type": "seen", "source": "Telegram/6m6dGls3SVbnMfcPh4fTGVTtq9PM_FkzO8XLFj_ObpdXkqs", "content": "", "creation_timestamp": "2026-07-17T00:00:31.169398Z"}, {"uuid": "8dd17f68-42d4-4d51-8354-0c4b195b9b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53571", "type": "published-proof-of-concept", "source": "Telegram/6m6dGls3SVbnMfcPh4fTGVTtq9PM_FkzO8XLFj_ObpdXkqs", "content": "", "creation_timestamp": "2026-07-18T00:00:41.556715Z"}, {"uuid": "615a1f1c-d8f2-4eb5-b071-3e62b47c1710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53571", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr2rwm44wg2s", "content": "\ud83d\udccc CVE-2026-53571 - Vite is a frontend tooling framework for JavaScript. Prior to 8.0.16, 7.3.5, and 6.4.3, the contents of files that are specified by server.fs.deny can... https://www.cyberhub.blog/cves/CVE-2026-53571", "creation_timestamp": "2026-07-20T07:37:07.130850Z"}]}