{"vulnerability": "cve-2026-1444", "sightings": [{"uuid": "3a42558c-20a0-40ff-90b5-7374f8ab9d1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1444", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdem7el4hk2t", "content": "", "creation_timestamp": "2026-01-27T01:28:33.417157Z"}, {"uuid": "f9b45219-c5ff-4ecc-a563-e570941b4b88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-14446", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:48:06.182357Z"}, {"uuid": "9124c79f-4bb4-457a-8b3a-8fdd18e55ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmsckanzm2k", "content": "CVE-2026-14440 - Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records\nCVE ID : CVE-2026-14440\n \n Published : July 1, 2026, 10:35 p.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : Description:\n\n\n\n\nTo issue and renew TLS certificates o...", "creation_timestamp": "2026-07-02T00:41:20.402582Z"}, {"uuid": "c6ab9d80-6f47-43cd-bf4b-85121f1d4260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpods3piie27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14440 \u0432 Cloudflare: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/DB63B140-6706-4C6F-B5B0-4FECBBDB038B", "creation_timestamp": "2026-07-02T15:26:54.733662Z"}, {"uuid": "6cf8c096-71fa-4d76-b6ba-eec62edbc6d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq7sdapjc2j", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-14440 \u0432 Cloudflare: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1084A1FA-DEB3-4B91-8E6F-C80B891A4855", "creation_timestamp": "2026-07-03T09:20:47.226459Z"}, {"uuid": "8964130d-7a2e-4e6e-ab77-4b1e9d832975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/david-osipov.vision/post/3mq4ydbfzrs2n", "content": "My first CVE is public: CVE-2026-14440!\n\nCloudflare Universal SSL / CAA / RFC 8657.\n\nNot a breach, not one-click. But it shows how default certificate automation can override stricter domain-owner controls.\n\nFound & reported by me.\n\nnvd.nist.gov/vuln/detail/...", "creation_timestamp": "2026-07-08T11:11:55.552397Z"}, {"uuid": "452951b6-6c84-4808-824d-bd7df04a0810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/david-osipov.vision/post/3mq4ydjzqzk2n", "content": "My first CVE is public: CVE-2026-14440!\n\nCloudflare Universal SSL / CAA / RFC 8657.\n\nNot a breach, not one-click. But it shows how default certificate automation can override stricter domain-owner controls.\n\nFound & reported by me.\n\nnvd.nist.gov/vuln/detail/...", "creation_timestamp": "2026-07-08T11:11:56.012047Z"}, {"uuid": "fbda6c45-ec3c-4ae6-8d5a-a7590c2e745e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/david-osipov.vision/post/3mq4ydjzrys2n", "content": "My first CVE is public: CVE-2026-14440!\n\nCloudflare Universal SSL / CAA / RFC 8657.\n\nNot a breach, not one-click. But it shows how default certificate automation can override stricter domain-owner controls.\n\nFound & reported by me.\n\nnvd.nist.gov/vuln/detail/...", "creation_timestamp": "2026-07-08T11:11:56.456773Z"}, {"uuid": "4e3e60c4-8e29-491d-8a9b-47f2cf8d3210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mq7f6d5kyc2p", "content": "\ud83d\udd12 CVE-2026-14440: Cloudflare Universal SSL CAA records supersede user CAA\n\nA vulnerability (CVE-2026-14440) in Cloudflare's Universal SSL feature causes its automatically managed CA...\n\nhttps://tinyurl.com/28eoa32e #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-07-09T10:06:54.661341Z"}, {"uuid": "0fccc108-d6c0-472b-a78b-2aea08e24271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mqbsvbppz72k", "content": "CVE-2026-14440: Cloudflare Universal SSL y los registros CAA\n\n\u00bfTu dominio en Cloudflare Universal SSL est\u00e1 expuesto? Verific\u00e1 tus registros CAA en 5 minutos y fren\u00e1 la emisi\u00f3n de certificados fraudulentos por CVE-2...\n\n#cve202614440 #cloudflare #universalssl #registroscaa #rfc8657", "creation_timestamp": "2026-07-10T09:17:50.140494Z"}, {"uuid": "663a2cdd-0517-486a-bea6-2837fe740269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mqsc5xnqsk2a", "content": "[NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding \u2014 CVE-2026-14440 assigned 163 days after public no-CVE disclosure\n\nPosted by NotCVE Advisories on Jul 15---------------------------------------------------------------------------- \nNotCV\u2026\n#hackernews #news", "creation_timestamp": "2026-07-16T22:33:37.118655Z"}, {"uuid": "a7cdd494-0db6-4395-8a0f-210b5c6b4a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://david-osipov.vision/en/blog/cybersecurity/cloudflare-ssl-mitm-flaw-2026/", "content": "", "creation_timestamp": "2026-07-17T20:23:22.433117Z"}, {"uuid": "f204a7e4-2bf2-41b7-8605-1d0c749db0e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://vulnerability.circl.lu/comment/8df693d3-38e3-4ee0-b4a5-e8d95d54dac9", "content": "", "creation_timestamp": "2026-07-17T20:29:56.261584Z"}, {"uuid": "80f27bf9-6d34-4a88-b8bc-6f9fe182aefb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://david-osipov.vision/ru/blog/cybersecurity/cloudflare-ssl-mitm-flaw-2026/", "content": "", "creation_timestamp": "2026-07-18T10:02:42.319820Z"}, {"uuid": "d4ff7b65-76dd-41db-b538-9a6c449a010c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://community.cloudflare.com/t/critical-security-gap-cloudflare-must-fully-support-rfc-8657-caa/", "content": "", "creation_timestamp": "2026-07-18T10:03:35.591662Z"}, {"uuid": "da4f4bb4-83ed-4144-90f0-fd3578664994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://community.cloudflare.com/t/universal-ssl-exposes-domains-to-bgp-leaks-re-venezuela-analysis/879930", "content": "", "creation_timestamp": "2026-07-18T10:03:51.109804Z"}, {"uuid": "1d3d3111-20a9-43ad-91fd-046dcba1c70b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://zenodo.org/records/18330221", "content": "", "creation_timestamp": "2026-07-18T10:04:01.301175Z"}, {"uuid": "100cc962-9f9a-48c8-983d-45d63b0c30a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://zenodo.org/records/21261469", "content": "", "creation_timestamp": "2026-07-18T10:04:24.564152Z"}, {"uuid": "21fbc417-97fb-409c-904b-e3cca81b7721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "confirmed", "source": "https://doi.org/10.5281/zenodo.18201411", "content": "", "creation_timestamp": "2026-07-18T10:04:39.622458Z"}, {"uuid": "434e7d0a-b2a8-45b2-a83b-bf2c0c68ecf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://www.instagram.com/reel/DaX5IpqRGHG/", "content": "", "creation_timestamp": "2026-07-18T10:05:38.532697Z"}, {"uuid": "7521208c-2024-48df-8894-ee1668cd7f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://www.linkedin.com/posts/david-osipov_cve-cybersecurity-tls-share-7480577048147738624-8_KV", "content": "", "creation_timestamp": "2026-07-18T10:06:04.700433Z"}, {"uuid": "3537991e-010b-47c3-ac9c-73b431529aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://www.facebook.com/share/r/188T1YsMFA/", "content": "", "creation_timestamp": "2026-07-18T10:06:31.750978Z"}, {"uuid": "9f2c51f0-e4c4-4c34-a7d4-12f1e9d3a01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://www.wikidata.org/wiki/Q140402353", "content": "", "creation_timestamp": "2026-07-18T10:06:49.017997Z"}, {"uuid": "f1fbacae-b55f-45c3-a98d-66822b83549e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "http://www.wikidata.org/entity/Q140402353", "content": "", "creation_timestamp": "2026-07-18T10:07:01.117112Z"}, {"uuid": "77ce7a7c-7bc4-48aa-ad35-87fbc6f97c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://ru.wikipedia.org/wiki/\u041e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435:Cloudflare#\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0435_\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435_\u043e_CVE-2026-14440", "content": "", "creation_timestamp": "2026-07-18T10:07:25.233140Z"}, {"uuid": "8e2edad2-86dd-4fbc-adc2-e1a9b21ef44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://en.wikipedia.org/wiki/Talk:Cloudflare", "content": "", "creation_timestamp": "2026-07-18T10:07:53.935453Z"}, {"uuid": "9b09eb29-7e36-4e21-9f89-495d5213eae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mqzc4jmp7q2l", "content": "[NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding \u2014 CVE-2026-14440 assigned 163 days after public no\n\nThis article correctly identifies the potential for weakened account binding, but it focuses heavily on a theoretical risk rather than demonstrating e\u2026", "creation_timestamp": "2026-07-19T17:21:26.564819Z"}, {"uuid": "a9469454-3f97-43e8-aa64-122b29f2366e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14448", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3gj5gtx32j", "content": "CVE-2026-14448 - Authenticated RCE in system_certificates view\nCVE ID : CVE-2026-14448\n \n Published : July 20, 2026, 12:17 p.m. | 1\u00a0hour, 3\u00a0minutes ago\n \n Description : An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the sy...", "creation_timestamp": "2026-07-20T13:45:24.436055Z"}, {"uuid": "e8b9bf91-d003-4347-ab71-9e78780a8c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "fe20f401-59e4-4c24-8cc4-fd4d68ea534d", "vulnerability": "CVE-2026-14440", "type": "seen", "source": "https://www.reddit.com/r/cybersecurity/comments/1v1i16a/cloudflares_caa_flaw_looks_impractical_for/", "content": "", "creation_timestamp": "2026-07-20T14:24:09.397077Z"}, {"uuid": "7e32c456-ff8c-4e46-947f-aee8e44fc029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14448", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mr3jam3zj32l", "content": "OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u9ad8\u6a29\u9650\u306e\u653b\u6483\u8005\u304c\u6a5f\u5bc6\u6027\u30fb\u53ef\u7528\u6027\u30fb\u5b8c\u5168\u6027\u3092\u5b8c\u5168\u306b\u4fb5\u5bb3\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-14448 CVSS 7.2 | HIGH", "creation_timestamp": "2026-07-20T14:34:18.719263Z"}, {"uuid": "cfa9f59d-7085-46d2-9c46-d016ef727c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14448", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mr5px7b2wm2o", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-14448\n\nAn high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the system_certificates view due to improper ...", "creation_timestamp": "2026-07-21T11:39:39.053519Z"}, {"uuid": "c5f2f45e-384a-4e39-b97e-cfc17b56e848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14446", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqipfxtf72o", "content": "CVE-2026-14446 - IBM WebSphere Application Server is affected by a privilege escalation\nCVE ID : CVE-2026-14446\n \n Published : July 28, 2026, 9:17 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access contro...", "creation_timestamp": "2026-07-28T22:50:36.330259Z"}, {"uuid": "08ba0bd5-9a82-42ee-8027-42ea8c1892bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14446", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrqlzqm5id2q", "content": "CVE-2026-14446 - websphere application server\nIBM WebSphere Application Server 8.5 and 9.0 has a security issue that could allow an attacker to gain elevated access to the administrative console. This means an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-07-28T23:50:04.572493Z"}]}