{"vulnerability": "cve-2026-4001", "sightings": [{"uuid": "a5ea2abf-05da-4fd4-9b0b-bc65b553ca4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4001", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mhsevjmsks2y", "content": "", "creation_timestamp": "2026-03-24T10:35:59.714449Z"}, {"uuid": "c6e35020-a346-4013-8c82-fd5f25070923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4001", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mhsevlonyc2y", "content": "", "creation_timestamp": "2026-03-24T10:36:00.225377Z"}, {"uuid": "dfce9f00-313a-4b90-9613-a90335760540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4001", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mhsevoa5fs2y", "content": "", "creation_timestamp": "2026-03-24T10:36:00.726993Z"}, {"uuid": "3673566e-0761-4f4d-8a6c-528dc88fb8e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4001", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhrc7gcqt52i", "content": "", "creation_timestamp": "2026-03-24T00:15:00.796247Z"}, {"uuid": "3721c13b-72f9-4f1a-afd7-0abdfaa98bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4001", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrchebxvs2n", "content": "", "creation_timestamp": "2026-03-24T00:19:28.233584Z"}, {"uuid": "70edffbf-1ff0-489a-9a38-bead6e7143b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4001", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mht55onnbw2b", "content": "", "creation_timestamp": "2026-03-24T17:49:53.866189Z"}, {"uuid": "ec008212-137f-49cc-9ef1-8a3f11f9c989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4001", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mik45hissr2l", "content": "", "creation_timestamp": "2026-04-02T21:03:09.958058Z"}, {"uuid": "bcc9b976-4882-4ca8-9eeb-f41180f57ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40010", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ml5mtgvfrl22", "content": "CVE-2026-40010: Apache Wicket: possible session fixation using AuthenticatedWebSession", "creation_timestamp": "2026-05-06T02:12:41.637096Z"}, {"uuid": "0a4cdbad-ec52-4e35-b446-606e0372b72a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40010", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7lbzi7zb2z", "content": "\ud83d\udd34 CVE-2026-40010 - Critical (9.1)\n\nMissing invocation of Servlet http web request method changeSessionId after session binding can b...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-40010/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T20:50:23.854387Z"}, {"uuid": "e4d8d671-9b15-482e-aa97-038972a3106b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4001", "type": "seen", "source": "Telegram/dX35wl1WONn3hjC2VquHy4I4CJGif5LqrCMx6vW-TyG7RUE", "content": "", "creation_timestamp": "2026-08-29T23:00:06.761758Z"}, {"uuid": "f3df6299-d5b5-4c7c-808e-bb14128e8314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4001", "type": "seen", "source": "Telegram/dX35wl1WONn3hjC2VquHy4I4CJGif5LqrCMx6vW-TyG7RUE", "content": "", "creation_timestamp": "2026-08-30T00:00:10.809444Z"}, {"uuid": "b467d863-86b1-4a80-b51e-952589e37592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40010", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mmbrqfhxh325", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-40010 Apache\u00a0Wicket\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nApache Wicket\u306b\u304a\u3044\u3066\u3001\u30bb\u30c3\u30b7\u30e7\u30f3\u30d0\u30a4\u30f3\u30c7\u30a3\u30f3\u30b0\u5f8c\u306bServlet\u306ehttp\u30a6\u30a7\u30d6\u30ea\u30af\u30a8\u30b9\u30c8\u30e1\u30bd\u30c3\u30c9changeSessionId\u304c\u547c\u3073\u51fa\u3055\u308c\u306a\u3044\u3053\u3068\u304c\u539f\u56e0\u3067\u3001\u30bb\u30c3\u30b7\u30e7\u30f3\u56fa\u5b9a\u653b\u6483\u304c\u53ef\u80fd\u306b\u306a\u308b\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002", "creation_timestamp": "2026-05-20T11:16:19.215233Z"}, {"uuid": "1d754cb0-ae65-4d6b-8523-e4e61e34fbd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40011", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4l565r5q2o", "content": "CVE-2026-40011 - Prometheus denial of service via crafted DNS queries\nCVE ID : CVE-2026-40011\n \n Published : June 25, 2026, 12:22 p.m. | 1\u00a0hour, 22\u00a0minutes ago\n \n Description : An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block b...", "creation_timestamp": "2026-06-25T13:50:27.541442Z"}, {"uuid": "ae7bfaf2-e617-4c41-bd75-ca1ae4d86d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4001", "type": "published-proof-of-concept", "source": "Telegram/dX35wl1WONn3hjC2VquHy4I4CJGif5LqrCMx6vW-TyG7RUE", "content": "", "creation_timestamp": "2026-08-31T00:00:49.550611Z"}, {"uuid": "358530b6-1604-465e-b9ee-e8602948b61e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4001", "type": "seen", "source": "https://t.me/GithubRedTeam/100181", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a hdwebmobile-formula-pricing\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a htrxuan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-29 03:51:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWooCommerce plugin: safe formula-based product pricing, closing CVE-2026-4001's eval()-based RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-29T07:00:04.763149Z"}, {"uuid": "20e430c0-362a-4e88-87fb-bb9500ef8f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4001", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100181", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a hdwebmobile-formula-pricing\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a htrxuan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-29 03:51:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWooCommerce plugin: safe formula-based product pricing, closing CVE-2026-4001's eval()-based RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-30T00:00:55.118991Z"}]}