{"vulnerability": "cve-2026-4143", "sightings": [{"uuid": "c38a90f9-f138-488d-9dbf-8124f4e8eae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41431", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvirpu7u2z", "content": "\ud83d\udfe0 CVE-2026-41431 - High (8)\n\nZen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resourc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41431/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T18:25:04.528758Z"}, {"uuid": "90412370-c795-472d-b3bd-7edfa435a3e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41431", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvi2f77q2g", "content": "\ud83d\udfe0 CVE-2026-41431 - High (8)\n\nZen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resourc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41431/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T18:24:40.085277Z"}, {"uuid": "6ae047c3-0a7b-43f2-bd37-fa9816c27cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41433", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlttclqwvi2w", "content": "\ud83d\udccc CVE-2026-41433 - OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From 0.4.0 to before 0.8.0, a flaw in the Java a... https://www.cyberhub.blog/cves/CVE-2026-41433", "creation_timestamp": "2026-05-14T22:07:07.074927Z"}, {"uuid": "ddb05430-bb36-401a-910a-190a88a26f1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41432", "type": "published-proof-of-concept", "source": "https://github.com/QuantumNous/new-api/security/advisories/GHSA-xff3-5c9p-2mr4", "content": "", "creation_timestamp": "2026-04-22T14:14:22.000000Z"}, {"uuid": "50074853-a592-48ab-bf9c-76129431a936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-41433", "type": "published-proof-of-concept", "source": "https://github.com/open-telemetry/opentelemetry-ebpf-instrumentation/security/advisories/GHSA-8gmg-3w2q-65f4", "content": "", "creation_timestamp": "2026-04-16T21:01:04.000000Z"}, {"uuid": "a38c88a1-feb7-472d-a388-84abeb894e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41431", "type": "seen", "source": "https://t.me/shimiscyberworld/1364", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-11\n\n\ud83d\udcca 17 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 16 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42864 (9.9) \u2014 CVE-2026-42864: Unauthenticated RCE in FireFighter Incident\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-45006 (8.8) \u2014 OpenClaw Improper Access Control Bypasses Denylist, Allows\u2026\n  \u2022 CVE-2026-45223 (8.8) \u2014 CVE-2026-45223: Crabbox Authentication Bypass Allows Admin\u2026\n  \u2022 CVE-2026-42858 (8.5) \u2014 Open edX Platform SSRF via Unvalidated URL Parameter\u2026\n  \u2022 CVE-2026-42860 (8.5) \u2014 Open edX Enterprise Service Vulnerability Allows SSRF via\u2026\n  \u2022 CVE-2026-42313 (8.3) \u2014 CVE-2026-42313: pyLoad Proxy Bypass Exposes Outbound Traffic\n  \u2022 CVE-2026-44413 (8.2) \u2014 JetBrains TeamCity CVE-2026-44413: Authenticated Exposure\u2026\n  \u2022 CVE-2026-42315 (8.1) \u2014 CVE-2026-42315: pyLoad Directory Traversal Puts Data at Risk\n  \u2022 CVE-2026-43640 (8.1) \u2014 Bitwarden Server CVE-2026-43640: SCIM API Key Exposed\u2026\n  \u2022 CVE-2026-41431 (8) \u2014 CVE-2026-41431: Zen Browser Updater Strips Signature\u2026\n  \u2022 CVE-2026-43639 (8) \u2014 Bitwarden Server CVE-2026-43639 Allows Organization\u2026\n  \u2026 and 6 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:07.935682Z"}]}