{"vulnerability": "cve-2026-4145", "sightings": [{"uuid": "0e96b25e-c711-400f-9911-a61746ebc7bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4145", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkb3s2lui2r", "content": "", "creation_timestamp": "2026-04-15T15:56:50.512365Z"}, {"uuid": "7ff596fb-4eb8-4477-98b4-2e218a8ec88a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4145", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkbhjyxcg27", "content": "", "creation_timestamp": "2026-04-15T16:03:25.312127Z"}, {"uuid": "12f4c2fd-462f-4012-aeb9-415ff699b981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41457", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk2mtmcsed2i", "content": "", "creation_timestamp": "2026-04-22T04:09:36.766756Z"}, {"uuid": "d86649fa-0ca2-4a8c-a269-a084144adbb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41458", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk2on3mpmx2i", "content": "", "creation_timestamp": "2026-04-22T04:41:45.420795Z"}, {"uuid": "6014a32b-a6f8-48ba-9b21-17523e81819c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41454", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4lzoo2vx2s", "content": "", "creation_timestamp": "2026-04-22T23:00:27.105075Z"}, {"uuid": "e067470f-18f3-4ab1-9fc4-5c28fc853d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41455", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4lzwf43q2w", "content": "", "creation_timestamp": "2026-04-22T23:00:37.653030Z"}, {"uuid": "e94a570d-489e-4ed2-9831-f9f4ad4641ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41454", "type": "seen", "source": "Telegram/oyZMMan-s6Tiqp0E7GyRtqQJ5Rv8-WlZqCZQGxoSrT1vjc4", "content": "", "creation_timestamp": "2026-04-22T23:21:08.000000Z"}, {"uuid": "91e1f97f-702e-4773-a8fb-d2a8c56c545a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41458", "type": "published-proof-of-concept", "source": "Telegram/CG9L58j5W2lDKg2ej39TSqN1GR_VMhHdIDBR5WT05as1evU", "content": "", "creation_timestamp": "2026-04-22T05:15:19.000000Z"}, {"uuid": "3405619d-2af5-4684-907b-d94ff947b414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41455", "type": "seen", "source": "Telegram/oyZMMan-s6Tiqp0E7GyRtqQJ5Rv8-WlZqCZQGxoSrT1vjc4", "content": "", "creation_timestamp": "2026-04-22T23:21:08.000000Z"}, {"uuid": "0672081d-834d-4d92-9fbf-673f284a87aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4145", "type": "published-proof-of-concept", "source": "Telegram/uZRx6HZozAc0thMR3KKbNyvZVgKIzeeLzgWMgVKyfbYH8EA", "content": "", "creation_timestamp": "2026-04-15T15:20:23.000000Z"}, {"uuid": "b1ac62ed-25de-4c69-aafc-02daf2111532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msadpzw6dd2i", "content": "CVE-2026-41452\nAn attacker can access Krayin CRM's admin account and data without a password. This happens when the CRM is being installed. To fix this, update Krayin CRM to the latest version or apply a patch provided by the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-04T06:04:04.307964Z"}, {"uuid": "b8c92100-93a7-49f0-9d6c-bbd79f09a385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41453", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msadq2mz572l", "content": "CVE-2026-41453\nKrayin CRM versions prior to 2.2.4 have a security flaw that allows attackers to access sensitive data, including user credentials and application settings. This is a serious issue because it could allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-04T06:04:05.010493Z"}, {"uuid": "49e2cfe3-a30c-40a2-9e81-1d14bae19644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41453", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7iwzrmzosnkxj", "content": "CVE-2026-41453 - Krayin CRM\nCVE ID : CVE-2026-41453\n \n Published : Aug. 3, 2026, 5:16 p.m. | 28\u00a0minutes ago\n \n Description : Krayin CRM before 2.2.4 contains a blind SQL injection vulnerability in the leads DataGrid that allows authenticated users with leads access to inject a...", "creation_timestamp": "2026-08-03T17:50:13.966919Z"}, {"uuid": "dc6307d3-c26c-42df-956b-4a5d5964b3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtbgzksx7c26", "content": "CVE-2026-41452 is trending. Hype score 9, currently #3 on cvemon.\n\nKrayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-41452", "creation_timestamp": "2026-08-17T10:00:56.657864Z"}, {"uuid": "aea7241b-a8c7-4830-86da-aca4ce09c2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97772", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41452-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 18:36:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41452 \u2014 Krayin CRM unauth installer bypass (X-Requested-With) \u2192 admin takeover. Verified: overwrite + login on 2.2.4, blocked on 2.2.5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-12T20:00:03.512592Z"}, {"uuid": "5f3f079c-bb56-4a6e-a5ab-cb8855128a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41450", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnspvr3qb2l", "content": "\ud83d\udfe0 CVE-2026-41450 - High (7.8)\n\nUAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerabi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41450/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T08:02:15.548711Z"}, {"uuid": "5aa242f8-618b-4b08-a9bf-873a8c52b9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41451", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnsq4swcb2l", "content": "\ud83d\udfe0 CVE-2026-41451 - High (7.8)\n\nUAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerabi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-41451/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T08:02:22.527942Z"}, {"uuid": "8e4068ff-bf2b-4174-ab3a-6f33738bc816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41459", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/xerte_unauthenticated_mediaupload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"bootstrapbool \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module bypasses authentication failure, extension blacklist,\\n          and path traversal vulnerabilities in the /editor/elfinder/php/connector.php\\n          endpoint to upload and execute a shell in Xerte Online Toolkits\\n          versions 3.15 (commit 4e40f8030a2e3267267db7ce03e0ff57270be6f5 as\\n          there's no patch versions used) and earlier.\", \"disclosure_date\": \"2026-04-22\", \"fullname\": \"exploit/multi/http/xerte_unauthenticated_mediaupload\", \"is_install_path\": true, \"mod_time\": \"2026-06-13 16:01:29 +0000\", \"name\": \"Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/xerte_unauthenticated_mediaupload.rb\", \"platform\": \"Linux,PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/xerte_unauthenticated_mediaupload\", \"references\": [\"CVE-2026-34413\", \"CVE-2026-34414\", \"CVE-2026-34415\", \"CVE-2026-41459\", \"URL-https://github.com/bootstrapbool/xerteonlinetoolkits-rce\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-06-16T15:57:16.000000Z"}, {"uuid": "28b8753a-a601-4ffd-b9ac-90c72880b00a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97772", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-41452-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-12 18:36:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-41452 \u2014 Krayin CRM unauth installer bypass (X-Requested-With) \u2192 admin takeover. Verified: overwrite + login on 2.2.4, blocked on 2.2.5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-13T00:00:06.973085Z"}, {"uuid": "267cb182-1765-45ff-acf2-ed25523dc208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "Telegram/I7xd-Kq67NPH6i2L8D3KjrppB3yStp0aHSPNiKmrW8iM8IU", "content": "", "creation_timestamp": "2026-08-15T08:00:06.828359Z"}, {"uuid": "b9f1fa1f-060d-40f9-a768-49a1ff376a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-15T08:00:07.160923Z"}, {"uuid": "a7dccc5f-72c5-4a43-948e-247a62febdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "Telegram/I7xd-Kq67NPH6i2L8D3KjrppB3yStp0aHSPNiKmrW8iM8IU", "content": "", "creation_timestamp": "2026-08-16T00:00:21.827892Z"}, {"uuid": "3fe7da0e-d4eb-4b7f-8232-966f9386933c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "Telegram/9qYdJNeZ50siptVHrqc-g91N4K0CPGozDwGl0Etd8sr4-fM", "content": "", "creation_timestamp": "2026-08-16T00:00:22.235211Z"}, {"uuid": "3f547902-3098-4321-ba6c-e88b9e1e2a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/48417", "content": "CVE-2026-41452  Krayin CRM\n*\nAuth Bypass \u2192 Admin Takeover\n\nPoC", "creation_timestamp": "2026-09-02T06:00:05.552105Z"}, {"uuid": "a48059b7-1180-4430-941e-7002685a3988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "Telegram/tFuTfaokRRTQuiaUcIQzwpCLZO_fXYxJOGjZhcBmbkocasA", "content": "", "creation_timestamp": "2026-09-02T18:00:06.630651Z"}, {"uuid": "aaa05229-cbe6-4b66-aa1d-b271ee025dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "seen", "source": "https://t.me/proxy_bar/3602", "content": "CVE-2026-41452  Krayin CRM\n*\nAuth Bypass \u2192 Admin Takeover\n\nPoC", "creation_timestamp": "2026-09-02T18:00:05.963039Z"}, {"uuid": "bb94b9e5-ed15-4ad5-bd2d-19f851c43fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "Telegram/KXf-jPhiA_wBHLCgSZGqw6XhnOfgaYppxr0CPFdGCJUZzAU", "content": "", "creation_timestamp": "2026-09-02T23:00:05.899500Z"}, {"uuid": "672d63f4-99d1-4bc2-8798-cfef97cf2a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "Telegram/KXf-jPhiA_wBHLCgSZGqw6XhnOfgaYppxr0CPFdGCJUZzAU", "content": "", "creation_timestamp": "2026-09-03T00:00:36.285648Z"}, {"uuid": "0a344d53-a1e1-416d-8510-c631348150eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "Telegram/tFuTfaokRRTQuiaUcIQzwpCLZO_fXYxJOGjZhcBmbkocasA", "content": "", "creation_timestamp": "2026-09-03T00:00:39.055477Z"}, {"uuid": "0a57b065-0254-4108-bbd2-e0d3b4c85ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3602", "content": "CVE-2026-41452  Krayin CRM\n*\nAuth Bypass \u2192 Admin Takeover\n\nPoC", "creation_timestamp": "2026-09-03T00:00:40.125348Z"}, {"uuid": "b429bcbf-dcd4-4525-8551-b4eb2a485ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48417", "content": "CVE-2026-41452  Krayin CRM\n*\nAuth Bypass \u2192 Admin Takeover\n\nPoC", "creation_timestamp": "2026-09-03T00:00:52.877423Z"}, {"uuid": "70b3221d-29b6-40c1-88c2-9604fa3d7bde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-41452.yaml", "content": "", "creation_timestamp": "2026-09-07T00:00:06.330109Z"}, {"uuid": "ac671f6f-2885-482a-8e17-f72cd5cdafca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-41452.yaml", "content": "", "creation_timestamp": "2026-09-08T00:00:05.341350Z"}, {"uuid": "9ee6b589-d2ce-4ca3-9ba5-af7b1205a559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41459", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/xerte_unauthenticated_mediaupload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"bootstrapbool \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module bypasses authentication failure, extension blacklist,\\n          and path traversal vulnerabilities in the /editor/elfinder/php/connector.php\\n          endpoint to upload and execute a shell in Xerte Online Toolkits\\n          versions 3.15 (commit 4e40f8030a2e3267267db7ce03e0ff57270be6f5 as\\n          there's no patch versions used) and earlier.\", \"disclosure_date\": \"2026-04-22\", \"fullname\": \"exploit/multi/http/xerte_unauthenticated_mediaupload\", \"is_install_path\": true, \"mod_time\": \"2026-06-13 16:01:29 +0000\", \"name\": \"Xerte Online Toolkits Arbitrary File Upload - Unauthenticated Media Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/xerte_unauthenticated_mediaupload.rb\", \"platform\": \"Linux,PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/xerte_unauthenticated_mediaupload\", \"references\": [\"CVE-2026-34413\", \"CVE-2026-34414\", \"CVE-2026-34415\", \"CVE-2026-41459\", \"URL-https://github.com/bootstrapbool/xerteonlinetoolkits-rce\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:23.893814Z"}, {"uuid": "a4b67f67-7601-4dbe-9600-27c0806332b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-41452.yaml", "content": "", "creation_timestamp": "2026-09-09T00:00:09.332977Z"}, {"uuid": "432e46f2-4a28-4904-bfc3-6b185bc2734d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-41452", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-41452.yaml", "content": "", "creation_timestamp": "2026-09-10T00:00:16.048181Z"}]}