{"vulnerability": "cve-2026-4391", "sightings": [{"uuid": "8bcbf64a-32dc-4084-83ba-21d4ed520e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4391", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmud65vf7g2q", "content": "CVE-2026-4391 - TeamSpeak 3 Server ECC Key heap-based overflow\nCVE ID : CVE-2026-4391\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : A security vulnerability has been detected in TeamSpeak 3 Server up to 3.13.7. This vulnerability affects unknown code...", "creation_timestamp": "2026-05-27T20:16:09.532333Z"}, {"uuid": "2719f4b7-8b06-44ab-88cf-1693739b77ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43918", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzcl2utc32j", "content": "CVE-2026-43918 - Suspended or inactive FOSSBilling accounts can retain or regain access through existing sessions, API tokens, and password reset flows\nCVE ID : CVE-2026-43918\n \n Published : July 6, 2026, 10:16 p.m. | 1\u00a0hour, 31\u00a0minutes ago\n \n Description : FOSSBilling is a fr...", "creation_timestamp": "2026-07-07T00:04:22.615689Z"}, {"uuid": "ced75e72-f25d-4ee6-bdce-f48700d8ec2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43914", "type": "seen", "source": "https://t.me/GithubRedTeam/99533", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43914-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 18:31:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-43914: Vaultwarden <1.35.4 email-2FA brute-force bypass password oracle. Stdlib-only Python.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-25T19:00:04.700139Z"}, {"uuid": "3a72c77b-3451-4cb0-83c6-07e789964c0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43914", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99533", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43914-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Boreas37\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 18:31:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-43914: Vaultwarden <1.35.4 email-2FA brute-force bypass password oracle. Stdlib-only Python.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-26T00:00:08.720004Z"}, {"uuid": "fdfa81b9-08e6-486f-95b9-edcf86abd637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43914", "type": "published-proof-of-concept", "source": "Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI", "content": "", "creation_timestamp": "2026-08-26T00:00:10.542425Z"}, {"uuid": "7f34e591-6462-4919-9654-b36a0be651f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43910", "type": "published-proof-of-concept", "source": "https://github.com/appium/java-client/security/advisories/GHSA-28f5-38xr-jh2w", "content": "", "creation_timestamp": "2026-07-28T16:35:12.192990Z"}, {"uuid": "8ecbca4a-9169-45e0-869a-b3689f86f5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43914", "type": "published-proof-of-concept", "source": "Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI", "content": "", "creation_timestamp": "2026-08-25T11:00:03.186153Z"}, {"uuid": "303eff25-22ca-47ad-9066-bf5b6253a615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43912", "type": "seen", "source": "https://t.me/shimiscyberworld/1424", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-12\n\n\ud83d\udcca 99 vulnerabilities detected today \u2014 33 \ud83d\udd34 Critical, 66 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42869 (10) \u2014 CVE-2026-42869: SOCFortress CoPilot Critical Auth Bypass\n  \u2022 CVE-2026-29204 (10) \u2014 CVE-2026-29204: Critical Client Area Vulnerability Exposes\u2026\n  \u2022 CVE-2026-42823 (9.9) \u2014 CVE-2026-42823: Critical Privilege Escalation in Azure\u2026\n  \u2022 CVE-2026-42898 (9.9) \u2014 Microsoft Dynamics 365 On-Premises Critical Code Injection\u2026\n  \u2022 CVE-2025-6577 (9.8) \u2014 Akilli Commerce E-Commerce Website SQLi Vulnerability\u2026\n  \u2022 CVE-2026-43992 (9.8) \u2014 CVE-2026-43992: JunoClaw AI Exposes BIP-39 Seeds in Tool\u2026\n  \u2022 CVE-2026-26083 (9.8) \u2014 Fortinet FortiSandbox Critical RCE: Unauthenticated\u2026\n  \u2022 CVE-2026-41089 (9.8) \u2014 CVE-2026-41089: Critical Netlogon RCE Threatens Windows\u2026\n  \u2026 and 25 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-41489 (8.8) \u2014 Pi-hole Privilege Escalation via Systemd Scripts\u2026\n  \u2022 CVE-2026-7256 (8.8) \u2014 Zyxel WRE6505 v2: High-Severity Command Injection\u2026\n  \u2022 CVE-2026-6001 (8.8) \u2014 CVE-2026-6001: ABIS BAPS\u0130S Authorization Bypass Exposes\u2026\n  \u2022 CVE-2026-2465 (8.8) \u2014 Turboard FOR-S Privilege Escalation via Incorrect\u2026\n  \u2022 CVE-2026-43937 (8.8) \u2014 YetAnotherForum.NET Vulnerability Allows Arbitrary SQL\u2026\n  \u2022 CVE-2026-8111 (8.8) \u2014 Ivanti Endpoint Manager RCE via SQL Injection\u2026\n  \u2022 CVE-2026-23819 (8.8) \u2014 AOS-10/AOS-8 Instant AP Vulnerability Allows Remote Code\u2026\n  \u2022 CVE-2026-8429 (8.8) \u2014 SPIP RCE Vulnerability (CVE-2026-8429) Bypasses Security\u2026\n  \u2022 CVE-2026-43888 (8.7) \u2014 Outline Service Vulnerability CVE-2026-43888 Allows\u2026\n  \u2022 CVE-2026-43912 (8.7) \u2014 Vaultwarden CVE-2026-43912 Allows Org Data Access via Group\u2026\n  \u2026 and 56 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:05.974568Z"}, {"uuid": "dfea2875-e0b6-41b0-967c-ae8d4111194d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43912", "type": "seen", "source": "https://t.me/shimiscyberworld/1424", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-12\n\n\ud83d\udcca 99 vulnerabilities detected today \u2014 33 \ud83d\udd34 Critical, 66 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42869 (10) \u2014 CVE-2026-42869: SOCFortress CoPilot Critical Auth Bypass\n  \u2022 CVE-2026-29204 (10) \u2014 CVE-2026-29204: Critical Client Area Vulnerability Exposes\u2026\n  \u2022 CVE-2026-42823 (9.9) \u2014 CVE-2026-42823: Critical Privilege Escalation in Azure\u2026\n  \u2022 CVE-2026-42898 (9.9) \u2014 Microsoft Dynamics 365 On-Premises Critical Code Injection\u2026\n  \u2022 CVE-2025-6577 (9.8) \u2014 Akilli Commerce E-Commerce Website SQLi Vulnerability\u2026\n  \u2022 CVE-2026-43992 (9.8) \u2014 CVE-2026-43992: JunoClaw AI Exposes BIP-39 Seeds in Tool\u2026\n  \u2022 CVE-2026-26083 (9.8) \u2014 Fortinet FortiSandbox Critical RCE: Unauthenticated\u2026\n  \u2022 CVE-2026-41089 (9.8) \u2014 CVE-2026-41089: Critical Netlogon RCE Threatens Windows\u2026\n  \u2026 and 25 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-41489 (8.8) \u2014 Pi-hole Privilege Escalation via Systemd Scripts\u2026\n  \u2022 CVE-2026-7256 (8.8) \u2014 Zyxel WRE6505 v2: High-Severity Command Injection\u2026\n  \u2022 CVE-2026-6001 (8.8) \u2014 CVE-2026-6001: ABIS BAPS\u0130S Authorization Bypass Exposes\u2026\n  \u2022 CVE-2026-2465 (8.8) \u2014 Turboard FOR-S Privilege Escalation via Incorrect\u2026\n  \u2022 CVE-2026-43937 (8.8) \u2014 YetAnotherForum.NET Vulnerability Allows Arbitrary SQL\u2026\n  \u2022 CVE-2026-8111 (8.8) \u2014 Ivanti Endpoint Manager RCE via SQL Injection\u2026\n  \u2022 CVE-2026-23819 (8.8) \u2014 AOS-10/AOS-8 Instant AP Vulnerability Allows Remote Code\u2026\n  \u2022 CVE-2026-8429 (8.8) \u2014 SPIP RCE Vulnerability (CVE-2026-8429) Bypasses Security\u2026\n  \u2022 CVE-2026-43888 (8.7) \u2014 Outline Service Vulnerability CVE-2026-43888 Allows\u2026\n  \u2022 CVE-2026-43912 (8.7) \u2014 Vaultwarden CVE-2026-43912 Allows Org Data Access via Group\u2026\n  \u2026 and 56 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:55.225446Z"}]}