{"vulnerability": "cve-2026-4398", "sightings": [{"uuid": "73cdc287-7e81-4413-9067-0e6db078ce32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mizizvmm3i2t", "content": "", "creation_timestamp": "2026-04-09T00:03:41.772137Z"}, {"uuid": "269e88d5-4db3-438b-b8f6-3551ee23c5d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43988", "type": "seen", "source": "https://gist.github.com/tw89Coder/cd011dc1842625f821c171e41e812fbc", "content": "# Security Research & Advisories\n\nA curated list of my public security research, vulnerability disclosures, and assigned advisories. \n\n| Target / Component | Vulnerability Type | Identifier(s) | Published(GMT +8) |\n| :--- | :--- | :--- | :--- |\n| **Vanetza** | Remote Denial of Service via Uncaught Exception in ECC Verification | `CVE-2026-37554``GHSA-44qj-vh8c-5354` | May 06, 2026 |\n| **Vanetza** | Remote Denial of Service via Uncaught Exception in ASN.1/OER Parsing | `CVE-2026-43988``GHSA-j6cj-rp87-mfrx` | May 06, 2026 |\n| **Vanetza** | Remote Denial of Service via Uncaught OER Encoding Exception in Cryptographic Verification | `CVE-2026-44905``GHSA-q9fq-3rx9-7xcv` | May 09, 2026 |\n| **mouse07410/asn1c** | 1-byte Heap Out-of-Bounds Read in `INTEGER_decode_oer` via Malformed OER Payload | `CVE-Request``GHSA-wxx8-76rw-96j2` | May 11, 2026 |\n\n> **Notes on Availability:**\n> * **CVE Status:** Some assigned CVEs might currently be in the **RESERVED** state pending full publication by NVD/MITRE.\n> * **GHSA Synchronization:** Certain GHSAs have not yet synchronized to the global GitHub Advisory Database. These can be viewed directly under the \"Security\" tab within the respective project's repository.", "creation_timestamp": "2026-05-11T20:29:17.000000Z"}, {"uuid": "3d30eb71-27b6-4347-aef1-5d9c2d1f0ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43988", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsmovh4ot2z", "content": "\ud83d\udfe0 CVE-2026-43988 - High (7.5)\n\nVanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43988/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-27T04:01:17.121652Z"}, {"uuid": "9f55f29b-1fc6-4cf9-9c15-0552dbda33e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43983", "type": "published-proof-of-concept", "source": "https://github.com/pocket-id/pocket-id/security/advisories/GHSA-w6p7-2fxx-4f44", "content": "", "creation_timestamp": "2026-04-26T17:45:52.000000Z"}, {"uuid": "4fdb9a59-a560-4f70-bc2e-b59b61f76367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43986", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mni7mj5dvi25", "content": "CVE-2026-43986 - Critical SSRF in Tautulli < 2.17.1. Low-privilege users can force server-side fetches via unauthenticated endpoint. CVSS 9.9. No patch yet. Isolate or disable immediately. #CVE #Tautulli #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-43986/", "creation_timestamp": "2026-06-04T18:05:50.911189Z"}, {"uuid": "84b7bc26-31b8-43e6-ab10-9323f93172ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43985", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mniq3kpziq2q", "content": "\ud83d\udfe0 CVE-2026-43985 - High (8.8)\n\nTautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43985/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-04T23:00:36.821560Z"}, {"uuid": "e89ca7f0-2e22-4768-b4c9-94333cde7031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43986", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mniq3rzwzs22", "content": "\ud83d\udd34 CVE-2026-43986 - Critical (9.9)\n\nTautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43986/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-04T23:00:46.330230Z"}, {"uuid": "de820ae3-6390-4d72-9e36-a54ea1e5285e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-43984", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnitjeswxd2l", "content": "\ud83d\udfe0 CVE-2026-43984 - High (8.9)\n\nTautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43984/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-05T00:02:01.527156Z"}, {"uuid": "182aa9de-64c8-4f97-904f-6b9027db411f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-43983", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-w6p7-2fxx-4f44", "content": "", "creation_timestamp": "2026-07-28T16:35:14.542175Z"}]}