{"vulnerability": "cve-2026-4431", "sightings": [{"uuid": "dd78b6a5-31e7-4cda-94c1-1928a4e993e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44313", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlfallignb2e", "content": "CVE-2026-44313 - LinkWarden: Server-Side Request Forgery (SSRF) in Link Creation via fetchTitleAndHeaders Function\nCVE ID : CVE-2026-44313\n \n Published : May 9, 2026, 12:16 a.m. | 28\u00a0minutes ago\n \n Description : Linkwarden is a self-hosted, open-source collaborative bookmark m...", "creation_timestamp": "2026-05-09T02:54:51.205619Z"}, {"uuid": "3c07dcab-0742-48eb-acb6-ceea480b05ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44313", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgvnqcqgb2w", "content": "\ud83d\udd34 CVE-2026-44313 - Critical (9.1)\n\nLinkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44313/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-09T18:44:32.237948Z"}, {"uuid": "6c08bb59-5c3c-44fb-9824-0f90b5f3b585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44310", "type": "published-proof-of-concept", "source": "https://github.com/sigstore/gitsign/security/advisories/GHSA-7c37-gx6w-8vc5", "content": "", "creation_timestamp": "2026-05-04T16:54:58.000000Z"}, {"uuid": "f1ffa484-268a-4842-bc88-3094d6528a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44312", "type": "published-proof-of-concept", "source": "https://github.com/premailer/css_parser/security/advisories/GHSA-ff6c-w6qf-7xqc", "content": "", "creation_timestamp": "2026-05-01T03:40:10.000000Z"}, {"uuid": "a287b465-a186-4990-9c13-34eda3336e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44315", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmwwi7f4w22f", "content": "\ud83d\udccc CVE-2026-44315 - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-pfd-management API without inbound OAut... https://www.cyberhub.blog/cves/CVE-2026-44315", "creation_timestamp": "2026-05-28T21:07:07.515712Z"}, {"uuid": "8587df9c-dc64-42da-86c7-02fa31bf1de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4431", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117042081155295833", "content": "CVE-2026-4431: CRITICAL vuln in Easy Post Submission \u22642.3.0 for WordPress. Missing auth lets unauthenticated attackers modify or unpublish any post via AJAX. No patch yet \u2014 disable plugin if possible. https://radar.offseq.com/threat/cve-2026-4431-cwe-862-missing-authorization-in-themeruby-easy-post-submission-frontend-posting-guest-a356c334d549556e #OffSeq #WordPress #Vuln #CVE20264431", "creation_timestamp": "2026-08-05T09:00:28.514936Z"}, {"uuid": "13c253f5-2daa-48a7-8181-ba87e67353cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-4431", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msd62grcf32o", "content": "Easy Post Submission plugin (\u22642.3.0) for WordPress has a CRITICAL flaw: missing auth lets attackers edit or unpublish any post via AJAX. No fix yet \u2014 disable plugin now. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-4431-cwe-862-missing-authorization-in-themeruby-easy-post-submission-frontend-postin...", "creation_timestamp": "2026-08-05T09:00:31.139407Z"}, {"uuid": "7371e62b-d075-4c51-a48a-e789798b7f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4431", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msd75geivo2i", "content": "CVE-2026-4431\nThe Easy Post Submission plugin for WordPress has a security issue that lets anyone change post titles, content, and other details without permission. This is a concern because it could be used by attackers to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-05T09:20:04.195604Z"}, {"uuid": "4c85c78d-1ed8-4237-9357-84f3c447bd34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44319", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-rxrq-fv76-26pr", "content": "", "creation_timestamp": "2026-05-08T22:44:35.000000Z"}, {"uuid": "1620c13e-5ec0-4a71-b619-9ca96efada07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44318", "type": "published-proof-of-concept", "source": "https://github.com/free5gc/free5gc/security/advisories/GHSA-27ph-8q4f-h7m7", "content": "", "creation_timestamp": "2026-05-07T01:13:49.000000Z"}, {"uuid": "0eb53262-cf61-4e95-81ac-c9286dd78515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44315", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-5f62-53r8-qrqf", "content": "", "creation_timestamp": "2026-05-08T22:39:16.000000Z"}, {"uuid": "2ba6ff41-1036-431a-89e9-6cc7fcc59422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44317", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-wwqh-7jm5-gj7w", "content": "", "creation_timestamp": "2026-05-08T22:40:11.000000Z"}, {"uuid": "1579e6f5-b23a-41e2-a1ff-d96975449982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44316", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-wr8j-6chw-gm6p", "content": "", "creation_timestamp": "2026-05-08T22:39:43.000000Z"}, {"uuid": "e6045de1-b8ed-4bb8-948d-0855231a29ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-44311", "type": "published-proof-of-concept", "source": "https://github.com/fabricjs/fabric.js/security/advisories/GHSA-w22m-hvvm-xmwx", "content": "", "creation_timestamp": "2026-06-11T21:48:31.000000Z"}, {"uuid": "09960e07-eda9-4efa-845c-2f30e5d247e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44313", "type": "seen", "source": "https://t.me/shimiscyberworld/1324", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-44313 \u2014 CVSS 9.1\nLinkwarden SSRF Vulnerability (CVE-2026-44313) Allows Internal Network Access\n\nCVE-2026-44313 \u2014 Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. Prior to version 2.13.0, a Server-Side Request F\n\n\ud83d\udd34 Critical \u00b7 3 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-44313 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:11.604173Z"}, {"uuid": "ddc08e3c-0e68-4dea-8d48-546920cab943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-44313", "type": "seen", "source": "https://t.me/shimiscyberworld/1328", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-09\n\n\ud83d\udcca 23 vulnerabilities detected today \u2014 7 \ud83d\udd34 Critical, 16 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42298 (10) \u2014 CVE-2026-42298: Critical RCE in Postiz AI Scheduling Tool\n  \u2022 CVE-2026-42454 (9.9) \u2014 Termix RCE via Container ID Injection (CVE-2026-42454)\n  \u2022 CVE-2026-42302 (9.8) \u2014 CVE-2026-42302: FastGPT Agent Sandbox RCE\n  \u2022 CVE-2026-42193 (9.1) \u2014 CVE-2026-42193: Plunk Email Platform Critical\u2026\n  \u2022 CVE-2026-42354 (9.1) \u2014 Sentry SAML SSO Critical Vulnerability Allows Account\u2026\n  \u2022 CVE-2026-44313 (9.1) \u2014 Linkwarden SSRF Vulnerability (CVE-2026-44313) Allows\u2026\n  \u2022 CVE-2026-42560 (9.1) \u2014 CVE-2026-42560: Critical Patreon OAuth Flaw Merges User\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-42556 (8.9) \u2014 CVE-2026-42556: Postiz AI Tool Vulnerability Allows Stored\u2026\n  \u2022 CVE-2026-42205 (8.8) \u2014 CVE-2026-42205: Avo Framework Privilege Escalation in Ruby\u2026\n  \u2022 CVE-2026-42352 (8.6) \u2014 pygeoapi RCE: OGC API Vulnerability Exposes Internal\u2026\n  \u2022 CVE-2026-41705 (8.6) \u2014 CVE-2026-41705: Spring AI MilvusVectorStore Vulnerable to\u2026\n  \u2022 CVE-2026-42452 (8.1) \u2014 Termix CVE-2026-42452 Bypasses 2FA with Temporary JWT\n  \u2022 CVE-2026-6665 (8.1) \u2014 PgBouncer SCRAM Vulnerability (CVE-2026-6665) Allows Stack\u2026\n  \u2022 CVE-2026-42296 (8.1) \u2014 CVE-2026-42296: Argo Workflows Bypass Grants Host Network\u2026\n  \u2022 CVE-2026-41520 (7.9) \u2014 CVE-2026-41520: Cilium Bugtool Leaks Sensitive WireGuard\u2026\n  \u2022 CVE-2026-42301 (7.8) \u2014 CVE-2026-42301: Malicious Code Execution Via pyp2spec RPM\u2026\n  \u2022 CVE-2026-42345 (7.7) \u2014 FastGPT Vulnerability: Cloud Metadata Bypass via URL\u2026\n  \u2026 and 6 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:11.332310Z"}]}