{"vulnerability": "cve-2026-4635", "sightings": [{"uuid": "773d927e-f662-4168-befd-4f1c5273aecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46352", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmc3qtiaud2c", "content": "\ud83d\udd17 CVE : CVE-2026-45747, CVE-2026-45751, CVE-2026-45752, CVE-2026-45759, CVE-2026-45761, CVE-2026-45762, CVE-2026-45763, CVE-2026-45764, CVE-2026-45765, CVE-2026-45766, CVE-2026-45767, CVE-2026-45768, CVE-2026-45769, CVE-2026-45770, CVE-2026-46352, CVE-2026-46387", "creation_timestamp": "2026-05-20T14:15:33.075394Z"}, {"uuid": "80eafea5-6332-45b9-aea6-083d3c0b770b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4635", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmgxrcld642r", "content": "CVE-2026-4635 - Persistent notification timing attack causing server denial of service\nCVE ID : CVE-2026-4635\n \n Published : May 22, 2026, 10:28 a.m. | 1\u00a0hour, 50\u00a0minutes ago\n \n Description : Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10...", "creation_timestamp": "2026-05-22T12:47:30.806046Z"}, {"uuid": "392b8001-2879-45aa-ab90-d8d22dae2fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46357", "type": "published-proof-of-concept", "source": "https://github.com/haxtheweb/issues/security/advisories/GHSA-9r33-xhw8-4qqp", "content": "", "creation_timestamp": "2026-05-13T18:46:15.000000Z"}, {"uuid": "64e4f171-a95c-4486-a262-1e723dadce80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46357", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnl2wssjwa2z", "content": "CVE-2026-46357 - HAX CMS NodeJS application Vulnerable to Denial of Service using Malicious Import Request\nCVE ID : CVE-2026-46357\n \n Published : June 5, 2026, 8:17 p.m. | 15\u00a0minutes ago\n \n Description : HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prio...", "creation_timestamp": "2026-06-05T21:20:07.175182Z"}, {"uuid": "74eabf70-0d6a-4613-bd2b-61deb18f2706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46359", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-pm8c-3qq3-72w7", "content": "", "creation_timestamp": "2026-05-06T20:44:39.000000Z"}, {"uuid": "5ba1c866-33b4-44fd-b4a9-8152edb917d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46354", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3l74tvwf2v", "content": "CVE-2026-46354 - coder\nAn attacker can steal a Coder agent session token by sending a forged request to the Azure instance identity endpoint. This allows them to access sensitive information, such as Git SSH\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coder #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T21:44:05.055193Z"}, {"uuid": "98599627-5b7a-44e7-863a-6c4893cfb19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46354", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq3tqzha2n2l", "content": "CVE-2026-46354 - Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft\nCVE ID : CVE-2026-46354\n \n Published : July 7, 2026, 10:16 p.m. | 58\u00a0minutes ago\n \n Description : Coder allows organizations to provision remote development envi...", "creation_timestamp": "2026-07-08T00:17:15.343244Z"}, {"uuid": "bd47f428-fac6-4adb-b222-fdadbbadb2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46354", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq734t72sj2k", "content": "\ud83d\udccc CVE-2026-46354 - Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, ... https://www.cyberhub.blog/cves/CVE-2026-46354", "creation_timestamp": "2026-07-09T07:07:08.384664Z"}]}