{"vulnerability": "cve-2026-4667", "sightings": [{"uuid": "dfbae329-cd3b-4340-9ecb-b67ec8f869dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4667", "type": "seen", "source": "Telegram/iUoBG-vF-CkTsWyCM6Li0-JDSLT3y0wia_1SGPubhjeGviU", "content": "", "creation_timestamp": "2026-04-15T17:20:42.000000Z"}, {"uuid": "5f212f1b-4ed9-4a82-89a5-3dab76ed40fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46670", "type": "seen", "source": "https://t.me/realcodeb0ss/440", "content": "https://dbugs.ptsecurity.com/vulnerability/PT-2026-42810\n\n\nhttps://twitter.com/UpwindMDR/status/2058076274992500861\n\n\nFofa : \"YesWiki\" or title=\"YesWiki\" or body=\"YesWiki\"\n\nEnjoy;", "creation_timestamp": "2026-05-25T23:11:12.000000Z"}, {"uuid": "d5ab7a3b-9e7f-4cb8-9edd-94eb193e7b54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46670", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-46670.yaml", "content": "", "creation_timestamp": "2026-05-26T02:13:42.000000Z"}, {"uuid": "55886d40-b7aa-4f63-9421-6c1aeb2f7455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46673", "type": "published-proof-of-concept", "source": "https://github.com/Eugeny/russh/security/advisories/GHSA-g9f8-wqj9-fjw5", "content": "", "creation_timestamp": "2026-05-15T21:19:23.000000Z"}, {"uuid": "4eaa0e6e-c194-44c1-97cd-45b3b348779d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46679", "type": "published-proof-of-concept", "source": "https://github.com/libp2p/js-libp2p/security/advisories/GHSA-4f8r-922h-2vgv", "content": "", "creation_timestamp": "2026-05-16T03:00:35.000000Z"}, {"uuid": "85ad05d2-6683-474e-9218-6e115b4ce022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-46670", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msuy2eqhym2i", "content": "Why are attackers still exploiting wiki software in 2026?\n\nYesWiki.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-46670-yeswiki-sql-injection-leaks-all-credentials/\n\nby Yazoul AI #CVE #CyberSecurity", "creation_timestamp": "2026-08-12T11:01:01.740833Z"}, {"uuid": "f10102c6-0777-4609-bff1-e9e8078af398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46673", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mny4xjajhy2n", "content": "\ud83d\udfe0 CVE-2026-46673 - High (7.5)\n\nRussh is a Rust SSH client & server library. Prior to version 0.60.3, CryptoVec used unchecked ca...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46673/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T02:00:56.247814Z"}, {"uuid": "e18f5405-d32b-4c3a-9459-9249ef3cc33e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46679", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyabxorjg2g", "content": "\ud83d\udfe0 CVE-2026-46679 - High (7.5)\n\nlibp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 15.0.23, three...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46679/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-11T03:00:28.092707Z"}, {"uuid": "f4a36486-a8bf-42ac-9b66-b0c3358da34b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46679", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnz6mh6zaj2f", "content": "CVE-2026-46679 - Supply chain attack in Libp2P. Unauthenticated single peer can exhaust Node.js heap via gossipsub. CVSS 7.5. No patch available yet. Monitor and assess impact. #CVE #Libp2P #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-46679/", "creation_timestamp": "2026-06-11T12:03:11.253070Z"}, {"uuid": "399687cc-46ab-49cb-bac3-746340f6acf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46678", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogzzvej3z22", "content": "CVE-2026-48782 - pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)\nCVE ID : CVE-2026-48782\n \n Published : June 16, 2026, 10:49 p.m. | 43\u00a0minutes ago\n \n Description : Pydantic AI is a Python agent...", "creation_timestamp": "2026-06-17T00:18:29.493822Z"}, {"uuid": "29946ce1-4459-4705-803d-2242fc00cc06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-46672", "type": "published-proof-of-concept", "source": "https://github.com/actualbudget/actual/security/advisories/GHSA-7gh7-258j-4mpq", "content": "", "creation_timestamp": "2026-06-12T20:16:24.000000Z"}, {"uuid": "e1c5a63e-b786-4821-8104-f3dff160c0a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46670", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msstbbwemm2u", "content": "CVE-2026-46670 - yeswiki\nYesWiki installations are vulnerable to SQL injection attacks, allowing attackers to access the entire database, including usernames, emails, and hashed passwords. This is a serious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#yeswiki #composer #CVE #infosec", "creation_timestamp": "2026-08-11T14:30:04.622993Z"}, {"uuid": "5d7f7b23-5619-46b2-8a21-242161e78a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46670", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mssytcizjn2o", "content": "YesWiki 4.6.4\u672a\u6e80\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u672a\u8a8d\u8a3c\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u5168\u4f53\uff08\u30d1\u30b9\u30ef\u30fc\u30c9\u30cf\u30c3\u30b7\u30e5\u542b\u3080\uff09\u3092\u8aad\u307f\u53d6\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-46670 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-08-11T16:09:37.912705Z"}]}