{"vulnerability": "cve-2026-4783", "sightings": [{"uuid": "ed662f8c-2d16-41bd-bd75-ae261e84142f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhu3lh6wrp2j", "content": "", "creation_timestamp": "2026-03-25T02:54:27.598556Z"}, {"uuid": "bd39d112-7a30-4759-907e-436468f5b496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47838", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnvlpsknco2h", "content": "CVE-2026-47838 - Unauthorized User Impersonation when Using X.509 Client Certificates\nCVE ID : CVE-2026-47838\n \n Published : June 10, 2026, 12:16 a.m. | 20\u00a0minutes ago\n \n Description : SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificat...", "creation_timestamp": "2026-06-10T01:47:12.254528Z"}, {"uuid": "20a7492a-07b3-4ab9-8573-33f09b7045ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47835", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3modacykoeu2o", "content": "\ud83d\udd17 CVE : CVE-2026-47835", "creation_timestamp": "2026-06-15T12:00:18.236419Z"}, {"uuid": "111a3698-f046-4004-ba2e-3d6cade87ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47835", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe3ofsskn2x", "content": "CVE-2026-47835 - Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores\nCVE ID : CVE-2026-47835\n \n Published : June 15, 2026, 6:54 p.m. | 47\u00a0minutes ago\n \n Description : In Spring AI Vector Stores, special...", "creation_timestamp": "2026-06-15T20:09:52.430808Z"}, {"uuid": "607fb77d-818e-47f4-b54f-1ca96f8327f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47830", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq77tqjgfr27", "content": "CVE-2026-47830 - Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable Overwrite\nCVE ID : CVE-2026-47830\n \n Published : July 9, 2026, 7:16 a.m. | 32\u00a0minutes ago\n \n Description : Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Eco...", "creation_timestamp": "2026-07-09T08:31:31.996160Z"}, {"uuid": "55caf27e-a7a7-40f9-800c-a2b3eba6a8da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47831", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq7aomhpfa2q", "content": "CVE-2026-47831 - Cryptographically Weak Password Generation in bosh-windows-stemcell-builder Allows Remote SSH Brute-Force Attacks\nCVE ID : CVE-2026-47831\n \n Published : July 9, 2026, 7:16 a.m. | 32\u00a0minutes ago\n \n Description : Use of a cryptographically weak random number gen...", "creation_timestamp": "2026-07-09T08:46:32.784059Z"}, {"uuid": "39bba542-3fda-403f-96a0-b61ef4232c7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47830", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa5romrgp2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47830: \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0438 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 BOSH.Utils.psm1\n\n\n\nhttps://kripta.biz/posts/686355A0-272D-40AC-B9AD-515BB9AA779E", "creation_timestamp": "2026-07-09T17:27:16.892341Z"}, {"uuid": "5e14d891-371e-482c-a6f3-87ae20667a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47831", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6cspnal2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-47831: \u0441\u043b\u0430\u0431\u044b\u0439 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b \u0432 GenerateRandomPassword\n\n\n\nhttps://kripta.biz/posts/F870CB61-164C-455A-A56C-42B2AB78E565", "creation_timestamp": "2026-07-09T17:36:49.226862Z"}, {"uuid": "0dec0475-b46c-4878-8355-e5fc4e38e9fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47835", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqjkfnce7b2m", "content": "\ud83d\udccc CVE-2026-47835 - In Spring AI Vector Stores, special characters could be used to force the execution of arbitrary queries in Elasticsearch, OpenSearch, and GemFire Vec... https://www.cyberhub.blog/cves/CVE-2026-47835", "creation_timestamp": "2026-07-13T11:07:06.349069Z"}, {"uuid": "9bc2f1a7-10b0-4192-b825-8ec1fc712f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47834", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jbd5pt5664k36", "content": "CVE-2026-47834 - Spring Data JPA Sort expression validation bypass\nCVE ID : CVE-2026-47834\n \n Published : Aug. 26, 2026, 7:22 p.m. | 45\u00a0minutes ago\n \n Description : Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from u...", "creation_timestamp": "2026-08-26T20:15:10.436389Z"}, {"uuid": "c62601fd-aa6e-4801-9ba0-2e76cbf8a5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47839", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117251940382716886", "content": "Cloud Foundry UAA hit by CRITICAL vuln (CVE-2026-47839, CVSS 9.2): OIDC users with wildcard group mapping can gain uaa.admin. Review configs, avoid wildcards, and monitor for patches. https://radar.offseq.com/threat/cve-2026-47839-vulnerability-in-cloud-foundry-foundation-uaa-fe07e0d8fe092d86 #OffSeq #CloudSecurity #CVE202647839 #Infosec", "creation_timestamp": "2026-09-11T10:30:26.186466Z"}, {"uuid": "b3f6e407-e318-4d26-a2f3-675bdc9759fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-47839", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvaede5jer2f", "content": "Cloud Foundry UAA faces a CRITICAL vuln (CVE-2026-47839, CVSS 9.2): OIDC users can escalate to uaa.admin via wildcard group mapping. Check configs & stay tuned for patches. https://radar.offseq.com/threat/cve-2026-47839-vulnerability-in-cloud-foundry-foundation-uaa-fe07e0d8fe092d86 #OffSeq #Cloud...", "creation_timestamp": "2026-09-11T10:30:28.901543Z"}, {"uuid": "e17cfc77-d9a6-46e6-90e5-a12006542d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47839", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvagkeljaz2y", "content": "CVE-2026-47839 - uaa\nIn Cloud Foundry UAA (and deployments using cf-deployment), a misconfiguration lets users who sign in through an external OpenID Connect provider obtain the admin scope even when the provider is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#uaa #CVE #infosec", "creation_timestamp": "2026-09-11T11:10:11.295658Z"}, {"uuid": "fd15e599-3c92-4a12-bf9a-eff95fca39f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/haaenqkc7v32z", "content": "CVE-2026-47839 - Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin\nCVE ID : CVE-2026-47839\n \n Published : Sept. 11, 2026, 10:16 a.m. | 39\u00a0minutes ago\n \n Description : A vulnerability allows users authenticating through a federated OIDC provider to obtai...", "creation_timestamp": "2026-09-11T11:39:57.907877Z"}, {"uuid": "460721a5-bb4f-4a8b-8f4f-8b0162b34781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-47839", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvajqyyupa2p", "content": "\ud83d\udea8 CVE-2026-47839 \u2014 CVSS 9.2 CRITICAL\n\nA vulnerability allows users authenticating through a federated OIDC provider to obtain the uaa.admin scope...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-47839\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T12:07:34.373105Z"}]}