{"vulnerability": "cve-2026-4891", "sightings": [{"uuid": "9e72a21f-342c-472a-aa5a-bfccd692e2ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48910", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/dsqsb44f2t5bl", "content": "CVE-2026-48910: Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing", "creation_timestamp": "2026-07-30T14:37:09.808665Z"}, {"uuid": "9ccd2f80-b2eb-4d1e-8c4f-7e78e4f1e1ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4891", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mllwn5bydr2t", "content": "CVE-2026-4891 - CVE-2026-4891\nCVE ID : CVE-2026-4891\n \n Published : May 11, 2026, 6:16 p.m. | 14\u00a0minutes ago\n \n Description : A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DN...", "creation_timestamp": "2026-05-11T18:45:23.985447Z"}, {"uuid": "b88eb28f-5c57-4d07-921b-db5a28dd6a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-4891", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bb20f34e-4314-42f2-8e6b-cb2c917339bc", "content": "", "creation_timestamp": "2026-05-13T12:31:36.904766Z"}, {"uuid": "7f3acf2c-2f0f-429b-9e37-3e437e3afaea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48911", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/4ygjgczwvv462", "content": "CVE-2026-48911: Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flow", "creation_timestamp": "2026-08-05T15:25:09.632726Z"}, {"uuid": "0862a3af-2f7e-4c5f-944d-411bc5489d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48912", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/igyfohm5byanp", "content": "CVE-2026-48912: Apache Answer: Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URL", "creation_timestamp": "2026-08-05T15:31:09.584814Z"}, {"uuid": "43154a60-94f3-492f-a848-7bb3470b6227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48913", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mns4xufmsu2r", "content": "CVE-2026-48913 - Apache HTTP Server: mod_http2 memory corruption when file handles exhausted\nCVE ID : CVE-2026-48913\n \n Published : June 8, 2026, 4:16 p.m. | 17\u00a0minutes ago\n \n Description : Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles a...", "creation_timestamp": "2026-06-08T16:45:08.367878Z"}, {"uuid": "b24c022e-6019-4e98-b7a2-d613455e6c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48913", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnsq2eqhv22q", "content": "CVE-2026-48913: Apache HTTP Server: mod_http2 memory corruption when file handles exhausted", "creation_timestamp": "2026-06-08T22:26:33.590812Z"}, {"uuid": "8c7807b4-19b4-4b97-a2ea-ecba55d8e395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48913", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu7hq6yhy25", "content": "\ud83d\udd17 CVE : CVE-2026-29167, CVE-2026-29170, CVE-2026-34355, CVE-2026-34356, CVE-2026-42535, CVE-2026-42536, CVE-2026-43951, CVE-2026-44119, CVE-2026-44185, CVE-2026-44186, CVE-2026-44631, CVE-2026-48913, CVE-2026-49975", "creation_timestamp": "2026-06-09T12:35:10.144061Z"}, {"uuid": "5ad51466-5aaf-4d12-8e37-adc53d98c88d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48913", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apache-http-server-multiple-vulnerabilities_20260610", "content": "", "creation_timestamp": "2026-06-09T18:00:00.000000Z"}]}