{"vulnerability": "cve-2026-4908", "sightings": [{"uuid": "c52f9fa5-9baf-4b78-80de-542fee63787e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4908", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhzahqhxyx24", "content": "", "creation_timestamp": "2026-03-27T04:05:10.701511Z"}, {"uuid": "f74d4fe4-692a-4792-8201-ef6a41ac3389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4908", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhzdovd6w72z", "content": "", "creation_timestamp": "2026-03-27T05:02:51.828830Z"}, {"uuid": "5eceebf1-c3fa-453d-afb5-d51217be479f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4908", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mipabicjfu2w", "content": "", "creation_timestamp": "2026-04-04T22:00:15.050949Z"}, {"uuid": "43639bfb-6b3d-4054-99c5-cd64af129c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4908", "type": "published-proof-of-concept", "source": "Telegram/8aZpBgfObgmmQRKj5IyYoJHoHXYw9up8SwQpMMsDKs2WlD0", "content": "", "creation_timestamp": "2026-03-27T05:15:30.000000Z"}, {"uuid": "3e106023-8399-486d-b1bd-7109e7fc919d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49085", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mo7zbd6pcz26", "content": "CVE-2026-49085 cf7-insightly (CVSS Score 8.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-14T05:16:07.172815Z"}, {"uuid": "559c5144-4876-4bd1-80df-22dc64cdc83f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49083", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mob2sgujkz2q", "content": "CVE-2026-49083 latepoint (CVSS Score 8.8) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-14T15:16:17.092372Z"}, {"uuid": "da755998-a47c-4ed7-822f-90fa9c95e7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49082", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mobbis5f3a2i", "content": "CVE-2026-49082 chatway-live-chat (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-14T17:16:07.682159Z"}, {"uuid": "4da469e9-d833-4b88-bde1-ec8f5bce5708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49085", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moe7fiilag2j", "content": "CVE-2026-49085 - WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin\nCVE ID : CVE-2026-49085\n \n Published : June 15, 2026, 8:19 p.m. | 49\u00a0minutes ago\n \n Description : Unauthenticated PHP Object Injection in WP Insightly for Contact ...", "creation_timestamp": "2026-06-15T21:16:27.949190Z"}, {"uuid": "d70d3577-8251-4502-bd38-4b4a1dd474b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49083", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mof4p56r3k2n", "content": "\ud83d\udfe0 CVE-2026-49083 - High (7.5)\n\nContributor Privilege Escalation in LatePoint <= 5.5.1 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49083/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-16T06:00:51.016672Z"}, {"uuid": "9481f1b8-b6f0-4017-a4c7-df9f9736f21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49080", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mogzvfr4bj2h", "content": "CVE-2026-49080 - WordPress wpDataTables plugin\nCVE ID : CVE-2026-49080\n \n Published : June 16, 2026, 8:57 p.m. | 2\u00a0hours, 34\u00a0minutes ago\n \n Description : Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions.\n \n Severity: 9.3 | CRITICAL\n \n Visit the link for more ...", "creation_timestamp": "2026-06-17T00:15:59.046257Z"}, {"uuid": "9a55b863-4ce5-4f37-b37a-89632a671441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49085", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mohqjclvex25", "content": "\ud83d\udd34 CVE-2026-49085 - Critical (9.8)\n\nUnauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Form...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49085/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-17T07:00:49.729876Z"}, {"uuid": "1412b2da-8d17-4fed-9b28-822864117280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49084", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moihcdx4732g", "content": "CVE-2026-49084 - WordPress JetEngine plugin\nCVE ID : CVE-2026-49084\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.\n \n Severity: 9.3 | CRITICAL\n \n Visit the link for more detai...", "creation_timestamp": "2026-06-17T13:48:31.610289Z"}, {"uuid": "cffb4adf-7a15-4a05-a0e1-680df21f65d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49081", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moikekc6sz2j", "content": "CVE-2026-49081 - WordPress User Registration Stripe plugin\nCVE ID : CVE-2026-49081\n \n Published : June 17, 2026, 9:51 a.m. | 3\u00a0hours, 17\u00a0minutes ago\n \n Description : Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.12 versions.\n \n Severity: 8.2 | HIG...", "creation_timestamp": "2026-06-17T14:43:27.401024Z"}, {"uuid": "fa617c32-b276-4755-88e9-112e1340feef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49087", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnahqvrpv27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-49087 \u0432 Kibana: \u0440\u0438\u0441\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/05CCF3EC-36AD-4CC0-9B50-42088BD1BEAE", "creation_timestamp": "2026-07-02T04:54:46.856380Z"}, {"uuid": "dd71d225-0169-45f9-bdf4-a7087355a6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49088", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnjcw7lzb2m", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-49088 \u0432 Kibana: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0442 \u0443\u0442\u0435\u0447\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\n\n\n\nhttps://kripta.biz/posts/40E39BC8-8028-43B5-886C-0C8F5DBA294D", "creation_timestamp": "2026-07-02T07:33:08.492052Z"}, {"uuid": "785a4977-d5e7-42a7-a217-78aae86dc7fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49087", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6flfadf2t", "content": "\ud83d\udd17 CVE : CVE-2026-32283, CVE-2026-49087, CVE-2026-49088, CVE-2026-49089, CVE-2026-49090, CVE-2026-49091, CVE-2026-56148, CVE-2026-56149, CVE-2026-56150, CVE-2026-56151, CVE-2026-56152", "creation_timestamp": "2026-07-02T13:50:27.078957Z"}, {"uuid": "f21c81be-342b-4b33-a4e8-03cb3d1917a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49088", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6flfadf2t", "content": "\ud83d\udd17 CVE : CVE-2026-32283, CVE-2026-49087, CVE-2026-49088, CVE-2026-49089, CVE-2026-49090, CVE-2026-49091, CVE-2026-56148, CVE-2026-56149, CVE-2026-56150, CVE-2026-56151, CVE-2026-56152", "creation_timestamp": "2026-07-02T13:50:27.121317Z"}, {"uuid": "106e8945-d186-4cd3-8db4-c4e1afcf794d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49089", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6flfadf2t", "content": "\ud83d\udd17 CVE : CVE-2026-32283, CVE-2026-49087, CVE-2026-49088, CVE-2026-49089, CVE-2026-49090, CVE-2026-49091, CVE-2026-56148, CVE-2026-56149, CVE-2026-56150, CVE-2026-56151, CVE-2026-56152", "creation_timestamp": "2026-07-02T13:50:27.167924Z"}, {"uuid": "a6884239-c297-427e-8f3f-1a57a10e461d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49086", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwffn4twj2n", "content": "CVE-2026-49086: Apache Camel: Camel-Dapr: The Dapr Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers, allowing an actor who can publish to the subscribed topic to redirect the re-published message to an arbitrary Dapr Pub/Su", "creation_timestamp": "2026-07-05T20:17:06.632200Z"}, {"uuid": "bdcb7391-9aaf-4c1d-8e5a-f02dda94605e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49085", "type": "seen", "source": "https://t.me/GithubRedTeam/89247", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49085\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a izxci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 09:58:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-49085 WP Insightly PHP Object Injection Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:41.173253Z"}, {"uuid": "9a35d712-c94b-4b14-bed5-7f2cdc5efae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49083", "type": "seen", "source": "https://t.me/GithubRedTeam/89264", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49083\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a izxci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 10:10:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-49083 LatePoint Calendar Booking Plugin Privilege Escalation Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:24.585035Z"}, {"uuid": "349d7ba3-5c6e-464e-8e64-832295d7824c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49085", "type": "seen", "source": "https://t.me/GithubRedTeam/89247", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49085\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a izxci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 09:58:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-49085 WP Insightly PHP Object Injection Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:41.014393Z"}, {"uuid": "ab56b244-d1ad-4d53-a909-f76dbd340426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49083", "type": "seen", "source": "https://t.me/GithubRedTeam/89264", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49083\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a izxci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 10:10:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-49083 LatePoint Calendar Booking Plugin Privilege Escalation Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:40.052451Z"}, {"uuid": "60e0be90-aa96-4085-ab1d-f70d9e58df9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49083", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89264", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49083\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a izxci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 10:10:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-49083 LatePoint Calendar Booking Plugin Privilege Escalation Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:08.180386Z"}, {"uuid": "a0bf4e31-4441-4eb9-a582-a3ef44d2b951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49085", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89247", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49085\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a izxci\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-17 09:58:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-49085 WP Insightly PHP Object Injection Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:07.814605Z"}, {"uuid": "a484ec8a-d7f0-4123-9dbf-aea2822fc9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49086", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94308", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49086\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 12:14:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC reproducer for CVE-2026-49086 (Apache Camel camel-dapr): the pub/sub consumer copies the untrusted CloudEvent's pubsubName/topic into producer-routing headers, letting an attacker redirect a republished message to an arbitrary Dapr pub/sub component+topic (confused deputy). Fixed in 4.14.8/4.18.3/4.21.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-20T15:00:03.671136Z"}, {"uuid": "2a5f948c-25ea-4646-bc8e-bc28725c5b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49086", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94308", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-49086\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 12:14:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC reproducer for CVE-2026-49086 (Apache Camel camel-dapr): the pub/sub consumer copies the untrusted CloudEvent's pubsubName/topic into producer-routing headers, letting an attacker redirect a republished message to an arbitrary Dapr pub/sub component+topic (confused deputy). Fixed in 4.14.8/4.18.3/4.21.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:38.708036Z"}, {"uuid": "02c15e49-cfa9-4321-a4c6-e457c298c167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49086", "type": "seen", "source": "Telegram/B_YZ8BSkX5tqDJQpjrZq--1jgIV2vuNjSoj1tdR21kZx6jI", "content": "", "creation_timestamp": "2026-07-22T17:00:06.480873Z"}, {"uuid": "9492377a-928b-4a87-8836-08a4fe0e7a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-49086", "type": "published-proof-of-concept", "source": "Telegram/B_YZ8BSkX5tqDJQpjrZq--1jgIV2vuNjSoj1tdR21kZx6jI", "content": "", "creation_timestamp": "2026-07-23T00:00:07.802131Z"}]}