{"vulnerability": "cve-2026-5391", "sightings": [{"uuid": "ae06f5eb-3403-4c4f-8b04-4342bd77ebdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53915", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3monqpswxlo2w", "content": "CVE-2026-53915 - JetBrains GoLand: Remote Code Execution via Untrusted Project Configuration\nCVE ID : CVE-2026-53915\n \n Published : June 19, 2026, 11:49 a.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : In JetBrains GoLand before 2026.1.3 remote code execution was possible via un...", "creation_timestamp": "2026-06-19T16:20:25.731309Z"}, {"uuid": "fff258c1-bfc4-42c0-ba3c-1ce031ba6b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53915", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-jetbrains-5", "content": "", "creation_timestamp": "2026-06-26T13:45:02.544680Z"}, {"uuid": "10d114d0-994d-4b8a-a96f-55dfbe7bddba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53914", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp74miuvct23", "content": "CVE-2026-53914 - JetBrains Kotlin Unsafe Deserialization\nCVE ID : CVE-2026-53914\n \n Published : June 26, 2026, 1:01 p.m. | 44\u00a0minutes ago\n \n Description : In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata\n \n Se...", "creation_timestamp": "2026-06-26T14:08:35.102601Z"}, {"uuid": "e5eec84f-b1e2-46f2-bd28-d8fa82d09025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53917", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mphipiftol23", "content": "CVE-2026-53917: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker: Unbounded memory allocation in OpenWire property unmarshalling", "creation_timestamp": "2026-06-29T22:06:18.010770Z"}, {"uuid": "d89226f3-8d85-40f1-8176-c15ab9716725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53916", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mphiyhkhyq2g", "content": "CVE-2026-53916: Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec", "creation_timestamp": "2026-06-29T22:11:19.104373Z"}, {"uuid": "5dec51f9-dfdd-44a1-80d6-a354dee7a8a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53916", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqexp6nu22y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53916 \u0432 Apache ActiveMQ: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437\u0431\u044b\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\n\n\n\nhttps://kripta.biz/posts/D458CFBE-24B9-4670-9F64-6DE82F24FBFF", "creation_timestamp": "2026-07-03T10:53:16.842673Z"}, {"uuid": "f569d979-7748-4816-a0c7-bffbfadab314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53913", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwhr67bwy2o", "content": "CVE-2026-53913: Apache Camel: Camel-Keycloak: KeycloakSecurityPolicy verifies the bearer access token only inside its role and permission checks, so in the default configuration (no required roles or permissions) the token is never verified and any non-null bearer value is accepted - a", "creation_timestamp": "2026-07-05T20:59:16.938386Z"}, {"uuid": "44dff39e-02bc-4bd9-b7f9-f3a54ad6d31a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53913", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mpy24owhaq2i", "content": "CRITICAL: Apache Camel Keycloak improper authentication (CVE-2026-53913) lets attackers bypass auth & gain access in default configs. Upgrade to 4.21.0/4.18.3 or fix policy settings. https://radar.offseq.com/threat/cve-2026-53913-cwe-287-improper-authentication-in--29482412e19e3f00 #OffSeq #Apach...", "creation_timestamp": "2026-07-06T12:00:30.754195Z"}, {"uuid": "774d8fb4-e59f-4e9b-83e0-e612d7c455b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53913", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116872919680337020", "content": "CVE-2026-53913 | CRITICAL | Apache Camel Keycloak: Default KeycloakSecurityPolicy skips token verification, enabling unauthenticated access and possible RCE on 4.15.0 \u2013 4.18.2 & 4.19.0 \u2013 4.20.x. Upgrade to 4.21.0/4.18.3. https://radar.offseq.com/threat/cve-2026-53913-cwe-287-improper-authentication-in--29482412e19e3f00 #OffSeq #ApacheCamel #CVE202653913", "creation_timestamp": "2026-07-06T12:00:29.420516Z"}, {"uuid": "d5d68964-bd47-4f9c-a07c-be144341d3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53913", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpy2hxlw5o2w", "content": "CVE-2026-53913 - Apache Camel Keycloak: KeycloakSecurityPolicy verifies the bearer access token only inside its role and permission checks, so in the default configuration the token is never verified and any non-null bearer value is accepted\nCVE ID : CVE-2026-53913\n \n Publishe...", "creation_timestamp": "2026-07-06T12:06:48.802068Z"}, {"uuid": "37b24005-93e4-4784-b009-b5dbfa00dd7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53913", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq2olleolc2s", "content": "CVE-2026-53913 - apache camel keycloak\nIn the default configuration of Apache Camel Keycloak, access tokens are not verified, allowing any non-null value in the Authorization: Bearer header to pass. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-07T13:12:04.326285Z"}, {"uuid": "bf985751-4ec4-412f-aada-f765f06c4a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53913", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6qe24xyo2e", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-53913: \u041a\u0430\u043a \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\n\n\n\nhttps://kripta.biz/posts/B13ABE13-2225-4869-A3A4-4D8AB4D46020", "creation_timestamp": "2026-07-09T03:54:18.014068Z"}, {"uuid": "38df7f92-6681-484a-90f2-2869b1883dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5391", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mshloq3jvz2u", "content": "CVE-2026-5391 latepoint (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-07T03:15:09.386461Z"}, {"uuid": "530ef86f-c67e-4bcc-913e-387dc01d5de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53910", "type": "seen", "source": "https://cert.pl/en/posts/2026/07/CVE-2026-53910", "content": "", "creation_timestamp": "2026-07-22T16:15:06.512056Z"}, {"uuid": "43ed9300-9115-46c0-aca7-296810baec65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53913", "type": "seen", "source": "Telegram/q3tIaYx4agF_M3da1rV7jtAQTpWs9uwXUcQ2UZM8hUpw4XQ", "content": "", "creation_timestamp": "2026-07-22T17:00:05.184889Z"}, {"uuid": "f966d4ef-6efa-4b30-97c3-92b877305e28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53913", "type": "published-proof-of-concept", "source": "Telegram/q3tIaYx4agF_M3da1rV7jtAQTpWs9uwXUcQ2UZM8hUpw4XQ", "content": "", "creation_timestamp": "2026-07-23T00:00:09.188646Z"}, {"uuid": "e8640759-1e3b-46ad-85ff-73ad25f8222d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53913", "type": "seen", "source": "https://t.me/GithubRedTeam/94484", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53913\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 12:48:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC reproducer for CVE-2026-53913 (Apache Camel camel-keycloak): KeycloakSecurityPolicy fails open in the Basic Setup \u2014 with no required roles/permissions the token is never verified, so any forged/garbage bearer token bypasses authentication (unauthenticated RCE). Fixed in 4.18.3/4.21.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:06.611052Z"}, {"uuid": "3091573a-acfb-47fc-86e2-18d6e1e4a194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53913", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94484", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53913\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 12:48:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC reproducer for CVE-2026-53913 (Apache Camel camel-keycloak): KeycloakSecurityPolicy fails open in the Basic Setup \u2014 with no required roles/permissions the token is never verified, so any forged/garbage bearer token bypasses authentication (unauthenticated RCE). Fixed in 4.18.3/4.21.0.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:10.525178Z"}, {"uuid": "a4ea3821-bc2f-4868-aa9d-f669aa0e8726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53910", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrifcmd74u2c", "content": "CVE-2026-53910: GNU diffutils bug, and some thoughts on \"security\" reports", "creation_timestamp": "2026-07-25T17:28:27.809793Z"}]}