{"vulnerability": "cve-2026-5555", "sightings": [{"uuid": "a4688922-d0e3-484c-9bc8-4f9999061faf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5555", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miqrjh6zsq2i", "content": "", "creation_timestamp": "2026-04-05T12:41:35.326266Z"}, {"uuid": "4d035414-fcf0-4e53-8d7f-199f8586595c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5555", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3miqrlguazj2q", "content": "", "creation_timestamp": "2026-04-05T12:42:42.686629Z"}, {"uuid": "6c92adac-ab9a-4fce-9aab-0e8710bdb1e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5555", "type": "published-proof-of-concept", "source": "Telegram/8Kty84VYI9Md0M9SNY3xGd7cM29Jpy_2z-fm4_LFUn2UMmE", "content": "", "creation_timestamp": "2026-04-05T11:15:53.000000Z"}, {"uuid": "9b6b9983-0a7f-4b6e-b6cf-dff4d336aa93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55556", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3moxskp6qvv27", "content": "CVE-2026-55556: rsyslog imhttp Basic Auth heap overflow", "creation_timestamp": "2026-06-23T16:19:59.209116Z"}, {"uuid": "4cedad4f-73ce-4edc-82ca-8a51b5b76d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55555", "type": "published-proof-of-concept", "source": "https://hakaisecurity.io/explorando-geradores-de-pdf-0-days-em-90-milhoes-de-alvos-por-mes/research-blog", "content": "", "creation_timestamp": "2026-06-23T14:34:07.949000Z"}, {"uuid": "dfa30a4f-1bce-4d85-96a5-02840a10f053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55555", "type": "published-proof-of-concept", "source": "https://hakaisecurity.io/exploring-pdf-generators-0-days-across-90-million-targets-a-month/research-blog/", "content": "", "creation_timestamp": "2026-06-23T14:34:07.000000Z"}, {"uuid": "fe3bdc4b-f817-4cd6-8a77-a69ac7be0869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55553", "type": "published-proof-of-concept", "source": "https://github.com/node-modules/urllib/security/advisories/GHSA-hq3h-g68c-hp78", "content": "", "creation_timestamp": "2026-08-25T18:35:14.140326Z"}, {"uuid": "3bd459b8-61dd-44c9-ae9b-9a4c722a212d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55554", "type": "published-proof-of-concept", "source": "https://github.com/dompdf/dompdf/security/advisories/GHSA-wvh6-f5jh-8gw4", "content": "", "creation_timestamp": "2026-07-22T22:35:26.757418Z"}, {"uuid": "39c8df10-ee83-41a2-9d9b-b36eeffde1a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55559", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu6esqhrrz25", "content": "\ud83d\udea8 CVE-2026-55559 \u2014 CVSS 9.8 CRITICAL\n\nYamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs inserts templateArgs from POST /api...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-55559\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T22:08:32.566330Z"}, {"uuid": "b44f3356-2296-42a4-991d-bea8f228f8b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55558", "type": "seen", "source": "https://gist.github.com/alon710/a5f4630118da96558b479a90bb02c09c", "content": "# CVE-2026-55558: CVE-2026-55558: STARTTLS Response Injection in aiosmtplib\n\n> **CVSS Score:** 5.9\n> **Published:** 2026-08-27\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55558\n\n## Summary\nAn input buffering vulnerability exists in the aiosmtplib asynchronous SMTP client library before version 5.1.2. When upgrading a plaintext connection to TLS via STARTTLS, the library processes buffered plaintext responses after transport negotiation has completed. This behavior allows a network-positioned attacker to inject spoofed server responses prior to negotiation, leading to command/response desynchronization, arbitrary capability injection, and potential credential theft.\n\n## TL;DR\naiosmtplib does not clear its internal read buffer prior to executing a TLS handshake during STARTTLS negotiation. An attacker positioned on the network path can pipeline malicious plaintext responses that survive the transport upgrade, hijacking subsequent encrypted commands.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-74\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.9 (Medium)\n- **EPSS Score**: 0.00261\n- **Impact**: Integrity Loss / Session Desynchronization\n- **Exploit Status**: Proof of Concept (PoC) documented in patch unit tests\n- **KEV Status**: Not listed in CISA KEV\n\n## Affected Systems\n\n- Python asynchronous applications utilizing aiosmtplib for SMTP transport\n- **aiosmtplib**: < 5.1.2 (Fixed in: `5.1.2`)\n\n## Mitigation\n\n- Upgrade aiosmtplib to version 5.1.2 or later.\n- Reconfigure SMTP clients to use Implicit TLS (use_tls=True) on port 465 to bypass plaintext negotiation entirely.\n- Implement DNSSEC to prevent DNS-based Adversary-in-the-Middle hijacking of SMTP servers.\n\n**Remediation Steps:**\n1. Identify all deployment instances using the aiosmtplib library.\n2. Update requirements.txt, Pipfile, or pyproject.toml to define aiosmtplib >= 5.1.2.\n3. Execute dependency installation pipeline (e.g., pip install --upgrade aiosmtplib).\n4. Validate connection configurations and verify fallback behaviors are disabled.\n\n## References\n\n- [GitHub Security Advisory GHSA-vxj7-4xrp-5vr4](https://github.com/cole/aiosmtplib/security/advisories/GHSA-vxj7-4xrp-5vr4)\n- [Official Security Patch Commit](https://github.com/cole/aiosmtplib/commit/9fab7ba1361dbf7622ede1315a24be805cff09c9)\n- [aiosmtplib v5.1.2 Release Notes](https://github.com/cole/aiosmtplib/releases/tag/v5.1.2)\n- [National Vulnerability Database (NVD) Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-55558)\n- [CVE.org Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-55558)\n- [Wiz Vulnerability Database Details](https://www.wiz.io/vulnerability-database/cve/cve-2026-55558)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55558) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-28T00:31:38.557700Z"}, {"uuid": "a163e0e1-72e9-4f05-b063-aac68dbdb8bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55559", "type": "published-proof-of-concept", "source": "https://github.com/yamcs/yamcs/security/advisories/GHSA-73mf-m39p-wpm9", "content": "", "creation_timestamp": "2026-08-28T18:35:13.019663Z"}, {"uuid": "2095ed65-9a8e-4a1e-a7bc-66ff3f644cf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55559", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mubz4t3zhx2c", "content": "CVE-2026-55559\nOlder versions of the Yamcs mission control system let a specially crafted web request add malicious configuration data. That data can cause Yamcs to start a process that runs any command it wants, using the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-30T08:50:05.059060Z"}, {"uuid": "08de4f69-b1c4-4032-a33d-8fb7f056b36f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55552", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucafrkawq2o", "content": "\ud83d\udfe0 CVE-2026-55552 - High (7.5)\n\nYamcs is a mission control framework. Prior to 5.11.13, Yamcs StaticFileHandler.locateFile resolv...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55552/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T11:00:22.187877Z"}, {"uuid": "396f1b9a-cc92-4801-bcf6-4c18a3fde787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55559", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucafybsb727", "content": "\ud83d\udd34 CVE-2026-55559 - Critical (9.8)\n\nYamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs inserts templateArgs from...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55559/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T11:00:29.367466Z"}]}