{"vulnerability": "cve-2026-5645", "sightings": [{"uuid": "eaca29c6-a297-4d83-982c-62c333cc5969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5645", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miti4vlk2x22", "content": "", "creation_timestamp": "2026-04-06T14:31:30.034872Z"}, {"uuid": "1cb1adf0-806b-4472-a521-b30a3ab76175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5645", "type": "published-proof-of-concept", "source": "Telegram/xB-J5caT8OaTqFu1G6vNbp6TxSF4mn8gOhVa9PlynjV1S3c", "content": "", "creation_timestamp": "2026-04-06T13:15:55.000000Z"}, {"uuid": "73bab80a-d6bd-43b9-a13c-9cfc6bb9042e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56450", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3movaxeespo2t", "content": "CVE-2026-56450 - AIL Framework - Missing Rate Limiting Enables Brute-Force Attacks Against Two-Factor Authentication Codes\nCVE ID : CVE-2026-56450\n \n Published : June 22, 2026, 1:02 p.m. | 2\u00a0hours, 41\u00a0minutes ago\n \n Description : AIL did not restrict repeated failed attempts t...", "creation_timestamp": "2026-06-22T15:59:37.125181Z"}, {"uuid": "f0d56c41-edd2-48db-b3a7-d54e29db8cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56457", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mpgujdy5vf2t", "content": "HCL DevOps Deploy / HCL Launch \u5b89\u5168\u6f0f\u6d1e CVE-2026-56457 \u6df1\u5ea6\u5206\u6790:\u654f\u611f\u4fe1\u606f\u6cc4\u9732\u98ce\u9669\u4e0e\u5e94\u5bf9\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/BA87DC27-EF63-4CFA-9F3C-8F62152F54F3", "creation_timestamp": "2026-06-29T16:04:57.102481Z"}, {"uuid": "7de94607-0c70-492a-bfd0-b8c49d79f691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56457", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgujdz3qn2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56457 \u0432 HCL DevOps Deploy: \u0443\u0433\u0440\u043e\u0437\u0430 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/1E77073E-69C0-44CB-8AAE-695E84F7F0BA", "creation_timestamp": "2026-06-29T16:04:57.645290Z"}, {"uuid": "234336f6-a512-4c90-ad96-bbc1af40eb60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56457", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphcfmpfkf2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56457 \u0432 HCL DevOps Deploy: \u0443\u0433\u0440\u043e\u0437\u0430 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/CD8512B5-7B7E-420D-9C97-41833397D13F", "creation_timestamp": "2026-06-29T20:13:24.425469Z"}, {"uuid": "0aae6f45-46b6-4697-8d3c-ee1584906508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56451", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116917864212446754", "content": "CVE-2026-56451 (CRITICAL, CVSS 10) in Siemens Opcenter X <2604: Improper JWT signature validation allows remote attackers to bypass authentication & impersonate users/admins. Restrict access & monitor while awaiting patch. https://radar.offseq.com/threat/cve-2026-56451-cwe-347-improper-verification-of-cr-44aef26a03e69f33 #OffSeq #CVE202656451 #infosec #Siemens", "creation_timestamp": "2026-07-14T10:30:28.392596Z"}, {"uuid": "7d1bc98a-e477-4b4f-b8f1-9eef1e7f7bde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-56451", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqlyt42e3r2x", "content": "CVE-2026-56451: Siemens Opcenter X (<2604) has a CRITICAL flaw \u2014 attackers can forge JWTs and gain full access. Restrict exposure & monitor activity until a fix is released. https://radar.offseq.com/threat/cve-2026-56451-cwe-347-improper-verification-of-cr-44aef26a03e69f33 #OffSeq #CVE202656451 #...", "creation_timestamp": "2026-07-14T10:30:30.304798Z"}, {"uuid": "8f01772f-3171-4b9c-9256-ef38698a683e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56451", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqlzhuqjjp2r", "content": "CVE-2026-56451\nOpcenter X versions prior to V2604 do not properly check JWT headers. This allows an attacker to create fake user identities, potentially gaining full access to the application. Update to version V2604 or later\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T10:42:07.025237Z"}, {"uuid": "68a985c1-6513-4ae7-80d4-1d3152e75054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56451", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqm6neflbs27", "content": "CVE-2026-56451 - Opcenter X JWT Algorithm Confusion Vulnerability\nCVE ID : CVE-2026-56451\n \n Published : July 14, 2026, 10:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : A vulnerability has been identified in Opcenter X (All versions < V2604). Affected applications do no...", "creation_timestamp": "2026-07-14T12:14:40.359839Z"}, {"uuid": "4d611b22-94f3-47d2-8525-9e55c6faa453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56451", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-24", "content": "", "creation_timestamp": "2026-07-14T12:45:05.511195Z"}, {"uuid": "acc9d50f-a151-4e9c-bf9e-cef628978569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56453", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mquhpb2hr72j", "content": "CVE-2026-56453 - dfxanalytics\nAn attacker can intercept and alter server responses, potentially gaining access to user accounts. This affects the security of user data and authentication processes in HCL\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dfxanalytics #hcl #CVE #infosec", "creation_timestamp": "2026-07-17T19:18:05.105636Z"}, {"uuid": "299c886e-c4b4-4903-9a9e-ee94b6b78036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56451", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr3do56ezp2g", "content": "Siemens Opcenter X authentication bypass (CVE-2026-56451, CVSS 10) lets attackers forge JWTs for full unauthorized access. Update to V2604 now.\n\n#Siemens #OpcenterX #CVE202656451 #ICS #AuthenticationBypass", "creation_timestamp": "2026-07-20T12:54:30.990407Z"}, {"uuid": "889ef795-f4c1-4e21-81f6-a67dea4871b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56451", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr42nga4dw2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-56451 \u0432 Opcenter X: \u0443\u0433\u0440\u043e\u0437\u0430 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b JWT \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3297C406-854C-4A87-8826-EE4C8671EF70", "creation_timestamp": "2026-07-20T19:45:42.396811Z"}, {"uuid": "45016a83-84ec-4cb5-ab89-86321e3023f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56451", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mr44to5j7i2j", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1-Opcenter X: CVE-2026-56451 - \u05e4\u05d2\u05d9\u05e2\u05d4 \u05d1\u05d0\u05d9\u05de\u05d5\u05ea JWT\n\n\n\nhttps://khesef.xyz/posts/A56322BB-8603-4BF6-B749-AA2BCF819BC2", "creation_timestamp": "2026-07-20T20:24:59.646624Z"}, {"uuid": "d316c218-79b8-43ba-9e58-6c00b26fba98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56452", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr473himo32d", "content": "CVE-2026-56452: Apache MINA SSHD: Path traversal in SCP file reception", "creation_timestamp": "2026-07-20T21:05:08.462766Z"}, {"uuid": "0c702413-cc42-40dd-aa17-97b8d41ac1ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56452", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4c723ilb2q", "content": "\ud83d\udfe0 CVE-2026-56452 - High (7.5)\n\nPath traversal in the sshd-scp component of Apache MINA SSHD.\u00a0Apache MINA SSHD is a Java library...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56452/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T22:00:50.225492Z"}, {"uuid": "01ca8912-c234-42d0-9d12-1203bdb02fb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56452", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4epgg4mg2a", "content": "CVE-2026-56452 - Apache MINA SSHD: Path traversal in SCP file reception\nCVE ID : CVE-2026-56452\n \n Published : July 20, 2026, 9:16 p.m. | 28\u00a0minutes ago\n \n Description : Path traversal in the sshd-scp component of Apache MINA SSHD.\u00a0Apache MINA SSHD is a Java library for client...", "creation_timestamp": "2026-07-20T22:45:47.232158Z"}]}