VulnSocial

CVE-2026-44179Disclosure

LOW

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

Back to dashboard
2.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-06-23); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-23: 1Mentions · 2026-07-28: 1PoC Mentioned / Linked · 2026-06-23: 1Patch / Workaround · 2026-06-23: 1Technical Details · 2026-06-23: 1Technical Details · 2026-07-28: 106-2307-28
Signal classification1 categories
Disclosure
2100.0%
Full discourse2 posts
  • Joey Romaine 🇺🇸 |=★=|@Tank23x0
    Disclosure

    CVSS 9.9. CVE-2026-44179. Worth reading before your users find out the hard way. xwiki-pro-macros has remote code execution from page title and content via excerpt-include macro The best defense is the one you set up before you needed it.

    Post summary

    CVE-2026-44179 is a critical remote code execution vulnerability in xwiki-pro-macros with a CVSS score of 9.9; the text highlights the need to review it before users encounter exploitation.

    0000044
    334 followersView on X
  • Upwind Security MDR@UpwindMDR
    Disclosure

    🚨Critical - XWiki Pro Macros RCE via excerpt-include Macro (CVE-2026-44179) The excerpt-include macro in XWiki Pro Macros fails to escape the title of the included page, and the excerpt's content is rendered to XWiki syntax and executed with the macro's rights. This enables XWiki syntax injection through a page's title and content. Any user who can merely edit a page - no script or programming rights required - can embed an {{async}}{{groovy}}...{{/groovy}}{{/async}} payload in the title or content and achieve remote code execution, compromising the confidentiality, integrity, and availability of the entire XWiki installation. 👉Upgrade to XWiki Pro Macros 1.14.5.

    Post summary

    The text announces a critical RCE in XWiki Pro Macros (CVE‑2026‑44179) that exploits the excerpt‑include macro; it includes an example payload and recommends upgrading to version 1.14.5.

    0000058
    226 followersView on X

Explore more

Back to dashboard