VulnSocial

CVE-2026-46380Disclosure

LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

Back to dashboard
0.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-08-14)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-05-28: 1Mentions · 2026-08-14: 2Patch / Workaround · 2026-08-14: 1Technical Details · 2026-05-28: 1Technical Details · 2026-08-14: 205-2808-14
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-281
Disclosure1
2026-08-142
Disclosure1Patch1
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-46380 compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the HTTPSFetcher._do_fetch() method passes a user-suppli… https://www.cve.org/CVERecord?id=CVE-2026-46380

    Post summary

    The post announces CVE‑2026‑46380, providing minimal technical detail and directing readers to the CVE record.

    000011.1K
    57.9K followersView on X
  • Infoflowcloud@infoflowcloud
    Patch

    🚨*CVE* CVE-2026-46380 compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the HTTPSFetcher._do_fetch() method passes a user-suppli… https://www.cve.org/CVERecord?id=CVE-2026-46380 ----- Traducción: CVE-2026-46380 com… https://infoflow.cloud`

    Post summary

    CVE‑2026‑46380 affects compliance‑trestle before versions 3.12.2/4.0.3 via a flaw in HTTPSFetcher._do_fetch(); patched releases are available and no PoC or active exploitation is reported.

    0000029
    98 followersView on X
  • DailyCVE@dailycve
    Disclosure

    🔴 #IBM compliance‑trestle, SSRF and Path Traversal, #CVE‑2026‑46380, #CVE‑2026‑45725 & #CVE‑2026‑45774 (Critical) -DC-May2026-10 https://dailycve.com/ibm-compliance-trestle-ssrf-and-path-traversal-cve-2026-46380-cve-2026-45725-cve-2026-45774-critical-dc-may2026-10/

    Post summary

    The post announces critical SSRF and Path Traversal vulnerabilities (CVE‑2026‑46380, CVE‑2026‑45725, CVE‑2026‑45774) in IBM compliance‑trestle.

    0000047
    207 followersView on X

Explore more

Back to dashboard