{"vulnerability": "CVE-2026-8209", "sightings": [{"uuid": "02e780ab-1ce0-4df6-b5bd-1c8c06c2de0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8209", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlfj3m6ba52e", "content": "CVE-2026-8209 - Gibbon Path Traversal DOS\nCVE ID : CVE-2026-8209\n \n Published : May 9, 2026, 3:19 a.m. | 1\u00a0hour, 6\u00a0minutes ago\n \n Description : Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web appli...", "creation_timestamp": "2026-05-09T05:26:58.641151Z"}, {"uuid": "8dcc0186-8d03-4dbb-aaed-92212f97af09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu6oxex4sm2p", "content": "CVE-2026-82090\nThe Pocket application (through version 8.33.0.0) can be tricked into inserting outside content that runs hidden scripts. This could allow an attacker to change what the app shows or does without your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T01:10:05.682945Z"}, {"uuid": "9969de0c-1d61-4e35-b80d-b08677cfd26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4p5kipnr2e", "content": "\ud83d\udea8 CVE-2026-82090 \u2014 CVSS 9.2 CRITICAL\n\nPocket through 8.33.0.0 allows XSS because \"Save to Pocket\" injects external HTML into the DOM.\u00a0\u00a0JavaScript...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82090\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T06:08:14.285800Z"}, {"uuid": "1909afc3-db60-4c76-bc8b-7ef4d3097785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gb7bzwqhkfxf3", "content": "CVE-2026-82090 - Pocket Cross-Site Scripting Vulnerability\nCVE ID : CVE-2026-82090\n \n Published : Aug. 28, 2026, 5:16 a.m. | 51\u00a0minutes ago\n \n Description : Pocket through 8.33.0.0 allows XSS because \"Save to Pocket\" injects external HTML into the DOM.\u00a0\u00a0JavaScript code can alt...", "creation_timestamp": "2026-08-28T06:27:24.098571Z"}, {"uuid": "48ac6d18-e7f8-4968-a18c-5935187cf8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82099", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117253266483984586", "content": "A new vulnerability with increased severity was disclosed for IBM DataStage on Cloud Pak for Data (CVE-2026-82099) https://vuldb.com/vuln/402287", "creation_timestamp": "2026-09-11T16:07:40.619817Z"}, {"uuid": "d753514d-22d1-476f-ade7-d6397c40f5df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://t.me/GithubRedTeam/102416", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82090-18-Years-All-Versions-CVSS-9.2-CRITICAL-The-Pocket-Forever-Day\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a FUNFACTOR1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 16:28:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-82090 \u00b7 CVSS 9.2 CRITICAL \u00b7 0-click stored XSS in Mozilla Pocket \u2014 all versions (v0 \u2192 v8.33.0.0) \u00b7 18-year forever-day \u00b7 no patch \u00b7 MITRE published\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T19:00:05.422044Z"}, {"uuid": "7fe7f695-baf3-4e00-a75d-76f704ae8e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102416", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82090-18-Years-All-Versions-CVSS-9.2-CRITICAL-The-Pocket-Forever-Day\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a FUNFACTOR1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 16:28:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-82090 \u00b7 CVSS 9.2 CRITICAL \u00b7 0-click stored XSS in Mozilla Pocket \u2014 all versions (v0 \u2192 v8.33.0.0) \u00b7 18-year forever-day \u00b7 no patch \u00b7 MITRE published\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-16T00:00:12.714544Z"}]}