{"vulnerability": "CVE-2026-8539", "sightings": [{"uuid": "16792c88-dede-4e2c-a18a-30aab04a955f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8539", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "fab6c9dc-15ef-4aa6-bbe3-478af353f6cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8539", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"}, {"uuid": "7a5767ac-f484-4b80-ba6c-aa97ee8a4b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85393", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/asgrlxcdrvwc5", "content": "CVE-2026-85393 - node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding\nCVE ID : CVE-2026-85393\n \n Published : Sept. 3, 2026, 6:54 p.m. | 25\u00a0minutes ago\n \n Description : node-forge through 1.4.0 fails to validate element count in nested D...", "creation_timestamp": "2026-09-03T19:29:33.257855Z"}, {"uuid": "1f8a9c2b-68b9-4cd9-b3c7-e06096cf2f13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85394", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bds6xdgeayvdp", "content": "CVE-2026-85394 - python-jose through 3.5.0 Algorithm Confusion via DER-encoded Public Key as HMAC Secret\nCVE ID : CVE-2026-85394\n \n Published : Sept. 3, 2026, 6:54 p.m. | 25\u00a0minutes ago\n \n Description : python-jose through 3.5.0 fails to properly validate asymmetric keys in HM...", "creation_timestamp": "2026-09-03T19:35:33.274574Z"}, {"uuid": "43fc9221-326c-472e-840f-6d939d0a291a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85396", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bi3nnpokvyr63", "content": "CVE-2026-85396 - rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix\nCVE ID : CVE-2026-85396\n \n Published : Sept. 3, 2026, 6:54 p.m. | 25\u00a0minutes ago\n \n Description : rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip...", "creation_timestamp": "2026-09-03T19:41:33.280733Z"}, {"uuid": "a89c4c1b-e519-4ebe-b9ba-caf2c6bb822f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85395", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7a57wtiulropg", "content": "CVE-2026-85395 - UnoPim before 2.1.3 Missing Authorization on Integration Management Routes\nCVE ID : CVE-2026-85395\n \n Published : Sept. 3, 2026, 6:54 p.m. | 25\u00a0minutes ago\n \n Description : UnoPim before 2.1.3 fails to include integration store, update, and key-generation rout...", "creation_timestamp": "2026-09-03T19:47:33.477249Z"}, {"uuid": "b94c4a9a-e9de-463d-a1ad-67be5dcaf568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85391", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mun7upezit2b", "content": "CVE-2026-85391 - peppermint\nThe container setup file used by Peppermint versions up to 0.5.5 includes a secret key that is publicly visible. Because of this, someone without an account can create a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#peppermint #peppermintlab #CVE #infosec", "creation_timestamp": "2026-09-03T19:50:06.076225Z"}, {"uuid": "79840c59-35da-4ea1-9428-3632ee6eb82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85394", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3munagl6zlt2l", "content": "CVE-2026-85394 - python-jose\nThe Python-JOSE software that creates and checks security tokens can be tricked into accepting fake tokens when a public key is used as the secret key. An attacker who knows\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pythonjose #mpdavis #CVE #infosec", "creation_timestamp": "2026-09-03T20:00:05.868835Z"}, {"uuid": "039afbb3-c935-48ef-8d07-462a56ffea88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85393", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3munahurifc23", "content": "\ud83d\udfe0 CVE-2026-85393 - High (7.5)\n\nnode-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences duri...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85393/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-03T20:00:49.938734Z"}, {"uuid": "f824753e-52e7-4b38-9031-dfaef17c53ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85391", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3munajxexbs2v", "content": "\ud83d\udd34 CVE-2026-85391 - Critical (9.8)\n\nPeppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allow...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85391/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-03T20:02:02.324263Z"}, {"uuid": "ba04045c-e4a4-43da-838f-4eec1e9a8330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85394", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3munai3jhgl24", "content": "\ud83d\udd34 CVE-2026-85394 - Critical (9.1)\n\npython-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, acce...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85394/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-03T20:00:57.889436Z"}, {"uuid": "21ffeac1-0f33-4a3c-9208-d045d15ca5a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85396", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3munaic666223", "content": "\ud83d\udfe0 CVE-2026-85396 - High (7.5)\n\nrubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract that f...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85396/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-03T20:01:03.884426Z"}, {"uuid": "3a81e76c-b88d-4c27-861f-d35262f1726b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85393", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muqq6qlszg2g", "content": "CVE-2026-85393: node-forge \u22641.4.0 fails to validate nested DigestAlgorithm sequences, allowing signature forgery via garbage bytes with low-exponent RSA keys\u2014bypassing prior CVE-2026-33894 fix. CVSS 7.5. Patch under review; update immediately if affected. https://www.valtersit.co", "creation_timestamp": "2026-09-05T05:20:02.281854Z"}, {"uuid": "62848681-9513-48ee-b340-8ca317a644a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85393", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117216745996435710", "content": "CVE-2026-85393: node-forge \u22641.4.0 fails to validate nested DigestAlgorithm sequences, allowing signature forgery via garbage bytes with low-exponent RSA keys\u2014bypassing prior CVE-2026-33894 fix. CVSS 7.5. Patch under review; update immediately if affected. https://www.valtersit.co", "creation_timestamp": "2026-09-05T05:20:03.432998Z"}]}