{"vulnerability": "CVE-2026-8542", "sightings": [{"uuid": "d60a021b-1036-4e14-936d-16afd210939e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8542", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "7d543b8f-a06a-4b2b-bb41-373a4894cc6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8542", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"}, {"uuid": "d187f968-36e0-4d2b-b148-e7d937e081a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85424", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3munl2bwa3a2w", "content": "CVE-2026-85424 - core-moos\nThe MOOS core software (versions through 10.4.0) does not require any login for its internal messaging system. Because of this, anyone on the network can connect and delete all\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coremoos #themoos #CVE #infosec", "creation_timestamp": "2026-09-03T23:10:05.082859Z"}, {"uuid": "958d09c6-b120-4dc4-ab28-0a676616b0dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85425", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3munl2dit722y", "content": "CVE-2026-85425 - moos-ivp\nThe iSay component of MOOS\u2011IvP (versions up to 24.8.1) accepts text messages called SAY_MOOS and sends them straight to the operating system without checking them first. A malicious user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#moosivp #CVE #infosec", "creation_timestamp": "2026-09-03T23:10:06.043159Z"}, {"uuid": "0ac11a03-ad0e-455c-a657-e88b9b6bfd72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85426", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3munlm6b7vw2l", "content": "CVE-2026-85426 - moos-ivp\nThe uMemWatch component of MOOS-IvP builds command\u2011line strings using client names that an attacker can control. Because those names are not cleaned, a malicious name can contain special\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#moosivp #CVE #infosec", "creation_timestamp": "2026-09-03T23:20:04.507185Z"}, {"uuid": "33015b4a-ee99-401d-9062-f35d4d575c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85428", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3munlm7sryo22", "content": "CVE-2026-85428 - core-moos\nThe optional web interface in MOOS core (versions up to 10.4.0) does not require a login, so anyone who can reach the server can send commands that change system variables,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coremoos #themoos #CVE #infosec", "creation_timestamp": "2026-09-03T23:20:06.365675Z"}, {"uuid": "ca6babb6-2b45-41e2-96ef-3e6286ff7270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85424", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munocdsfxt2w", "content": "\ud83d\udea8 CVE-2026-85424 \u2014 CVSS 9.3 CRITICAL\n\nMOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85424\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T00:08:15.937805Z"}, {"uuid": "89d06121-6c70-45cf-934a-a6e31971aa4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85425", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munocmhb522b", "content": "\ud83d\udea8 CVE-2026-85425 \u2014 CVSS 9.3 CRITICAL\n\nMOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAY_MOOS variable handle...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85425\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T00:08:24.979698Z"}, {"uuid": "8e3ecdef-82ed-4410-8815-3a60fb394ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85426", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munocujoyo2t", "content": "\ud83d\udea8 CVE-2026-85426 \u2014 CVSS 9.3 CRITICAL\n\nMOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen MOOS client names without ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85426\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T00:08:33.488258Z"}, {"uuid": "f994a28f-e60e-4b17-adf6-761dcfb95df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85427", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munod522id2o", "content": "\ud83d\udea8 CVE-2026-85427 \u2014 CVSS 9.2 CRITICAL\n\nMOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unaut...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85427\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T00:08:43.617040Z"}, {"uuid": "07c874ce-bf6d-4919-920d-3e06e388be18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85428", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munodg4eww2o", "content": "\ud83d\udea8 CVE-2026-85428 \u2014 CVSS 9.3 CRITICAL\n\nMOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP s...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85428\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T00:08:51.932115Z"}, {"uuid": "39c67a9d-9bef-4c0c-a166-2009817aa267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85427", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3munoflbrqg22", "content": "CVE-2026-85427 - essential-moos\nThe pAntler component of MOOS (versions up to 10.0.1) can be tricked into executing any program if an attacker sends a specially crafted mission file to the system.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#essentialmoos #themoos #CVE #infosec", "creation_timestamp": "2026-09-04T00:10:20.078413Z"}, {"uuid": "8994cf29-4d79-45af-a44e-3c287399f0b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85428", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117212656547817288", "content": "CVE-2026-85428: Critical auth bypass in MOOS core-moos \u226410.4.0. Unauthenticated attackers can write variables via MOOSDB HTTP server, hijacking actuators/overrides. CVSS 9.8. Unpatched. If you run MOOS, disable HTTP or restrict access NOW. Details: https://www.valtersit.com/cve/CVE-2026-85428/ #CVE #infosec #OTsecurity", "creation_timestamp": "2026-09-04T12:00:11.174209Z"}]}