{"vulnerability": "CVE-2026-8566", "sightings": [{"uuid": "96ea9ee4-42b0-4ea7-a6fa-4d464c80c438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8566", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "015532de-04a5-422e-b8d1-574fa345f5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8566", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"}, {"uuid": "7489fb6a-9afb-451b-8ce3-e962d3332b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85660", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdvzwqlu2l", "content": "\ud83d\udea8 CVE-2026-85660 \u2014 CVSS 9.2 CRITICAL\n\ncli-mcp-server 0.2.5 contains a command allowlist bypass vulnerability in the _validate_command_with_operat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85660\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:07:45.020935Z"}, {"uuid": "acae755f-1b0c-44e0-adb1-984f80eb9775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85661", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdwcafja2g", "content": "\ud83d\udea8 CVE-2026-85661 \u2014 CVSS 9.3 CRITICAL\n\nexcel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCEL_FILES_PATH is unset, allo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85661\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:07:54.568911Z"}, {"uuid": "d9cc93de-a249-46e0-890b-cffa8868cb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85663", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdwlh55522", "content": "\ud83d\udea8 CVE-2026-85663 \u2014 CVSS 9.3 CRITICAL\n\nAim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through g...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85663\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:08:03.394987Z"}, {"uuid": "654e3982-9db7-4cf7-9333-7e8b2d721f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdwtnnhg2d", "content": "\ud83d\udea8 CVE-2026-85667 \u2014 CVSS 9.3 CRITICAL\n\nxiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allow...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85667\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:08:12.041689Z"}, {"uuid": "0d2e32e1-f7fc-4294-8e2d-26088f138704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85663", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mupe274p6g22", "content": "CVE-2026-85663 - aim\nThe Aim 3.29.1 tracking server does not check who is sending requests, so anyone on the internet can tell it to create accounts, access experiment data, or erase run records. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aim #aimhubio #CVE #infosec", "creation_timestamp": "2026-09-04T16:10:04.928446Z"}, {"uuid": "d7ee70b1-1074-45a4-8841-38b60e3d40b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85660", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muphfhpcgq2t", "content": "CVE-2026-85660 - cli-mcp-server\nThe version 0.2.5 of cli-mcp-server checks only certain allowed commands, but when a specific setting is turned on it can be tricked into running other commands hidden inside $(\u2026) or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mladensu #CVE #infosec", "creation_timestamp": "2026-09-04T17:10:04.551858Z"}, {"uuid": "2f60d11a-8e4d-4549-8eab-8d8d03195962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85661", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muphfj65322b", "content": "CVE-2026-85661 - excel-mcp-server\nThe excel-mcp-server version 0.1.8 does not limit where it can read or write files when a certain setting is missing. This means a malicious user could access or modify any file\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#harismusa #CVE #infosec", "creation_timestamp": "2026-09-04T17:10:05.600072Z"}, {"uuid": "16fc360b-4756-4970-b469-419cc04a38a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muphxefwnt2w", "content": "CVE-2026-85667 - xiaobei\nThe Xiaobei application (versions up to 5.5.2) accepts incoming messages without checking who sent them. This allows anyone on the internet to post messages that the system will\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xiaobei #teamwiseflow #CVE #infosec", "creation_timestamp": "2026-09-04T17:20:04.896906Z"}, {"uuid": "2606b543-42b8-42fe-8555-0ec279e47160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muztceznea2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85667: xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attac\u2026\nCVSS 9.1 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-85667\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T20:09:42.906613Z"}, {"uuid": "ef2e8f2d-57c4-4853-9c70-22de4a3c9c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzpvstoz52z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85667: xiaobei through 5.5.2 Unauthenticated Webhook Message Injection\nCVSS 9.1 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-85667\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T19:08:59.801690Z"}]}