{"vulnerability": "cve-2026-8245", "sightings": [{"uuid": "9d50ddc2-42cb-4df4-b95b-dac4fe5ebaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82452", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mua5fkpdtu2z", "content": "\ud83d\udd34 CVE-2026-82452 - Critical (9.8)\n\nrust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where m...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82452/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T15:01:15.318993Z"}, {"uuid": "d0a55338-72d8-428d-aa02-578f2e6d6258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82453", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mua5frmm7y2o", "content": "\ud83d\udfe0 CVE-2026-82453 - High (7.5)\n\nrust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82453/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T15:01:21.681558Z"}, {"uuid": "411e572f-0ed8-4ecf-ba6b-191668342bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82454", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mua5fytwer24", "content": "\ud83d\udd34 CVE-2026-82454 - Critical (9.1)\n\nThe Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypas...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82454/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T15:01:29.339326Z"}, {"uuid": "622260b3-946a-4685-8f1c-4698ddd84e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82456", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mua5ha4t3b24", "content": "\ud83d\udd34 CVE-2026-82456 - Critical (10)\n\nargocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions wit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82456/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T15:02:10.397199Z"}, {"uuid": "1170dc0c-0964-42da-bcdf-c9bb9fa474a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82457", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mua5hgw74z24", "content": "\ud83d\udfe0 CVE-2026-82457 - High (7.8)\n\nsu-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol befor...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82457/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T15:02:17.776822Z"}, {"uuid": "916d2846-90f5-46b8-97ed-49d25e4c3e42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82450", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mua5hnvon526", "content": "\ud83d\udfe0 CVE-2026-82450 - High (8.8)\n\nBookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP impor...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82450/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T15:02:24.792334Z"}, {"uuid": "b14e05ad-aceb-49ad-940e-2db0997c8d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82452", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muab3le6ss2p", "content": "\ud83d\udea8 CVE-2026-82452 \u2014 CVSS 9.3 CRITICAL\n\nrust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST A...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82452\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-29T16:07:13.756799Z"}, {"uuid": "4c4e7c5f-fa00-4602-9e0a-83665372c294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82454", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muab3tzz7d2e", "content": "\ud83d\udea8 CVE-2026-82454 \u2014 CVSS 9.3 CRITICAL\n\nThe Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypass in Apple...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82454\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-29T16:07:22.967267Z"}, {"uuid": "ae18745a-245c-4f49-84c7-326ecfe416ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82456", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muab44l6oy25", "content": "\ud83d\udea8 CVE-2026-82456 \u2014 CVSS 10 CRITICAL\n\nargocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82456\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-29T16:07:36.858673Z"}, {"uuid": "2fefc469-d18a-49b3-8c82-d476693a6ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82452", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117181775356918310", "content": "CVE-2026-82452 - Critical Auth Bypass in rust-iot-platform. Unauthenticated REST APIs allow full user account manipulation. CVSS 9.8. Restrict access now. #CVE #IoT #infosec\nhttps://www.valtersit.com/cve/CVE-2026-82452/", "creation_timestamp": "2026-08-30T01:06:32.939091Z"}, {"uuid": "d341db37-da90-4009-bb08-9f0bffa2dada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82452", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mub77wwi5h2h", "content": "CVE-2026-82452 - Critical Auth Bypass in rust-iot-platform. Unauthenticated REST APIs allow full user account manipulation. CVSS 9.8. Restrict access now. #CVE #IoT #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-82452/", "creation_timestamp": "2026-08-30T01:06:33.098321Z"}, {"uuid": "a747cdfd-583e-4d82-9be7-a95d4878c92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82452", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mubcw74cbb2z", "content": "Critical Auth Bypass: Another Internet Toy Explodes Before Breakfast\nPANIC 96% | Lag 0.0h | CVE-2026-82452 is a critical authentication bypass in rust-iot-platform. Unauthenticated REST APIs c\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-30T02:12:41.353464Z"}, {"uuid": "4a1b016c-4746-48f3-b081-c68233926bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82452", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muauaon7vv2y", "content": "CVE-2026-82452 - rust-iot-platform\nThe rust-iot-platform software lets anyone send requests to most of its web API functions without needing to log in. As a result, an unauthenticated person could create, change,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#iotecology #CVE #infosec", "creation_timestamp": "2026-08-29T21:50:09.885652Z"}, {"uuid": "0ce4a05b-34d9-41b3-bb45-1bef3a40915b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82454", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muausjqle723", "content": "CVE-2026-82454 - omnivore\nThe Omnivore web service could be tricked into accepting a forged Apple login token, letting an attacker appear as any Apple\u2011linked user. This happens because the code used the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#omnivore #omnivoreapp #CVE #infosec", "creation_timestamp": "2026-08-29T22:00:05.012164Z"}, {"uuid": "ea234531-9048-433c-a897-f28a440217c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82456", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muausl6cvp2c", "content": "CVE-2026-82456 - argocd-mcp\nVersion\u202f0.8.0 of Argo CD\u2019s management component listens on all network addresses and, when a security token is set, does not verify who is connecting. Anyone who can reach\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#argocdmcp #argoprojlabs #CVE #infosec", "creation_timestamp": "2026-08-29T22:00:06.363642Z"}, {"uuid": "223f1e4d-1664-4da3-99f5-06ba634d1ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8245", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmfwclbti72p", "content": "CVE-2026-8245 - Concrete CMS 9.5.0 and below is vulnerable to Reflected XSS in Legacy Pagination via HTML attribute injection\nCVE ID : CVE-2026-8245\n \n Published : May 21, 2026, 10:16 p.m. | 3\u00a0hours, 33\u00a0minutes ago\n \n Description : Concrete CMS 9.5.0 and below is vulnerable to...", "creation_timestamp": "2026-05-22T02:48:43.008872Z"}, {"uuid": "c265a589-9e0c-4ef4-92ef-9d19f216584c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82455", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117184872053767652", "content": "CVE-2026-82455 - Arbitrary file write flaw in RubyGems via symlink path traversal during extraction. CVSS 7.1. Update RubyGems immediately. #CVE #Ruby #infosec\nhttps://www.valtersit.com/cve/CVE-2026-82455/", "creation_timestamp": "2026-08-30T14:14:07.183608Z"}, {"uuid": "fea5f311-0e3e-49bf-8123-6808bf7f0dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82455", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mucla5oy2i2u", "content": "CVE-2026-82455 - Arbitrary file write flaw in RubyGems via symlink path traversal during extraction. CVSS 7.1. Update RubyGems immediately. #CVE #Ruby #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-82455/", "creation_timestamp": "2026-08-30T14:14:07.428476Z"}, {"uuid": "42613897-b067-42af-a273-fa544fde0f49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82450", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mucdqkql7l25", "content": "CVE-2026-82450\nIf you use BookStack version earlier than 26.05.4, a user who can add content can upload a specially crafted ZIP file that places a hidden PHP script as a book cover. That script is saved where anyone on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-30T12:00:05.033833Z"}, {"uuid": "9d8621b5-337d-4f3e-8c1f-507ee9e15797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82450", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muhc5gpr5k2b", "content": "CVE-2026-82450 - RCE vulnerability in BookStack portable ZIP import via PHP polyglot file upload. CVSS 8.8. Update immediately. #CVE #BookStack #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-82450/", "creation_timestamp": "2026-09-01T11:14:48.153875Z"}, {"uuid": "911690aa-a31e-446a-83b9-37419e4e7f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82450", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117195491774848682", "content": "CVE-2026-82450 - RCE vulnerability in BookStack portable ZIP import via PHP polyglot file upload. CVSS 8.8. Update immediately. #CVE #BookStack #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-82450/", "creation_timestamp": "2026-09-01T11:14:50.229686Z"}]}