{"vulnerability": "cve-2026-8438", "sightings": [{"uuid": "501b3b93-897b-49fc-bb17-90e75cc29dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8438", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlu3eviqm2n", "content": "CVE-2026-8438 - All-In-One Security (AIOS)\nCVE ID : CVE-2026-8438\n \n Published : June 6, 2026, 2:16 a.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : The All-In-One Security (AIOS) \u2013 Security and Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versi...", "creation_timestamp": "2026-06-06T04:50:06.409813Z"}, {"uuid": "43725b13-2d0f-45c3-9029-f2bbfcede890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8438", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mnnufnkfqi2a", "content": "CVE-2026-8438. AIOS plugin stores attacker-injected scripts in your debug logs. Visitors execute them. Admin accounts compromised. CVSS 7.2. No patch available. Disable the plugin now. Scan your WordPress site: pulse-wp.com\n#WordPress #XSS #CyberSecurity", "creation_timestamp": "2026-06-07T00:01:08.144306Z"}, {"uuid": "dde8de01-7b27-42d0-acff-02cc4d831045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84380", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fawcwjznubgto", "content": "CVE-2026-84380 - HTTPX2 Request Smuggling via Conflicting Framing Headers\nCVE ID : CVE-2026-84380\n \n Published : 2. September 2026 18:21 | 54\u00a0Minuten ago\n \n Description : HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request._prepare() in src/httpx2/http...", "creation_timestamp": "2026-09-02T19:28:25.860270Z"}, {"uuid": "d17b03a7-1b25-4002-b974-59c395915cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84381", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mul265jf3b2c", "content": "\ud83d\udfe0 CVE-2026-84381 - High (8.1)\n\nHTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84381/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-02T23:02:42.108418Z"}, {"uuid": "19cfac0c-3bb2-4c90-bf6d-84ce22ec029a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84382", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mul26eadvo2g", "content": "\ud83d\udfe0 CVE-2026-84382 - High (7.5)\n\nHTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84382/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-02T23:02:48.943388Z"}, {"uuid": "97ae6b0f-94f3-491f-8647-cd91f7390a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv7ryeh2zy2m", "content": "Daily IT Security Digest \u2014 2026-09-11\n(infosec.exchange) #infosec\n\n---\n\n## 7. Fortinet: 10 Vulnerabilities Patched, 2 Critical Authentication Bypasses\nFortinet patched 10 vulnerabilities across its product line, notably CVE-2026-84390 and CVE-2026-84388 \u2014 both critical flaws allowing unauthenticated", "creation_timestamp": "2026-09-11T05:02:12.027533Z"}, {"uuid": "5088a492-9d26-44da-81f0-1221d2de556d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84385", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r", "content": "\ud83d\udd17 CVE : CVE-2026-22575, CVE-2026-26084, CVE-2026-84385, CVE-2026-84386, CVE-2026-84387, CVE-2026-84388, CVE-2026-84389, CVE-2026-84390, CVE-2026-84391, CVE-2026-84392, CVE-2026-84393", "creation_timestamp": "2026-09-11T13:55:10.297089Z"}, {"uuid": "cf7d3944-c72e-43c5-b38e-a17a57967194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84386", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r", "content": "\ud83d\udd17 CVE : CVE-2026-22575, CVE-2026-26084, CVE-2026-84385, CVE-2026-84386, CVE-2026-84387, CVE-2026-84388, CVE-2026-84389, CVE-2026-84390, CVE-2026-84391, CVE-2026-84392, CVE-2026-84393", "creation_timestamp": "2026-09-11T13:55:10.351592Z"}, {"uuid": "0228182e-d397-4054-b8d8-3769a801059d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84387", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r", "content": "\ud83d\udd17 CVE : CVE-2026-22575, CVE-2026-26084, CVE-2026-84385, CVE-2026-84386, CVE-2026-84387, CVE-2026-84388, CVE-2026-84389, CVE-2026-84390, CVE-2026-84391, CVE-2026-84392, CVE-2026-84393", "creation_timestamp": "2026-09-11T13:55:10.407033Z"}, {"uuid": "76f4395c-2e1f-4442-90dd-75c251fba449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r", "content": "\ud83d\udd17 CVE : CVE-2026-22575, CVE-2026-26084, CVE-2026-84385, CVE-2026-84386, CVE-2026-84387, CVE-2026-84388, CVE-2026-84389, CVE-2026-84390, CVE-2026-84391, CVE-2026-84392, CVE-2026-84393", "creation_timestamp": "2026-09-11T13:55:10.462324Z"}, {"uuid": "63fe4de4-2d0d-4110-a3fa-fc922e371f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84389", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r", "content": "\ud83d\udd17 CVE : CVE-2026-22575, CVE-2026-26084, CVE-2026-84385, CVE-2026-84386, CVE-2026-84387, CVE-2026-84388, CVE-2026-84389, CVE-2026-84390, CVE-2026-84391, CVE-2026-84392, CVE-2026-84393", "creation_timestamp": "2026-09-11T13:55:10.514278Z"}, {"uuid": "24dbdaaa-8c65-4cd2-9749-eb9a5e93691f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-fortinet-3", "content": "", "creation_timestamp": "2026-09-16T08:45:07.574181Z"}, {"uuid": "e59d9d6a-7188-4152-8721-aa6e63febab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84383", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvsnejon462t", "content": "CVE-2026-84383 - libheif\nA flaw in a popular image\u2011processing library lets specially crafted image files cause a memory overflow when the software resizes them. This can lead to program crashes or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#libheif #debian #Debian14 #CVE #infosec", "creation_timestamp": "2026-09-18T17:00:06.054195Z"}, {"uuid": "1d5d5c0c-1e4a-4918-954e-4e6cc25cf5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84383", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvsodr65w62q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-84383: libheif is a HEIF and AVIF file format decoder and encoder\nCVSS 9.8\nhttps://beta.vulnsea.com/cve/CVE-2026-84383\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-18T17:17:34.196449Z"}, {"uuid": "eb6ddc6f-d389-4672-bbf4-292a8b9d54de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84383", "type": "seen", "source": "https://bsky.app/profile/cybercod.bsky.social/post/3mvspstjfsw23", "content": "Thanks for the heads-up on CVE-2026-84383, ABYSSAL. A public exploit for a critical libheif flaw is concerning. Will keep an eye out for official vendor advisories and patches. Stay safe!", "creation_timestamp": "2026-09-18T17:43:53.856428Z"}, {"uuid": "3af21988-e55b-4e8b-a18e-e2b354a3eb3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84383", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvsr6w7vts2t", "content": "\ud83d\udea8 CVE-2026-84383 \u2014 CVSS 9.8 CRITICAL\n\nlibheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC,...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84383\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T18:08:33.078156Z"}, {"uuid": "e21cc2cf-7f5c-453b-992b-73a1131bc512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84383", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mw2u3t3d2i2i", "content": "CVE-2026-84383 is trending. Hype score 7, currently #9 on cvemon.\n\nlibheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-84383", "creation_timestamp": "2026-09-21T23:21:47.779173Z"}, {"uuid": "9a8bf75a-a776-4d89-913f-b43a0e197466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4jne6jni2g", "content": "CVE-2026-84388 - fortipam chrome extension\nThe FortiPAM browser add\u2011on for Chrome may let an unauthenticated remote user view information that should be private. This occurs because the extension does not properly\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fortinet #CVE #infosec", "creation_timestamp": "2026-09-22T15:20:04.672614Z"}, {"uuid": "88447552-4bb5-463a-b968-550c0a010fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4mcxkari2t", "content": "\ud83d\udea8 CVE-2026-84388 \u2014 CVSS 9.6 CRITICAL\n\nA improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84388\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T16:07:56.831388Z"}, {"uuid": "97787a9e-4669-40ef-a764-1bf1adfb5294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117315966324892984", "content": "New advisory\nCRITICAL: CVE-2026-84388: Fortinet Fortipam Chrome Extension:  https://app.opencve.io/cve/?vendor=fortinet&product=fortipam_chrome_extension  #Fortinet #Chrome #infosec #vulnerability", "creation_timestamp": "2026-09-22T17:53:04.291174Z"}, {"uuid": "102d6c92-4ec7-42a5-ac6c-3796fd917799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://t.me/GithubRedTeam/103054", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-84388-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ShadowForge-Cyber\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-22 16:30:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nImproper Restriction of Rendered UI Layers or Frames (CWE-1021)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-22T17:00:09.000000Z"}, {"uuid": "d5accbdf-9421-4d76-958c-48c812dda6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103054", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-84388-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ShadowForge-Cyber\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-22 16:30:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nImproper Restriction of Rendered UI Layers or Frames (CWE-1021)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-22T17:00:09.000000Z"}, {"uuid": "953a014f-812e-4d75-b2e3-8559faf573b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "Telegram/baeiM9fRMd5lQ2ZvmOQ70_pifu-s1kWTpwT4Ot-GKiqZMMo", "content": "", "creation_timestamp": "2026-09-23T03:00:06.000000Z"}, {"uuid": "bbf984fb-f9ab-43a7-a745-470fa5c2e07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "published-proof-of-concept", "source": "Telegram/baeiM9fRMd5lQ2ZvmOQ70_pifu-s1kWTpwT4Ot-GKiqZMMo", "content": "", "creation_timestamp": "2026-09-23T03:00:06.000000Z"}, {"uuid": "34cb5498-c6ee-4bb0-80db-77c4ee41ba7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117349707661619057", "content": "Fortinet posted a critical vulnerability yesterday: CVE-2026-84388 - Improper Restriction of Rendered UI Layers or Frames in FortiPAM Chrome Extension Enables Remote Information Disclosure https://app.opencve.io/cve/CVE-2026-84388 #infosec #Fortinet #Chrome #vulnerability", "creation_timestamp": "2026-09-28T16:53:56.639909Z"}]}