{"vulnerability": "cve-2026-8493", "sightings": [{"uuid": "deeee7da-a515-4fb1-95d9-4b1ef580ff80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8493", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmavhqnpz72i", "content": "CVE-2026-8493 - Colorbox Inline - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-036\nCVE ID : CVE-2026-8493\n \n Published : May 19, 2026, 11:16 p.m. | 2\u00a0hours, 58\u00a0minutes ago\n \n Description : Improper Neutralization of Input During Web Page Generation (\"Cross-site...", "creation_timestamp": "2026-05-20T02:50:23.712644Z"}, {"uuid": "f1e4c527-8931-4ca2-b226-ccbeae91badf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84933", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mupgvfe2x22w", "content": "\ud83d\udea8 Moderate-severity security fix in undici (7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-84933: undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T17:01:06.798261Z"}, {"uuid": "db4ac4b4-9b2c-447e-9976-921d019ee537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/inn53juzbwdax", "content": "CVE-2026-84933 - undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches\nCVE ID : CVE-2026-84933\n \n Published : 4. September 2026 16:59 | 23\u00a0Minuten ago\n \n Description : undici's cache interceptor does not handle the Set-Cookie response header...", "creation_timestamp": "2026-09-04T17:49:49.576969Z"}, {"uuid": "438f60d7-2266-42f2-80ce-4732589e8079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84935", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mutx2rrgfl23", "content": "\ud83d\udfe0 CVE-2026-84935 - High (8)\n\nThe HT Menu  WordPress plugin before 1.2.7 does not perform any capability or object-ownership ch...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84935/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-06T12:01:07.189286Z"}, {"uuid": "4d808c1a-490c-4761-9a9b-cbf1c677150b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84934", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mutx2l4nrq22", "content": "\ud83d\udfe0 CVE-2026-84934 - High (8)\n\nThe JCH Optimize WordPress plugin before 6.0.1 does not perform a capability check on one of its ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84934/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-06T12:00:58.755584Z"}, {"uuid": "aebcc8a8-ee02-4f1b-abe3-50ce5e8f5766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84939", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6j3dzpmb24", "content": "CVE-2026-84939 - apache freemarker\nIf your application uses Apache FreeMarker versions 2.2.0 to 2.3.34 and allows custom locale settings, an attacker could trick it into loading files it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachefreemarker #apachefoundation #CVE #infosec", "creation_timestamp": "2026-09-10T16:50:08.362966Z"}, {"uuid": "c1e96b43-50a7-4c31-824f-61662b3fa326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84939", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvcl4cg5yj24", "content": "\ud83d\udccc CVE-2026-84939 - Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to ... https://www.cyberhub.blog/cves/CVE-2026-84939", "creation_timestamp": "2026-09-12T07:37:06.918967Z"}]}