{"vulnerability": "cve-2026-8502", "sightings": [{"uuid": "f99f802b-50f8-4cca-8c2a-ff3ce2d856c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8502", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlwce32gc25", "content": "CVE-2026-8502 - LearnPress\nCVE ID : CVE-2026-8502\n \n Published : June 6, 2026, 4:17 a.m. | 15\u00a0minutes ago\n \n Description : The LearnPress \u2013 WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive Information Exposure in all versi...", "creation_timestamp": "2026-06-06T05:29:45.351543Z"}, {"uuid": "c29a3201-a589-4299-900c-92f29c480dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8502", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mo3zuekw3t2m", "content": "CVE-2026-8502 learnpress (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept #learnpress", "creation_timestamp": "2026-06-12T15:16:07.002558Z"}, {"uuid": "162d9034-f731-42a9-82e9-544f0013042b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85028", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3munajjn42k2s", "content": "\ud83d\udfe0 CVE-2026-85028 - High (7.8)\n\nCreation of a temporary file in a directory with insecure permissions in the FPGA management tool...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85028/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-03T20:01:46.743204Z"}, {"uuid": "ba6997b3-eaf3-4866-9046-a0db3b906e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85024", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mupetrfbmk2w", "content": "\ud83d\udea8 Moderate-severity security fix in undici (6.28.1, 7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-85024: undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T16:24:24.729794Z"}, {"uuid": "aa61001d-19e3-4765-9041-52fbaed6ed6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85025", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv72ujiath2f", "content": "\ud83d\udea8 CVE-2026-85025 \u2014 CVSS 9.8 CRITICAL\n\nIBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85025\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T22:08:26.294477Z"}, {"uuid": "9b735bc0-0dc8-455b-bf8b-df10f304a6fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85025", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv7437pldz24", "content": "CVE-2026-85025 - langflow oss\nVersions of the open\u2011source Langflow tool (up to 1.11.5) let anyone on the internet send commands that the system will execute and change or view chat sessions. This happens\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-09-10T22:30:05.044508Z"}, {"uuid": "d6683c90-bec0-4a9c-b14a-e39b642708a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85025", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvm47kpw4s2e", "content": "\ud83d\udccc CVE-2026-85025 - IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions th... https://www.cyberhub.blog/cves/CVE-2026-85025", "creation_timestamp": "2026-09-16T02:37:07.685651Z"}, {"uuid": "6c544a5b-bc2a-4fcd-98de-81f55aa1d436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85025", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0392", "content": "", "creation_timestamp": "2026-09-23T16:15:22.671926Z"}, {"uuid": "786edc03-056b-46e4-bb1d-7993578c5cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85025", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0392", "content": "IBM heeft 12 kwetsbaarheden verholpen in IBM MQ, IBM MQ Appliance en Langflow OSS. De kwetsbaarheden kunnen leiden tot het uitvoeren van willekeurige code of commando's. Vier kwetsbaarheden zijn als kritiek aangemerkt en kunnen zonder authenticatie en gebruikersinteractie op afstand worden misbruikt.\n\nDe kwetsbaarheid met kenmerk CVE-2026-10747 heeft een CVSS-score van 10,0 en betreft een heap-based buffer overflow in IBM MQ. De kwetsbaarheden met kenmerk CVE-2026-79724, CVE-2026-85025 en CVE-2026-81204 hebben een CVSS-score van 9,8 en bevinden zich in Langflow OSS. Een niet-geauthenticeerde kwaadwillende kan deze kwetsbaarheden misbruiken om willekeurige code of OS-commando's uit te voeren. De overige kwetsbaarheden in Langflow hebben een CVSS-score van 8,8 en vereisen geauthenticeerde toegang.", "creation_timestamp": "2026-09-23T12:33:27.000000Z"}, {"uuid": "fb3ed477-ebb4-42e2-a78f-4a8e4076b6ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85024", "type": "seen", "source": "https://gist.github.com/alon710/ffd73e42aa4d7534770f3c09713af03e", "content": "# CVE-2026-85024: CVE-2026-85024: Denial of Service via Uncaught Exception in undici WebSocket Client\n\n> **CVSS Score:** 5.9\n> **Published:** 2026-09-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-85024\n\n## Summary\nA high-severity Denial of Service (DoS) vulnerability exists in the undici WebSocket client implementation when processing compressed frames. The vulnerability is caused by a race condition where event listeners, including error handlers, are stripped from the active zlib stream during cleanup before the stream is fully terminated, leading to an unhandled exception.\n\n## TL;DR\nA race condition in undici's permessage-deflate cleanup allows remote servers to crash Node.js applications by sending an over-limit payload followed by trailing malformed bytes, triggering an uncaught exception.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-248 (Uncaught Exception)\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.9 (Medium)\n- **EPSS Score**: 0.00412\n- **Exploit Status**: Proof of Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- undici packages using WebSockets with permessage-deflate enabled\n- Node.js instances using undici as native HTTP/WebSocket client\n- **undici**: >= 6.25.0, < 6.28.1 (Fixed in: `6.28.1`)\n- **undici**: >= 7.28.0, < 7.29.1 (Fixed in: `7.29.1`)\n- **undici**: >= 8.1.0, < 8.10.2 (Fixed in: `8.10.2`)\n\n## Mitigation\n\n- Upgrade the undici package to fixed version branches (v6.28.1, v7.29.1, or v8.10.2).\n- Use package overrides or resolutions to force secure transitives.\n- Disable the permessage-deflate extension during client-side WebSocket negotiation.\n\n**Remediation Steps:**\n1. Identify vulnerable occurrences of undici using npm ls undici.\n2. Modify package.json to override transitive references or directly run npm update undici.\n3. If deploying via Node.js system dependencies, upgrade the Node.js runtime binary to the latest LTS patch release.\n4. Deploy code changes and verify dependency resolutions using automated dependency scanners.\n\n## References\n\n- [GitHub Security Advisory GHSA-3wwx-pv8p-q78v](https://github.com/nodejs/undici/security/advisories/GHSA-3wwx-pv8p-q78v)\n- [OpenJSF Security Directory](https://cna.openjsf.org/security-advisories.html)\n- [NVD Details](https://nvd.nist.gov/vuln/detail/CVE-2026-85024)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-85024) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-28T23:30:32.000000Z"}, {"uuid": "8385380c-9bd4-4088-9058-6244f9e91093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85024", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mwnrsn2zxo2l", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-85024 impacts undici in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/698\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-09-29T12:01:27.050638Z"}]}