{"vulnerability": "cve-2026-8538", "sightings": [{"uuid": "202d157d-329a-402d-b13a-4cd41a10850d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8538", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "a7901029-c9c2-41f8-b258-2fa6ffe85498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8538", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"}, {"uuid": "f8f16f2f-780b-4279-9293-978cba88f2bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85388", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3munajqqklf2q", "content": "\ud83d\udfe0 CVE-2026-85388 - High (8.1)\n\nWorklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination he...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85388/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-03T20:01:55.229351Z"}, {"uuid": "8001beb4-42c8-4904-bf2f-23a078708196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85385", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvotkfvn7b2y", "content": "CVE-2026-85385 - concrete cms\nVersions of Concrete CMS older than 9.5.4 let a specially crafted timezone value be saved and later displayed without cleaning it. When an administrator views that user\u2019s profile,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#concretecms #CVE #infosec", "creation_timestamp": "2026-09-17T04:40:06.725691Z"}, {"uuid": "5c16baf8-ed38-49e4-b7a1-d2d2253215ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85386", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvotkjyauh2j", "content": "CVE-2026-85386 - concrete cms\nConcrete CMS versions before 9.5.4 let anyone upload XML files through a public form without checking their content. When such a file is opened in a browser, it can cause malicious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#concretecms #CVE #infosec", "creation_timestamp": "2026-09-17T04:40:10.870034Z"}]}