{"vulnerability": "cve-2026-8563", "sightings": [{"uuid": "852673cf-306b-4aad-a855-1ddb05fecfbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8563", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "9439a8c4-73f0-4383-9a46-73df28deec45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8563", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"}, {"uuid": "998181ed-4025-485f-bd8b-ce57eb464407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85638", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117239080646053837", "content": "CVE-2026-85638: Trape 2.0 authorization bypass in core/user.py via vId/id. Public exploit, unpatched\u2014remote attacks likely. CVSS 7.3 high. No vendor response yet. Audit Trape deployments now. Details: https://www.valtersit.com/cve/CVE-2026-85638/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-09T04:00:06.146869Z"}, {"uuid": "79312203-470b-4d74-aed2-c81bac2ee7c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85638", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv2nluthav2b", "content": "CVE-2026-85638: Trape 2.0 authorization bypass in core/user.py via vId/id. Public exploit, unpatched\u2014remote attacks likely. CVSS 7.3 high. No vendor response yet. Audit Trape deployments now. Details: https://www.valtersit.com/cve/CVE-2026-85638/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-09T04:00:18.739609Z"}, {"uuid": "4c504eb8-12eb-4d81-9bb5-084f41db7936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85637", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117249737557787582", "content": "CVE-2026-85637: Missing auth in jofpin/trape (Admin Endpoint) allows remote attacks via join_room. CVSS 5.3. Exploit public, no patch yet. If you run trape 1.0/2.0, isolate/disconnect it now. Details: https://www.valtersit.com/cve/CVE-2026-85637/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-11T01:10:14.954767Z"}, {"uuid": "751cd30b-f0d9-4dfb-9bfb-27d493a35c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85637", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv7flmptej2f", "content": "CVE-2026-85637: Missing auth in jofpin/trape (Admin Endpoint) allows remote attacks via join_room. CVSS 5.3. Exploit public, no patch yet. If you run trape 1.0/2.0, isolate/disconnect it now. Details: https://www.valtersit.com/cve/CVE-2026-85637/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-11T01:20:19.031999Z"}, {"uuid": "1f66fd6b-8149-43a0-ba9c-9a57f35876af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85637", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mv7im5g6cr2r", "content": "Public exploit, no patch, and the usual tragic confidence parade\nPANIC 67% | Lag 0.0h | CVE-2026-85637 is a missing-authentication flaw in jofpin/trape's admin endpoint via join_room, allo\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-11T02:14:17.676876Z"}, {"uuid": "e79c191a-b70e-442d-b336-8c454b770a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85636", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117263460113166406", "content": "CVE-2026-85636: Missing authentication in Trape 1.0.0 (core/stats.py Login Endpoint). Remote exploit is public; project unpatched and unresponsive. CVSS 5.3. If you run Trape, assume compromise and isolate now. Details: https://www.valtersit.com/cve/CVE-2026-85636/ #CVE #infosec", "creation_timestamp": "2026-09-13T11:20:03.662409Z"}, {"uuid": "d6a3ae70-c587-4d65-b35b-5218a3d6403e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85636", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvfhzupiqy2p", "content": "CVE-2026-85636: Missing authentication in Trape 1.0.0 (core/stats.py Login Endpoint). Remote exploit is public; project unpatched and unresponsive. CVSS 5.3. If you run Trape, assume compromise and isolate now. Details: https://www.valtersit.com/cve/CVE-2026-85636/ #CVE #infosec ", "creation_timestamp": "2026-09-13T11:20:03.970549Z"}]}