{"vulnerability": "cve-2026-8878", "sightings": [{"uuid": "dd2bd4ee-d6e5-4413-a022-c96211d2b08e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8878", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnfxrdy3542b", "content": "CVE-2026-8878 - CVE-2026-8878\nCVE ID : CVE-2026-8878\n \n Published : June 3, 2026, 7:16 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive dat...", "creation_timestamp": "2026-06-03T20:40:06.581226Z"}, {"uuid": "bcc99b9c-104f-4a0a-8ad0-fc631c4b522b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88789", "type": "seen", "source": "https://t.me/GithubRedTeam/103947", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XXE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-88789\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-01 10:33:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-88789 (Apache Camel Quarkus camel-quarkus-support-xalan drops the JAXP external access restrictions, XXE / SSRF) \u2014 Camel Quarkus\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-01T11:04:25.000000Z"}, {"uuid": "09de1eb6-f889-4502-96cb-b5cad934bc3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88789", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103947", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XXE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-88789\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-01 10:33:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-88789 (Apache Camel Quarkus camel-quarkus-support-xalan drops the JAXP external access restrictions, XXE / SSRF) \u2014 Camel Quarkus\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-01T11:04:25.000000Z"}, {"uuid": "63727256-60db-4e00-9ff5-3e1f3291dfe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88788", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117370337559729552", "content": "CVE-2026-88788: Stored XSS in Text Styler WordPress plugin through 1.1.1. Contributors can inject JS that runs for any viewer, admins included. CVSS 6.8, no patch yet. Disable the plugin until it is fixed. https://www.valtersit.com/cve/CVE-2026-88788/ #CVE #WordPress #infosec", "creation_timestamp": "2026-10-02T08:21:51.043096Z"}, {"uuid": "4312cfee-90a2-4e89-b82a-ea66e3363471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88789", "type": "seen", "source": "Telegram/qelajjk7aT2hBG_5dRiefV98dTf1cspjOH0LxyjCX9MkcYY", "content": "", "creation_timestamp": "2026-10-01T21:00:04.000000Z"}, {"uuid": "24f87e77-6952-456c-b1a5-24b9f994a070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88789", "type": "seen", "source": "Telegram/thjp2Cy65D8-tUIbk25rDJxoVFD4emrSQdGd7LXN2iwVNxw", "content": "", "creation_timestamp": "2026-10-01T15:00:19.000000Z"}, {"uuid": "9a61a989-1b66-4c5c-b798-c24bd5ec48fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88789", "type": "published-proof-of-concept", "source": "Telegram/qelajjk7aT2hBG_5dRiefV98dTf1cspjOH0LxyjCX9MkcYY", "content": "", "creation_timestamp": "2026-10-01T21:00:04.000000Z"}, {"uuid": "baab1c97-6a6e-4ba1-8e93-4f260567b585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88789", "type": "published-proof-of-concept", "source": "Telegram/thjp2Cy65D8-tUIbk25rDJxoVFD4emrSQdGd7LXN2iwVNxw", "content": "", "creation_timestamp": "2026-10-01T15:00:19.000000Z"}, {"uuid": "935aee8e-4152-4f05-8650-9264e41547c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88783", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwycvlt7h22g", "content": "\ud83d\udfe0 CVE-2026-88783 - High (8.8)\n\nThe Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit its widening of the allowe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-88783/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-03T16:33:59.536488Z"}]}