{"metadata": {"vulnerability": "CVE-2026-8152", "count": 17, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-05-08T08:12:13.325Z", "date_only": false, "value": "2026-05-08T08:12:13.325Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-8152", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-22T12:21:28.977Z", "date_only": false, "value": "2026-07-22T12:21:28.977Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-8152", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-22T12:21:28.977Z", "date_only": false, "value": "2026-07-22T12:21:28.977Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / NCSC.ch", "record": "CVE-2026-8152", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-22T13:16:38Z", "date_only": false, "value": "2026-07-22T13:16:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6F3H-GQRM-69GC", "record": "GHSA-6F3H-GQRM-69GC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-22T13:16:38.423Z", "date_only": false, "value": "2026-07-22T13:16:38.423", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8152", "record": "FKIE_CVE-2026-8152", "field": "published"}, {"timestamp": "2026-07-22T13:30:28.107Z", "date_only": false, "value": "2026-07-22T13:30:28.107916Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116963870440766522", "record": "cve-2026-8152", "field": "creation_timestamp", "uuid": "83083cd1-5604-4d8f-ad51-5333b89bb77e", "content": "Unblu Spark suffers a CRITICAL open redirect (CVE-2026-8152) leading to DOM XSS in siteEmbeddedSetup=true config. Attacker can access cookies & APIs of host app. No patch yet \u2014 disable this config ASAP. https://radar.offseq.com/threat/cve-2026-8152-cwe-601-url-redirection-to-untrusted-site-open-redirect-in-unblu-inc-unblu-spark-7d13478f5c7eb4ac #OffSeq #XSS #Vulnerability #InfoSec", "url": "https://infosec.exchange/users/offseq/statuses/116963870440766522"}, {"timestamp": "2026-07-22T13:30:29.959Z", "date_only": false, "value": "2026-07-22T13:30:29.959638Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mragmcqfdr2r", "record": "cve-2026-8152", "field": "creation_timestamp", "uuid": "e386659e-d12c-45b4-868c-850c39ab412f", "content": "Unblu Spark CRITICAL vuln: CVE-2026-8152 enables DOM XSS via open redirect if siteEmbeddedSetup=true. No patch. Disable the config to reduce risk. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-8152-cwe-601-url-redirection-to-untrusted-site-open-redirect-in-unblu-inc-unblu-spark-7d13478f5c7eb4ac #Off...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mragmcqfdr2r"}, {"timestamp": "2026-07-22T14:16:06.019Z", "date_only": false, "value": "2026-07-22T14:16:06.019510Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mraj5uvyiy22", "record": "CVE-2026-8152", "field": "creation_timestamp", "uuid": "6a96b348-fe44-418c-81a1-901fc9387c48", "content": "CVE-2026-8152 - unblu spark\nIf Unblu Spark is deployed in a certain way, an attacker can trick users into visiting a malicious website, which can then access sensitive information from the host application.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unbluspark #unblu #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mraj5uvyiy22"}, {"timestamp": "2026-07-22T14:51:06.430Z", "date_only": false, "value": "2026-07-22T14:51:06.430539Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mral4esv3224", "record": "CVE-2026-8152", "field": "creation_timestamp", "uuid": "f9a5405b-cc07-4239-8e30-b8242a8c14f3", "content": "CVE-2026-8152 - Unblu Spark Open Redirect leading to DOM-Based XSS\nCVE ID : CVE-2026-8152\n \n Published : July 22, 2026, 1:16 p.m. | 29\u00a0minutes ago\n \n Description : Unblu Spark contains an open redirect vulnerability that can be escalated to a DOM-based cross-site scripting (XS...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mral4esv3224"}, {"timestamp": "2026-07-22T15:12:40.960Z", "date_only": false, "value": "2026-07-22T15:12:40.960763Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mramd2lkoz2e", "record": "CVE-2026-8152", "field": "creation_timestamp", "uuid": "79ac5af9-5523-48b9-97d4-fe6958787e98", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-8152](https://docs.unblu.com/latest/security-bulletins/#UBL-2026-001)\nUnblu Spark conta...\nhttps://docs.unblu.com/latest/security-bulletins/#UBL-2026-001 #ZeroDay #PatchManagement #Vulnerability", "url": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mramd2lkoz2e"}, {"timestamp": "2026-07-22T15:31:21Z", "date_only": false, "value": "2026-07-22T15:31:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6F3H-GQRM-69GC", "record": "GHSA-6F3H-GQRM-69GC", "field": "published"}, {"timestamp": "2026-07-22T15:31:21Z", "date_only": false, "value": "2026-07-22T15:31:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6F3H-GQRM-69GC", "record": "GHSA-6F3H-GQRM-69GC", "field": "modified"}, {"timestamp": "2026-07-22T18:54:56.321Z", "date_only": false, "value": "2026-07-22T18:54:56.321413Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-8152", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-22T18:54:56.321Z", "date_only": false, "value": "2026-07-22T18:54:56.321413Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8152", "record": "FKIE_CVE-2026-8152", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-22T18:55:07.732Z", "date_only": false, "value": "2026-07-22T18:55:07.732Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-8152", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-22T18:55:07.732Z", "date_only": false, "value": "2026-07-22T18:55:07.732Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-8152", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-22T19:17:14.617Z", "date_only": false, "value": "2026-07-22T19:17:14.617", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-8152", "record": "FKIE_CVE-2026-8152", "field": "lastModified"}]}