{"uuid": "0d2e32e1-f7fc-4294-8e2d-26088f138704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85663", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mupe274p6g22", "content": "CVE-2026-85663 - aim\nThe Aim 3.29.1 tracking server does not check who is sending requests, so anyone on the internet can tell it to create accounts, access experiment data, or erase run records. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aim #aimhubio #CVE #infosec", "creation_timestamp": "2026-09-04T16:10:04.928446Z"}