{"uuid": "9d57761f-44ba-46a3-af44-934dd75cfdd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86190", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3murll2oedb2y", "content": "CVE-2026-86190\nThe AVideo platform\u2019s videoViewsInfo feature can be called without logging in and will return full user records, including password hashes, password\u2011reset tokens, and live\u2011session identifiers. This lets an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-05T13:30:06.103100Z"}