{"uuid": "e386659e-d12c-45b4-868c-850c39ab412f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8152", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mragmcqfdr2r", "content": "Unblu Spark CRITICAL vuln: CVE-2026-8152 enables DOM XSS via open redirect if siteEmbeddedSetup=true. No patch. Disable the config to reduce risk. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-8152-cwe-601-url-redirection-to-untrusted-site-open-redirect-in-unblu-inc-unblu-spark-7d13478f5c7eb4ac #Off...", "creation_timestamp": "2026-07-22T13:30:29.959638Z"}