{"vulnerability": "CVE-2026-81735", "sightings": [{"uuid": "78a8432c-2d5f-4143-bfb6-e7a14de9c349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81735", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muatoqv33u2c", "content": "CVE-2026-81735 - ui-tars-desktop\nThe UI\u2011TARS desktop application starts a server that listens on all network interfaces and does not require a password. Because of this, anyone who can reach the server\u2019s port can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bytedance #CVE #infosec", "creation_timestamp": "2026-08-29T21:40:04.697808Z"}, {"uuid": "6945dde6-c4d8-482b-8af2-246cbdf4d09f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81735", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3h2wf2fk25", "content": "\ud83d\udea8 CVE-2026-81735 \u2014 CVSS 10 CRITICAL\n\nstartServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81735\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T18:10:55.632498Z"}]}