{"vulnerability": "CVE-2026-8182", "sightings": [{"uuid": "5d3dfff9-d21e-46b1-bf9f-a275eea90071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81826", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muacefgovl25", "content": "CVE-2026-81826\nIf a password is changed in Flowintel versions 3.3.0 and newer, any existing login sessions stay valid until they time out. This lets anyone who already has a session continue to access the account even after\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T16:30:03.598625Z"}, {"uuid": "380a530a-77b8-4fcd-8cf3-c26adb3a494b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8182", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msecyfwj5x2x", "content": "\ud83d\udfe0 CVE-2026-8182 - High (8.8)\n\nIBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute arbit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8182/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-05T20:01:31.290144Z"}, {"uuid": "3940c503-d311-4d5d-b0c6-f2a2bbfbf20b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81826", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3h36qdet2c", "content": "\ud83d\udea8 CVE-2026-81826 \u2014 CVSS 9.1 CRITICAL\n\nAffected versions of Flowintel do not revoke existing authenticated sessions when a user\u2019s password is chan...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81826\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T18:11:04.306885Z"}, {"uuid": "45557b01-b985-4c4c-aab4-ef21f68182ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81827", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2aycrsxvjyqle", "content": "CVE-2026-81827 - Flowintel Login Email Validation Bypass Allows Log Injection via Crafted Email Input\nCVE ID : CVE-2026-81827\n \n Published : Aug. 27, 2026, 5:21 p.m. | 47\u00a0minutes ago\n \n Description : Affected versions of Flowintel incorrectly attempted to validate login email ...", "creation_timestamp": "2026-08-27T18:15:17.535168Z"}, {"uuid": "b73f752d-f5d0-4b81-bbeb-e83c31b3729b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4fpmjpcgqkl5y", "content": "CVE-2026-81826 - Flowintel Fails to Invalidate Active Sessions After Password Change\nCVE ID : CVE-2026-81826\n \n Published : Aug. 27, 2026, 5:21 p.m. | 47\u00a0minutes ago\n \n Description : Affected versions of Flowintel do not revoke existing authenticated sessions when a user\u2019s pas...", "creation_timestamp": "2026-08-27T18:21:16.520962Z"}, {"uuid": "0d09ed82-8f2f-49cf-8437-4d6c88c4566a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81820", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2orf4s4ajkdes", "content": "CVE-2026-81820 - Flowintel HTML Injection in MISP Case History Timeline via Crafted Object Attributes\nCVE ID : CVE-2026-81820\n \n Published : Aug. 27, 2026, 5:21 p.m. | 47\u00a0minutes ago\n \n Description : Affected versions of Flowintel construct timeline HTML using attacker-control...", "creation_timestamp": "2026-08-27T18:27:16.834213Z"}, {"uuid": "715d6058-3bd0-4066-af5d-1a2c7b0993d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81826", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4yqu4k3w2p", "content": "CVE-2026-81826 - flowintel\nIn Flowintel versions 3.3.0 and later, changing a user's password does not automatically end any existing login sessions. This means an attacker who already has a valid session could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowintel #CVE #infosec", "creation_timestamp": "2026-08-28T09:00:04.875754Z"}]}