{"vulnerability": "CVE-2026-8202", "sightings": [{"uuid": "0c0dee92-ab3c-428a-b08e-d144fed2b5d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82021", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muagbmh2dz2u", "content": "CVE-2026-82021 - hermes-agent\nVersions 0.18.2 through 0.18.x of Hermes Agent use a catalog that pulls code from a changeable upstream source. If an attacker hijacks that source, malicious code can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hermesagent #nousresearch #CVE #infosec", "creation_timestamp": "2026-08-29T17:40:04.865592Z"}, {"uuid": "988ab923-7c7e-4221-9acf-291ef9d74827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlpjzu4toh2p", "content": "CVE-2026-8202 - Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators\nCVE ID : CVE-2026-8202\n \n Published : May 13, 2026, 12:19 a.m. | 4\u00a0hours, 11\u00a0minutes ago\n \n Description : Using a densely populated chars mask and a large input string in the MongoDB aggr...", "creation_timestamp": "2026-05-13T05:10:31.857938Z"}, {"uuid": "d2679c32-62ee-4abf-a4c3-76f0f832d02b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82021", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mua22qdo5h27", "content": "\ud83d\udfe0 CVE-2026-82021 - High (8.3)\n\nHermes Agent 0.18.2 prior to 0.19.0 contains a supply chain vulnerability in its bundled MCP cata...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82021/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T14:01:51.885597Z"}]}