{"vulnerability": "CVE-2026-8218", "sightings": [{"uuid": "afbed746-0121-40fb-ba18-1bf81568efa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8218", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlhxb4qkct2p", "content": "CVE-2026-8218 - Devs Palace ERP Online purchase_return_save cross site scripting\nCVE ID : CVE-2026-8218\n \n Published : May 10, 2026, 2:16 a.m. | 29\u00a0minutes ago\n \n Description : A weakness has been identified in Devs Palace ERP Online up to 4.0.0. The affected element is an unk...", "creation_timestamp": "2026-05-10T04:45:55.835724Z"}, {"uuid": "427bbe96-27ab-46fb-b7a1-87e5f8c37c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8218", "type": "seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mljrdev7bc27", "content": "Devs Palace ERP CVE-2026-8218\u20138221\nVim heap RCE CVE-2026-45130\nLynx RaaS posts 8 victims\nFulcrumSec lists 7\u201312TB Avnet\nMacSync via Claude.ai chats\n\nFull brief: intel.overresearched.net/2026/05/10/c...\n#Daily #ThreatIntel #InfoSec", "creation_timestamp": "2026-05-10T22:05:10.376956Z"}, {"uuid": "e9108363-356f-47ca-bde5-3714f81840e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82181", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11128-8bd30-2.html", "content": "", "creation_timestamp": "2026-09-01T00:45:03.568304Z"}, {"uuid": "98c71187-6987-466f-8fd1-babd631b84bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82183", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bfpignbm3wzeo", "content": "CVE-2026-82183 - OAuth Single Sign On 6.25.0 - 7.0.0 - Unauthenticated Account Takeover via Unverified Steam OpenID Assertion\nCVE ID : CVE-2026-82183\n \n Published : Sept. 2, 2026, 6:17 a.m. | 57\u00a0minutes ago\n \n Description : The OAuth Single Sign On WordPress plugin before 7.0....", "creation_timestamp": "2026-09-02T08:12:25.584225Z"}, {"uuid": "014d166d-d237-45f1-8495-086a323d508a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82180", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2y65i3milc5gz", "content": "CVE-2026-82180 - Eclipse Arrowhead MQTT Authentication Bypass Vulnerability\nCVE ID : CVE-2026-82180\n \n Published : Sept. 3, 2026, 2:17 p.m. | 20\u00a0minutes ago\n \n Description : In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate aut...", "creation_timestamp": "2026-09-03T14:51:29.990785Z"}, {"uuid": "7ccf05ee-ae52-4c13-b823-abf097ff3f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82180", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mumq7xmdns2d", "content": "CVE-2026-82180 - eclipse arrowhead\nEclipse Arrowhead versions 5.0.0 through 5.2.1 let anyone who can publish to the MQTT broker pretend to be the system administrator. The software reads a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eclipsearrowhead #eclipsefoundation #CVE #infosec", "creation_timestamp": "2026-09-03T15:10:04.751612Z"}, {"uuid": "586232b6-8f1d-4ec6-87fa-44481bcd8a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82180", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mumth5aex42d", "content": "\ud83d\udea8 CVE-2026-82180 \u2014 CVSS 9.5 CRITICAL\n\nIn Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authent...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82180\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-03T16:07:45.811408Z"}]}