{"vulnerability": "CVE-2026-8252", "sightings": [{"uuid": "af766e88-8210-4d38-86d2-9345d4ca7a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8252", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlkcom2pg62p", "content": "CVE-2026-8252 - Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference\nCVE ID : CVE-2026-8252\n \n Published : May 11, 2026, 12:16 a.m. | 2\u00a0hours, 13\u00a0minutes ago\n \n Description : A vulnerability was determined in Open5GS up to 2.7.7. Affected is the function sm...", "creation_timestamp": "2026-05-11T03:15:38.566667Z"}, {"uuid": "6d796aa3-d8b2-4954-a278-c1a59e4d88bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82524", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ylumwggqsioj", "content": "CVE-2026-82524 - UnoPim Arbitrary File Upload Vulnerability\nCVE ID : CVE-2026-82524\n \n Published : Sept. 2, 2026, 8:17 p.m. | 19\u00a0minutes ago\n \n Description : UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upl...", "creation_timestamp": "2026-09-02T22:12:28.347483Z"}, {"uuid": "54b2bccd-4c7a-4e1b-9d48-2395e1cb49e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82524", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mumg64dzts2l", "content": "CVE-2026-82524 - unopim\nIf someone with admin access to UnoPim (versions before 2.1.5) uploads an image, the system fails to check the file type. This lets the admin place a hidden script on the server that can be run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unopim #CVE #infosec", "creation_timestamp": "2026-09-03T12:10:04.289262Z"}, {"uuid": "66be3853-2a39-4e61-9fd4-608104ee1e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82526", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7nqraoi4wx5rc", "content": "CVE-2026-82526 - R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint\nCVE ID : CVE-2026-82526\n \n Published : Sept. 3, 2026, 6:12 p.m. | 24\u00a0minutes ago\n \n Description : R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers ...", "creation_timestamp": "2026-09-03T18:50:33.067884Z"}, {"uuid": "60f4ae15-c599-49b8-875b-a1d9286f90be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82526", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mun7unyeuf2o", "content": "CVE-2026-82526 - r2r\nVersions of R2R up to 3.6.6 let anyone send a specially crafted request to the vector index creation feature and cause the system to execute any database command it wants. Because the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#r2r #sciphiai #CVE #infosec", "creation_timestamp": "2026-09-03T19:50:04.768480Z"}, {"uuid": "407621de-d17a-4931-90ff-47790f5d1a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82526", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munaukevqy2d", "content": "\ud83d\udea8 CVE-2026-82526 \u2014 CVSS 9.3 CRITICAL\n\nR2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to e...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82526\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-03T20:07:54.391479Z"}]}