{"vulnerability": "CVE-2026-82526", "sightings": [{"uuid": "66be3853-2a39-4e61-9fd4-608104ee1e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82526", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7nqraoi4wx5rc", "content": "CVE-2026-82526 - R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint\nCVE ID : CVE-2026-82526\n \n Published : Sept. 3, 2026, 6:12 p.m. | 24\u00a0minutes ago\n \n Description : R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers ...", "creation_timestamp": "2026-09-03T18:50:33.067884Z"}, {"uuid": "60f4ae15-c599-49b8-875b-a1d9286f90be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82526", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mun7unyeuf2o", "content": "CVE-2026-82526 - r2r\nVersions of R2R up to 3.6.6 let anyone send a specially crafted request to the vector index creation feature and cause the system to execute any database command it wants. Because the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#r2r #sciphiai #CVE #infosec", "creation_timestamp": "2026-09-03T19:50:04.768480Z"}, {"uuid": "407621de-d17a-4931-90ff-47790f5d1a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82526", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munaukevqy2d", "content": "\ud83d\udea8 CVE-2026-82526 \u2014 CVSS 9.3 CRITICAL\n\nR2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to e...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82526\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-03T20:07:54.391479Z"}]}