{"vulnerability": "CVE-2026-8264", "sightings": [{"uuid": "b98f7b61-6112-46eb-a062-032f6df6ecd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8264", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlko6swk4l2c", "content": "CVE-2026-8264 - Tenda AC6 httpd WifiApScan formWifiApScan os command injection\nCVE ID : CVE-2026-8264\n \n Published : May 11, 2026, 4:16 a.m. | 2\u00a0hours, 14\u00a0minutes ago\n \n Description : A weakness has been identified in Tenda AC6 15.03.06.23. Affected by this vulnerability is th...", "creation_timestamp": "2026-05-11T06:41:33.985812Z"}, {"uuid": "de69fcf4-2001-4a57-a198-76b7344efb37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82641", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/eppzem5eiti2r", "content": "CVE-2026-82641 - keploy 3.1.0 through 3.6.25 Unauthenticated TLS Key Exposure\nCVE ID : CVE-2026-82641\n \n Published : Aug. 30, 2026, 1:23 p.m. | 45\u00a0minutes ago\n \n Description : keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all interfaces witho...", "creation_timestamp": "2026-08-30T14:26:47.662907Z"}, {"uuid": "7b765268-8dd7-48d7-bb5f-5492c438b035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82640", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4jsvm3npraocq", "content": "CVE-2026-82640 - browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage\nCVE ID : CVE-2026-82640\n \n Published : Aug. 30, 2026, 1:23 p.m. | 45\u00a0minutes ago\n \n Description : browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartex...", "creation_timestamp": "2026-08-30T14:14:47.520435Z"}, {"uuid": "88bf59c8-07e8-4e5f-a1e8-8d6d43a11a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82642", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hagiqmntgpznc", "content": "CVE-2026-82642 - Readest: unsanitized iframe srcdoc attribute in the EPUB sanitizer can lead to arbitrary code execution\nCVE ID : CVE-2026-82642\n \n Published : Aug. 30, 2026, 1:44 p.m. | 24\u00a0minutes ago\n \n Description : Readest is an open-source e-book reader built on Tauri. In...", "creation_timestamp": "2026-08-30T14:32:47.502201Z"}, {"uuid": "caa89743-b0bd-4c45-936f-cfc8e569f7dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82641", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucntzdfan2t", "content": "\ud83d\udfe0 CVE-2026-82641 - High (8.6)\n\nkeploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all interfaces w...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82641/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T15:00:59.410118Z"}, {"uuid": "4c82ffee-5142-44be-933d-eea9e4cf54d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82642", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucnua7l5x2b", "content": "\ud83d\udfe0 CVE-2026-82642 - High (8.8)\n\nReadest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapte...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82642/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T15:01:06.122636Z"}, {"uuid": "ddc5ecda-67ec-4d7f-9cee-ea7fb3ab9951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82644", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucrd7jjo722", "content": "\ud83d\udfe0 CVE-2026-82644 - High (7.5)\n\nWWBN AVideo (current e01e41ecc and earlier) contains a brute-force rate limiting bypass in enforc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82644/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T16:03:10.534095Z"}, {"uuid": "b4c94507-ec02-4806-9e07-62f83be56072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82645", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucrdgcacy2r", "content": "\ud83d\udfe0 CVE-2026-82645 - High (8.6)\n\nAVideo (current commit e01e41ecc and earlier) exposes stream credentials through the plugin/Live/...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82645/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T16:03:17.173504Z"}, {"uuid": "25747077-d631-4ba1-850b-03e0db5d543d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82645", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mucrkewt5f2p", "content": "\ud83d\udea8 CVE-2026-82645 \u2014 CVSS 9.2 CRITICAL\n\nAVideo (current commit e01e41ecc and earlier) exposes stream credentials through the plugin/Live/view/Live_...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82645\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-30T16:07:09.849801Z"}, {"uuid": "ad1a11bf-ba59-45a0-8da3-52480b8386d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82645", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mucrpm4cqp23", "content": "CVE-2026-82645 - avideo\nThe AVideo video platform can return the passwords and URLs used to broadcast to services like YouTube, Facebook, and Twitch even to people who are not logged in. An attacker can create a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-08-30T16:10:05.539225Z"}, {"uuid": "e1594416-333a-43ba-a948-986ca2e3afef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82641", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mudzk4od2l2a", "content": "\ud83d\udd0d CVE-2026-82641 (CVSS 8.3): keploy v3.1.0-3.6.25 exposes unauth HTTP endpoints that stream TLS session keys. All interfaces bound. Decrypt recorded TLS traffic via /agent/pcap/keylog. Update now. Source: TheHackerWire #Vulnerability", "creation_timestamp": "2026-08-31T04:02:56.997563Z"}]}