{"vulnerability": "CVE-2026-8265", "sightings": [{"uuid": "8094e226-a03a-4c69-911e-a9b0e60e6d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8265", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlkotkxbam2v", "content": "CVE-2026-8265 - Tenda AC6 httpd getLogFile get_log_file os command injection\nCVE ID : CVE-2026-8265\n \n Published : May 11, 2026, 4:16 a.m. | 2\u00a0hours, 14\u00a0minutes ago\n \n Description : A security vulnerability has been detected in Tenda AC6 15.03.06.23. Affected by this issue is ...", "creation_timestamp": "2026-05-11T06:53:10.291703Z"}, {"uuid": "d0e16191-3252-4fbc-ba5d-69d09029d877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82653", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucrb67gkf27", "content": "\ud83d\udfe0 CVE-2026-82653 - High (8.9)\n\nSiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() wher...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82653/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T16:02:03.930885Z"}, {"uuid": "a6acc3cb-0b46-49ca-bf8a-9bc989d0198d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82654", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucrbeywvr2m", "content": "\ud83d\udfe0 CVE-2026-82654 - High (8.9)\n\nSiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82654/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T16:02:08.827436Z"}, {"uuid": "07fd7700-e428-4465-baf9-2c2bee697328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82655", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucrblzu3h22", "content": "\ud83d\udfe0 CVE-2026-82655 - High (7.5)\n\nAdmidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list para...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82655/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T16:02:15.963194Z"}, {"uuid": "975acd3f-3aad-402e-96e8-dc387e86983d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82657", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucrcxzx6v2l", "content": "\ud83d\udfe0 CVE-2026-82657 - High (7.5)\n\nAdmidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for f...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82657/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T16:03:03.605935Z"}, {"uuid": "c4fb3bf3-3ec6-455c-ab4c-02be81e35c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82653", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mucrkndz762c", "content": "\ud83d\udea8 CVE-2026-82653 \u2014 CVSS 9.3 CRITICAL\n\nSiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescape...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82653\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-30T16:07:19.365624Z"}, {"uuid": "cb4654f6-fff1-479f-aa93-8401010622e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82654", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mucrkveezg2e", "content": "\ud83d\udea8 CVE-2026-82654 \u2014 CVSS 9.3 CRITICAL\n\nSiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and bre...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82654\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-30T16:07:26.883656Z"}, {"uuid": "0c7a2835-0dcf-4acb-baaa-ba66b59f492b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82653", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mucrpo7koi2u", "content": "CVE-2026-82653 - siyuan\nVersions of SiYuan prior to 3.8.1 can be tricked into executing hidden scripts when a user removes a package or opens an encrypted notebook. An attacker could publish a package with\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-30T16:10:07.624901Z"}, {"uuid": "0c4ea036-1fe0-47ec-9cde-fea7f5abad15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82654", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mucsbhesh325", "content": "CVE-2026-82654 - siyuan\nOlder versions of SiYuan do not clean the text used for block names, aliases, and notes when showing hints, backlinks, or navigation paths. An attacker could insert HTML or script\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-30T16:20:04.095035Z"}, {"uuid": "e7a04a92-6f40-4b03-96b3-a3d6aa6b657d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82657", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4jbdn67wbtoyh", "content": "CVE-2026-82657 - Admidio before 5.0.12 Authentication Bypass via RSS feeds\nCVE ID : CVE-2026-82657\n \n Published : Aug. 30, 2026, 3:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for ...", "creation_timestamp": "2026-08-30T16:44:48.309694Z"}, {"uuid": "7e24dc92-5783-430c-90a6-9d3a59d13abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82655", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5piz7ybxuqq2c", "content": "CVE-2026-82655 - Admidio before 5.0.12 SQL Injection via relation_type_list\nCVE ID : CVE-2026-82655\n \n Published : Aug. 30, 2026, 3:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list pa...", "creation_timestamp": "2026-08-30T16:50:47.926443Z"}, {"uuid": "53aabd7d-48c7-4b34-b81a-4fb54e528d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82654", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fzmgcgc7kf4nj", "content": "CVE-2026-82654 - SiYuan before v3.8.1 Stored XSS via block name\nCVE ID : CVE-2026-82654\n \n Published : Aug. 30, 2026, 3:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and bre...", "creation_timestamp": "2026-08-30T16:56:47.730743Z"}, {"uuid": "ac1d8ef7-6291-4a4d-be21-40528818282b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82653", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hyypbeype6377", "content": "CVE-2026-82653 - SiYuan before v3.8.1 Stored XSS via confirmDialog\nCVE ID : CVE-2026-82653\n \n Published : Aug. 30, 2026, 3:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unesc...", "creation_timestamp": "2026-08-30T17:02:47.730576Z"}, {"uuid": "ca56140b-2f08-4080-9d77-d296330ee059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82657", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mueff3fdks27", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 43 interactions\nCVE-2026-60004: 20 interactions\nCVE-2026-73570: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-53362: 3 interactions\nCVE-2026-82657: 2 interactions\nCVE-2026-55565: 1 interactions\n", "creation_timestamp": "2026-08-31T07:34:46.721076Z"}, {"uuid": "678ba3c5-3fa9-403c-9eae-34832c1c0c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82659", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-p6gq-j5cr-w38f", "content": "", "creation_timestamp": "2026-09-02T16:35:27.075351Z"}]}