{"vulnerability": "CVE-2026-85663", "sightings": [{"uuid": "d9cc93de-a249-46e0-890b-cffa8868cb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85663", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdwlh55522", "content": "\ud83d\udea8 CVE-2026-85663 \u2014 CVSS 9.3 CRITICAL\n\nAim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through g...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85663\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:08:03.394987Z"}, {"uuid": "0d2e32e1-f7fc-4294-8e2d-26088f138704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85663", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mupe274p6g22", "content": "CVE-2026-85663 - aim\nThe Aim 3.29.1 tracking server does not check who is sending requests, so anyone on the internet can tell it to create accounts, access experiment data, or erase run records. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aim #aimhubio #CVE #infosec", "creation_timestamp": "2026-09-04T16:10:04.928446Z"}]}