{"vulnerability": "CVE-2026-8612", "sightings": [{"uuid": "2eee6e3a-6e4e-4e89-9158-0b9a344a0f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8612", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mluam7kbww2b", "content": "CVE-2026-8612: WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution", "creation_timestamp": "2026-05-15T02:05:20.764871Z"}, {"uuid": "a095c81a-4388-43fd-a0f6-e6e0d1f9a501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86121", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3murc33ejhe2f", "content": "CVE-2026-86121 - cua-computer-server\nVersions of Cua computer-server older than 0.3.42 open a network port without requiring a password, so anyone who can reach that port can tell the server to run commands, read or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#trycua #CVE #infosec", "creation_timestamp": "2026-09-05T10:40:08.384030Z"}, {"uuid": "c6582514-c786-4e6e-9517-4164d251aa24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86123", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3murcmvsoda2t", "content": "CVE-2026-86123 - sqlchat\nSQL Chat has four web functions that let anyone supply database connection details and run SQL commands, even on internal servers. This means an attacker could access, view, or change data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sqlchat #CVE #infosec", "creation_timestamp": "2026-09-05T10:50:04.814631Z"}, {"uuid": "594bef32-9c91-4f61-873c-27eb9d0e4e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86124", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3murcmx6plg2b", "content": "CVE-2026-86124 - autoagent\nThe AutoAgent program listens on a network port that is reachable from anywhere and runs any commands it receives with full system privileges. An attacker could connect to this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#autoagent #hkuds #CVE #infosec", "creation_timestamp": "2026-09-05T10:50:05.883871Z"}, {"uuid": "2d1514f8-54e0-45b3-a7e7-cf7aa0b464c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86124", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4jj5jf7ba4uoi", "content": "CVE-2026-86124 - AutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server\nCVE ID : CVE-2026-86124\n \n Published : Sept. 5, 2026, 10:16 a.m. | 21\u00a0minutes ago\n \n Description : AutoAgent contains an unauthenticated remote code execution vulnerability in t...", "creation_timestamp": "2026-09-05T10:51:00.876558Z"}, {"uuid": "8e434dc6-5bb1-40aa-9f63-5dbdfd4b090b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86123", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/22dc2hvauwe7h", "content": "CVE-2026-86123 - SQL Chat Unauthenticated Database-Connection Proxy in the /api/connection Endpoints\nCVE ID : CVE-2026-86123\n \n Published : Sept. 5, 2026, 10:16 a.m. | 21\u00a0minutes ago\n \n Description : SQL Chat contains four unauthenticated API endpoints that accept client-suppl...", "creation_timestamp": "2026-09-05T10:57:01.277814Z"}, {"uuid": "df70e1db-7892-4693-80b6-fd1fe9ef574d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86121", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3murdarm3sf2w", "content": "\ud83d\udd34 CVE-2026-86121 - Critical (9.8)\n\nCua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environmen...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86121/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T11:01:11.885479Z"}, {"uuid": "fcac6ddd-4eec-4624-a410-d50fc8479f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86123", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3murday76o223", "content": "\ud83d\udfe0 CVE-2026-86123 - High (8.7)\n\nSQL Chat contains four unauthenticated API endpoints that accept client-supplied database connect...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86123/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T11:01:18.578675Z"}, {"uuid": "96440da7-736a-4050-a603-20933f7fb90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86124", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3murdc67rcy2v", "content": "\ud83d\udd34 CVE-2026-86124 - Critical (9.8)\n\nAutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86124/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T11:01:58.779759Z"}, {"uuid": "a9b10a67-43dc-4323-8787-8c45e91612fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86121", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ip6nl7ipjgjvt", "content": "CVE-2026-86121 - Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control\nCVE ID : CVE-2026-86121\n \n Published : Sept. 5, 2026, 10:16 a.m. | 21\u00a0minutes ago\n \n Description : Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME ...", "creation_timestamp": "2026-09-05T11:03:00.881150Z"}, {"uuid": "a681e294-e6e1-4499-9b59-b7df9d48fa7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86121", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3murgxkeoew2p", "content": "\ud83d\udea8 CVE-2026-86121 \u2014 CVSS 9.3 CRITICAL\n\nCua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86121\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T12:07:36.496851Z"}, {"uuid": "e1e749f4-f687-4387-9172-9164b60afb28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86123", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3murgxs3d2u24", "content": "\ud83d\udea8 CVE-2026-86123 \u2014 CVSS 9.4 CRITICAL\n\nSQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parame...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86123\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T12:07:44.963544Z"}, {"uuid": "223a6a12-27ed-43f8-b424-4722d2a57595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86124", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3murgy24z7i2t", "content": "\ud83d\udea8 CVE-2026-86124 \u2014 CVSS 9.3 CRITICAL\n\nAutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86124\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-05T12:07:52.983646Z"}, {"uuid": "dd0dc9b1-96fa-4c3e-a06a-f7a87bfcad58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86124", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117219703523234204", "content": "We have just added an important vulnerability affecting HKUDS AutoAgent (CVE-2026-86124) https://vuldb.com/vuln/399290", "creation_timestamp": "2026-09-05T17:52:10.436696Z"}, {"uuid": "b26e21e7-e51b-4b38-afd0-52cedd892df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86121", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mutttsbelu2b", "content": "CVE-2026-86121 - Critical RCE & auth bypass in Cua computer-server. Allows unauthenticated arbitrary command execution. CVSS 9.8. Update to 0.3.42 now. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-86121/", "creation_timestamp": "2026-09-06T11:03:29.933620Z"}, {"uuid": "5b3fa556-0519-4645-876b-b5196f26d799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86121", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117223758795425730", "content": "CVE-2026-86121 - Critical RCE & auth bypass in Cua computer-server. Allows unauthenticated arbitrary command execution. CVSS 9.8. Update to 0.3.42 now. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-86121/", "creation_timestamp": "2026-09-06T11:03:31.897536Z"}, {"uuid": "02ebffbe-003a-4f33-a7ae-f7f76b25b700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86124", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muvcym3o3527", "content": "CVE-2026-86124 - Critical unauthenticated RCE in AutoAgent. TCP server executes arbitrary commands as root. CVSS 9.8. Restrict network access now. #CVE #RCE #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-86124/", "creation_timestamp": "2026-09-07T01:07:16.327026Z"}, {"uuid": "eca1fc5b-5a1e-48d0-8a68-d3cef407d9d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86124", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117227076711766618", "content": "CVE-2026-86124 - Critical unauthenticated RCE in AutoAgent. TCP server executes arbitrary commands as root. CVSS 9.8. Restrict network access now. #CVE #RCE #infosec\nhttps://www.valtersit.com/cve/CVE-2026-86124/", "creation_timestamp": "2026-09-07T01:07:17.137820Z"}, {"uuid": "878a094a-c63c-4247-bc6a-c919bcee8ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86124", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muvgki2paw23", "content": "Critical Root RCE, and the Committee Is Still Drafting the Fax Cover Sheet\nPANIC 98% | Lag 0.0h | CVE-2026-86124 is a critical unauthenticated remote code execution flaw in AutoAgent's TCP server. A\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-07T02:10:57.628006Z"}]}