{"vulnerability": "CVE-2026-86257", "sightings": [{"uuid": "5485f081-4ae9-4bed-a15a-8ccffe61759f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86257", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dn3x4lc6hk6rx", "content": "CVE-2026-86257 - wger before 2.6 CSV Formula Injection via member export\nCVE ID : CVE-2026-86257\n \n Published : Sept. 6, 2026, 12:17 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : wger before 2.6 fails to sanitize first_name and last_name fields in the gym member TSV export en...", "creation_timestamp": "2026-09-06T13:35:28.929767Z"}]}