{"vulnerability": "CVE-2026-88003", "sightings": [{"uuid": "35ea5d6a-342a-4494-8e2b-271436e55076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88003", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7d6rdzag32cmg", "content": "CVE-2026-88003 - InvoicePlane: Failure to Revoke Administrative Privileges After Role Downgrade\nCVE ID : CVE-2026-88003\n \n Published : Sept. 25, 2026, 9:20 p.m. | 48\u00a0minutes ago\n \n Description : InvoicePlane is a self-hosted open source application for managing invoices, clien...", "creation_timestamp": "2026-09-25T22:50:06.923179Z"}, {"uuid": "c9c8b365-a56e-406a-a32a-a92297d545a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88003", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwgn6ollck2f", "content": "CVE-2026-88003 - invoiceplane\nIn older versions of InvoicePlane, when an administrator lowers another user's role, the system does not remove the admin rights from the user's current session. This means the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#invoiceplane #CVE #infosec", "creation_timestamp": "2026-09-26T15:50:16.926992Z"}]}