{"vulnerability": "CVE-2026-88069", "sightings": [{"uuid": "926a3ceb-7b53-4bcf-94aa-fcdcdae93816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88069", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4ofosx6i2t", "content": "CVE-2026-88069 - pandora\nPandora\u2019s archive\u2011extraction component may place files in any location on the system if a specially crafted archive is submitted. This could let an attacker overwrite\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pandora #pandoraanalysis #CVE #infosec", "creation_timestamp": "2026-09-09T23:20:04.370341Z"}, {"uuid": "f2e747ee-1adc-410c-b593-b045918db0cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88069", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117244154620572346", "content": "CVE-2026-88069: Path traversal in pandora-analysis pandora (<=1.12.7) allows attackers to overwrite system/app files via crafted archives. Severity: CRITICAL (CVSS 9.3). No patch confirmed \u2014 monitor vendor updates. https://radar.offseq.com/threat/cve-2026-88069-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-87b56121b9b3446f #OffSeq #CVE202688069 #vuln #infosec", "creation_timestamp": "2026-09-10T01:30:25.525615Z"}, {"uuid": "b2157d7a-0ac4-4845-bb1d-b92df322777c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88069", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv4vosrrj52b", "content": "Path traversal (CVE-2026-88069) in pandora-analysis pandora <=1.12.7 (CRITICAL, CVSS 9.3) lets attackers overwrite files outside extraction dir. Patch status unknown \u2014 review vendor advisories. https://radar.offseq.com/threat/cve-2026-88069-cwe-22-improper-limitation-of-a-pathname-to-a-restricted...", "creation_timestamp": "2026-09-10T01:30:27.502444Z"}, {"uuid": "18447387-3532-4eb1-a5ae-5464a98d3a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88069", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv4xqgmwb72w", "content": "\ud83d\udea8 CVE-2026-88069 \u2014 CVSS 9.3 CRITICAL\n\nPandora contains a path traversal vulnerability in its archive extraction worker. When processing a special...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88069\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T02:07:08.569018Z"}]}