{"vulnerability": "CVE-2026-88860", "sightings": [{"uuid": "10b2d6ef-e557-4aa9-8873-97124b07f94c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88860", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv6bavqhlm22", "content": "CVE-2026-88860 - capgo.app\nWhen a user\u2019s organization role is removed, Capgo does not delete the extra channel permissions that were granted to them. This means the user can still act on those channels, such\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#capgoapp #capgo #CVE #infosec", "creation_timestamp": "2026-09-10T14:30:04.725400Z"}, {"uuid": "71776686-dfbf-42a3-9969-45bd5b306179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88860", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv6gotlnd722", "content": "\ud83d\udea8 CVE-2026-88860 \u2014 CVSS 9.3 CRITICAL\n\nCapgo fails to clean up channel permission overrides when a user's last organization role binding is delete...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88860\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T16:07:21.766760Z"}]}