{"vulnerability": "cve-2026-8020", "sightings": [{"uuid": "c41ce1af-c552-4c2a-8556-c2138067d602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8020", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260507", "content": "", "creation_timestamp": "2026-05-06T18:00:00.000000Z"}, {"uuid": "c3102f7d-1f2b-4944-8ef0-a23275cfcc16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8020", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"}, {"uuid": "569d85ea-b87b-4cc3-8f61-911354002d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80200", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6gawym4ilvqnr", "content": "CVE-2026-80200 - Kimai before 2.53.0 Open Redirect via RelayState\nCVE ID : CVE-2026-80200\n \n Published : Aug. 25, 2026, 11:19 p.m. | 47\u00a0minutes ago\n \n Description : Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that acce...", "creation_timestamp": "2026-08-26T00:14:58.329678Z"}, {"uuid": "0a92b059-3575-4761-83ce-bd37805ee41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80201", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ddfj5rmkf3fh3", "content": "CVE-2026-80201 - Kimai before 2.53.0 API Token Leakage via Invoice Template\nCVE ID : CVE-2026-80201\n \n Published : Aug. 25, 2026, 11:19 p.m. | 47\u00a0minutes ago\n \n Description : Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowi...", "creation_timestamp": "2026-08-26T00:26:57.637087Z"}, {"uuid": "8468bedc-6b4b-41f7-adf0-0157143a060a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jk3gkazuem6mn", "content": "CVE-2026-80202 - Kimai before 2.56.0 Authorization Bypass via TimesheetVoter\nCVE ID : CVE-2026-80202\n \n Published : Aug. 25, 2026, 11:19 p.m. | 47\u00a0minutes ago\n \n Description : Kimai before 2.56.0 does not enforce team-membership checks in TimesheetVoter::voteOnAttribute(), whi...", "creation_timestamp": "2026-08-26T00:32:57.574024Z"}, {"uuid": "490f845f-c482-46f8-b671-2ee8b544852e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80202", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu2dazxkse2j", "content": "CVE-2026-80202 - kimai\nKimai timesheets can be read, deleted, or modified by team leads from other teams. This can lead to unauthorized changes or deletion of timesheet data, affecting team and project\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kimai #composer #CVE #infosec", "creation_timestamp": "2026-08-27T07:30:05.776250Z"}, {"uuid": "fb652b35-c871-4702-9c72-a317e15ff1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80203", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtyar4we3r2c", "content": "CVE-2026-80203 - grav\nIf you use the Grav content system with the API plugin older than version 1.0.18, a command\u2011line key that is not supposed to have full rights can still be used to change or delete other\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-26T11:40:05.153880Z"}, {"uuid": "8ded5ead-96f1-405c-99a7-be136eef5389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80205", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujqixbp4z2c", "content": "\ud83d\udccc CVE-2026-80205 - NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall() and TokenSearcher.findall() methods that ac... https://www.cyberhub.blog/cves/CVE-2026-80205", "creation_timestamp": "2026-09-02T10:37:06.828211Z"}, {"uuid": "f2873353-c00d-4775-8f9c-c22b8c94f902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80206", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muk7lrd2v52x", "content": "\ud83d\udccc CVE-2026-80206 - NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module. The _tgrep_node_action function compiles... https://www.cyberhub.blog/cves/CVE-2026-80206", "creation_timestamp": "2026-09-02T15:07:07.215152Z"}]}