{"vulnerability": "cve-2026-82090", "sightings": [{"uuid": "8dcc0186-8d03-4dbb-aaed-92212f97af09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu6oxex4sm2p", "content": "CVE-2026-82090\nThe Pocket application (through version 8.33.0.0) can be tricked into inserting outside content that runs hidden scripts. This could allow an attacker to change what the app shows or does without your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T01:10:05.682945Z"}, {"uuid": "9969de0c-1d61-4e35-b80d-b08677cfd26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4p5kipnr2e", "content": "\ud83d\udea8 CVE-2026-82090 \u2014 CVSS 9.2 CRITICAL\n\nPocket through 8.33.0.0 allows XSS because \"Save to Pocket\" injects external HTML into the DOM.\u00a0\u00a0JavaScript...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82090\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T06:08:14.285800Z"}, {"uuid": "1909afc3-db60-4c76-bc8b-7ef4d3097785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gb7bzwqhkfxf3", "content": "CVE-2026-82090 - Pocket Cross-Site Scripting Vulnerability\nCVE ID : CVE-2026-82090\n \n Published : Aug. 28, 2026, 5:16 a.m. | 51\u00a0minutes ago\n \n Description : Pocket through 8.33.0.0 allows XSS because \"Save to Pocket\" injects external HTML into the DOM.\u00a0\u00a0JavaScript code can alt...", "creation_timestamp": "2026-08-28T06:27:24.098571Z"}, {"uuid": "d753514d-22d1-476f-ade7-d6397c40f5df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://t.me/GithubRedTeam/102416", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82090-18-Years-All-Versions-CVSS-9.2-CRITICAL-The-Pocket-Forever-Day\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a FUNFACTOR1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 16:28:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-82090 \u00b7 CVSS 9.2 CRITICAL \u00b7 0-click stored XSS in Mozilla Pocket \u2014 all versions (v0 \u2192 v8.33.0.0) \u00b7 18-year forever-day \u00b7 no patch \u00b7 MITRE published\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T19:00:05.422044Z"}, {"uuid": "7fe7f695-baf3-4e00-a75d-76f704ae8e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102416", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82090-18-Years-All-Versions-CVSS-9.2-CRITICAL-The-Pocket-Forever-Day\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a FUNFACTOR1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 16:28:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-82090 \u00b7 CVSS 9.2 CRITICAL \u00b7 0-click stored XSS in Mozilla Pocket \u2014 all versions (v0 \u2192 v8.33.0.0) \u00b7 18-year forever-day \u00b7 no patch \u00b7 MITRE published\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-16T00:00:12.714544Z"}]}