{"vulnerability": "cve-2026-8414", "sightings": [{"uuid": "d751b2c4-5911-4364-aaab-a6d4d10dbb07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8414", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmfkjd6ocp2q", "content": "CVE-2026-8414 - Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicate\nCVE ID : CVE-2026-8414\n \n Published : May 21, 2026, 9:29 p.m. | 48\u00a0minutes ago\n \n Description : Concrete CMS 9 before 9.5.0 is vulnerab...", "creation_timestamp": "2026-05-21T23:17:44.449440Z"}, {"uuid": "9a10efdc-e9c3-4244-8551-278892dd0b42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84147", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muhlszjwdd25", "content": "\ud83d\udea8 CVE-2026-84147 \u2014 CVSS 10 CRITICAL\n\nThis vulnerability exists in the ERP system due to improper authentication controls and inadequate file typ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84147\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-01T14:07:55.928761Z"}, {"uuid": "4e363560-2ce0-4da1-a94d-358a7362eeaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84148", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muhltbw6dd2w", "content": "\ud83d\udea8 CVE-2026-84148 \u2014 CVSS 9.2 CRITICAL\n\nThis vulnerability exists in the ERP system due to improper authentication and authorization controls in th...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84148\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-01T14:08:04.775263Z"}, {"uuid": "03de09de-7705-4c4a-8033-874fc3b29a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84149", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muhltkd3tz2d", "content": "\ud83d\udea8 CVE-2026-84149 \u2014 CVSS 9.2 CRITICAL\n\nThis vulnerability exists in the ERP system due to exposure of repository information through a publicly ac...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84149\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-01T14:08:13.785819Z"}, {"uuid": "b9385f33-868f-4b26-970b-f2d50520b412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84147", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muhlwueiqd2m", "content": "CVE-2026-84147 - multi-tenant erp system\nThe Manacle ERP system can be tricked by anyone on the internet into accepting files it shouldn\u2019t. Because the system doesn\u2019t properly check who is uploading files or what\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#manacle #CVE #infosec", "creation_timestamp": "2026-09-01T14:10:05.033380Z"}, {"uuid": "30fd716f-ed50-4ad0-a19e-a909a47eb5f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84149", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muhmiq4p6m2w", "content": "CVE-2026-84149 - multi-tenant erp system\nThe Manacle ERP system is configured so that its hidden .git folder can be reached from the internet. Anyone can download this folder and see the program\u2019s code and internal\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#manacle #CVE #infosec", "creation_timestamp": "2026-09-01T14:20:04.728011Z"}, {"uuid": "36d7abb3-3055-48f7-a441-d07f14b91a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84148", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muht7dvwit25", "content": "CVE-2026-84148 - multi-tenant erp system\nThe ERP's API does not properly check who is calling it, so anyone on the internet can send a crafted request and see private information belonging to other users. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#manacle #CVE #infosec", "creation_timestamp": "2026-09-01T16:20:05.744217Z"}, {"uuid": "bc834ca7-dca1-46e4-ba98-c49b6bf981d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84147", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mui2typc2f2p", "content": "CVE-2026-84147 is trending. Hype score 19, currently #3 on cvemon.\n\nThis vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-84147", "creation_timestamp": "2026-09-01T18:36:54.902692Z"}, {"uuid": "06b70218-1e0d-4c6b-bc1d-a968cac51cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84148", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mui2u2tf2b27", "content": "CVE-2026-84148 is trending. Hype score 19, currently #4 on cvemon.\n\nThis vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-84148", "creation_timestamp": "2026-09-01T18:36:57.016303Z"}, {"uuid": "b85bc617-09a0-4342-b656-e12438436b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84149", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mui2u4t6w32r", "content": "CVE-2026-84149 is trending. Hype score 19, currently #5 on cvemon.\n\nThis vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-84149", "creation_timestamp": "2026-09-01T18:36:59.091976Z"}, {"uuid": "d7344bb5-3b08-42fd-aa17-7bdc0144b1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84145", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-02T04:47:40.080882Z"}, {"uuid": "0b5396a3-a284-4c21-89df-dddb9670643b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84144", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-02T04:47:42.287363Z"}, {"uuid": "15d98537-3994-4a53-a686-c70aa6913223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84143", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-02T04:47:44.492315Z"}, {"uuid": "0a29ac8a-c025-4daa-b5c7-a694ae562b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84142", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-02T04:47:46.703031Z"}, {"uuid": "81c4550f-a507-4ef1-abdb-240b9b16890f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84141", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-02T04:47:48.901802Z"}, {"uuid": "487cfe44-3559-4291-97b8-736ab5e89c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84140", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-02T04:47:51.460766Z"}, {"uuid": "08e0d3c0-dd39-41fe-a0cb-f89943b1ff11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84141", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mumu54zvhw2v", "content": "CVE-2026-84141 - firefox\nFirefox\u2019s ImageLib component can overflow when handling certain image data, potentially leading to a crash or unexpected behavior. The issue has been repaired in Firefox version 155\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firefox #mozilla #CVE #infosec", "creation_timestamp": "2026-09-03T16:20:04.136787Z"}, {"uuid": "b2c42fe4-8bd6-4e65-ae27-b2664bdaa489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84142", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mumu56l6sr2t", "content": "CVE-2026-84142 - firefox\nFirefox version 154 contains several internal bugs that could cause memory corruption, which might be used by a determined attacker to take control of the browser. The issues were\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firefox #mozilla #CVE #infosec", "creation_timestamp": "2026-09-03T16:20:05.460024Z"}, {"uuid": "1d8dd838-ee80-42f9-9022-2ff20fde88eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84143", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mumuozp2sg2p", "content": "CVE-2026-84143 - firefox\nThe problems are in Firefox 154, Firefox ESR 153.1 and Firefox ESR 140.14. They can cause the browser\u2019s memory to become damaged, which could let a determined attacker take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firefox #mozilla #Debian12 #CVE #infosec", "creation_timestamp": "2026-09-03T16:30:04.562505Z"}, {"uuid": "4b8ac4c5-73e1-4ae8-91cb-e82f49bc5c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84140", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mun3fneead2y", "content": "CVE-2026-84140 - firefox\nFirefox versions before 155 (and ESR before 153.2) have a problem where a web page could bypass the browser's separation of content, potentially exposing data from other sites.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firefox #mozilla #CVE #infosec", "creation_timestamp": "2026-09-03T18:30:05.642632Z"}, {"uuid": "f68334dd-7422-4c0a-a6f2-8da069f04e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84143", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3muzu5s5mms2l", "content": "A critical-severity fix just shipped for Mozilla Firefox. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-84143", "creation_timestamp": "2026-09-08T20:25:04.243090Z"}]}