{"vulnerability": "cve-2026-8447", "sightings": [{"uuid": "098a7fd4-ce12-4af1-8863-2d92bf15b91b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84470", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fzprk45m7clv5", "content": "CVE-2026-84470 - Automation-controller: automation-controller-container: automation-controller/awx: bulk job launch checks instance_groups at read level instead of use level, allowing execution-placement authorization bypass\nCVE ID : CVE-2026-84470\n \n Published : Sept. 1, 2026...", "creation_timestamp": "2026-09-01T21:37:23.581496Z"}, {"uuid": "84460152-e93a-4b6f-9c97-2829243f25f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84476", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/53gtzchiruejs", "content": "CVE-2026-84476 - WWBN AVideo Authentication Bypass via X-Real-IP Header\nCVE ID : CVE-2026-84476\n \n Published : Sept. 1, 2026, 10:25 p.m. | 11\u00a0minutes ago\n \n Description : WWBN AVideo fails to validate trusted proxies before accepting X-Real-IP and X-Forwarded-For headers, allo...", "creation_timestamp": "2026-09-01T22:48:24.049109Z"}, {"uuid": "92268571-9553-4c09-88f9-80f6ad83e6e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84479", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gjr3en3bo3tbu", "content": "CVE-2026-84479 - WWBN AVideo Authentication Bypass via User-Agent Header\nCVE ID : CVE-2026-84479\n \n Published : Sept. 1, 2026, 10:25 p.m. | 11\u00a0minutes ago\n \n Description : WWBN AVideo (current e01e41ecc and earlier) makes three login-time security controls depend solely on the...", "creation_timestamp": "2026-09-01T23:00:24.073456Z"}, {"uuid": "28821130-a543-4a9b-8b47-7457ca9d51df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84479", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muindlmh242l", "content": "\ud83d\udea8 CVE-2026-84479 \u2014 CVSS 9.3 CRITICAL\n\nWWBN AVideo (current e01e41ecc and earlier) makes three login-time security controls depend solely on the c...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84479\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T00:07:45.278310Z"}, {"uuid": "83413800-8ff7-4e4f-a414-88a1e9e04433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84476", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muj36e42qj2q", "content": "WWBN AVideo\u306f\u3001\u30d7\u30ed\u30ad\u30b7\u691c\u8a3c\u4e0d\u8db3\u306b\u3088\u308aX-Real-IP\u7b49\u30d8\u30c3\u30c0\u30fc\u3092\u60aa\u7528\u3055\u308c\u308b\u3002\u653b\u6483\u8005\u306f\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30a2\u30c9\u30ec\u30b9\u3092\u507d\u88c5\u3067\u304d\u3001\u30ed\u30b0\u30a4\u30f3\u30ec\u30fc\u30c8\u5236\u9650\u3092\u56de\u907f\u3057\u3066\u7121\u5236\u9650\u306e\u8a8d\u8a3c\u60c5\u5831\u63a8\u6e2c\u653b\u6483\u304c\u53ef\u80fd\u3002\nCVE-2026-84476 CVSS 7.5 | HIGH", "creation_timestamp": "2026-09-02T04:15:21.979916Z"}, {"uuid": "1ec14b5e-9471-436a-948e-1aa4b5082052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84479", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mujwsza5x22p", "content": "CVE-2026-84479 - avideo\nWWBN AVideo versions up to the current release trust the browser's identification string to decide if extra security steps are needed. An attacker who knows a valid username and password\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-09-02T12:30:06.195315Z"}, {"uuid": "28c5f6ee-a9a7-4e4d-ba1e-0332b08fe2fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84474", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw7k7l7wzj2i", "content": "\ud83d\udea8 CVE-2026-84474 \u2014 CVSS 9.9 CRITICAL\n\nA flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84474\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T20:08:14.989217Z"}, {"uuid": "209b1f9d-f0e3-4330-8244-9103f3f0065b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84474", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw7zfnj3yv2k", "content": "CVE-2026-84474 - red hat ansible automation platform 2.4 for rhel 8\nIn Red Hat Ansible Automation Platform, a secret used for provisioning callbacks is shown to users who only have permission to view job templates.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-09-24T00:40:04.914723Z"}]}