{"vulnerability": "cve-2026-85667", "sightings": [{"uuid": "654e3982-9db7-4cf7-9333-7e8b2d721f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupdwtnnhg2d", "content": "\ud83d\udea8 CVE-2026-85667 \u2014 CVSS 9.3 CRITICAL\n\nxiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allow...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85667\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T16:08:12.041689Z"}, {"uuid": "16fc360b-4756-4970-b469-419cc04a38a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muphxefwnt2w", "content": "CVE-2026-85667 - xiaobei\nThe Xiaobei application (versions up to 5.5.2) accepts incoming messages without checking who sent them. This allows anyone on the internet to post messages that the system will\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xiaobei #teamwiseflow #CVE #infosec", "creation_timestamp": "2026-09-04T17:20:04.896906Z"}, {"uuid": "2606b543-42b8-42fe-8555-0ec279e47160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muztceznea2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85667: xiaobei through 5.5.2 fails to implement authentication or signature validation on webhook endpoints, allowing unauthenticated attac\u2026\nCVSS 9.1 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-85667\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T20:09:42.906613Z"}, {"uuid": "ef2e8f2d-57c4-4853-9c70-22de4a3c9c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85667", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzpvstoz52z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-85667: xiaobei through 5.5.2 Unauthenticated Webhook Message Injection\nCVSS 9.1 \u00b7 EPSS 0.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-85667\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T19:08:59.801690Z"}]}