{"vulnerability": "cve-2026-8614", "sightings": [{"uuid": "e68674cd-230f-4183-a81c-3c6f3d94f11a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8614", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mp4fwlqzum2p", "content": "CVE-2026-8614 assistio (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-25T12:17:18.224852Z"}, {"uuid": "73384dc5-291a-4f4a-a878-c37b03514916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86140", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqsg2u66r2m", "content": "\ud83d\udfe0 CVE-2026-86140 - High (8)\n\nIn libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86140/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T05:59:55.672771Z"}, {"uuid": "a6988805-ce77-4dfc-bb6e-a8086ef9629c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g33lzpa67vdmm", "content": "CVE-2026-86140 - libxml2 Stack-Based Buffer Overflow\nCVE ID : CVE-2026-86140\n \n Published : Sept. 5, 2026, 5:17 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.\n \n Severity: 8.0 | ...", "creation_timestamp": "2026-09-05T06:44:58.844813Z"}, {"uuid": "b5b1ae79-5547-4417-8d34-ccadc1960e6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86145", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/a4kujdw2f5qmm", "content": "CVE-2026-86145 - PCRE2 Out-of-Bounds Write Vulnerability\nCVE ID : CVE-2026-86145\n \n Published : Sept. 5, 2026, 6:17 a.m. | 20\u00a0minutes ago\n \n Description : PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive ...", "creation_timestamp": "2026-09-05T06:56:58.683126Z"}, {"uuid": "d42498d2-ea26-482c-a045-9904d63ca179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86145", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqvszgysi2e", "content": "\ud83d\udfe0 CVE-2026-86145 - High (8.2)\n\nPCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86145/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T07:00:51.655691Z"}, {"uuid": "d9766e9b-7817-4f7b-9a97-8403cfaeb806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86148", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muskueclpq2r", "content": "CVE-2026-86148 - cp3\nThe Tenda CP3 router (firmware version 27.5.57.101) has a weakness in a function that processes a voice\u2011alert URL. An attacker can send a specially crafted URL and cause the router to execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cp3 #tenda #CVE #infosec", "creation_timestamp": "2026-09-05T22:50:04.556102Z"}, {"uuid": "66392af1-a35d-4a68-985f-b3a47b952ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86149", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muskufwazg22", "content": "CVE-2026-86149 - cp3\nThe Tenda CP3 router (firmware version 27.5.57.101) can be tricked into running unauthorized system commands by sending specially crafted network requests. This could let an attacker take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cp3 #tenda #CVE #infosec", "creation_timestamp": "2026-09-05T22:50:05.993040Z"}, {"uuid": "8a5fd0db-7f23-40d4-a9bc-bea3c3364160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86148", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3musp6dc33e2r", "content": "\ud83d\udea8 CVE-2026-86148 \u2014 CVSS 9.4 CRITICAL\n\nA security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function Syste...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86148\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T00:07:13.858044Z"}, {"uuid": "ca94ea7c-7178-4eea-886b-470f623b3671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86149", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3musp6ta4jo2n", "content": "\ud83d\udea8 CVE-2026-86149 \u2014 CVSS 9.4 CRITICAL\n\nA weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86149\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T00:07:30.482686Z"}, {"uuid": "75e22703-304f-402d-ab5d-3fd34f3f680c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86148", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3musvmezgo72v", "content": "Critical Router Flaw, Because Secure Networking Was Apparently Optional\nPANIC 82% | Lag 0.0h | CVE-2026-86148 is a critical vulnerability in Tenda CP3 running firmware 27.5.57.101, affecting a sy\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-06T02:02:27.934501Z"}, {"uuid": "e2ccbf10-e4b0-4e95-8681-f2dd0d11df00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86148", "type": "seen", "source": "https://gist.github.com/ichintu/1e00e905a67cfcaf4dc2abec5f9b5345", "content": "Two critical remote OS command injection vulnerabilities (CVE-2026-86151 and CVE-2026-86148) affect the Tenda CP3 router (firmware 27.5.57.101). Both flaws, rated 9.4/10, stem from improper input handling in the `Apis/system.c` file, specifically within the `sub_2F77E8` and `SystemAsh` functions. Disclosed in early September 2026, they allow remote attackers to execute arbitrary system commands.", "creation_timestamp": "2026-09-06T04:01:23.358713Z"}]}