{"vulnerability": "cve-2026-8616", "sightings": [{"uuid": "26dc0f7c-1050-4fd2-9324-d947ddb2c187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86169", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3murgqnqr3m2k", "content": "\ud83d\udfe0 CVE-2026-86169 - High (8.8)\n\nAxolotl through 0.18.0 contains a remote code execution vulnerability in the multipack patch path...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86169/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T12:03:46.156446Z"}, {"uuid": "ce6040d2-9008-422d-8fcf-31334aa00564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86169", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3murqvdpms22n", "content": "Axolotl 0.18.0\u4ee5\u524d\u3067\u3001\u30e2\u30c7\u30eb\u8aad\u307f\u8fbc\u307f\u6642\u306e`trust_remote_code`\u304cFalse\u3067\u306a\u304fNone\u306b\u30c7\u30d5\u30a9\u30eb\u30c8\u3055\u308c\u305f\u3053\u3068\u3067\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ac\u30fc\u30c9\u304c\u8fc2\u56de\u3055\u308c\u308b\u8106\u5f31\u6027\u3002\u60aa\u610f\u3042\u308b\u30e2\u30c7\u30eb\u3067\u2026\nCVE-2026-86169 CVSS 8.8 | HIGH", "creation_timestamp": "2026-09-05T15:05:19.887616Z"}, {"uuid": "86ec84a0-fbee-4b3a-a6f0-1da6b2276ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86166", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117219757253901773", "content": "We have just added an important vulnerability affecting Tenda HG10 (CVE-2026-86166) https://vuldb.com/vuln/399305", "creation_timestamp": "2026-09-05T18:05:50.351868Z"}, {"uuid": "189aea0a-8800-4692-a6dd-a7615b1699e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86165", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117219809348083174", "content": "The severity is increased for this new vulnerability affecting Tenda HG10 (CVE-2026-86165) https://vuldb.com/vuln/399304", "creation_timestamp": "2026-09-05T18:19:05.145037Z"}, {"uuid": "2d68ab79-011e-4474-9f89-2aad20d724e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86165", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mut46qvwjy2j", "content": "CVE-2026-86165 - hg10\nThe web management page of the Tenda HG10 router contains a coding mistake in the part that processes a URL parameter. By sending a specially crafted value, an attacker on the network or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hg10 #tenda #CVE #infosec", "creation_timestamp": "2026-09-06T04:00:06.526185Z"}, {"uuid": "e2165df0-6c9e-488b-981a-9f702ba8945e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86167", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mut7jydmri2j", "content": "CVE-2026-86167 - hg10\nThe admin web page on Tenda HG10 routers can be tricked into running any system command by sending a crafted request. This can be done over the network by an attacker, potentially giving\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hg10 #tenda #CVE #infosec", "creation_timestamp": "2026-09-06T05:00:05.023938Z"}, {"uuid": "b98bd9d4-dc6b-40ab-9888-becea8532886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86164", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4poraz7h7yiac", "content": "CVE-2026-86164 - itsourcecode Sales and Inventory System trans_view.php sql injection\nCVE ID : CVE-2026-86164\n \n Published : Sept. 6, 2026, 4:18 a.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Af...", "creation_timestamp": "2026-09-06T05:40:25.205873Z"}, {"uuid": "6f0a2990-a030-452e-b407-af729be899be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86166", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7vnlfkoyzfdv2", "content": "CVE-2026-86166 - Tenda HG10 Boa Web Server formWanRedirect buffer overflow\nCVE ID : CVE-2026-86166\n \n Published : Sept. 6, 2026, 4:18 a.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRe...", "creation_timestamp": "2026-09-06T05:46:24.330916Z"}, {"uuid": "8969a63d-fa0e-48c5-8a2a-721e0b8e69be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86165", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6mlzij7zejqds", "content": "CVE-2026-86165 - Tenda HG10 formURL buffer overflow\nCVE ID : CVE-2026-86165\n \n Published : Sept. 6, 2026, 4:18 a.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/...", "creation_timestamp": "2026-09-06T05:52:24.435492Z"}, {"uuid": "a2215565-f4eb-476b-a411-54fd6cd5881b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86167", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2w6vkimf37bns", "content": "CVE-2026-86167 - Tenda HG10 Boa formgponConf os command injection\nCVE ID : CVE-2026-86167\n \n Published : Sept. 6, 2026, 4:30 a.m. | 57\u00a0minutes ago\n \n Description : A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boafor...", "creation_timestamp": "2026-09-06T05:58:24.430189Z"}, {"uuid": "26fe2824-5112-42d2-a781-6a84002d0412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86168", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4inktpkwqczos", "content": "CVE-2026-86168 - code-projects Content Management System login.php sql injection\nCVE ID : CVE-2026-86168\n \n Published : Sept. 6, 2026, 4:45 a.m. | 43\u00a0minutes ago\n \n Description : A security flaw has been discovered in code-projects Content Management System 1.0. The affected e...", "creation_timestamp": "2026-09-06T06:00:25.866033Z"}, {"uuid": "b7742cd1-afe2-400a-b6cb-60428581e917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86167", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mutsxxprnl2i", "content": "Tenda HG10 300001138\u306eformgponConf\u95a2\u6570\u306bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u60aa\u7528\u304c\u53ef\u80fd\u3002\nCVE-2026-86167 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-09-06T10:47:55.034043Z"}, {"uuid": "80b5cf48-93f1-4f50-8c5e-3eb5c07f3d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86168", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mutt25s4qu23", "content": "code-projects CMS 1.0\u306e/login.php\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3002user_name\u5f15\u6570\u64cd\u4f5c\u3067\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u53ef\u80fd\u3002\nCVE-2026-86168 CVSS 7.3 | HIGH", "creation_timestamp": "2026-09-06T10:49:08.759357Z"}, {"uuid": "1df7dc32-b36d-497b-994f-dd4ece9e1432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86165", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzh76qlis2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-86165: A vulnerability was found in Tenda HG10 300001138\nCVSS 9.8 \u00b7 EPSS 0.6%\nhttps://beta.vulnsea.com/cve/CVE-2026-86165\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T16:33:11.052102Z"}]}