{"vulnerability": "cve-2026-8625", "sightings": [{"uuid": "49370c04-c06b-4d8a-8fb9-c29a2263e6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86250", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muu2ejj6ip2m", "content": "\ud83d\udfe0 CVE-2026-86250 - High (7.5)\n\nh3 versions before 2.0.1-rc.18 fail to validate the chunk count parsed from user-controlled cooki...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86250/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-06T13:00:13.606787Z"}, {"uuid": "5485f081-4ae9-4bed-a15a-8ccffe61759f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86257", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dn3x4lc6hk6rx", "content": "CVE-2026-86257 - wger before 2.6 CSV Formula Injection via member export\nCVE ID : CVE-2026-86257\n \n Published : Sept. 6, 2026, 12:17 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : wger before 2.6 fails to sanitize first_name and last_name fields in the gym member TSV export en...", "creation_timestamp": "2026-09-06T13:35:28.929767Z"}, {"uuid": "084aad2a-8d84-48d5-807b-d68aeb674332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86258", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/aslqkh7y6oslj", "content": "CVE-2026-86258 - nbviewer through 1.0.1 Path Traversal via LocalFileHandler\nCVE ID : CVE-2026-86258\n \n Published : Sept. 6, 2026, 12:37 p.m. | 51\u00a0minutes ago\n \n Description : nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.can_show() that use...", "creation_timestamp": "2026-09-06T13:41:28.393853Z"}, {"uuid": "5ea64b09-a5b4-4d1d-9a48-fcaf9c33dd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muu5qfieq42p", "content": "\ud83d\udfe0 CVE-2026-86259 - High (7.5)\n\nOpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86259/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-06T14:00:48.525293Z"}, {"uuid": "087047e8-6ce4-492d-b74a-dbac90f97feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86259", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muu6tdc6pg2f", "content": "CVE-2026-86259 - openmaic\nOlder versions of OpenMAIC do not properly check URLs when they are run in test or development mode. This lets anyone on the network send specially crafted requests that reach the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openmaic #thumaic #CVE #infosec", "creation_timestamp": "2026-09-06T14:20:04.678897Z"}, {"uuid": "1fe8db31-5a63-4930-b88d-fdb142833455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86258", "type": "seen", "source": "https://gist.github.com/ichintu/fe47c9308dfcae2743b09006cdd52579", "content": "This daily cyber threat intelligence digest highlights three key updates: a real-world case where granting an AI agent API key access resulted in a $100 billing loss, underscoring emerging AI security and financial risks; **CVE-2026-86258**, a HIGH-severity path traversal flaw in nbviewer (\u22641.0.1) that allows unauthorized access to files outside its configured root directory; and **CVE-2026-18480**, a HIGH-severity account takeover vulnerability in the SureCart WordPress plugin (<4.6.3) that enables low-privileged users to hijack admin accounts, manipulate data, and expose sensitive information.", "creation_timestamp": "2026-09-06T16:01:40.931767Z"}]}