{"vulnerability": "cve-2026-8651", "sightings": [{"uuid": "a23c3a3d-055f-4f92-a378-9f4a9602ebba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8651", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq65sngqbm2i", "content": "CVE-2026-8651 - IPv6 Loopback Spoof via Trusted Host Header Bypasses Origin Check in MOVEit Transfer\nCVE ID : CVE-2026-8651\n \n Published : July 8, 2026, 8:17 p.m. | 43\u00a0minutes ago\n \n Description : Limited authentication bypass by spoofing vulnerability in Progress MOVEit Trans...", "creation_timestamp": "2026-07-08T22:22:26.729988Z"}, {"uuid": "031b3001-c472-4302-9b7c-eebaf9ebff83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86510", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117231307403147637", "content": "A severe vulnerability was disclosed for D-Link DIR-822A (CVE-2026-86510) https://vuldb.com/vuln/399663", "creation_timestamp": "2026-09-07T19:03:12.470910Z"}, {"uuid": "dba90dbb-4670-441c-9436-365ebbe336d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86510", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muxzrvde652m", "content": "\ud83d\udd34 CVE-2026-86510 - Critical (9.9)\n\nA vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_para...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86510/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T03:00:27.137846Z"}, {"uuid": "1cf45154-db54-415d-9166-355465e9e012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86510", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bccgirgg33et6", "content": "CVE-2026-86510 - D-Link DIR-822A L2TP Control Message tunnel_set_params out-of-bounds write\nCVE ID : CVE-2026-86510\n \n Published : Sept. 8, 2026, 2:17 a.m. | 38\u00a0minutes ago\n \n Description : A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunne...", "creation_timestamp": "2026-09-08T03:00:41.192383Z"}, {"uuid": "2baad160-88b5-4e3e-b0af-d37a2bdc3a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86510", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117233183947846621", "content": "D-Link DIR-822A routers are affected by CVE-2026-86510 (CRITICAL, CVSS 9.4): remote out-of-bounds write in L2TP parser can lead to system compromise. No patch yet \u2014 restrict access and monitor updates. https://radar.offseq.com/threat/cve-2026-86510-out-of-bounds-write-in-d-link-dir-822a-e90339b14a1aa39b #OffSeq #CVE202686510 #RouterSecurity #Infosec", "creation_timestamp": "2026-09-08T03:00:25.694696Z"}, {"uuid": "7133904d-31f2-412d-92a8-60596a45e210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86510", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muxzrw57v62f", "content": "CRITICAL out-of-bounds write in D-Link DIR-822A (CVE-2026-86510, CVSS 9.4). Remote code execution possible \u2014 no patch yet. Restrict device access from untrusted networks & monitor for vendor updates. https://radar.offseq.com/threat/cve-2026-86510-out-of-bounds-write-in-d-link-dir-822a-e90339b14a1...", "creation_timestamp": "2026-09-08T03:00:27.668299Z"}, {"uuid": "585495ae-b5cd-4356-b77e-edfe4d59674c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86510", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3muyamddijd2h", "content": "Daily IT Security Digest \u2014 2026-09-08\nmitigation. (Source: @offseq@infosec.exchange, radar.offseq.com)\n\n5. **D-Link DIR-822A Routers Hit by Multiple Critical Vulnerabilities (CVSS 10)**\n   D-Link DIR-822A routers are affected by at least two critical flaws \u2014 CVE-2026-86510 (L2TP out-of-bounds", "creation_timestamp": "2026-09-08T05:02:35.885442Z"}, {"uuid": "06139bae-d01f-4d45-b99d-3b38b20b24eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86518", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ay67b3jnlo2re", "content": "CVE-2026-86518 - code-projects Student Crud Operation edit.php sql injection\nCVE ID : CVE-2026-86518\n \n Published : Sept. 8, 2026, 4:17 a.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an un...", "creation_timestamp": "2026-09-08T05:35:42.334357Z"}, {"uuid": "80c45a5e-c9ad-4766-9119-2d3053c62213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86517", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/f24ttj4go5rcq", "content": "CVE-2026-86517 - itsourcecode Sales and Inventory System us_searchfrm.php mysqli_query sql injection\nCVE ID : CVE-2026-86517\n \n Published : Sept. 8, 2026, 4:17 a.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : A flaw has been found in itsourcecode Sales and Inventory System 1.0. ...", "creation_timestamp": "2026-09-08T05:41:42.069222Z"}, {"uuid": "bd76f9e7-f0a1-4ce8-9618-be1d54be4422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86516", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5xj6blo4uwp3f", "content": "CVE-2026-86516 - elenavanengelenmaslova mocknest-serverless AWS GitHub OIDC Deployment Helper Script github-oidc-role.yaml privileges management\nCVE ID : CVE-2026-86516\n \n Published : Sept. 8, 2026, 4:17 a.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : A vulnerability was detect...", "creation_timestamp": "2026-09-08T05:47:42.143690Z"}, {"uuid": "5ce69348-fe0d-4c7c-aaf8-1bb9d9d5df19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86519", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2cwa2p6farulq", "content": "CVE-2026-86519 - code-projects Student Crud Operation Backup File card_activation.sql information disclosure\nCVE ID : CVE-2026-86519\n \n Published : Sept. 8, 2026, 5:16 a.m. | 13\u00a0minutes ago\n \n Description : A vulnerability was found in code-projects Student Crud Operation 1.0....", "creation_timestamp": "2026-09-08T05:49:41.726771Z"}, {"uuid": "1031ba61-5fdb-4d48-9a27-00a708a5dfc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86510", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muynd5e3ub2r", "content": "CVE-2026-86510 - dir-822a\nThe D-Link DIR-822A home router has a flaw in the way it processes L2TP control messages. An attacker on the internet can send specially crafted data that writes outside the intended\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dir822a #dlink #CVE #infosec", "creation_timestamp": "2026-09-08T08:50:07.239350Z"}, {"uuid": "86d62384-3a47-49f9-8a38-d7009153036c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86510", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzmjuqktb26", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-86510: A vulnerability has been found in D-Link DIR-822A A_101\nCVSS 9.9 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-86510\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T18:08:39.290804Z"}, {"uuid": "c11f5ffe-6154-44c2-ac17-3515308459c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86510", "type": "seen", "source": "https://gist.github.com/ichintu/e83626f45813938174e97f26226f64b6", "content": "This daily threat intelligence digest highlights three key updates:\n1. **AI Red Teaming Strategy:** Organizations are weighing external AI red teaming as a cost-effective alternative to scaling small internal teams, driven by rapid AI expansion and hiring freezes.\n2. **AI Agent Exploitation:** A DEF CON 34 talk detailed how researchers bypassed traditional security tools to manipulate AI customer service agents, earning over $50,000 in bug bounties.\n3. **Critical Router Vulnerability:** CVE-2026-86510, a critical (9.9) remote out-of-bounds write in the L2TP parser of D-Link DIR-822A routers, has been publicly disclosed with an active exploit.", "creation_timestamp": "2026-09-08T08:01:40.566234Z"}]}