{"vulnerability": "cve-2026-88131", "sightings": [{"uuid": "cb7de88b-262e-4ac8-807d-e230756a1a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88131", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxflek76pe2q", "content": "CVE-2026-88131 - microsoft dataverse\nMicrosoft Dataverse can be tricked into running malicious code sent over a network. This means an attacker could take control of the system that hosts your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoftdataverse #microsoft #CVE #infosec", "creation_timestamp": "2026-10-08T23:10:05.651262Z"}, {"uuid": "b1adb14a-0074-4700-a172-c0257422adc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88131", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxfn7afj6f2o", "content": "CVE-2026-88131 scores 9.8 critical in Microsoft Dataverse.\n\u2022 Remote code execution\n\u2022 No auth or user interaction needed\n\u2022 Network attack vector\nCheck the MSRC advisory now.\n\nhttps://thecircuitry.to/article/critical-cve-2026-88131-hits-microsoft-dataverse-with-remote-code-execution-mv06keod", "creation_timestamp": "2026-10-08T23:42:55.747021Z"}, {"uuid": "5e8c10c6-4fe2-481b-830e-6dc9a2ae0609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88131", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxfnwvcsdp2u", "content": "Correction: Microsoft says CVE-2026-88131 in Dataverse is already fully mitigated on its side, so customers don't need to take any action. We've updated the story: https://thecircuitry.to/article/critical-cve-2026-88131-hits-microsoft-dataverse-with-remote-code-execution-mv06keod", "creation_timestamp": "2026-10-08T23:56:08.686669Z"}, {"uuid": "65c523fa-8468-4bd1-ba36-9ccdc39b64f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88131", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxfop3to2e2l", "content": "\ud83d\udea8 CVE-2026-88131 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code ov...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88131\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T00:09:40.878834Z"}, {"uuid": "22cb1da9-355b-47dd-8c33-2482915b7d5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88131", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117408715560166560", "content": "Microsoft Dataverse is affected by CVE-2026-88131 (CRITICAL, CVSS 9.8): deserialization of untrusted data allows unauthenticated RCE. Patch available \u2014 apply ASAP! https://radar.offseq.com/threat/cve-2026-88131-cwe-502-deserialization-of-untrusted-data-in-microsoft-microsoft-dataverse-eba5097c3e4671bb #OffSeq #CVE202688131 #Microsoft #RCE #Infosec", "creation_timestamp": "2026-10-09T03:00:25.691600Z"}, {"uuid": "aa27f45d-b80e-4622-b722-9f80a1f6a873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88131", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxfyahh7uy2x", "content": "CVE-2026-88131: Microsoft Dataverse deserialization bug (CRITICAL, CVSS 9.8) enables unauthenticated RCE. Patch immediately using Microsoft\u2019s fix: https://radar.offseq.com/threat/cve-2026-88131-cwe-502-deserialization-of-untrusted-data-in-microsoft-microsoft-dataverse-eba5097c3e4671bb #OffSeq #Mi...", "creation_timestamp": "2026-10-09T03:00:27.949394Z"}, {"uuid": "46e6351f-366f-4d57-8472-addc7ffe3b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88131", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117410643224355428", "content": "CVE-2026-88131 - Critical RCE in Microsoft Dataverse via insecure deserialization. CVSS 9.8. Unpatched vulnerability. Mitigate immediately. #CVE #Microsoft #infosec\nhttps://www.valtersit.com/cve/CVE-2026-88131/", "creation_timestamp": "2026-10-09T11:10:39.468195Z"}, {"uuid": "1773f7f6-db31-4f9b-bb8c-f2116847f130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88131", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117411489566980271", "content": "Microsoft dropped seven security advisories for their Cloud vulnerabilities. The worst is Microsoft Partner Center Elevation of Privilege Vulnerability CVE-2026-96207 (10.0 critical). None of them are publicly disclosed or exploited at least.\n\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-96207 (10.0 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-94510 (9.9 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-77900 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-88131 (9.8 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-69435 (9.6 critical)\nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83943 (8.7 high) \nhttps://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-83947 (7.7 high) \n#microsoft #CVE", "creation_timestamp": "2026-10-09T14:47:00.320348Z"}]}