{"vulnerability": "cve-2026-8883", "sightings": [{"uuid": "c9b73b9a-4238-42a0-b40e-255ca59cb851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8883", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mntnrgmzyq2a", "content": "CVE-2026-8883 - Global Body Mass Index Calculator\nCVE ID : CVE-2026-8883\n \n Published : June 9, 2026, 5:16 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : The Global Body Mass Index Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gbmicalc' ...", "creation_timestamp": "2026-06-09T07:18:25.498010Z"}, {"uuid": "8702b8cb-c372-40f3-8233-a889e3b36538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8883", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mnwbhhbpwf26", "content": "CVE-2026-8883 global-body-mass-index-calculator (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-06-10T08:16:06.879327Z"}, {"uuid": "81748a78-77dc-4916-a5bf-290cfbe9fc28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88830", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mwc2e4afzs24", "content": "CVE-2026-88830 [HIGH] BusyBox\n\nA unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message.\n\nnvd.nist.gov/vuln/detail/CVE-2026-88830", "creation_timestamp": "2026-09-24T20:02:27.068502Z"}, {"uuid": "3f75e125-7f50-43b3-967f-9c09fec8ecb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88832", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mwchsv3ubp2h", "content": "HIGH severity CVE just published in BusyBox:\n\nCVE-2026-88832. BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images.\n\nnvd.nist.gov/vuln/detail/CVE-2026-88832", "creation_timestamp": "2026-09-25T00:03:20.871638Z"}, {"uuid": "770a3814-44b6-43fd-bad3-89933b9c8c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88831", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mwcvg22a3x2s", "content": "New MEDIUM CVE for BusyBox: CVE-2026-88831\n\nBusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients.\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-88831", "creation_timestamp": "2026-09-25T04:06:42.801973Z"}, {"uuid": "dadb3d2a-e761-42b9-9723-ca16f329fbd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88835", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mwdpyf2z2z2t", "content": "BusyBox: CVE-2026-88835 [MEDIUM]\n\nBusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read.\n\nnvd.nist.gov/vuln/detail/CVE-2026-88835", "creation_timestamp": "2026-09-25T12:02:15.385479Z"}, {"uuid": "e79fce7c-1935-449c-875c-be237a049f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88837", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mwe5g44rje2v", "content": "CVE-2026-88837 [MEDIUM] BusyBox\n\nBusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check.\n\nnvd.nist.gov/vuln/detail/CVE-2026-88837", "creation_timestamp": "2026-09-25T16:02:34.473758Z"}]}