{"vulnerability": "CVE-2026-48087", "sightings": [{"uuid": "170753d0-fd2b-41b8-8694-ac19101bb047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48087", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msmpzjxjns27", "content": "CVE-2026-48087\nAn attacker can steal a user's account by using their own authenticator to generate a passkey, which can then be used to log in as the victim. This vulnerability has been fixed in version 1.0.2, so users should\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-09T04:18:16.299622Z"}, {"uuid": "f645a451-7554-4174-a4be-7edcbfa06872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48087", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msmu3bbfu72t", "content": "Your Authenticator Just Became the Intruder\u2019s VIP Pass\nPANIC 68% | Lag 0.0h | CVE-2026-48087 lets an attacker abuse a victim's authenticator flow to generate a passkey that can b\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-09T05:28:38.074622Z"}, {"uuid": "f107ded4-1b29-43c8-94d1-df586c1347a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48087", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msh5uwybhi2m", "content": "CVE-2026-48087\nA vulnerability in OpenReception's appointment booking software allowed an attacker to take over a user's account without their password. This happened when an attacker submitted a fake registration response\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-06T23:08:04.788825Z"}]}