{"vulnerability": "CVE-2026-8419", "sightings": [{"uuid": "cf13b54f-359f-4605-acc1-56a6bf0fcb28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/drlsrvewxkqlm", "content": "CVE-2026-84190 - LibreNMS before 26.5.0 Remote Code Execution via AboutController\nCVE ID : CVE-2026-84190\n \n Published : Sept. 1, 2026, 12:17 p.m. | 19\u00a0minutes ago\n \n Description : LibreNMS versions before 26.5.0 contain a remote code execution vulnerability in the AboutContro...", "creation_timestamp": "2026-09-01T12:42:22.177850Z"}, {"uuid": "54027f92-51e0-42bb-9935-0c3e0ce96017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84196", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hl6szaah75eag", "content": "CVE-2026-84196 - Kyverno before 1.18.0 Server-Side Request Forgery via apiCall\nCVE ID : CVE-2026-84196\n \n Published : Sept. 1, 2026, 12:17 p.m. | 19\u00a0minutes ago\n \n Description : Kyverno before 1.18.0 contains a server-side request forgery vulnerability in apiCall.service.url t...", "creation_timestamp": "2026-09-01T12:54:22.432315Z"}, {"uuid": "91899372-b695-48a0-82e4-1dce38d07b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6g4mxnugdgmzz", "content": "CVE-2026-84195 - Kyverno before 1.16.4 Credential Leak via apiCall\nCVE ID : CVE-2026-84195\n \n Published : Sept. 1, 2026, 12:17 p.m. | 19\u00a0minutes ago\n \n Description : Kyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to outbound HTTP r...", "creation_timestamp": "2026-09-01T13:00:22.737095Z"}, {"uuid": "8b8f6bff-74e8-411d-ab25-e6f45b219dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84195", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muhi2y5tri24", "content": "\ud83d\udfe0 CVE-2026-84195 - High (7.7)\n\nKyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to o...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84195/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T13:00:48.797089Z"}, {"uuid": "fb26551c-e11e-40d4-b83f-a22366fd7132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84196", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muhi36pdup2c", "content": "\ud83d\udfe0 CVE-2026-84196 - High (7.7)\n\nKyverno before 1.18.0 contains a server-side request forgery vulnerability in apiCall.service.url...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84196/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T13:00:55.883019Z"}, {"uuid": "375b763f-41f7-4072-9efb-97bc68dabaf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84199", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muhi3fgvdn2i", "content": "\ud83d\udfe0 CVE-2026-84199 - High (7.7)\n\nKyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84199/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T13:01:03.112869Z"}, {"uuid": "aceb9d85-e069-4491-ba84-fcb404a27102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84194", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4hlhsrs2div4j", "content": "CVE-2026-84194 - LibreNMS 23.10.0 before 26.4.0 OS Command Injection via Hostname\nCVE ID : CVE-2026-84194\n \n Published : Sept. 1, 2026, 12:17 p.m. | 19\u00a0minutes ago\n \n Description : LibreNMS versions >= 23.10.0 and < 26.2.0 (fixed in 26.4.0) contain an authenticated OS co...", "creation_timestamp": "2026-09-01T13:02:22.422957Z"}, {"uuid": "9d3b4f34-d1a0-4586-b63a-26cf9692c8cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84190", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mulmzgv2yc2w", "content": "CVE-2026-84190 - librenms\nAn attacker with administrator privileges can execute arbitrary system commands on a LibreNMS server by manipulating the AboutController. This allows them to gain full control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#librenms #composer #CVE #infosec", "creation_timestamp": "2026-09-03T04:40:04.388866Z"}, {"uuid": "c44026fe-187c-4af5-8d60-417b5ee8a837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84197", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv224ku6z62t", "content": "\ud83d\udea8 CVE-2026-84197 \u2014 CVSS 9.2 CRITICAL\n\nIn Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-clie...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84197\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:43.735226Z"}, {"uuid": "4ed1016e-918a-4e42-ab7d-78d09b44f526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84197", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3k3gs4w22y", "content": "CVE-2026-84197 - eclipse ditto\nAll released versions of the Eclipse Ditto Node.js client library skip the verification of the server\u2019s security certificate. This means an attacker who can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eclipseditto #eclipsefoundation #CVE #infosec", "creation_timestamp": "2026-09-09T12:30:05.986128Z"}]}