{"vulnerability": "CVE-2026-8489", "sightings": [{"uuid": "dd6bcfe7-3d7c-4075-b299-f609e3dd902c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8489", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mppumip7bu2a", "content": "CVE-2026-8489 - Ultimate Member\nCVE ID : CVE-2026-8489\n \n Published : July 3, 2026, 4:30 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress i...", "creation_timestamp": "2026-07-03T06:00:43.739184Z"}, {"uuid": "fd4f6a6e-7038-44fd-afdc-46fdf4d31873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8489", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mpqqch5bk727", "content": "CVE-2026-8489 ultimate-member (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-03T14:16:07.975529Z"}, {"uuid": "08f0a258-eb70-41c2-b577-16543a937580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8489", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprgdxehyf2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8489 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ultimate Member: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6191C0D4-A9B8-45D4-B4F6-6BEBA4BFE0D0", "creation_timestamp": "2026-07-03T20:50:41.264133Z"}, {"uuid": "46de0012-8358-4a29-920e-54dedca97f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3muph6jb6xk2w", "content": "\ud83d\udea8 Moderate-severity security fix in undici (7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-84890: undici vulnerable to Denial of Service via unbounded decompression of compressed responses\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T17:06:12.602890Z"}, {"uuid": "910f7e05-7b5e-4e1d-b158-c5e3e9de8b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117257168610414149", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:40:06.702752Z"}, {"uuid": "99da4989-9caa-410b-9066-4721cb795298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84890", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvcp6pq4qd2t", "content": "CVE-2026-84890: undici decompression bomb risk. Malicious upstream can expand tiny payloads to hundreds of MB, exhausting client memory. CVSS 5.9. Patch status unknown\u2014review your undici usage and add limits if possible. Details: https://www.valtersit.com/cve/CVE-2026-84890/ #CVE", "creation_timestamp": "2026-09-12T08:50:03.198795Z"}]}