{"vulnerability": "CVE-2026-8629", "sightings": [{"uuid": "5c1549fa-7f97-413c-80b8-7ca62dd3d5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86295", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117225003855165015", "content": "A new vulnerability with increased severity was disclosed for D-Link DIR-895L (CVE-2026-86295) https://vuldb.com/vuln/399457", "creation_timestamp": "2026-09-06T16:20:07.184139Z"}, {"uuid": "280aa0c1-9f17-4462-b2b2-204d6dbc8e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86297", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117225214266621343", "content": "The severity is increased for this new vulnerability affecting D-Link DIR-605 (CVE-2026-86297) https://vuldb.com/vuln/399459", "creation_timestamp": "2026-09-06T17:13:37.726046Z"}, {"uuid": "7641ea8e-2006-4344-80f7-d59b0420c030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117225267034387068", "content": "A severe vulnerability was disclosed for D-Link DIR-822A (CVE-2026-86296) https://vuldb.com/vuln/399458", "creation_timestamp": "2026-09-06T17:27:02.819227Z"}, {"uuid": "e52e73ac-45a5-47e7-8c09-12786c927390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dvkcygitjfpyg", "content": "CVE-2026-86290 - SourceCodester Online Voting System ajax.php save_category sql injection\nCVE ID : CVE-2026-86290\n \n Published : Sept. 7, 2026, 9 a.m. | 29\u00a0minutes ago\n \n Description : A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an u...", "creation_timestamp": "2026-09-07T09:58:31.191213Z"}, {"uuid": "3108976a-245e-492e-ae02-a2e79ae7f8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86297", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117229527048942650", "content": "CVE-2026-86297: D-Link DIR-605 (B1v202WWB03) has a CRITICAL off-by-one vuln in L2TP tunnel_set_params. Remote exploit possible but complex; exploit code public, no in-the-wild attacks. No patch yet. https://radar.offseq.com/threat/cve-2026-86297-off-by-one-in-d-link-dir-605-32dadd3396efded0 #OffSeq #CVE202686297 #IoTSecurity #RouterVuln", "creation_timestamp": "2026-09-07T11:30:25.930600Z"}, {"uuid": "5e63981e-7d95-4ae1-8e60-c4a5eaeffe23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86297", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muwfsxhnxm2h", "content": "Critical off-by-one vuln in D-Link DIR-605 routers (B1v202WWB03): CVE-2026-86297. Exploit code is public, but attacks are complex. No patch yet \u2014 monitor vendor updates. https://radar.offseq.com/threat/cve-2026-86297-off-by-one-in-d-link-dir-605-32dadd3396efded0 #OffSeq #CVE202686297 #RouterSecurity", "creation_timestamp": "2026-09-07T11:30:28.225520Z"}, {"uuid": "59a9409d-ce24-4e15-ab45-9286897f032d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muwhul24yh2r", "content": "\ud83d\udea8 CVE-2026-86296 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86296\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-07T12:07:09.059331Z"}, {"uuid": "5cbb2740-8d4e-420d-b39c-472919a3266c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86299", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mux7m32cvv23", "content": "Linksys RE7000 2.0.15\u3067OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002\u9060\u9694\u304b\u3089\u653b\u6483\u53ef\u80fd\u3067\u3001\u653b\u6483\u8005\u306f\u60aa\u7528\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-86299 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-09-07T19:11:53.896096Z"}, {"uuid": "6d7e6d06-07d1-442b-94bc-822a01f8ddb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86296", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117232003422428313", "content": "CVE-2026-86296 | D-Link DIR-822A A_101: Critical stack-based buffer overflow in udhcpcd (CVSS 10). Remotely exploitable, no auth needed. Exploit code is public. Isolate devices & check vendor updates. https://radar.offseq.com/threat/a-vulnerability-was-determined-in-d-link-dir-822a-a101-cve-2026-86296-3125c70d27558796 #OffSeq #Vulnerability #DLink #Security", "creation_timestamp": "2026-09-07T22:00:12.871793Z"}, {"uuid": "2950d1ce-e38f-441f-b269-02b1e06c7d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86296", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muxiz35ziz24", "content": "D-Link DIR-822A A_101 faces a CRITICAL stack buffer overflow (CVE-2026-86296). Remote code execution possible \u2014 public exploit exists. Isolate devices & monitor now. https://radar.offseq.com/threat/a-vulnerability-was-determined-in-d-link-dir-822a-a101-cve-2026-86296-3125c70d27558796 #OffSeq #Vul...", "creation_timestamp": "2026-09-07T22:00:14.928644Z"}, {"uuid": "20caf750-809c-4dcb-8b7a-00aa01873f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3muyamdmamu2k", "content": "Daily IT Security Digest \u2014 2026-09-08\n9.4) and CVE-2026-86296 (udhcpcd buffer overflow, CVSS 10) with public exploit code. No patches are available yet; isolate devices from untrusted networks. (Source: @offseq@infosec.exchange)\n\n6. **Adobe Commerce Template Engine Flaw Enables Unauthenticated RCE", "creation_timestamp": "2026-09-08T05:02:36.367112Z"}, {"uuid": "60e71997-602b-4b1a-b0e3-e5fa0b34e1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86299", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muz26eb7rz2n", "content": "CVE-2026-86299 - re7000\nThe Linksys RE7000 router (firmware version 2.0.15) lets an attacker send specially crafted ping test requests that cause the device to run unauthorized commands. This can be exploited\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#re7000 #linksys #CVE #infosec", "creation_timestamp": "2026-09-08T12:40:04.346321Z"}, {"uuid": "e90009cc-e1db-431f-8f88-88efd99d72fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzmjt3dyj2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-86296: A vulnerability was determined in D-Link DIR-822A A_101\nCVSS 10 \u00b7 EPSS 1.3%\nhttps://beta.vulnsea.com/cve/CVE-2026-86296\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T18:08:36.246904Z"}, {"uuid": "18a7e5f3-d543-4a9d-bc66-6c091f5aaa77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86296", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muz63kgxwr2n", "content": "CVE-2026-86296 - dir-822a\nThe DIR-822A router\u2019s built\u2011in DHCP client software has a coding error that lets an attacker send specially crafted network data and overflow a memory buffer. This can cause the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#dir822a #dlink #CVE #infosec", "creation_timestamp": "2026-09-08T13:50:05.389481Z"}, {"uuid": "1880088a-b202-47d3-b4aa-f005aad27c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-86296", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv2r5buy3z2g", "content": "Daily IT Security Digest \u2014 2026-09-09\naffected devices from untrusted networks and monitor for vendor firmware updates.\n   Source: [Radar/Offseq](https://radar.offseq.com/threat/a-vulnerability-cve-2026-86296) \u00b7 [Mastodon", "creation_timestamp": "2026-09-09T05:03:44.146050Z"}]}