{"vulnerability": "CVE-2026-8827", "sightings": [{"uuid": "e3838550-e7e2-4d25-b1f6-c4b91471f387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8827", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm7gotmhok2k", "content": "CVE-2026-8827 - SQL Injection in extension \"Address List\" (tt_address)\nCVE ID : CVE-2026-8827\n \n Published : May 19, 2026, 10:16 a.m. | 1\u00a0hour, 57\u00a0minutes ago\n \n Description : The AddressRepository::getSqlQuery() method constructs a database query without properly sanitizing u...", "creation_timestamp": "2026-05-19T12:53:15.879360Z"}, {"uuid": "f80eeaee-e405-4224-8653-b3c271c4cded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8827", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm7h5lczbw2e", "content": "CVE-2026-8827 - SQL Injection in extension \"Address List\" (tt_address)\nCVE ID : CVE-2026-8827\n \n Published : May 19, 2026, 10:16 a.m. | 2\u00a0hours, 5\u00a0minutes ago\n \n Description : The AddressRepository::getSqlQuery() method constructs a database query without properly sanitizing u...", "creation_timestamp": "2026-05-19T13:01:30.594156Z"}, {"uuid": "7f23d7b2-cf9c-46ce-90ae-449e66e91d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88277", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dd7bpuxqtnxlq", "content": "CVE-2026-88277 - GV-LPCLPC2011/2211 - ONVIF Subscribe Address Command Injection\nCVE ID : CVE-2026-88277\n \n Published : Sept. 10, 2026, 8:21 a.m. | 38\u00a0minutes ago\n \n Description : GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through Con...", "creation_timestamp": "2026-09-10T09:51:54.384829Z"}, {"uuid": "ff0c8a1b-a2fb-4094-9b2b-e5d3677ac510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88278", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/evevywnnlif2v", "content": "CVE-2026-88278 - GV-LPCLPC2011/2211 - ONVIF WS-Security PasswordDigest Replay\nCVE ID : CVE-2026-88278\n \n Published : Sept. 10, 2026, 8:21 a.m. | 38\u00a0minutes ago\n \n Description : GeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse prote...", "creation_timestamp": "2026-09-10T09:57:54.584660Z"}, {"uuid": "7cc68e4e-8dad-4973-aa74-f071c9b56ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88278", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv5slsh45624", "content": "\ud83d\udea8 CVE-2026-88278 \u2014 CVSS 9.8 CRITICAL\n\nGeoVision GV-LPC2211 V1.13 fails to enforce WS-Security UsernameToken freshness or nonce reuse protection, ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88278\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T10:07:44.199193Z"}, {"uuid": "21e5745b-3b92-41e2-881f-8e8d46685d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88278", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv5ttskl5d2y", "content": "CVE-2026-88278\nThe GeoVision GV-LPC2211 camera does not check whether a login token is fresh or reused, so an attacker who captures a valid token can reuse it to control the device. This could let someone perform actions on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-10T10:30:06.410294Z"}]}