{"vulnerability": "cve-2026-8023", "sightings": [{"uuid": "0a4a0f98-8c36-48d3-957b-049d2db69554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8023", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mphp3wwrcd2d", "content": "Zephyr static-filesystem flaw (CVE-2026-8023, HIGH): unauthenticated path traversal lets attackers read files outside web root in 4.0.0 \u2013 4.4.x. Check vendor advisories for fixes & restrict access now. https://radar.offseq.com/threat/cve-2026-8023-improper-limitation-of-a-pathname-to-c30c7b8fffb2...", "creation_timestamp": "2026-06-30T00:00:39.452661Z"}, {"uuid": "e321fbee-9e6a-4047-9eb1-fc6c18f51ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8023", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116836115168562466", "content": "Zephyr HTTP server (4.0.0 \u2013 4.4.x) is affected by CVE-2026-8023 (HIGH): improper path handling enables unauthenticated remote file access via path traversal (../). Patch status unclear \u2014 check advisories & restrict exposure. https://radar.offseq.com/threat/cve-2026-8023-improper-limitation-of-a-pathname-to-c30c7b8fffb254ad #OffSeq #Zephyr #Infosec #PathTraversal", "creation_timestamp": "2026-06-30T00:00:42.475736Z"}, {"uuid": "ebf8a352-1dd2-4a32-ac4c-02fcf9dbcb3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8023", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphpgfnue32q", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8023 \u0432 HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 Zephyr: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9764B4FF-6CBA-4D4E-9ABC-7327DF6F4C08", "creation_timestamp": "2026-06-30T00:06:29.908558Z"}, {"uuid": "07f664ee-1259-4112-9d37-74dd04a3d49e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8023", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mphvsjyebj2z", "content": "CVE-2026-8023 - Path traversal in Zephyr HTTP server static-filesystem resource handler allows unauthenticated remote arbitrary file read\nCVE ID : CVE-2026-8023\n \n Published : June 29, 2026, 10:15 p.m. | 3\u00a0hours, 30\u00a0minutes ago\n \n Description : Zephyr's HTTP server (subsys/net...", "creation_timestamp": "2026-06-30T02:00:39.077603Z"}, {"uuid": "51a9031d-9376-4dc3-9fb5-da645aaf5e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80233", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cn4yvwzcxyxdw", "content": "CVE-2026-80233 - CAYIN Technology\uff5cCAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Upload\nCVE ID : CVE-2026-80233\n \n Published : Aug. 26, 2026, 8:19 a.m. | 15\u00a0minutes ago\n \n Description : CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary Fil...", "creation_timestamp": "2026-08-26T08:41:00.605435Z"}, {"uuid": "f6200002-e33e-4f81-bf46-41d70c9d48cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80235", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7rgvoyalntiiy", "content": "CVE-2026-80235 - Thinking Software Technology\uff5cEFence - Arbitrary File Upload\nCVE ID : CVE-2026-80235\n \n Published : Aug. 26, 2026, 8:26 a.m. | 9\u00a0minutes ago\n \n Description : EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenti...", "creation_timestamp": "2026-08-26T08:43:00.957136Z"}, {"uuid": "5510c0a5-9587-49bd-83f6-f28c90213c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-80235", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11134-01fc0-2.html", "content": "", "creation_timestamp": "2026-08-26T08:45:03.707446Z"}, {"uuid": "9c9f6d55-f418-43c4-ba19-aac372dda267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-80236", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11134-01fc0-2.html", "content": "", "creation_timestamp": "2026-08-26T08:45:05.981106Z"}, {"uuid": "b7966809-f060-4f68-87b5-2eab5f0770ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-80237", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11134-01fc0-2.html", "content": "", "creation_timestamp": "2026-08-26T08:45:08.259703Z"}, {"uuid": "ebeb4e34-c95c-471f-8957-63d4c204d1ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80235", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mty22ja2k62p", "content": "CVE-2026-80235 - efence\nThe EFence web security product can be tricked into accepting any file from the internet, even without a login. An attacker could place a hidden program on your server and make it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#efence #thinking #CVE #infosec", "creation_timestamp": "2026-08-26T09:40:04.207074Z"}, {"uuid": "a68da036-2bad-4c57-9d42-82c0f4bf0ef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80237", "type": "seen", "source": "https://t.me/DBXTERSLEARNING/1232", "content": "\ud83d\udfe0 HIGH \u2014 CVE-2026-80237\n\nThinking Software Technology\uff5cEfence - Arbitrary File Upload\n\n\ud83d\udcca CVSS: 8.7 (v4.0)\n\ud83d\udc1b CWE: CWE-434\n\ud83c\udfaf Target: Thinking Software Technology Efence\n\n\ud83d\udcdd EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.\n\n\ud83d\udd17 References:\n  1. www.twcert.org.tw\n  2. www.twcert.org.tw\n\n\ud83d\udcc5 CVE Published: 26 Aug 2026, 08:28 UTC\n\n\ud83d\udd17 NVD Detail\n\ud83d\udd17 CVE.org\n\n\ud83d\udfe1 P3 \u2014 HIGH", "creation_timestamp": "2026-08-31T14:00:05.548590Z"}, {"uuid": "7ac6abca-aaf1-4909-b024-1250f8fdbbde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80237", "type": "seen", "source": "https://t.me/DBXTERSLEARNING/1232", "content": "\ud83d\udfe0 HIGH \u2014 CVE-2026-80237\n\nThinking Software Technology\uff5cEfence - Arbitrary File Upload\n\n\ud83d\udcca CVSS: 8.7 (v4.0)\n\ud83d\udc1b CWE: CWE-434\n\ud83c\udfaf Target: Thinking Software Technology Efence\n\n\ud83d\udcdd EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.\n\n\ud83d\udd17 References:\n  1. www.twcert.org.tw\n  2. www.twcert.org.tw\n\n\ud83d\udcc5 CVE Published: 26 Aug 2026, 08:28 UTC\n\n\ud83d\udd17 NVD Detail\n\ud83d\udd17 CVE.org\n\n\ud83d\udfe1 P3 \u2014 HIGH", "creation_timestamp": "2026-09-01T00:00:09.631385Z"}, {"uuid": "f4e86c97-bd9d-451a-90f2-99a34ef64b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80230", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mujx3y4rb22k", "content": "\ud83d\udd17 CVE : CVE-2026-13608, CVE-2026-18924, CVE-2026-19931, CVE-2026-80229, CVE-2026-80230, CVE-2026-80231, CVE-2026-80255, CVE-2026-82208, CVE-2026-82209, CVE-2026-13608, CVE-2026-18924, CVE-2026-19931, CVE-2026-80229, CVE-2026-80230, CVE-2026-80231, CVE-2026-80255, CVE-2026-82208, CVE-2026-82209", "creation_timestamp": "2026-09-02T12:35:07.449477Z"}, {"uuid": "f6f03bf1-8fd1-42c1-b94b-fbd464de056e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80231", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mujx3y4rb22k", "content": "\ud83d\udd17 CVE : CVE-2026-13608, CVE-2026-18924, CVE-2026-19931, CVE-2026-80229, CVE-2026-80230, CVE-2026-80231, CVE-2026-80255, CVE-2026-82208, CVE-2026-82209, CVE-2026-13608, CVE-2026-18924, CVE-2026-19931, CVE-2026-80229, CVE-2026-80230, CVE-2026-80231, CVE-2026-80255, CVE-2026-82208, CVE-2026-82209", "creation_timestamp": "2026-09-02T12:35:07.506628Z"}]}