{"vulnerability": "cve-2026-8042", "sightings": [{"uuid": "3e98e8d7-feda-4804-addb-cb77fcc75d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mua6hazcn42e", "content": "CVE-2026-80428 - ilias\nThe ILIAS learning platform\u2019s logout URL can be called by anyone, even without logging in. When it runs, it automatically converts stored session information into live objects without validation,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ilias #CVE #infosec", "creation_timestamp": "2026-08-29T15:20:12.302914Z"}, {"uuid": "06f86c67-d281-4990-b037-c7ed76c105c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8042", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtaf7ne3f2e", "content": "CVE-2026-8042 - Github Shortcode\nCVE ID : CVE-2026-8042\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : The Github Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'repo' shortcode attribute in the 'github' shortcode ...", "creation_timestamp": "2026-05-27T09:53:45.382950Z"}, {"uuid": "eb7b2d5f-ef30-4bc0-849d-4a4e16d30d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtyw22q63722", "content": "\ud83d\udd34 CVE-2026-80428 - Critical (9.8)\n\nILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-80428/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T18:00:54.392378Z"}, {"uuid": "4a3f460f-1c73-4191-9071-a168fc0c5f7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtywgihb3z2y", "content": "\ud83d\udea8 CVE-2026-80428 \u2014 CVSS 9.3 CRITICAL\n\nILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel endpoint ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-80428\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-26T18:07:56.524067Z"}, {"uuid": "b7b91050-1803-418a-ab22-b54c2bc7f815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80427", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzdhwmmvp2l", "content": "\ud83d\udfe0 CVE-2026-80427 - High (8.4)\n\nbestzip builds the argument list for the system zip utility without separating options from opera...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-80427/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-26T22:01:19.941344Z"}, {"uuid": "f2118f0f-35f7-4fbf-a101-f57563be7322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100935", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-80428\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Zipkoppie\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 13:41:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-80428 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-03T15:00:06.206418Z"}, {"uuid": "e68723b0-4d33-4925-8eb1-4aa7449df1b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100945", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-80428\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a digiprosec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 14:43:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-80428 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-03T19:00:05.465180Z"}, {"uuid": "b13b13b9-2e71-4247-b148-ef8fe8dd2483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "published-proof-of-concept", "source": "Telegram/YUSQnHRGPoy1hnFlMACvlx_l4ArB_dfPL6N2OZrh3RVUvk4", "content": "", "creation_timestamp": "2026-09-03T22:00:09.606371Z"}, {"uuid": "3e53d0ed-dcbc-48c3-957e-79f276cb4a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "published-proof-of-concept", "source": "Telegram/YUSQnHRGPoy1hnFlMACvlx_l4ArB_dfPL6N2OZrh3RVUvk4", "content": "", "creation_timestamp": "2026-09-04T00:00:11.451322Z"}, {"uuid": "af18b5bf-d59e-477d-ac07-89aff73e68e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100945", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-80428\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a digiprosec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 14:43:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-80428 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-04T00:00:39.825537Z"}, {"uuid": "e69fe388-ed9a-46ca-89bc-78de954115ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100935", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-80428\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Zipkoppie\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 13:41:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-80428 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-04T00:00:46.699574Z"}, {"uuid": "85b3e1ec-6b42-47f6-ad31-89f97498d636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "seen", "source": "Telegram/tSCLRB07b57aatS-p2DSf41QV3GSxdafymdAv19o1xopakU", "content": "", "creation_timestamp": "2026-09-04T05:00:04.982007Z"}, {"uuid": "14b76137-3abe-4a2b-90cc-4d60828e88b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "published-proof-of-concept", "source": "Telegram/tSCLRB07b57aatS-p2DSf41QV3GSxdafymdAv19o1xopakU", "content": "", "creation_timestamp": "2026-09-05T01:00:38.278737Z"}, {"uuid": "b72e83ee-003a-4e4a-8d61-5a94ef56d461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80424", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv75qvdutn22", "content": "CVE-2026-80424 - datastage on cloud pak for data\nThe IBM DataStage component in Cloud Pak for Data version 5.4.0.0 can be tricked by a user who is already logged in to place files anywhere on the system. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-09-10T23:00:05.952361Z"}, {"uuid": "7986fa94-ae15-4b20-9192-8d694bca60ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80424", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv7bkqqwr62f", "content": "\ud83d\udea8 CVE-2026-80424 \u2014 CVSS 9.1 CRITICAL\n\nIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-80424\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T00:08:14.618024Z"}, {"uuid": "647207c9-51a1-4372-acb0-58ca872ad8db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mvdudqenhe2x", "content": "[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3\n\nThis is a technical exploit disclosure, essentially a proof-of-concept provided as a tool for researchers and administrators. In CONSTRUCTIVE MODE, this represents a high-fideli\u2026", "creation_timestamp": "2026-09-12T19:54:59.568314Z"}, {"uuid": "264c0544-58e3-4e74-9e40-b615fb358028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "seen", "source": "Telegram/W6MQJZB9eSGTu_BFv1QUn2sTTVpGC_UPn5aGEa0hFDVBrqM", "content": "", "creation_timestamp": "2026-09-14T03:00:14.813612Z"}, {"uuid": "c8e7e7d1-e558-441c-beb9-0068c6bda936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80428", "type": "published-proof-of-concept", "source": "Telegram/W6MQJZB9eSGTu_BFv1QUn2sTTVpGC_UPn5aGEa0hFDVBrqM", "content": "", "creation_timestamp": "2026-09-15T00:00:21.378962Z"}, {"uuid": "35c4fddd-7581-4a56-a038-a75b19f768cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-80424", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvp74lbo2n2f", "content": "\ud83d\udccc CVE-2026-80424 - IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to path traversal during archive... https://www.cyberhub.blog/cves/CVE-2026-80424", "creation_timestamp": "2026-09-17T08:07:07.885724Z"}]}