{"vulnerability": "cve-2026-82524", "sightings": [{"uuid": "6d796aa3-d8b2-4954-a278-c1a59e4d88bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82524", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ylumwggqsioj", "content": "CVE-2026-82524 - UnoPim Arbitrary File Upload Vulnerability\nCVE ID : CVE-2026-82524\n \n Published : Sept. 2, 2026, 8:17 p.m. | 19\u00a0minutes ago\n \n Description : UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upl...", "creation_timestamp": "2026-09-02T22:12:28.347483Z"}, {"uuid": "54b2bccd-4c7a-4e1b-9d48-2395e1cb49e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82524", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mumg64dzts2l", "content": "CVE-2026-82524 - unopim\nIf someone with admin access to UnoPim (versions before 2.1.5) uploads an image, the system fails to check the file type. This lets the admin place a hidden script on the server that can be run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unopim #CVE #infosec", "creation_timestamp": "2026-09-03T12:10:04.289262Z"}]}