{"vulnerability": "cve-2026-8263", "sightings": [{"uuid": "9c2aba20-e448-4f12-988a-f6f22477f6fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82635", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117187654741820984", "content": "It is possible to see elevated activities targeting tw93 Pake (CVE-2026-82635) https://vuldb.com/vuln/397137/cti", "creation_timestamp": "2026-08-31T02:01:44.790768Z"}, {"uuid": "0aa87578-b973-430c-8eac-fd52f4b5e67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8263", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlkbgzpusz2i", "content": "CVE-2026-8263 - Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection\nCVE ID : CVE-2026-8263\n \n Published : May 11, 2026, 2:16 a.m. | 13\u00a0minutes ago\n \n Description : A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the fun...", "creation_timestamp": "2026-05-11T02:53:30.777963Z"}, {"uuid": "922a93b1-ce86-474a-a7ec-609868fd78b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82635", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117185534259955884", "content": "CVE-2026-82635 - Path Traversal in Pake allows arbitrary file write via unsanitized download paths. CVSS 8.8. Update to 3.13.1 now. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-82635/", "creation_timestamp": "2026-08-30T17:02:44.911162Z"}, {"uuid": "bbc153ee-c86d-4610-be18-369c5160fb1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82636", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mucyfq3wqy2q", "content": "CVE-2026-82636 - OS Command Injection in Qubes OS via qvm-copy-to-vm error handling. CVSS 7.9. Update qubes-core-dom0-linux immediately. #CVE #QubesOS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-82636/", "creation_timestamp": "2026-08-30T18:09:50.172022Z"}, {"uuid": "fa311665-daf9-4a28-b220-603f26c8535c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82636", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117185799103540233", "content": "CVE-2026-82636 - OS Command Injection in Qubes OS via qvm-copy-to-vm error handling. CVSS 7.9. Update qubes-core-dom0-linux immediately. #CVE #QubesOS #infosec\nhttps://www.valtersit.com/cve/CVE-2026-82636/", "creation_timestamp": "2026-08-30T18:09:53.081711Z"}, {"uuid": "fd20cbf8-b2dc-48fe-81f2-695cf9dbb22c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82631", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-82631", "content": "", "creation_timestamp": "2026-08-31T12:15:05.798921Z"}, {"uuid": "a91e00cb-a9bd-469f-9f4b-c63f81803f2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-82630", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-82630", "content": "", "creation_timestamp": "2026-08-31T12:15:08.038076Z"}, {"uuid": "6dfa52fe-4e4d-4675-8580-89aee2205010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82635", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mucunbyiax2q", "content": "CVE-2026-82635 - Path Traversal in Pake allows arbitrary file write via unsanitized download paths. CVSS 8.8. Update to 3.13.1 now. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-82635/", "creation_timestamp": "2026-08-30T17:02:29.064047Z"}, {"uuid": "ed5f514f-9c8c-4980-a209-981583288103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82639", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6b6wrqyyh2aox", "content": "CVE-2026-82639 - NextChat 2.15.8 through 2.16.1 OpenAI API Key Disclosure\nCVE ID : CVE-2026-82639\n \n Published : Aug. 30, 2026, 1:23 p.m. | 45\u00a0minutes ago\n \n Description : NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the prox...", "creation_timestamp": "2026-08-30T14:20:47.742223Z"}, {"uuid": "1a343f1a-d6f9-4836-8150-43986df05b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82635", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muckiohpiq2b", "content": "\ud83d\udfe0 CVE-2026-82635 - High (8.8)\n\nPake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command ont...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82635/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T14:00:57.896430Z"}, {"uuid": "94dda1b3-5e6b-49da-9dd9-fee1d7f1f900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82636", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucnuh3gnn2z", "content": "\ud83d\udfe0 CVE-2026-82636 - High (7.9)\n\nQubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82636/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T15:01:13.463342Z"}, {"uuid": "fba1f0cd-4667-4319-b093-4ac2a2ac6790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82638", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucnvrremf2z", "content": "\ud83d\udfe0 CVE-2026-82638 - High (7.5)\n\njina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unau...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82638/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T15:01:58.000748Z"}, {"uuid": "76a5058c-cfe6-4fe0-8b9a-4433f0586520", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82639", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mucnvypkfo2u", "content": "\ud83d\udfe0 CVE-2026-82639 - High (7.5)\n\nNextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-82639/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-30T15:02:05.593977Z"}, {"uuid": "cbb5557e-cbd8-466a-9bf6-252e3c952d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82633", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mumkx6dhng27", "content": "[26.05] dolibarr: fix CVE-2026-81728 and CVE-2026-82633\n\nhttps://github.com/NixOS/nixpkgs/pull/558698\n\n#security", "creation_timestamp": "2026-09-03T13:35:40.633995Z"}, {"uuid": "daa36143-32d7-43b5-96a9-d60262869780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82635", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muqnryzvtp2u", "content": "\ud83d\udccc CVE-2026-82635 - Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command onto the user's Downloads directory with no sanitization... https://www.cyberhub.blog/cves/CVE-2026-82635", "creation_timestamp": "2026-09-05T04:37:07.677600Z"}]}