{"vulnerability": "cve-2026-8285", "sightings": [{"uuid": "d87f18fb-cade-4fdf-a37b-2069fd685dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8285", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr5ylmaf242q", "content": "CVE-2026-8285 - OTP Bypass in Universal Sotware's FlexCity\nCVE ID : CVE-2026-8285\n \n Published : July 21, 2026, 1:17 p.m. | 27\u00a0minutes ago\n \n Description : Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excess...", "creation_timestamp": "2026-07-21T14:14:13.726329Z"}, {"uuid": "b052afc6-abb0-4c29-bed7-6924c0ff1a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muemf4tokp2y", "content": "CVE-2026-82854 - nodemailer\nIf your system uses Nodemailer versions older than 8.0.4 and lets users influence the email envelope size, an attacker can embed line\u2011break characters that cause extra mail commands to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nodemailer #CVE #infosec", "creation_timestamp": "2026-08-31T09:40:04.187809Z"}, {"uuid": "50eb2e22-adf5-429a-bf7c-bfa3229d36eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82855", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muemwztzvr24", "content": "CVE-2026-82855 - policies\nVersions of the Hulumi Policies library released before 1.3.2 can be tricked into accepting unrelated, but apparently compliant, proof that a rule was followed. This lets a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#policies #hulumi #CVE #infosec", "creation_timestamp": "2026-08-31T09:50:05.214333Z"}, {"uuid": "e0a8f3fb-2ed7-43d5-9b1f-1e5935dd3216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82856", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muemx3wk4b2p", "content": "CVE-2026-82856 - policies\nVersions of the Hulumi policies package older than 1.3.2 do not correctly verify certain AWS permission rules used in GitHub OpenID Connect (OIDC) trust settings. This allows a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#policies #hulumi #CVE #infosec", "creation_timestamp": "2026-08-31T09:50:07.302179Z"}, {"uuid": "0967a344-a913-4cae-a5cb-7c6790505ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82857", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mueniwgefj25", "content": "CVE-2026-82857 - hulumi\nVersions of Hulumi released before 1.3.2 allow a user with certain permissions to add or change roles that control access to resources, without proper limits. This means an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hulumi #kerberosmansour #CVE #infosec", "creation_timestamp": "2026-08-31T10:00:05.747042Z"}, {"uuid": "458754a3-2697-480d-b991-6acc5915e99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82858", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muenixwa5r2m", "content": "CVE-2026-82858 - drift\nVersions of the @hulumi/drift package older than 1.3.2 can accept execution plans that come from outside sources without properly checking where they originated. This lets an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#drift #hulumi #CVE #infosec", "creation_timestamp": "2026-08-31T10:00:07.008465Z"}, {"uuid": "7847242f-f12a-495a-b867-ed3997d7b0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenvxe2542b", "content": "\ud83d\udea8 CVE-2026-82854 \u2014 CVSS 9.3 CRITICAL\n\nNodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size param...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82854\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:22.704574Z"}, {"uuid": "4c4f32da-3db5-4e44-b10e-fa49671e604a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82855", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenw7p7ra24", "content": "\ud83d\udea8 CVE-2026-82855 \u2014 CVSS 9.3 CRITICAL\n\n@hulumi/policies versions before 1.3.2 contain an evidence validation bypass vulnerability in Cloudflare an...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82855\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:31.728133Z"}, {"uuid": "e0bb7188-68f0-4451-ba4b-d5c7911cbdb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82856", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenwhmlrx2f", "content": "\ud83d\udea8 CVE-2026-82856 \u2014 CVSS 9.3 CRITICAL\n\n@hulumi/policies versions before 1.3.2 fail to properly validate set-qualified AWS IAM condition operators ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82856\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:39.801021Z"}, {"uuid": "17814c6d-f6c0-4a1d-97e2-0fb9ddab62ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82857", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenwpvjrw25", "content": "\ud83d\udea8 CVE-2026-82857 \u2014 CVSS 9.3 CRITICAL\n\nhulumi versions before v1.3.2 contain a privilege escalation vulnerability in the weekly integration IAM po...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82857\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:48.924980Z"}, {"uuid": "d735a3ee-41e4-40f8-a364-890e9b3d3528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82858", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenwyfc3625", "content": "\ud83d\udea8 CVE-2026-82858 \u2014 CVSS 9.3 CRITICAL\n\n@hulumi/drift versions before 1.3.2 accept externally supplied execute plans without sufficient provenance ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82858\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:57.422569Z"}, {"uuid": "46f82f6b-4ed1-4637-a335-40bee96a940d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82859", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenxbor562e", "content": "\ud83d\udea8 CVE-2026-82859 \u2014 CVSS 9.3 CRITICAL\n\nhulumi versions before v1.3.2 contain a deployment SCP template that allows tag-on-create bypasses for hulu...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82859\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:08:07.566018Z"}, {"uuid": "d7609cdf-c6f5-4335-ad22-71a2a58f7071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82859", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mueo2rqbtw2c", "content": "CVE-2026-82859 - hulumi\nIf you are using hulumi versions earlier than 1.3.2, the tool\u2019s default settings can be tricked into ignoring the limits you set on who can create or change resources. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hulumi #kerberosmansour #CVE #infosec", "creation_timestamp": "2026-08-31T10:10:04.836713Z"}, {"uuid": "c82121d5-1e7b-4df8-b3ee-745e34ccd6ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82854", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mueqv7t6m22f", "content": "Nodemailer \u306b SMTP\u30b3\u30de\u30f3\u30c9\u6ce8\u5165\u306e\u8106\u5f31\u6027\uff08CVE-2026-82854\uff09\u3002\n\n\u8a55\u4fa1\u306f\u958b\u767a\u5143\u304c CVSS 2.3 LOW\u3001NVD\u63b2\u8f09\u306e\u5024\u306f 9.8 CRITICAL \u3068\u5272\u308c\u3066\u3044\u307e\u3059\u3002\u65e2\u5b9a\u306eenvelope\u306b\u306f size \u304c\u542b\u307e\u308c\u306a\u3044\u305f\u3081\u3001\u591a\u304f\u306e\u30a2\u30d7\u30ea\u306f\u5f71\u97ff\u3092\u53d7\u3051\u307e\u305b\u3093\u3002\n\n\u5bfe\u51e6: sendMail \u306b size \u4ed8\u304d\u306e envelope \u3092\u6e21\u3057\u3066\u3044\u308b\u304b\u78ba\u8a8d\u3057\u30018.0.4\u4ee5\u964d\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\u3002\n\nforsmile.jp/articles/nod...", "creation_timestamp": "2026-08-31T11:00:39.108027Z"}]}