{"vulnerability": "cve-2026-8420", "sightings": [{"uuid": "a8e1d7a7-a8cc-462f-80d8-05e451b3fe56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84200", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/64xwwmhlajzwr", "content": "CVE-2026-84200 - Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions\nCVE ID : CVE-2026-84200\n \n Published : Sept. 1, 2026, 12:17 p.m. | 19\u00a0minutes ago\n \n Description : Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in e...", "creation_timestamp": "2026-09-01T12:48:22.328062Z"}, {"uuid": "70d1482e-8d4b-4e5b-8f27-2f0b7e0bcb4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84200", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muhhzphk7q2d", "content": "CVE-2026-84200 - kyverno\nVersions of Kyverno from 1.9.0 through 1.12.7 can be tricked into ignoring security rules when two exception entries are used together. An attacker can name a resource to match the less\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kyverno #CVE #infosec", "creation_timestamp": "2026-09-01T13:00:08.684269Z"}, {"uuid": "3490b9df-c534-4176-8b41-92309ea0bc5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84200", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muhlsibfol2w", "content": "\ud83d\udea8 CVE-2026-84200 \u2014 CVSS 9.4 CRITICAL\n\nKyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84200\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-01T14:07:37.823497Z"}, {"uuid": "d90a3b87-dc9f-4e3a-bb19-0c564725ded7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5ojuuzcjowe6x", "content": "CVE-2026-84202 - ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading\nCVE ID : CVE-2026-84202\n \n Published : Sept. 1, 2026, 3:18 p.m. | 44\u00a0minutes ago\n \n Description : ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allo...", "creation_timestamp": "2026-09-01T16:54:22.839096Z"}, {"uuid": "13c60d64-6e75-4cb7-b33b-af5ef91d03e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4vrr63jcuywb5", "content": "CVE-2026-84203 - Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Change\nCVE ID : CVE-2026-84203\n \n Published : Sept. 1, 2026, 3:18 p.m. | 44\u00a0minutes ago\n \n Description : Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user chan...", "creation_timestamp": "2026-09-01T17:00:23.099714Z"}, {"uuid": "d8d563c8-1155-4851-82d3-c8878796b16a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84202", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muhyucbzvn24", "content": "\ud83d\udfe0 CVE-2026-84202 - High (8.8)\n\nModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrar...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84202/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T18:01:27.721929Z"}, {"uuid": "f04dd47e-a2ea-4621-9330-5c2e75f8cf29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84208", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bhpcnouscr4ff", "content": "CVE-2026-84208 - AVideo User_Location Plugin Unauthenticated SQL Injection\nCVE ID : CVE-2026-84208\n \n Published : Sept. 1, 2026, 10:25 p.m. | 11\u00a0minutes ago\n \n Description : AVideo through version 29.0 contains an unauthenticated SQL injection vulnerability in the User_Locatio...", "creation_timestamp": "2026-09-01T22:42:24.190007Z"}, {"uuid": "09811f82-7350-43e5-804d-c4abc8328269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84208", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muj2yoou662x", "content": "AVideo v29.0\u306eUser_Location\u30d7\u30e9\u30b0\u30a4\u30f3\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3002\u8a8d\u8a3c\u306a\u3057\u3067DB\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u30cf\u30c3\u30b7\u30e5\u7b49\u3001\u6a5f\u5bc6\u60c5\u5831\u3092\u8aad\u307f\u53d6\u3089\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-84208 CVSS 7.5 | HIGH", "creation_timestamp": "2026-09-02T04:12:11.971899Z"}]}