{"vulnerability": "cve-2026-8508", "sightings": [{"uuid": "42e9af35-1b9c-4514-b121-73b8b1fa802f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8508", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117036637521846673", "content": "Attention, elevated activities detected targeting Zyxel WAX650S (CVE-2026-8508) https://vuldb.com/vuln/385743/cti", "creation_timestamp": "2026-08-04T09:56:12.086487Z"}, {"uuid": "88a262a8-1caf-4131-9105-e499888a6361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8508", "type": "seen", "source": "Telegram/2uUwMFxsoKh_D8GaE8ocpIxirsxPfGRgU4xV4XjnGV-coGw", "content": "", "creation_timestamp": "2026-08-17T18:00:04.992432Z"}, {"uuid": "8913189c-930f-4063-bda4-9145ab8fbde0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8508", "type": "seen", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "content": "", "creation_timestamp": "2026-08-17T18:00:05.271661Z"}, {"uuid": "c110dc67-2807-4b0d-8847-8c9b4e8f2b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8508", "type": "published-proof-of-concept", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "content": "", "creation_timestamp": "2026-08-18T00:00:11.043347Z"}, {"uuid": "3ffb078c-7f45-4725-89b4-598bf3f6c843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8508", "type": "published-proof-of-concept", "source": "Telegram/2uUwMFxsoKh_D8GaE8ocpIxirsxPfGRgU4xV4XjnGV-coGw", "content": "", "creation_timestamp": "2026-08-18T00:00:11.330196Z"}, {"uuid": "6a128bd5-217d-4035-b679-d73a240ad7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8508", "type": "seen", "source": "https://t.me/GithubRedTeam/98353", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a zyxel-social-login-bypass-cve-2026-8508\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a minanagehsalalma\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-16 17:45:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic writeup, PoC, and emulation materials for CVE-2026-8508 affecting Zyxel captive-portal social login.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:09.511939Z"}, {"uuid": "9d634dc9-c5da-4838-8ee5-42c126c0c890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8508", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98353", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a zyxel-social-login-bypass-cve-2026-8508\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a minanagehsalalma\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-16 17:45:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic writeup, PoC, and emulation materials for CVE-2026-8508 affecting Zyxel captive-portal social login.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:10.669726Z"}, {"uuid": "2b89a2e7-c43b-4613-99c2-a2a89acf5bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8508", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mtvx6d4asc2j", "content": "CVE-2026-8508: Trust-Boundary Bypass in Zyxel social_login.cgi Facebook Identity Handling", "creation_timestamp": "2026-08-25T13:43:11.465494Z"}, {"uuid": "13245226-b1db-4ba9-bbb8-6bf276168c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8508", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/191954", "content": "I found this while reversing Zyxel's WAX650S firmware and following the guest Wi-Fi social-login path. The backend trusted browser-submitted Facebook identity fields instead of validating the access token server-side, letting a crafted request skip the social-authentication gate entirely. The write-up covers the bug itself, how I traced it, and the full firmware-emulation setup I used to reproduce it without the physical AP.    submitted by    /u/TheReedemer69  (https://www.reddit.com/user/TheReedemer69) \n [link] (https://minanagehsalalma.github.io/zyxel-social-login-bypass-cve-2026-8508/)   [comments] (https://www.reddit.com/r/Pentesting/comments/1vy0pnj/i_found_a_preauth_captiveportal_bypass_in_zyxel/)", "creation_timestamp": "2026-09-01T20:00:04.450808Z"}, {"uuid": "82a5bce9-af05-4a49-9526-eef521f3b4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8508", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/191953", "content": "I Found a Pre-Auth Captive-Portal Bypass in Zyxel Enterprise APs. Here's How I Emulated the Firmware for CVE-2026-8508\nhttps://www.reddit.com/r/Pentesting/comments/1vy0pnj/i_found_a_preauth_captiveportal_bypass_in_zyxel/", "creation_timestamp": "2026-09-01T20:00:04.496341Z"}, {"uuid": "b3d86bcc-7d54-4c27-9cd7-bed99f33e076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85089", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6gne2scotqcce", "content": "CVE-2026-85089 - FreeRDP Information Disclosure Vulnerability\nCVE ID : CVE-2026-85089\n \n Published : Sept. 3, 2026, 2:20 a.m. | 57\u00a0minutes ago\n \n Description : FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save Session Info PDU res...", "creation_timestamp": "2026-09-03T03:45:29.113879Z"}, {"uuid": "61929765-a537-49c1-9a2e-ef0762fdeb6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85085", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muoinysgzd2t", "content": "CVE-2026-85085\nVersions of the Canva app for Android earlier than 2.376.0 display web pages in a component that has extra permissions. If a user opens a malicious page, the attacker can communicate with the app using the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-04T08:00:04.514986Z"}, {"uuid": "83c83f61-6e5f-4543-8444-ea1fa88c2f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85085", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muoiouho3l2q", "content": "\ud83d\udd34 CVE-2026-85085 - Critical (9.6)\n\nThe Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebV...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-85085/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T08:00:33.754711Z"}, {"uuid": "df2f0a9e-2459-462e-9879-1e285910d674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85085", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3muoiov3rrw2y", "content": "\ud83d\udd34 CVE-2026-85085 - Critical (9.6)\n\nThe Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebV...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-85085/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T08:00:34.347654Z"}, {"uuid": "37c8793c-8812-49a6-8d66-7c4fb7a19bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85085", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muoj4n7q3d2m", "content": "\ud83d\udea8 CVE-2026-85085 \u2014 CVSS 9.6 CRITICAL\n\nThe Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView. A thr...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85085\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T08:08:15.751362Z"}, {"uuid": "460e4fc3-a55c-4e9e-be9b-a1048494d3da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85083", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3muzssabun52n", "content": "~Cisa~\nHard-coded bootloader credentials enable physical attackers to fully compromise affected cameras.\n-\nIOCs: CVE-2026-85083\n-\n#CVE202685083 #IoT #ThreatIntel", "creation_timestamp": "2026-09-08T20:00:41.046902Z"}, {"uuid": "97d20a00-90da-43c3-a9b4-b3d40fa0780a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-85083", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-251-01", "content": "", "creation_timestamp": "2026-09-08T16:15:04.247635Z"}, {"uuid": "ca3d1d2d-0050-4420-9498-c6103c5a2f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85083", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117241572395960124", "content": "\ud83d\udcf0 CISA Warns of Hard-Coded Credential in CareCam Pro IP Cameras\nCISA issues an ICS advisory for CareCam Pro IP cameras (CVE-2026-85083), warning of a hard-coded credential. The flaw allows an attacker with physical access to gain full control of the device. The vendor has not responded. #ICS #Vulnerability #IoT\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-warns-hard-coded-credential-in-carecam-pro-ip-cameras/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-09T14:33:45.814526Z"}, {"uuid": "a988f4a8-b4d4-452a-9d69-0262dc424645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85083", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mv3qzbqhuy2c", "content": "CISA issues an ICS advisory for CareCam Pro IP cameras (CVE-2026-85083), warning of a hard-coded credential. The flaw allows an attacker with physical access to gain full control of the device. The vendor has not responded. #ICS #Vulnerability #IoT\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-09T14:34:09.980411Z"}, {"uuid": "6683a24e-a161-42dc-a7b9-9ec1ebca2d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85082", "type": "seen", "source": "https://gist.github.com/ichintu/cef2c12046d7246fbad5e72900e0d2df", "content": "Today\u2019s threat intelligence digest highlights four notable vulnerabilities:\n\n\u2022 **macOS TCC Bypass:** CDC/ACM serial interfaces can circumvent macOS Transparency, Consent, and Control (TCC) security restrictions, granting unauthorized access to protected resources.  \n\u2022 **pfSense LFI (CVE-2026-97730, HIGH/8.5):** A flaw in dashboard widget sequence handling allows local file inclusion, enabling arbitrary PHP execution (requires authentication and dashboard modification privileges).  \n\u2022 **Argus Monitor DoS (CVE-2026-79417):** A local IOCTL vulnerability exploits a TOCTOU race condition to disable x86 `MONITOR`/`MWAIT` instructions, triggering `HYPERVISOR_ERROR` bugchecks in Hyper-V and kernel components.  \n\u2022 **Root Browser Classic Injection (CVE-2026-85082, HIGH/8.5):** Unsafe passing of SQLite database paths to the OS shell enables command injection due to improper filename/command separation.  \n\nAll entries include technical write-ups, CVSS metrics, and proof-of-concept resources for further analysis.", "creation_timestamp": "2026-09-25T04:00:27.000000Z"}]}