{"vulnerability": "cve-2026-8670", "sightings": [{"uuid": "2dd26ef4-e2fd-4f3d-a809-c8a5f9dbceb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-86701", "type": "seen", "source": "https://jvn.jp/en/jp/JVN72918755", "content": "", "creation_timestamp": "2026-09-15T08:45:02.294769Z"}, {"uuid": "3be0a4b2-6235-4654-adaf-99141d9621ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8670", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhi3pvwkx2e", "content": "CVE-2026-8670 - Insecure session handling on metrics web server\nCVE ID : CVE-2026-8670\n \n Published : May 22, 2026, 1:12 p.m. | 3\u00a0hours, 47\u00a0minutes ago\n \n Description : Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusin...", "creation_timestamp": "2026-05-22T17:39:40.494854Z"}, {"uuid": "892c50c1-7144-4d46-b4ea-993bd8517234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8670", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnd3fohtxx24", "content": "\ud83d\udccc CVE-2026-8670 - Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay).\n\nThis ... https://www.cyberhub.blog/cves/CVE-2026-8670", "creation_timestamp": "2026-06-02T17:07:08.040144Z"}, {"uuid": "3b18bbcb-6253-48f7-aca5-3470fb5ff7dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8670", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mnjyex2nzg27", "content": "\u3010\u7dca\u6025\u3011CVE-2026-8670 Avantra\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff5c\u5373\u6642\u5bfe\u5fdc\u304c\u5fc5\u8981\n\nCVE-2026-8670 \u3053\u306e\u8106\u5f31\u6027\u306f\u3001Linux\u304a\u3088\u3073Windows\u4e0a\u306esyslink software AG Avantra\u306b\u304a\u3051\u308b\u30bb\u30c3\u30b7\u30e7\u30f3\u306e\u6709\u52b9\u671f\u9650\u304c\u4e0d\u5341\u5206\u3067\u3042\u308b\u3053\u3068\u306b\u8d77\u56e0\u3057\u3001", "creation_timestamp": "2026-06-05T11:01:40.710641Z"}, {"uuid": "03b491fb-1127-4700-baf1-ab74a6be142e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86707", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvpowl7alu2n", "content": "CVE-2026-86707 - private feed key\nThe Private Feed Key WordPress plugin does not properly verify the key that authenticates feed requests, so an unauthenticated person can pretend to be any user, even an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-09-17T12:50:06.255478Z"}, {"uuid": "cd2bfdd1-e6de-47c6-b494-20b79505585a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86709", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvpown7btu2r", "content": "CVE-2026-86709 - the pressengine\nThe Pressengine add\u2011on for WordPress can create a login session even when the password is wrong. This means someone without credentials could sign in as any account,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#thepressengine #unknown #CVE #infosec", "creation_timestamp": "2026-09-17T12:50:08.688744Z"}, {"uuid": "bc39da27-cd29-470e-8345-3b8955a53038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86708", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw74qrl2xm2r", "content": "\ud83d\udea8 CVE-2026-86708 \u2014 CVSS 10 CRITICAL\n\nZohoCorp ManageEngine Applications Manager versions 182200 and below were vulnerable to exposure of a Googl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86708\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-23T16:07:19.837384Z"}, {"uuid": "e633a3e6-be0d-46a2-a822-d1971eca594e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86708", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw7w2e252j2u", "content": "CVE-2026-86708 - manageengine applications manager\nVersions 182200 and earlier of ManageEngine Applications Manager can unintentionally include a Google Cloud service\u2011account private key in the installation package.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zohocorp #CVE #infosec", "creation_timestamp": "2026-09-23T23:40:04.654022Z"}]}