{"vulnerability": "cve-2026-8806", "sightings": [{"uuid": "04fb2da7-57c3-4ffd-9637-a3acc0e71a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8806", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-06", "content": "", "creation_timestamp": "2026-06-18T05:00:00.000000Z"}, {"uuid": "9131a727-9372-4345-8d73-f9c87a122ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3momgpageit2x", "content": "CVE-2026-8806 - Denial-of-service (DoS) vulnerability in MELSEC iQ-F Series FX5-ENET/IP Ethernet module\nCVE ID : CVE-2026-8806\n \n Published : June 19, 2026, 2:31 a.m. | 38\u00a0minutes ago\n \n Description : Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F...", "creation_timestamp": "2026-06-19T03:48:29.393879Z"}, {"uuid": "926a3ceb-7b53-4bcf-94aa-fcdcdae93816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88069", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4ofosx6i2t", "content": "CVE-2026-88069 - pandora\nPandora\u2019s archive\u2011extraction component may place files in any location on the system if a specially crafted archive is submitted. This could let an attacker overwrite\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pandora #pandoraanalysis #CVE #infosec", "creation_timestamp": "2026-09-09T23:20:04.370341Z"}, {"uuid": "f2e747ee-1adc-410c-b593-b045918db0cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88069", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117244154620572346", "content": "CVE-2026-88069: Path traversal in pandora-analysis pandora (<=1.12.7) allows attackers to overwrite system/app files via crafted archives. Severity: CRITICAL (CVSS 9.3). No patch confirmed \u2014 monitor vendor updates. https://radar.offseq.com/threat/cve-2026-88069-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-87b56121b9b3446f #OffSeq #CVE202688069 #vuln #infosec", "creation_timestamp": "2026-09-10T01:30:25.525615Z"}, {"uuid": "b2157d7a-0ac4-4845-bb1d-b92df322777c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-88069", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv4vosrrj52b", "content": "Path traversal (CVE-2026-88069) in pandora-analysis pandora <=1.12.7 (CRITICAL, CVSS 9.3) lets attackers overwrite files outside extraction dir. Patch status unknown \u2014 review vendor advisories. https://radar.offseq.com/threat/cve-2026-88069-cwe-22-improper-limitation-of-a-pathname-to-a-restricted...", "creation_timestamp": "2026-09-10T01:30:27.502444Z"}, {"uuid": "18447387-3532-4eb1-a5ae-5464a98d3a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88069", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv4xqgmwb72w", "content": "\ud83d\udea8 CVE-2026-88069 \u2014 CVSS 9.3 CRITICAL\n\nPandora contains a path traversal vulnerability in its archive extraction worker. When processing a special...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88069\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T02:07:08.569018Z"}, {"uuid": "971102fc-4569-4d4a-8c69-e84f5b664954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88062", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv72tqjxvr2t", "content": "\ud83d\udea8 CVE-2026-88062 \u2014 CVSS 9.5 CRITICAL\n\nOmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88062\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T22:08:00.188606Z"}, {"uuid": "643d74a0-d9d0-4927-b395-0e9125fb930c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88060", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv72xhjqk72f", "content": "CVE-2026-88060 - platform-server\nWhen a website built with Angular renders user\u2011provided content on the server, certain hidden tags (like  or ) can fail to block malicious code.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#platformserver #angular #npm #CVE #infosec", "creation_timestamp": "2026-09-10T22:10:05.210251Z"}, {"uuid": "d3468705-9b27-453b-8f56-34f3aa7f4681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88062", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv72xjylga2y", "content": "CVE-2026-88062 - omniroute\nVersions of OmniRoute up to 3.8.49 let anyone send specially crafted requests to the custom\u2011agent endpoint that cause the server to run any command they choose. This can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#omniroute #diegosouzapw #CVE #infosec", "creation_timestamp": "2026-09-10T22:10:07.557826Z"}, {"uuid": "f9c76c88-7a7b-446f-8b87-cc4854192bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88062", "type": "published-proof-of-concept", "source": "https://github.com/diegosouzapw/OmniRoute/security/advisories/GHSA-hf57-cqmx-p4gr", "content": "", "creation_timestamp": "2026-09-10T22:35:07.902341Z"}, {"uuid": "23723852-f7a0-4d27-980a-ef4ea569fd6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88060", "type": "published-proof-of-concept", "source": "https://github.com/angular/angular/security/advisories/GHSA-v3p8-whq6-r5jg", "content": "", "creation_timestamp": "2026-09-10T22:35:14.380899Z"}, {"uuid": "e6a3a260-ed4c-4180-8094-ec4bda99d213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88062", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mva5mzib2t26", "content": "A critical CVSS 9.5 OmniRoute RCE flaw (CVE-2026-88062) has public PoC exploit code available. Upgrade your AI gateway immediately to prevent compromises.\n\n#OmniRoute #CVE202688062 #CyberSecurity #InfoSec #RCE", "creation_timestamp": "2026-09-11T08:30:36.439018Z"}, {"uuid": "2603625f-cc30-419f-aac6-0f7067fd762c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88062", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvitqf7bko2r", "content": "CVE-2026-88062 is trending. Hype score 11, currently #7 on cvemon.\n\nOmniRoute is an open-source AI gateway providing a single endpoint for multiple model providers. In 3.8.49 and earlier, the OmniRoute POST /api/acp/agents custom ACP agent endpoint\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-88062", "creation_timestamp": "2026-09-14T19:27:28.766600Z"}]}