{"vulnerability": "cve-2026-8926", "sightings": [{"uuid": "694b1b25-7501-40fd-a5dd-2a310630690a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8926", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprim5aug32n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8926 \u0432 curl: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 .netrc \u0444\u0430\u0439\u043b\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/35EA718C-CD6D-48F7-B0E1-39D3D071359D", "creation_timestamp": "2026-07-03T21:31:05.736331Z"}, {"uuid": "4d5fde27-34cc-478a-b275-59aa8a1d2ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8926", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvac3awi2t25", "content": "CVE-2026-8926 - curl\nCurl incorrectly retrieves passwords from .netrc files when a username is specified in the URL. This can expose passwords for the wrong user if multiple users are configured for\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#curl #alpine #Ubuntu2510 #CVE #infosec", "creation_timestamp": "2026-09-11T09:50:08.715066Z"}, {"uuid": "55f0ec32-3fb3-4b96-b5fe-00fdd426017e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89262", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5ryrbzc5x73be", "content": "CVE-2026-89262 - MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check\nCVE ID : CVE-2026-89262\n \n Published : 11. September 2026 16:17 | 39\u00a0Minuten ago\n \n Description : MoguBlog through 6.2 contains an authorization bypass vulnerability in the commen...", "creation_timestamp": "2026-09-11T17:00:00.859166Z"}, {"uuid": "0e2858e6-3b71-4cd2-90d3-bffe82935746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89260", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvb25lrd622r", "content": "\ud83d\udfe0 CVE-2026-89260 - High (7.5)\n\nMoguBlog through 6.2 contains an XML external entity injection vulnerability in the WeChat callba...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89260/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T17:01:02.358803Z"}, {"uuid": "95c11397-0d6d-4505-a5df-a482500f821b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89262", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvb25syizs2m", "content": "\ud83d\udfe0 CVE-2026-89262 - High (7.5)\n\nMoguBlog through 6.2 contains an authorization bypass vulnerability in the comment deletion endpo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89262/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T17:01:07.148710Z"}, {"uuid": "2698fd7b-f893-41b3-91e2-72dcc0c2c05c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89260", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dsda2gwjnlejy", "content": "CVE-2026-89260 - MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint\nCVE ID : CVE-2026-89260\n \n Published : 11. September 2026 16:17 | 39\u00a0Minuten ago\n \n Description : MoguBlog through 6.2 contains an XML external entity injection ...", "creation_timestamp": "2026-09-11T17:06:32.458722Z"}, {"uuid": "3da09db5-d1af-40c4-bf48-0d79717a3c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89266", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvbuw5vi5k2v", "content": "\ud83d\udfe0 CVE-2026-89266 - High (8.2)\n\nstb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook mul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-89266/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T01:00:02.203066Z"}, {"uuid": "bdf9a1e6-54fc-4df6-9e6f-e16e7f78b6c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89266", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g4lusr4jim5zw", "content": "CVE-2026-89266 - stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands\nCVE ID : CVE-2026-89266\n \n Published : Sept. 12, 2026, 12:17 a.m. | 42\u00a0minutes ago\n \n Description : stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the cod...", "creation_timestamp": "2026-09-12T01:40:01.554400Z"}, {"uuid": "76d3a14b-db41-434f-b375-39924159d984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89266", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvca5pazsf2n", "content": "stb_vorbis 1.22\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u30b3\u30fc\u30c9\u30d6\u30c3\u30af\u4e57\u6570\u5272\u308a\u5f53\u3066\u30b5\u30a4\u30ba\u304cint\u306b\u5207\u308a\u6368\u3066\u3089\u308c\u308b\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u3002\u60aa\u610f\u306e\u3042\u308bOgg Vorbis\u30d5\u30a1\u30a4\u30eb\u3067\u3001\u30d7\u30ed\u30bb\u30b9\u30af\u30e9\u30c3\u2026\nCVE-2026-89266 CVSS 8.2 | HIGH", "creation_timestamp": "2026-09-12T04:21:02.745876Z"}, {"uuid": "d95db312-5169-44a3-881c-f2b36a4fb49c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89266", "type": "seen", "source": "https://gist.github.com/ichintu/4112015d623e1740e33503b5788e1512", "content": "On September 12, 2026, two vulnerabilities were disclosed: **CVE-2026-87719** (Critical, 9.9) affects GitLab EE (18.3\u201319.3.1), where crafted GraphQL arguments bypass deserialization, allowing authenticated Duo Chat users to extract sensitive instance configurations and credentials. **CVE-2026-89266** (High, 8.8) impacts stb_vorbis \u22641.22, where an integer truncation flaw in `start_decoder()` enables heap buffer overflows via malicious Ogg Vorbis files, leading to application crashes and memory corruption.", "creation_timestamp": "2026-09-12T04:02:16.973383Z"}]}