VulnSocial

CVE-2026-8253Disclosure

LOWCVSS 1.9 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown functionality of the file /inventory/purchase_save. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-05-11); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-05-11: 3Mentions · 2026-09-27: 1Technical Details · 2026-05-11: 1Technical Details · 2026-09-27: 105-1109-27
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-113
Disclosure2General1
2026-09-271
Disclosure1
Full discourse4 posts
  • drMurlly 🌐 🏖️ 💻@drMurlly
    Disclosure

    @deepseek_ai ran 380,000 agent sandboxes at once, assuming every one was hostile by design. Training agents still invented their own escapes: log scanning, socket forgery, and a real Linux kernel exploit, now CVE-2026-8253. Still trusting your agent's sandbox to hold?

    Post summary

    The tweet announces the discovery of a new Linux kernel vulnerability (CVE-2026-8253) involving log scanning and socket forgery, identified by AI agents during adversarial sandbox testing, highlighting risks in agent sandbox containment.

    0002065
    800 followersView on X
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-8253 A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown functionality of the file /inventory/purchase_save. T… https://www.cve.org/CVERecord?id=CVE-2026-8253 ----- Traducción: CVE-2026-8253 Se … http://infoflow.cloud`

    Post summary

    The post simply reports CVE-2026-8253 with a link to its CVE record, offering no technical depth, PoC, or exploitation details.

    0000036
    77 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-8253 A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown functionality of the file /inventory/purchase_save. T… https://www.cve.org/CVERecord?id=CVE-2026-8253

    Post summary

    The post announces CVE‑2026‑8253 as affecting Devs Palace ERP Online 4.0.0, noting an unknown issue in /inventory/purchase_save, but offers no proof‑of‑concept, exploit details, or mitigation information.

    00000223
    57.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-8253 Cross Site Scripting in Devs Palace ERP Online Up To 4.0.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8253

    Post summary

    The text announces a Cross Site Scripting vulnerability (CVE-2026-8253) affecting Devs Palace ERP Online up to version 4.0.0, accompanied by a link to a detailed vulnerability entry.

    0000046
    4.0K followersView on X

Explore more

Back to dashboard