Free Posture Self-Check

Back to Cyber Hose

ShinyHunters Claims Hack of ReliaQuest Without Providing Proof

ShinyHunters claims a breach of security firm ReliaQuest without proof, plus two critical justhtml sanitization bypass CVEs rated CVSS 9.3.

2026-08-23 17:49 UTC

💥 BREACHES & INCIDENTS

ShinyHunters Claims Hack of ReliaQuest Without Providing Proof
ShinyHunters has claimed it hacked security firm ReliaQuest.
- The claim targets US-based security firm ReliaQuest.
- ShinyHunters alleges it breached ReliaQuest but has not published evidence.
- The claim appeared in a dark-web listing criticizing ReliaQuest’s reporting.
Sources 📎 Coverage: databreaches.net · 👁 via @campuscodi@mastodon.social

🔓 CVEs & KEV

CVE-2026-5388 — CVSS 9.3 — justhtml Critical Sanitization Bypass (CVE-2026-5388)
CVE-2026-8445 — CVSS 9.3 — justhtml Sanitizer Bypass to XSS (CVE-2026-8445)

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check