{"metadata": {"vulnerability": "CVE-2025-54236", "count": 248, "kinds": {"milestone": 7, "sighting": 201, "kev": 17, "other": 23}}, "data": [{"timestamp": "2025-07-17T21:15:02.453Z", "date_only": false, "value": "2025-07-17T21:15:02.453Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-54236", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0284", "record": "NCSC-2025-0284", "field": "document.tracking.generator.date"}, {"timestamp": "2025-09-08T16:59:25.031Z", "date_only": false, "value": "2025-09-08T16:59:25.031391Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/konvis.bsky.social/post/3lydoi2rrqp22", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "1ccc84b8-965c-4357-8dd8-7db9befd2b67", "url": "https://bsky.app/profile/konvis.bsky.social/post/3lydoi2rrqp22"}, {"timestamp": "2025-09-08T22:00:00Z", "date_only": false, "value": "2025-09-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1999", "record": "WID-SEC-W-2025-1999", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-09-08T22:00:00Z", "date_only": false, "value": "2025-09-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1999", "record": "WID-SEC-W-2025-1999", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-09-08T22:00:00Z", "date_only": false, "value": "2025-09-08T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1999", "record": "WID-SEC-W-2025-1999", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-09-09T00:00:00Z", "date_only": true, "value": "2025-09-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0767", "record": "CERTFR-2025-AVI-0767", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-09-09T00:00:00Z", "date_only": false, "value": "2025-09-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0767", "record": "CERTFR-2025-AVI-0767", "field": "revisions.0.revision_date"}, {"timestamp": "2025-09-09T02:16:00.017Z", "date_only": false, "value": "2025-09-09T02:16:00.017257Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3lyenlco4q32x", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "6509cf6c-f640-436f-9942-652867ee3bea", "url": "https://bsky.app/profile/crowdcyber.bsky.social/post/3lyenlco4q32x"}, {"timestamp": "2025-09-09T12:24:58.024Z", "date_only": false, "value": "2025-09-09T12:24:58.024541Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/konvis.bsky.social/post/3lyfpm7wckm2p", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "6a470d58-6390-446a-846e-52b2d330929e", "url": "https://bsky.app/profile/konvis.bsky.social/post/3lyfpm7wckm2p"}, {"timestamp": "2025-09-09T13:20:17.939Z", "date_only": false, "value": "2025-09-09T13:20:17.939Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-54236", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-09-09T13:48:32Z", "date_only": false, "value": "2025-09-09T13:48:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/LouisdeLooze/5ac21a88ead57e747569cdb08bd60011", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "03e9d016-9ab1-4db6-bfb3-d4bd6e5e2a55", "url": "https://gist.github.com/LouisdeLooze/5ac21a88ead57e747569cdb08bd60011"}, {"timestamp": "2025-09-09T13:56:37.020Z", "date_only": false, "value": "2025-09-09T13:56:37.020495Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3lyfupwuxnc2l", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "a5a50d42-7083-4dfe-8554-cdbd10673377", "url": "https://bsky.app/profile/campuscodi.risky.biz/post/3lyfupwuxnc2l"}, {"timestamp": "2025-09-09T14:15:46Z", "date_only": false, "value": "2025-09-09T14:15:46Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WH92-6Q6G-PX7J", "record": "GHSA-WH92-6Q6G-PX7J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-09-09T14:15:46.563Z", "date_only": false, "value": "2025-09-09T14:15:46.563", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-54236", "record": "FKIE_CVE-2025-54236", "field": "published"}, {"timestamp": "2025-09-09T15:07:00.634Z", "date_only": false, "value": "2025-09-09T15:07:00.634828Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/konvis.bsky.social/post/3lyfynxwdte2k", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "be0b3b81-585c-4acf-b9bf-909147431890", "url": "https://bsky.app/profile/konvis.bsky.social/post/3lyfynxwdte2k"}, {"timestamp": "2025-09-09T15:31:19Z", "date_only": false, "value": "2025-09-09T15:31:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WH92-6Q6G-PX7J", "record": "GHSA-WH92-6Q6G-PX7J", "field": "published"}, {"timestamp": "2025-09-09T15:34:50.112Z", "date_only": false, "value": "2025-09-09T15:34:50.112Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / adobe", "record": "CVE-2025-54236", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-09T15:54:13.725Z", "date_only": false, "value": "2025-09-09T15:54:13.725941Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3lyg3cfttr223", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "953df5bb-fb1a-4730-ac63-7eae856df99b", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3lyg3cfttr223"}, {"timestamp": "2025-09-09T16:00:19.489Z", "date_only": false, "value": "2025-09-09T16:00:19.489880Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lyg3nc6lgv2r", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "1e7038e5-ad97-4267-9906-cfefdccf1e0e", "url": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lyg3nc6lgv2r"}, {"timestamp": "2025-09-09T16:03:44.613Z", "date_only": false, "value": "2025-09-09T16:03:44.613731Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3lyg3tfvrym2q", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "02f8734c-e11f-4a23-b3f0-7f8b4a285ae9", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3lyg3tfvrym2q"}, {"timestamp": "2025-09-09T16:21:19Z", "date_only": false, "value": "2025-09-09T16:21:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/22917", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "f6b03be2-bd35-450f-883b-afb7e258f9f0", "content": "\u200aAdobe patches critical SessionReaper flaw in Magento eCommerce platform\n\nAdobe is warning of a critical vulnerability (CVE-2025-54236) in its Commerce and Magento Open Source platforms that researchers call SessionReaper and describe\u00a0as one of\u00a0\" the most severe\" flaws in the history of the product. [...]\n\nhttps://www.bleepingcomputer.com/news/security/adobe-patches-critical-sessionreaper-flaw-in-magento-ecommerce-platform/", "url": "https://t.me/BleepingComputer/22917"}, {"timestamp": "2025-09-09T17:00:00Z", "date_only": false, "value": "2025-09-09T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2025-54236", "field": "containers.cna.datePublic"}, {"timestamp": "2025-09-09T22:00:00Z", "date_only": false, "value": "2025-09-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1999", "record": "WID-SEC-W-2025-1999", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-09-09T23:08:00Z", "date_only": false, "value": "2025-09-09T23:08:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/09/adobe-commerce-flaw-cve-2025-54236-lets.html", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "25976d43-f7bd-492b-a810-50de1175872b", "url": "https://thehackernews.com/2025/09/adobe-commerce-flaw-cve-2025-54236-lets.html"}, {"timestamp": "2025-09-10T01:18:01Z", "date_only": false, "value": "2025-09-10T01:18:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_News/8332", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "4e1df580-b85e-40a3-8e07-6ba870bc5eaa", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts\nLink: https://thehackernews.com/2025/09/adobe-commerce-flaw-cve-2025-54236-lets.html", "url": "https://t.me/DarkWebInformer_News/8332"}, {"timestamp": "2025-09-10T01:29:31Z", "date_only": false, "value": "2025-09-10T01:29:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/237742", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "d750fbba-c94e-45f5-96a3-adf0069aa82b", "content": "Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts\nhttps://ift.tt/rCUVDlp", "url": "https://t.me/ctinow/237742"}, {"timestamp": "2025-09-10T01:30:00.845Z", "date_only": false, "value": "2025-09-10T01:30:00.845984Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lyh3hybck52b", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "110d857e-ccb9-4490-a46e-6784928cebb4", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lyh3hybck52b"}, {"timestamp": "2025-09-10T01:30:28.912Z", "date_only": false, "value": "2025-09-10T01:30:28.912806Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lyh3it7unw2r", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "58c694be-02cc-40ab-90c7-7d8459f4b8b7", "url": "https://bsky.app/profile/infosecindustry.bsky.social/post/3lyh3it7unw2r"}, {"timestamp": "2025-09-10T01:30:42Z", "date_only": false, "value": "2025-09-10T01:30:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/7491", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "14d370a2-d750-433e-86e5-3906705f637a", "content": "\ud83d\udea8 Adobe just dropped a critical warning: a new Magento flaw, SessionReaper (CVE-2025-54236, 9.1/10), could let attackers hijack customer accounts via the REST API.\n\nIt\u2019s one of the worst Magento vulnerabilities in years.\n\nMerchants\u2014patch immediately \u2192 https://thehackernews.com/2025/09/adobe-commerce-flaw-cve-2025-54236-lets.html", "url": "https://t.me/thehackernews/7491"}, {"timestamp": "2025-09-10T02:00:07.687Z", "date_only": false, "value": "2025-09-10T02:00:07.687520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3lyh55sq5m32m", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "a6f8d9c9-40b9-41d5-a3eb-c010c91ffd4c", "url": "https://bsky.app/profile/techit.bsky.social/post/3lyh55sq5m32m"}, {"timestamp": "2025-09-10T02:09:10.317Z", "date_only": false, "value": "2025-09-10T02:09:10.317362Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lyh5nzewxq24", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "0d8e08cc-8da6-43eb-81d8-2fc33040ac3f", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lyh5nzewxq24"}, {"timestamp": "2025-09-10T02:18:28.917Z", "date_only": false, "value": "2025-09-10T02:18:28.917492Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lyh5yvypfii2", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "fad0389c-b282-4b14-b487-47754c94371b", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lyh5yvypfii2"}, {"timestamp": "2025-09-10T02:18:30.367Z", "date_only": false, "value": "2025-09-10T02:18:30.367954Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lyh5ziscqzg2", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "b9c9af9e-9824-41ea-b25e-d490fdc7a192", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lyh5ziscqzg2"}, {"timestamp": "2025-09-10T02:18:31.329Z", "date_only": false, "value": "2025-09-10T02:18:31.329951Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lyh5zvhmjei2", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "6cb7d6be-8e00-4fa0-aa53-7699b3e7c328", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lyh5zvhmjei2"}, {"timestamp": "2025-09-10T02:44:35.381Z", "date_only": false, "value": "2025-09-10T02:44:35.381334Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/checkoutpress.bsky.social/post/3lyh7nd5omi27", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "104fd16b-07cd-414f-925b-eb307113b39a", "url": "https://bsky.app/profile/checkoutpress.bsky.social/post/3lyh7nd5omi27"}, {"timestamp": "2025-09-10T02:57:05.215Z", "date_only": false, "value": "2025-09-10T02:57:05.215427Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lyhabg7qsog2", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "a1cde831-f00c-4a0b-9368-edc4a5feaf9d", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lyhabg7qsog2"}, {"timestamp": "2025-09-10T03:20:05.351Z", "date_only": false, "value": "2025-09-10T03:20:05.351796Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/checkoutpress.bsky.social/post/3lyhbmtbiai2c", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "72e43667-2ac8-4291-8d3c-16309bb48200", "url": "https://bsky.app/profile/checkoutpress.bsky.social/post/3lyhbmtbiai2c"}, {"timestamp": "2025-09-10T04:03:13Z", "date_only": false, "value": "2025-09-10T04:03:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/16045", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "5c656886-83c8-491d-a32d-6b30262c4f80", "content": "Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts \u2013 thehackernews.com\n\nWed, 10 Sep 2025 09:08:00", "url": "https://t.me/MalaysiaHacktivistz/16045"}, {"timestamp": "2025-09-10T04:03:13Z", "date_only": false, "value": "2025-09-10T04:03:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/34540", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "f83407da-f7b5-4d46-a666-86fa0d01698c", "content": "Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts \u2013 thehackernews.com\n\nWed, 10 Sep 2025 09:08:00", "url": "https://t.me/TengkorakCyberCrewzz/34540"}, {"timestamp": "2025-09-10T04:03:13Z", "date_only": false, "value": "2025-09-10T04:03:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/5170", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "e98942bc-15e5-4183-829d-fc7f69dc9d8c", "content": "Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts \u2013 thehackernews.com\n\nWed, 10 Sep 2025 09:08:00", "url": "https://t.me/TengkorakCyberCrewzz/5170"}, {"timestamp": "2025-09-10T07:02:59.125Z", "date_only": false, "value": "2025-09-10T07:02:59.125532Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lyho3fensk2v", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "bb9ad545-9b20-4dd4-a9df-d7afe6ee78d7", "url": "https://bsky.app/profile/shiojiri.com/post/3lyho3fensk2v"}, {"timestamp": "2025-09-10T07:05:29Z", "date_only": false, "value": "2025-09-10T07:05:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/v5nCmRJufvHWT81Wn9N_MbNSFxTx8bhvqbKOAjI8Dn7ygA", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "b7652d52-6e93-40e2-ad03-7e20144bb318"}, {"timestamp": "2025-09-10T07:20:08.308Z", "date_only": false, "value": "2025-09-10T07:20:08.308905Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lyhp22lnvb2v", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "c8ee7a90-376b-4350-8cab-2bb3c60eb54e", "url": "https://bsky.app/profile/cyberhub.blog/post/3lyhp22lnvb2v"}, {"timestamp": "2025-09-10T07:24:18Z", "date_only": false, "value": "2025-09-10T07:24:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/50972", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "d9988df4-63ec-4314-89a3-1056675dbdcf", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis is a tiny lab that simulates the core idea reported for CVE-2025-54236 (\u201cSessionReaper\u201d)\nURL\uff1ahttps://github.com/amalpvatayam67/day01-sessionreaper-lab\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/50972"}, {"timestamp": "2025-09-10T07:29:36Z", "date_only": false, "value": "2025-09-10T07:29:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/50973", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "52bd415c-25eb-45cd-a261-05ee5f12e392", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis is a tiny lab that simulates the core idea reported for CVE-2025-54236 (\u201cSessionReaper\u201d)\nURL\uff1ahttps://github.com/amalpvatayam67/day01-sessionreaper-lab\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/50973"}, {"timestamp": "2025-09-10T07:40:45.547Z", "date_only": false, "value": "2025-09-10T07:40:45.547293Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lyhq6mzep7y2", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "a24ddbc6-47b2-439f-95a2-2d4fa2ceda3e", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lyhq6mzep7y2"}, {"timestamp": "2025-09-10T08:32:41.701Z", "date_only": false, "value": "2025-09-10T08:32:41.701470Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3lyht3pffec2x", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "693da243-5ccd-4eeb-80f2-9e72399a5052", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3lyht3pffec2x"}, {"timestamp": "2025-09-10T08:36:08.794Z", "date_only": false, "value": "2025-09-10T08:36:08.794272Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3lyhtbuinfc2d", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "a95674e2-1459-4940-8d6b-44951b093b33", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3lyhtbuinfc2d"}, {"timestamp": "2025-09-10T08:38:12.419Z", "date_only": false, "value": "2025-09-10T08:38:12.419460Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/konvis.bsky.social/post/3lyhtfnzijc23", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "58092cdc-b0e1-4ed6-81dd-0ccacff645c7", "url": "https://bsky.app/profile/konvis.bsky.social/post/3lyhtfnzijc23"}, {"timestamp": "2025-09-10T09:45:58.903Z", "date_only": false, "value": "2025-09-10T09:45:58.903282Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3lyhx6trlfa2f", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "d1d55520-27dd-40ec-be18-92ccce309aa5", "url": "https://bsky.app/profile/ninjaowl.ai/post/3lyhx6trlfa2f"}, {"timestamp": "2025-09-10T10:49:56.787Z", "date_only": false, "value": "2025-09-10T10:49:56.787627Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0284", "record": "NCSC-2025-0284", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-09-10T10:49:56.787Z", "date_only": false, "value": "2025-09-10T10:49:56.787627Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0284", "record": "NCSC-2025-0284", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-09-10T10:49:56.787Z", "date_only": false, "value": "2025-09-10T10:49:56.787627Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0284", "record": "NCSC-2025-0284", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-09-10T10:59:46Z", "date_only": false, "value": "2025-09-10T10:59:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/canyoupwnme/7043", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "26196c29-0e4c-415b-831a-2b40f9782fc1", "content": "Adobe Issues Urgent Patch for \u2018SessionReaper\u2019 Vulnerability in Commerce and Magento\nhttps://thecyberexpress.com/adobe-commerce-flaw-cve-2025-54236/", "url": "https://t.me/canyoupwnme/7043"}, {"timestamp": "2025-09-10T11:43:43.111Z", "date_only": false, "value": "2025-09-10T11:43:43.111617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyi5rcdz622x", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "bfc1028d-a292-45f2-93b1-fb508954bdda", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyi5rcdz622x"}, {"timestamp": "2025-09-10T11:57:00.213Z", "date_only": false, "value": "2025-09-10T11:57:00.213876Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyi6izfazk2x", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "0c5e266e-7057-4195-a706-48cad9d450aa", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyi6izfazk2x"}, {"timestamp": "2025-09-10T12:35:20Z", "date_only": false, "value": "2025-09-10T12:35:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xakep_ru/18117", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "be2e7885-776f-4de9-b674-a7411ba85acb", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Adobe Commerce \u0438 Magento \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438\n\nAdobe \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0431\u0430\u0433\u0435 (CVE-2025-54236), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Commerce \u0438 Magento. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SessionReaper \u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0435\u0435 \u043a\u0430\u043a \u043e\u0434\u043d\u0443 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0437\u0430 \u0432\u0441\u044e \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432.\n\nhttps://xakep.ru/2025/09/10/sessionreaper/", "url": "https://t.me/xakep_ru/18117"}, {"timestamp": "2025-09-10T13:21:29Z", "date_only": false, "value": "2025-09-10T13:21:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hackyourmom/12575", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "db1cc96e-b700-45ff-961f-8827f6646878", "content": "\ud83d\udc68\u200d\ud83d\udcbb \u0423 Adobe Commerce \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0443 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c CVE-2025-54236 (SessionReaper) \u0437 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 9.1, \u0449\u043e \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u043f\u043b\u044e\u0432\u0430\u0442\u0438 \u0430\u043a\u0430\u0443\u043d\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 REST API. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0447\u0456\u043f\u0430\u0454 Adobe Commerce, Magento Open Source \u0442\u0430 \u043c\u043e\u0434\u0443\u043b\u044c Custom Attributes \ud83e\udd14 \u0411\u0456\u043b\u044c\u0448\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u0438\u0446\u044c \ud83d\udc48 #cybernews", "url": "https://t.me/hackyourmom/12575"}, {"timestamp": "2025-09-10T13:22:05.828Z", "date_only": false, "value": "2025-09-10T13:22:05.828324Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyidb7s4zc2x", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "d4d76ead-f6f3-43ba-af9d-d7d256b2ba3f", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyidb7s4zc2x"}, {"timestamp": "2025-09-10T13:42:06.738Z", "date_only": false, "value": "2025-09-10T13:42:06.738851Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3lyieeyliiu2o", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "4374ba02-282a-42d6-ba59-1f45ecc48b89", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3lyieeyliiu2o"}, {"timestamp": "2025-09-10T13:46:37.295Z", "date_only": false, "value": "2025-09-10T13:46:37.295306Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lyien5uyxc27", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "04e89337-84eb-4c5f-a37f-3469776359f2", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lyien5uyxc27"}, {"timestamp": "2025-09-10T15:00:07Z", "date_only": false, "value": "2025-09-10T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OMDVl8gS5gUQ6qEfIYNlECMto7wQsDPKKZTEhoS2tewKcQQ", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "8d047881-7fa6-4dc7-813a-7e8c6ca73180"}, {"timestamp": "2025-09-10T16:34:11.176Z", "date_only": false, "value": "2025-09-10T16:34:11.176092Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lyinyr6z5w22", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "78cd2b8e-3f0e-43ae-b051-0d3f7fcdc6ae", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lyinyr6z5w22"}, {"timestamp": "2025-09-10T17:45:14.965Z", "date_only": false, "value": "2025-09-10T17:45:14.965308Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intcyberdigest.bsky.social/post/3lyirxtjl5e2u", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "d91aa0a3-b6d6-4fe6-9ff1-fd59aec13106", "url": "https://bsky.app/profile/intcyberdigest.bsky.social/post/3lyirxtjl5e2u"}, {"timestamp": "2025-09-10T21:03:50.011Z", "date_only": false, "value": "2025-09-10T21:03:50.011539Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lyj52woo2n2h", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "512f776f-dc8a-4cf0-9d6a-23820a7f47d8", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lyj52woo2n2h"}, {"timestamp": "2025-09-10T22:08:18.305Z", "date_only": false, "value": "2025-09-10T22:08:18.305173Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lyjani5h57b2", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "0886d97b-d871-4f79-9faf-0d3b13d727f8", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lyjani5h57b2"}, {"timestamp": "2025-09-11T00:00:00Z", "date_only": true, "value": "2025-09-11", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-21417", "record": "CNVD-2025-21417", "field": "submitTime"}, {"timestamp": "2025-09-11T01:59:34.662Z", "date_only": false, "value": "2025-09-11T01:59:34.662749Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lyjnlrqf2s27", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "fef07a62-1d08-4d27-97c1-9dbffca2147d", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lyjnlrqf2s27"}, {"timestamp": "2025-09-11T02:12:14.122Z", "date_only": false, "value": "2025-09-11T02:12:14.122643Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lyjocg7tmb2f", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "aaeff1fd-7cbe-47fc-a44b-67ffade935b0", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lyjocg7tmb2f"}, {"timestamp": "2025-09-11T03:12:19.530Z", "date_only": false, "value": "2025-09-11T03:12:19.530743Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyjrntrmsc2v", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "4d16be0b-d1e5-4b09-89a3-c8d6d3d7158c", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lyjrntrmsc2v"}, {"timestamp": "2025-09-11T05:30:07.822Z", "date_only": false, "value": "2025-09-11T05:30:07.822052Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3lyjzebqeoq2o", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "64b0f3da-7992-4f7d-a714-d0e39efeb846", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3lyjzebqeoq2o"}, {"timestamp": "2025-09-11T10:58:38.260Z", "date_only": false, "value": "2025-09-11T10:58:38.260904Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/konvis.bsky.social/post/3lyklppdh4e2b", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "9a1b8d0e-e990-4c69-8dcc-51dce159ab2b", "url": "https://bsky.app/profile/konvis.bsky.social/post/3lyklppdh4e2b"}, {"timestamp": "2025-09-11T11:16:01.752Z", "date_only": false, "value": "2025-09-11T11:16:01.752978Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mwyr.es/post/3lykmorqtgp2h", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "5ea7548c-4925-4b37-a0a3-305dea3eb9ef", "url": "https://bsky.app/profile/mwyr.es/post/3lykmorqtgp2h"}, {"timestamp": "2025-09-11T13:49:15.760Z", "date_only": false, "value": "2025-09-11T13:49:15.760818Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redsiege.com/post/3lykvaqkix22z", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "ce1a0fc7-c390-4335-939c-b9467c1fefe6", "url": "https://bsky.app/profile/redsiege.com/post/3lykvaqkix22z"}, {"timestamp": "2025-09-11T15:38:21Z", "date_only": false, "value": "2025-09-11T15:38:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/86896", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "ec1cf5bb-0d0d-4d69-bc55-c13296e1c342", "content": "\ud83d\udd8b\ufe0f Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts \ud83d\udd8b\ufe0f\n\nAdobe has warned of a critical security flaw in its Commerce and Magento Open Source platforms that, if successfully exploited, could allow attackers to take control of customer accounts. The vulnerability, tracked as CVE202554236 aka SessionReaper, carries a CVSS score of 9.1 out of a maximum of 10.0. It has been described as an improper input validation flaw. Adobe said it's not aware of.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/86896"}, {"timestamp": "2025-09-11T17:22:27.891Z", "date_only": false, "value": "2025-09-11T17:22:27.891219Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3lylb5zins72j", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "ea9bea26-84ec-43d4-9ddd-99592ca22a80", "url": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3lylb5zins72j"}, {"timestamp": "2025-09-12T02:08:38.081Z", "date_only": false, "value": "2025-09-12T02:08:38.081191Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lym6kvfkq32d", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "eb51728b-9c0c-44c8-ba7c-3fa37f30668c", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lym6kvfkq32d"}, {"timestamp": "2025-09-13T02:05:24.574Z", "date_only": false, "value": "2025-09-13T02:05:24.574524Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lyoou2lhaa2a", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "c1da4c39-3a39-419f-aaa4-e167729ab15f", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lyoou2lhaa2a"}, {"timestamp": "2025-09-13T14:59:11Z", "date_only": false, "value": "2025-09-13T14:59:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/1321", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "3f8646b9-8067-42cc-92f8-a25bcdd55358", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0624\u0644\u0641\u0647 Siemens User Management Component (UMC) \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0648\u0628 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0641\u0631\u0622\u06cc\u0646\u062f\u0647\u0627\u06cc \u0641\u0646\u0627\u0648\u0631\u06cc SIMATIC PCS neo \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062e\u0631\u0648\u062c \u0639\u0645\u0644\u06cc\u0627\u062a \u0627\u0632 \u0645\u062d\u062f\u0648\u062f\u0647 \u0628\u0627\u0641\u0631 \u062f\u0631 \u062d\u0627\u0641\u0638\u0647 \u0627\u0633\u062a. \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u062f\u0647\u062f.\n\nCVE-2025-54236\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631. \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645\u06cc \u0631\u06cc\u0633\u06a9\u200c\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u0634\u0648\u0646\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u0648\u0628 (WAF);\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a);\n- \u062a\u0642\u0633\u06cc\u0645\u200c\u0628\u0646\u062f\u06cc \u0634\u0628\u06a9\u0647 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631;\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0641\u0648\u0630 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc (\u06a9\u0634\u0641\u060c \u062b\u0628\u062a) \u0648 \u0648\u0627\u06a9\u0646\u0634 \u0628\u0647 \u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627;\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0645\u062c\u0627\u0632\u06cc \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u062f\u0647\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (VPN).\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647\u200c\u0647\u0627:\nhttps://cert-portal.siemens.com/productcert/html/ssa-722410.html\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\u0628\u06cc\u0627\u06cc\u06cc\u062f \u0628\u0627 \u0647\u0645 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f\u0647\u0627 \u0631\u0627 \u0628\u0627\u0644\u0627 \u0628\u0628\u0631\u06cc\u0645.\u00a0 \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t", "url": "https://t.me/ics_cert/1321"}, {"timestamp": "2025-09-14T02:14:29.397Z", "date_only": false, "value": "2025-09-14T02:14:29.397950Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lyr7t7havb2l", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "46a2fa55-7c53-445d-bf71-406b18599227", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lyr7t7havb2l"}, {"timestamp": "2025-09-14T10:03:44.128Z", "date_only": false, "value": "2025-09-14T10:03:44.128890Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lys22blvxf2g", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "f61da052-a829-4912-b765-de6cb1f9e05a", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3lys22blvxf2g"}, {"timestamp": "2025-09-15T02:15:45.071Z", "date_only": false, "value": "2025-09-15T02:15:45.071756Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lytqefamyb2l", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "a11fcc8a-3735-4e1f-8b09-c8864dd288ac", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lytqefamyb2l"}, {"timestamp": "2025-09-16T02:09:44.613Z", "date_only": false, "value": "2025-09-16T02:09:44.613876Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lywaikvzii2a", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "62e4077d-f30a-4667-84d2-4df551a07cfe", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lywaikvzii2a"}, {"timestamp": "2025-09-17T00:00:00Z", "date_only": true, "value": "2025-09-17", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-21417", "record": "CNVD-2025-21417", "field": "openTime"}, {"timestamp": "2025-09-23T09:21:35.569Z", "date_only": false, "value": "2025-09-23T09:21:35.569996Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lzilv5xe5k26", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "8beae86a-b7a7-46bb-bd17-b33946a9b2b2", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lzilv5xe5k26"}, {"timestamp": "2025-10-15T13:18:32.124Z", "date_only": false, "value": "2025-10-15T13:18:32.124871Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m3adexhtgc2e", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "24878cef-d14a-45c1-842c-c25900fdb396", "url": "https://bsky.app/profile/pentest-tools.com/post/3m3adexhtgc2e"}, {"timestamp": "2025-10-15T13:18:33.155Z", "date_only": false, "value": "2025-10-15T13:18:33.155987Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m3adexhyck2e", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "642259c3-eed0-4147-9111-4fb2150758db", "url": "https://bsky.app/profile/pentest-tools.com/post/3m3adexhyck2e"}, {"timestamp": "2025-10-15T13:18:34.186Z", "date_only": false, "value": "2025-10-15T13:18:34.186632Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m3adexhzbs2e", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "861bae5c-8ca1-4956-afa1-f81444caac3c", "url": "https://bsky.app/profile/pentest-tools.com/post/3m3adexhzbs2e"}, {"timestamp": "2025-10-15T13:18:35.256Z", "date_only": false, "value": "2025-10-15T13:18:35.256066Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m3adf2i2jk2e", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "21461106-1f62-4096-bf62-34d81d1e2487", "url": "https://bsky.app/profile/pentest-tools.com/post/3m3adf2i2jk2e"}, {"timestamp": "2025-10-15T13:18:36.299Z", "date_only": false, "value": "2025-10-15T13:18:36.299527Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m3adf2i3is2e", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "083d600c-5db6-4baa-8cf8-f0f85de2c783", "url": "https://bsky.app/profile/pentest-tools.com/post/3m3adf2i3is2e"}, {"timestamp": "2025-10-15T13:18:37.324Z", "date_only": false, "value": "2025-10-15T13:18:37.324756Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m3adf2i4i22e", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "b87a80ca-11ff-4a67-9fb1-3f44ea741fa4", "url": "https://bsky.app/profile/pentest-tools.com/post/3m3adf2i4i22e"}, {"timestamp": "2025-10-19T15:00:07Z", "date_only": false, "value": "2025-10-19T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7-7SqtMFm30y0jLp6y5GamPMKqVSRatpdn_1oTPkVR9xVFo", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "db4d1565-a09e-4d11-a324-42cdf4acb55e"}, {"timestamp": "2025-10-22T05:58:15.710Z", "date_only": false, "value": "2025-10-22T05:58:15.710468Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3m3r62cvv652c", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "95e10ca3-2767-4bcb-9fee-7da1e7d40b03", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3m3r62cvv652c"}, {"timestamp": "2025-10-22T06:24:32.971Z", "date_only": false, "value": "2025-10-22T06:24:32.971524Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3m3r7jdtiqd2u", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "18f52663-a7b4-4cdb-bfeb-8dedbd0997a4", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3m3r7jdtiqd2u"}, {"timestamp": "2025-10-22T07:35:01.656Z", "date_only": false, "value": "2025-10-22T07:35:01.656996Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/warthogtk.bsky.social/post/3m3rdhdzbes2m", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "e9b96689-4360-448e-8b29-82260bcd5b7a", "url": "https://bsky.app/profile/warthogtk.bsky.social/post/3m3rdhdzbes2m"}, {"timestamp": "2025-10-22T11:04:37.535Z", "date_only": false, "value": "2025-10-22T11:04:37.535904Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/115417486199346745", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "4eb275bf-be9d-4cc8-a9a6-c9a1c56dfe7c", "url": "https://infosec.exchange/users/dragonjar/statuses/115417486199346745"}, {"timestamp": "2025-10-22T11:50:55.565Z", "date_only": false, "value": "2025-10-22T11:50:55.565153Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/leakix.bsky.social/post/3m3rrqwoiam2o", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "b691f6cc-5613-4545-90f3-5f3ba826d8e2", "url": "https://bsky.app/profile/leakix.bsky.social/post/3m3rrqwoiam2o"}, {"timestamp": "2025-10-22T11:51:01.640Z", "date_only": false, "value": "2025-10-22T11:51:01.640402Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/leakix/statuses/115417668565130117", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "7e671b31-5f92-4a78-af39-2c3ff41c46e1", "url": "https://mastodon.social/users/leakix/statuses/115417668565130117"}, {"timestamp": "2025-10-22T15:27:55.332Z", "date_only": false, "value": "2025-10-22T15:27:55.332369Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/konvis.bsky.social/post/3m3s5uxadqr2s", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "29771f2d-5aab-41a8-bf5f-3bd080e7b565", "url": "https://bsky.app/profile/konvis.bsky.social/post/3m3s5uxadqr2s"}, {"timestamp": "2025-10-22T16:47:59.321Z", "date_only": false, "value": "2025-10-22T16:47:59.321834Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/agarri.fr/post/3m3sce2gt422l", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "8b7e2c5a-7d4b-405d-88a9-6c92f3e9960d", "url": "https://bsky.app/profile/agarri.fr/post/3m3sce2gt422l"}, {"timestamp": "2025-10-22T18:48:33.674Z", "date_only": false, "value": "2025-10-22T18:48:33.674831Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m3sj3qgs2a2i", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "6654dfdf-006a-42a7-8faa-bb05d8ab64d8", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3m3sj3qgs2a2i"}, {"timestamp": "2025-10-22T19:05:40Z", "date_only": false, "value": "2025-10-22T19:05:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/23239", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "2ae5e437-f302-414f-b06a-fb594073284f", "content": "\u200aHackers exploiting critical \"SessionReaper\" flaw in Adobe Magento\n\nHackers are actively exploiting the critical SessionReaper vulnerability (CVE-2025-54236) in Adobe Commerce (formerly Magento) platforms, with hundreds of attempts recorded. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploiting-critical-sessionreaper-flaw-in-adobe-magento/", "url": "https://t.me/BleepingComputer/23239"}, {"timestamp": "2025-10-22T19:19:53.392Z", "date_only": false, "value": "2025-10-22T19:19:53.392350Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3m3sktqzqt32w", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "0c610957-fa05-4196-a51c-2522affd5525", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3m3sktqzqt32w"}, {"timestamp": "2025-10-22T20:37:10.236Z", "date_only": false, "value": "2025-10-22T20:37:10.236920Z", "kind": "sighting", "label": "Exploited", "source": "https://sansec.io/research/sessionreaper-exploitation", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "0b591009-9246-41c6-a3b5-557b9f0322d3", "url": "https://sansec.io/research/sessionreaper-exploitation"}, {"timestamp": "2025-10-22T22:00:00Z", "date_only": false, "value": "2025-10-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1999", "record": "WID-SEC-W-2025-1999", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-10-22T22:00:00Z", "date_only": false, "value": "2025-10-22T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1999", "record": "WID-SEC-W-2025-1999", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-10-23T02:58:42.963Z", "date_only": false, "value": "2025-10-23T02:58:42.963317Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3m3tei73ta42v", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "ccf2572e-780f-4e6d-ad00-c82afa948017", "url": "https://bsky.app/profile/abijita.bsky.social/post/3m3tei73ta42v"}, {"timestamp": "2025-10-23T03:47:00Z", "date_only": false, "value": "2025-10-23T03:47:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/10/over-250-magento-stores-hit-overnight.html", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "494c6ff3-e820-4a65-88d1-b5fb0a1599e4", "url": "https://thehackernews.com/2025/10/over-250-magento-stores-hit-overnight.html"}, {"timestamp": "2025-10-23T04:44:59.539Z", "date_only": false, "value": "2025-10-23T04:44:59.539099Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m3tkg7r2wv2i", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "c8dbbfee-8beb-4b4a-8f14-274c162b58ef", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m3tkg7r2wv2i"}, {"timestamp": "2025-10-23T05:58:06Z", "date_only": false, "value": "2025-10-23T05:58:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/7775", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "72203ef9-9d9e-4605-be14-a7355d364bfb", "content": "\ud83d\udea8 New Adobe Commerce flaw (CVE-2025-54236, CVSS 9.1) under active attack.\n\nOver 250 exploit attempts in 24 hours\u2014mostly on unpatched Magento sites.\n\nPoC is public. Patch now.\n\nDetails \u2192 https://thehackernews.com/2025/10/over-250-magento-stores-hit-overnight.html", "url": "https://t.me/thehackernews/7775"}, {"timestamp": "2025-10-23T07:03:30.992Z", "date_only": false, "value": "2025-10-23T07:03:30.992422Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m3ts5wadcz2m", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "c8d5ccce-116f-4448-bab2-c67a97888fd6", "url": "https://bsky.app/profile/offseq.bsky.social/post/3m3ts5wadcz2m"}, {"timestamp": "2025-10-23T07:04:56Z", "date_only": false, "value": "2025-10-23T07:04:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/lpmf9T-ZkzXH7VSixqAjs641sB1ra2fO4hG3jkOfHhzQ3w", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "e7a73c8c-63f8-48d7-b459-1b42a3d054b6"}, {"timestamp": "2025-10-23T07:07:45.318Z", "date_only": false, "value": "2025-10-23T07:07:45.318030Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/decio/statuses/115422217162204442", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "b5765c03-47af-4194-8dae-be9d7df5dc6c", "url": "https://infosec.exchange/users/decio/statuses/115422217162204442"}, {"timestamp": "2025-10-23T07:43:27.821Z", "date_only": false, "value": "2025-10-23T07:43:27.821+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1999", "record": "WID-SEC-W-2025-1999", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-23T08:00:55.190Z", "date_only": false, "value": "2025-10-23T08:00:55.190365Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3m3tvekwefb2s", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "1ef52d51-0a13-40f0-833e-8e7a6f04a25b", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3m3tvekwefb2s"}, {"timestamp": "2025-10-23T10:27:25.044Z", "date_only": false, "value": "2025-10-23T10:27:25.044056Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3u5kk6elz2t", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "22842212-9fc7-4a95-b499-2eec7f178ec6", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3u5kk6elz2t"}, {"timestamp": "2025-10-23T10:30:25.841Z", "date_only": false, "value": "2025-10-23T10:30:25.841925Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m3u5pwjhqf2g", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "e0003499-edea-497e-a126-4e3465019b04", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m3u5pwjhqf2g"}, {"timestamp": "2025-10-23T10:53:28.599Z", "date_only": false, "value": "2025-10-23T10:53:28.599940Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3m3u6z4usp226", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "cd0d7a68-93d0-4dc3-9ac3-f25fd7db5940", "url": "https://bsky.app/profile/shiojiri.com/post/3m3u6z4usp226"}, {"timestamp": "2025-10-23T11:02:55.752Z", "date_only": false, "value": "2025-10-23T11:02:55.752443Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/115423141788806358", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "d8d3847e-0271-4882-8523-e3b5ef547daa", "url": "https://infosec.exchange/users/dragonjar/statuses/115423141788806358"}, {"timestamp": "2025-10-23T11:04:00.624Z", "date_only": false, "value": "2025-10-23T11:04:00.624411Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m3u7lxu2e42s", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "e4fcaf53-e6a6-42dc-95fe-1a0667d7dbfa", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m3u7lxu2e42s"}, {"timestamp": "2025-10-23T11:09:44.325Z", "date_only": false, "value": "2025-10-23T11:09:44.325692Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m3u7vawxqld2", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "f411b7f1-f0ba-44ba-a9a3-491e3fa9ae6d", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m3u7vawxqld2"}, {"timestamp": "2025-10-23T11:11:03.715Z", "date_only": false, "value": "2025-10-23T11:11:03.715103Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m3u7ykwtt32o", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "caa16211-bd24-48cc-a9f3-dcbb1f5672a1", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3m3u7ykwtt32o"}, {"timestamp": "2025-10-23T12:10:04.227Z", "date_only": false, "value": "2025-10-23T12:10:04.227630Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3m3udbm2nss2a", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "f0587107-1378-4193-99e8-5c497587dee4", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3m3udbm2nss2a"}, {"timestamp": "2025-10-23T12:32:44.465Z", "date_only": false, "value": "2025-10-23T12:32:44.465214Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115423495073596720", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "c9dabed4-306b-4d5e-a761-bd65a6b0762e", "url": "https://infosec.exchange/users/edwardk/statuses/115423495073596720"}, {"timestamp": "2025-10-23T12:34:06.537Z", "date_only": false, "value": "2025-10-23T12:34:06.537786Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115423500452664476", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "d376732d-867c-4f46-b396-b7b77a11c5a8", "url": "https://infosec.exchange/users/edwardk/statuses/115423500452664476"}, {"timestamp": "2025-10-23T13:13:39Z", "date_only": false, "value": "2025-10-23T13:13:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av25-583", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "41efd810-4d50-4436-9e9b-28738dc2e5b1", "url": "https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av25-583"}, {"timestamp": "2025-10-23T13:34:35.464Z", "date_only": false, "value": "2025-10-23T13:34:35.464922Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m3uhz72ewk2t", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "6fb0b58b-7126-4c95-854c-57ff9673ccb5", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3m3uhz72ewk2t"}, {"timestamp": "2025-10-23T13:53:43.632Z", "date_only": false, "value": "2025-10-23T13:53:43.632730Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3uj3gymgz2f", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "f9de0ce7-8bc2-44d7-82f9-63c4997455c9", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m3uj3gymgz2f"}, {"timestamp": "2025-10-23T14:13:09.952Z", "date_only": false, "value": "2025-10-23T14:13:09.952887Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m3uk62qvms2c", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "a6fa7f8a-3f2f-4879-916e-c9cd4fdfd0ae", "url": "https://bsky.app/profile/pentest-tools.com/post/3m3uk62qvms2c"}, {"timestamp": "2025-10-23T14:13:10.471Z", "date_only": false, "value": "2025-10-23T14:13:10.471547Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3m3uk64jj5k2c", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "34bb14de-5f43-4684-815c-07104681fc8b", "url": "https://bsky.app/profile/pentest-tools.com/post/3m3uk64jj5k2c"}, {"timestamp": "2025-10-23T14:31:16.620Z", "date_only": false, "value": "2025-10-23T14:31:16.620075Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/115423961174908300", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "304f3bd0-56c0-4ce1-9fb7-b39dc0c43a26", "url": "https://infosec.exchange/users/threatcodex/statuses/115423961174908300"}, {"timestamp": "2025-10-23T14:49:54.158Z", "date_only": false, "value": "2025-10-23T14:49:54.158558Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3m3um7vtggc2b", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "2e9e2f11-5903-4af4-b211-472b67e3543f", "url": "https://bsky.app/profile/crowdcyber.bsky.social/post/3m3um7vtggc2b"}, {"timestamp": "2025-10-23T18:51:11.629Z", "date_only": false, "value": "2025-10-23T18:51:11.629955Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3m3uzpehvib2b", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "84dad60c-01cb-4bad-804b-f69ea8677849", "url": "https://bsky.app/profile/theitnerd.ca/post/3m3uzpehvib2b"}, {"timestamp": "2025-10-23T19:05:58.825Z", "date_only": false, "value": "2025-10-23T19:05:58.825971Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3v2jsnta22z", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "744fc39a-aea5-4722-a001-b6c5b6de9d93", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3v2jsnta22z"}, {"timestamp": "2025-10-23T19:25:50Z", "date_only": false, "value": "2025-10-23T19:25:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.darkreading.com/vulnerabilities-threats/sessionreaper-adobe-commerce-flaw-under-attack", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "1411399b-b7ad-4908-b5fb-085d4fed771e", "url": "https://www.darkreading.com/vulnerabilities-threats/sessionreaper-adobe-commerce-flaw-under-attack"}, {"timestamp": "2025-10-23T20:16:08.926Z", "date_only": false, "value": "2025-10-23T20:16:08.926730Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cwealthsentinel.bsky.social/post/3m3v6harsyj2l", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "2e960d30-a1ce-43ca-a732-a64ec55b5855", "url": "https://bsky.app/profile/cwealthsentinel.bsky.social/post/3m3v6harsyj2l"}, {"timestamp": "2025-10-23T21:02:35.736Z", "date_only": false, "value": "2025-10-23T21:02:35.736863Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3vb25ptt22i", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "9d813e03-906d-49b4-a8c2-1ef8c0f56fa8", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3vb25ptt22i"}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-54236", "field": "timestamps.asserted_at", "uuid": "4f1dc8bc-f1c6-497f-8b18-5f8ae3ee8a5e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": true, "value": "2025-10-24", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-54236", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": true, "value": "2025-10-24", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-54236", "field": "evidence.0.details.date_added", "uuid": "4f1dc8bc-f1c6-497f-8b18-5f8ae3ee8a5e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-54236", "field": "timestamps.first_seen_at", "uuid": "4f1dc8bc-f1c6-497f-8b18-5f8ae3ee8a5e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-54236", "field": "status.status_updated_at", "uuid": "4f1dc8bc-f1c6-497f-8b18-5f8ae3ee8a5e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-54236", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-10-24T00:56:15.684Z", "date_only": false, "value": "2025-10-24T00:56:15.684951Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3m3vo45jozr23", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "0f4a89e0-42e2-4171-b851-efedac2bf9f2", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3m3vo45jozr23"}, {"timestamp": "2025-10-24T01:34:08.701Z", "date_only": false, "value": "2025-10-24T01:34:08.701547Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m3vq7v2bmw2j", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "19a9a351-d63a-4d1b-b718-07d5617902a7", "url": "https://bsky.app/profile/offseq.bsky.social/post/3m3vq7v2bmw2j"}, {"timestamp": "2025-10-24T02:11:13.920Z", "date_only": false, "value": "2025-10-24T02:11:13.920202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m3vsc7hnph2a", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "ef7e7175-64f0-4a1b-b1e8-2035a1a013b6", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m3vsc7hnph2a"}, {"timestamp": "2025-10-24T05:10:49.034Z", "date_only": false, "value": "2025-10-24T05:10:49.034179Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3w4ddbpqk2z", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "dd483069-b133-417a-a9a9-442fc1c6e457", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3w4ddbpqk2z"}, {"timestamp": "2025-10-24T06:42:27.835Z", "date_only": false, "value": "2025-10-24T06:42:27.835028Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3wbh6nvgc2z", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "c0ac6e81-2d46-4a4a-adea-053fe716cc99", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3wbh6nvgc2z"}, {"timestamp": "2025-10-24T10:03:38Z", "date_only": false, "value": "2025-10-24T10:03:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/10/24/hackers-exploiting-critical-sessionreaper-flaw.html", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "76d45496-ac62-4ed2-ab1d-4bb56839947c", "url": "https://threatintel.cc/2025/10/24/hackers-exploiting-critical-sessionreaper-flaw.html"}, {"timestamp": "2025-10-24T12:03:33.799Z", "date_only": false, "value": "2025-10-24T12:03:33.799479Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115429042650092853", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "863c64de-45ce-47cf-b68e-0cbc23995e4f", "url": "https://infosec.exchange/users/edwardk/statuses/115429042650092853"}, {"timestamp": "2025-10-24T12:51:14.735Z", "date_only": false, "value": "2025-10-24T12:51:14.735295Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/115429230135153580", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "7365a052-0e7b-4dce-b330-ca53c8fc156c", "url": "https://infosec.exchange/users/jbhall56/statuses/115429230135153580"}, {"timestamp": "2025-10-24T12:51:21.917Z", "date_only": false, "value": "2025-10-24T12:51:21.917786Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3m3ww2tiqls27", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "80c879d5-e464-49cf-aac5-24da44713324", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3m3ww2tiqls27"}, {"timestamp": "2025-10-24T13:39:23Z", "date_only": false, "value": "2025-10-24T13:39:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/10299", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "ed5a57fa-78a9-48fc-8dd4-cf3cb5ee3dd2", "content": "Why nested deserialization is STILL harmful \u2013 Magento RCE (CVE-2025-54236) \u203a Searchlight Cyber\n\nhttps://slcyber.io/assetnote-security-research-center/why-nested-deserialization-is-still-harmful-magento-rce-cve-2025-54236/", "url": "https://t.me/thebugbountyhunter/10299"}, {"timestamp": "2025-10-24T14:08:30.772Z", "date_only": false, "value": "2025-10-24T14:08:30.772162Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-54236", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-10-24T14:08:30.772Z", "date_only": false, "value": "2025-10-24T14:08:30.772162Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-54236", "record": "FKIE_CVE-2025-54236", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-10-24T14:54:43.502Z", "date_only": false, "value": "2025-10-24T14:54:43.502875Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3m3x4xgiofb2u", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "5f817c1c-0bed-40bd-af52-d78247f92258", "url": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3m3x4xgiofb2u"}, {"timestamp": "2025-10-24T14:54:44.863Z", "date_only": false, "value": "2025-10-24T14:54:44.863045Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3m3x4xij7cc2v", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "8c81b621-b531-4d19-ac4a-236d9e56e673", "url": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3m3x4xij7cc2v"}, {"timestamp": "2025-10-24T15:03:33.604Z", "date_only": false, "value": "2025-10-24T15:03:33.604001Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/robwright22.bsky.social/post/3m3x5h5y6222q", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "54945b81-a3c0-4e88-9955-9b7bec7005ff", "url": "https://bsky.app/profile/robwright22.bsky.social/post/3m3x5h5y6222q"}, {"timestamp": "2025-10-24T16:00:57.540Z", "date_only": false, "value": "2025-10-24T16:00:57.540850Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alexandreborges.bsky.social/post/3m3xantuwrs2q", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "46927b8d-4f39-43a5-a309-d0e5d285e2c7", "url": "https://bsky.app/profile/alexandreborges.bsky.social/post/3m3xantuwrs2q"}, {"timestamp": "2025-10-24T16:01:23.679Z", "date_only": false, "value": "2025-10-24T16:01:23.679981Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/alexandreborges/statuses/115429977784461989", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "30dcd280-c690-413c-b21e-82a56044bff4", "url": "https://infosec.exchange/users/alexandreborges/statuses/115429977784461989"}, {"timestamp": "2025-10-24T16:43:02.094Z", "date_only": false, "value": "2025-10-24T16:43:02.094844Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m3xcvtrvfph2", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "594faa2b-1183-4a60-9a28-b5149bd29e0d", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m3xcvtrvfph2"}, {"timestamp": "2025-10-24T18:10:03Z", "date_only": false, "value": "2025-10-24T18:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "f15f3f3b-a640-4859-bee5-1613f64c1c28"}, {"timestamp": "2025-10-24T19:37:10.155Z", "date_only": false, "value": "2025-10-24T19:37:10.155352Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4980455", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "668485eb-070a-4f54-922e-d5598fffefcd", "url": "https://feedsin.space/feed/CISAKevBot/items/4980455"}, {"timestamp": "2025-10-24T22:20:23.685Z", "date_only": false, "value": "2025-10-24T22:20:23.685Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-54236", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-24T22:20:23.685Z", "date_only": false, "value": "2025-10-24T22:20:23.685Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-54236", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-24T23:07:33Z", "date_only": false, "value": "2025-10-24T23:07:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/SamJUK/eb9b82d06c54415bb00341777cf50cad", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "1766107e-3507-41a3-95d3-373e34be80ed", "url": "https://gist.github.com/SamJUK/eb9b82d06c54415bb00341777cf50cad"}, {"timestamp": "2025-10-25T02:12:29.591Z", "date_only": false, "value": "2025-10-25T02:12:29.591510Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m3yctetvdb2b", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "0cfb00b4-d152-46f1-8a05-fd609a3f8a36", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m3yctetvdb2b"}, {"timestamp": "2025-10-25T03:20:39Z", "date_only": false, "value": "2025-10-25T03:20:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "d6a15db5-d3bc-42a9-803f-0a85d244a71e"}, {"timestamp": "2025-10-25T04:01:28.412Z", "date_only": false, "value": "2025-10-25T04:01:28.412890Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m3yiwb5s6o2z", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "61c84085-01e2-4acf-ba31-af9c2d5fc4d7", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m3yiwb5s6o2z"}, {"timestamp": "2025-10-25T05:35:51.567Z", "date_only": false, "value": "2025-10-25T05:35:51.567905Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m3yo6wyqpc2g", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "a38bc4ef-a38d-42a7-88ca-6e9ebf4937e2", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m3yo6wyqpc2g"}, {"timestamp": "2025-10-25T06:22:59.395Z", "date_only": false, "value": "2025-10-25T06:22:59.395261Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m3yqtb3scs2g", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "6ea4793a-d977-4fb9-acce-b6ea7140cacd", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m3yqtb3scs2g"}, {"timestamp": "2025-10-25T06:39:57.120Z", "date_only": false, "value": "2025-10-25T06:39:57.120807Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m3yrrkqq3s2g", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "9ead1c3a-687c-4074-abcd-aec8c6b740d3", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m3yrrkqq3s2g"}, {"timestamp": "2025-10-25T11:10:32.768Z", "date_only": false, "value": "2025-10-25T11:10:32.768922Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3m3zavhdxk22l", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "62650540-1632-42f4-bfa4-00de445c2def", "url": "https://bsky.app/profile/shiojiri.com/post/3m3zavhdxk22l"}, {"timestamp": "2025-10-25T21:02:29.590Z", "date_only": false, "value": "2025-10-25T21:02:29.590348Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m42bxwl4aj2g", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "05a24dd9-d00f-4f33-834a-1c3bd2c1f487", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m42bxwl4aj2g"}, {"timestamp": "2025-10-25T21:18:11.124Z", "date_only": false, "value": "2025-10-25T21:18:11.124380Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42ctzluws2n", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "38f1d64c-e2a0-492f-b154-a9b84052567d", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42ctzluws2n"}, {"timestamp": "2025-10-25T21:23:30.640Z", "date_only": false, "value": "2025-10-25T21:23:30.640761Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42d5iyqjs2n", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "137a51bc-f2aa-4aff-aa5c-752a2f47e5a5", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42d5iyqjs2n"}, {"timestamp": "2025-10-26T02:18:01.387Z", "date_only": false, "value": "2025-10-26T02:18:01.387122Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m42tm72l2x2t", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "5660d405-5ac4-4f31-b472-84e74743f871", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m42tm72l2x2t"}, {"timestamp": "2025-10-26T16:00:25.664Z", "date_only": false, "value": "2025-10-26T16:00:25.664265Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m44bkrifmv2y", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "6c97baa1-c26a-49b5-af0d-2f2bae9d4a4d", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m44bkrifmv2y"}, {"timestamp": "2025-10-26T16:17:00Z", "date_only": false, "value": "2025-10-26T16:17:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-54236.yaml", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "5588f07d-6aff-457f-9f4d-092a1c0ae2b9", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-54236.yaml"}, {"timestamp": "2025-10-26T17:20:08.526Z", "date_only": false, "value": "2025-10-26T17:20:08.526784Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m44fzcmii227", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "86a660e1-7022-460f-b7d1-4b430aa57d8a", "url": "https://bsky.app/profile/cyberhub.blog/post/3m44fzcmii227"}, {"timestamp": "2025-10-26T22:13:10.554Z", "date_only": false, "value": "2025-10-26T22:13:10.554134Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3m44wfcfr2v2f", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "4445569f-8966-45d1-a976-8fb9ec76edc9", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3m44wfcfr2v2f"}, {"timestamp": "2025-10-27T02:21:33.890Z", "date_only": false, "value": "2025-10-27T02:21:33.890094Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m45ebh5mxf2k", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "4ba7b50e-d77d-4e6f-b503-d45c4cf6e279", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m45ebh5mxf2k"}, {"timestamp": "2025-10-27T13:31:19.036Z", "date_only": false, "value": "2025-10-27T13:31:19.036595Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m46jozn5us2q", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "936919cd-63b5-44d5-a4ac-c1c4aba46a7c", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m46jozn5us2q"}, {"timestamp": "2025-10-27T14:40:07.931Z", "date_only": false, "value": "2025-10-27T14:40:07.931828Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m46nk4iv622k", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "14a7476a-f430-4355-a047-31dc4048eaad", "url": "https://bsky.app/profile/cyberhub.blog/post/3m46nk4iv622k"}, {"timestamp": "2025-10-27T15:13:09Z", "date_only": false, "value": "2025-10-27T15:13:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WH92-6Q6G-PX7J", "record": "GHSA-WH92-6Q6G-PX7J", "field": "modified"}, {"timestamp": "2025-10-27T18:21:53.644Z", "date_only": false, "value": "2025-10-27T18:21:53.644700Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3m46zwnpw3e24", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "240472df-b467-40aa-9dc6-f2d229983ca0", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3m46zwnpw3e24"}, {"timestamp": "2025-10-27T18:22:07.786Z", "date_only": false, "value": "2025-10-27T18:22:07.786272Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115447518134171917", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "be73b23a-5513-46b4-ab8c-dbeb383c47e5", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/115447518134171917"}, {"timestamp": "2025-10-27T18:42:11Z", "date_only": false, "value": "2025-10-27T18:42:11+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-54236", "field": "timestamps.asserted_at", "uuid": "ae149647-44f6-408b-9508-a0b53e79a809", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-27T18:42:11Z", "date_only": false, "value": "2025-10-27T18:42:11+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-54236", "field": "timestamps.first_seen_at", "uuid": "ae149647-44f6-408b-9508-a0b53e79a809", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-27T21:02:36.506Z", "date_only": false, "value": "2025-10-27T21:02:36.506122Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m47cvwym722g", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "b488d2fc-c8ba-42ac-b4d5-e6d5cc8b2be8", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m47cvwym722g"}, {"timestamp": "2025-10-28T02:14:20.253Z", "date_only": false, "value": "2025-10-28T02:14:20.253128Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m47udgxpf42c", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "71bb5be4-3e4d-4820-834b-2b31e3f312b5", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m47udgxpf42c"}, {"timestamp": "2025-10-29T01:33:48.182Z", "date_only": false, "value": "2025-10-29T01:33:48.182666Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4ccjv57nj22", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "113df77d-e595-4dbb-82ea-3154db8123f0", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4ccjv57nj22"}, {"timestamp": "2025-10-29T02:19:23.347Z", "date_only": false, "value": "2025-10-29T02:19:23.347636Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4cf3fla3u2m", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "61f3af79-6cf8-4c23-bcfb-5c98b8f9e421", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m4cf3fla3u2m"}, {"timestamp": "2025-10-29T09:00:27Z", "date_only": false, "value": "2025-10-29T09:00:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/hryvinskyi/16fbc40f3eb00986d7c9673543961c71", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "a6349497-3cac-4937-a37f-91954a47fded", "url": "https://gist.github.com/hryvinskyi/16fbc40f3eb00986d7c9673543961c71"}, {"timestamp": "2025-10-29T09:44:43.781Z", "date_only": false, "value": "2025-10-29T09:44:43.781440Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/maxcluster.de/post/3m4d5xpajmc24", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "741f7405-4e5d-48d6-8b42-edfc96630506", "url": "https://bsky.app/profile/maxcluster.de/post/3m4d5xpajmc24"}, {"timestamp": "2025-10-29T11:24:59Z", "date_only": false, "value": "2025-10-29T11:24:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/10/29/top-attacks-and-breaches.html", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "b3b174dc-8861-4997-a2dc-864c8ec785d5", "url": "https://threatintel.cc/2025/10/29/top-attacks-and-breaches.html"}, {"timestamp": "2025-10-30T02:17:49.393Z", "date_only": false, "value": "2025-10-30T02:17:49.393494Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4evhjkaky2v", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "0c5c66d0-9a9b-4b34-ace4-89a75854f811", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m4evhjkaky2v"}, {"timestamp": "2025-10-30T07:19:05Z", "date_only": false, "value": "2025-10-30T07:19:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/LouisdeLooze/2769715baf3443756e0c6e0aaf5dd57b", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "ce893d1f-a372-45e0-9fd5-8410c6e58831", "url": "https://gist.github.com/LouisdeLooze/2769715baf3443756e0c6e0aaf5dd57b"}, {"timestamp": "2025-10-30T15:15:24.529Z", "date_only": false, "value": "2025-10-30T15:15:24.529349Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/itsliquidweb.bsky.social/post/3m4gavtzgec2r", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "26864af7-bbde-4884-a922-8334418b9e95", "url": "https://bsky.app/profile/itsliquidweb.bsky.social/post/3m4gavtzgec2r"}, {"timestamp": "2025-10-30T17:12:08.455Z", "date_only": false, "value": "2025-10-30T17:12:08.455727Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m4ghgofdtl2g", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "b5b53d5e-fb9e-459b-9ec6-0c57199f9d9e", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m4ghgofdtl2g"}, {"timestamp": "2025-11-06T10:03:04Z", "date_only": false, "value": "2025-11-06T10:03:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/58535", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "e1632f19-1bb3-4118-9885-398b8f4d17f4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-54236 - Magento Remote Code Execution Exploit\nURL\uff1ahttps://github.com/crondenice/CVE-2025-54236\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/58535"}, {"timestamp": "2025-11-06T15:00:06Z", "date_only": false, "value": "2025-11-06T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5CPDoGea4VxlGpUWdnippgkEikQaqjZZ0eR1kfQrZYnd55E", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "d8d99b96-ceb2-4122-87e0-6feb040de00f"}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": true, "value": "2025-11-14", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-54236", "field": "evidence.0.details.due_date", "uuid": "4f1dc8bc-f1c6-497f-8b18-5f8ae3ee8a5e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-11-24T11:41:28.349Z", "date_only": false, "value": "2025-11-24T11:41:28.349838Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3m6eqmdtwok27", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "a4e8f4bd-2ea4-4fde-8452-00ca0689d048", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3m6eqmdtwok27"}, {"timestamp": "2025-11-26T13:56:39.336Z", "date_only": false, "value": "2025-11-26T13:56:39.336988Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m6jz3y2a722j", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "630aec0f-784d-4d87-86c7-e4be9cde8785", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m6jz3y2a722j"}, {"timestamp": "2025-12-05T13:54:34.669Z", "date_only": false, "value": "2025-12-05T13:54:34.669455Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberresearch.bsky.social/post/3m7an6ket5u2z", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "48a0dc55-e0a9-47a5-922d-dded42337aba", "url": "https://bsky.app/profile/cyberresearch.bsky.social/post/3m7an6ket5u2z"}, {"timestamp": "2025-12-11T21:02:31.630Z", "date_only": false, "value": "2025-12-11T21:02:31.630284Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m7qhvbdlbk24", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "a21e2a98-87bf-48d7-bacb-b67e1aaa94ab", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m7qhvbdlbk24"}, {"timestamp": "2025-12-12T06:44:30.364Z", "date_only": false, "value": "2025-12-12T06:44:30.364150Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/adobedigest.bsky.social/post/3m7rifxtizl27", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "3bdb3358-d684-412a-bd3a-274720b1fb30", "url": "https://bsky.app/profile/adobedigest.bsky.social/post/3m7rifxtizl27"}, {"timestamp": "2025-12-27T00:00:00Z", "date_only": false, "value": "2025-12-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-27)", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "46a953b7-1765-49bc-87d0-ea0259ca1083"}, {"timestamp": "2025-12-30T09:00:05Z", "date_only": false, "value": "2025-12-30T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ORE3MMM_vpcFU2FjMQTGySfuaiwtBaT_1pbiZmi7UZCilEk", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "53a85526-db4c-4ba9-b952-64e8b22bc5ef"}, {"timestamp": "2026-01-25T00:00:00Z", "date_only": false, "value": "2026-01-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-25)", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "14b56a25-ced9-474b-b2b1-629ddee61ae3"}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": false, "value": "2026-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-26)", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "aad1d420-907f-40e4-a19b-c2e8b6d6a1d8"}, {"timestamp": "2026-01-30T14:27:13.971Z", "date_only": false, "value": "2026-01-30T14:27:13.971432Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdnj4iig562l", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "b3d45257-9f11-412f-8321-c0d778e4756c", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdnj4iig562l"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-54236", "field": "timestamps.recorded_at", "uuid": "4f1dc8bc-f1c6-497f-8b18-5f8ae3ee8a5e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:25:47.636Z", "date_only": false, "value": "2026-02-02T12:25:47.636262Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4f1dc8bc-f1c6-497f-8b18-5f8ae3ee8a5e", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "2691ce0b-7052-48ba-b274-f49c22923d38", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4f1dc8bc-f1c6-497f-8b18-5f8ae3ee8a5e"}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-04)", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "be818798-321b-4eed-b1ed-50e31051d2c2"}, {"timestamp": "2026-02-15T00:00:00Z", "date_only": false, "value": "2026-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-15)", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "c61c60a6-71fd-4b26-9e82-da3fbe07c93a"}, {"timestamp": "2026-03-14T00:00:00Z", "date_only": false, "value": "2026-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-14)", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "61ccf1b8-581b-418e-85f6-352c25618909"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-20)", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "726772ef-4a2b-45c9-a681-2d1dcca99088"}, {"timestamp": "2026-03-21T05:00:07.243Z", "date_only": false, "value": "2026-03-21T05:00:07.243564Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackmag.com/post/3mhkaqgak6e2o", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "a70f0cfb-d52f-4e49-b490-3173e71d9cbb", "url": "https://bsky.app/profile/hackmag.com/post/3mhkaqgak6e2o"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-26)", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "2b26654c-923c-435f-8300-045191803031"}, {"timestamp": "2026-04-09T17:43:22.449Z", "date_only": false, "value": "2026-04-09T17:43:22.449569Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mj3eardusz2w", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "a17dabec-a4a7-4283-9898-879d667f0115", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mj3eardusz2w"}, {"timestamp": "2026-05-13T09:00:04Z", "date_only": false, "value": "2026-05-13T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/6_gD9pQtVCg_eRlU_-Eqvw6JM83wq5C4Rc0rf2uF-yzttPU", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "205f6560-cf11-4af9-9f15-e696dd2208d3"}, {"timestamp": "2026-05-21T16:23:27.678Z", "date_only": false, "value": "2026-05-21T16:23:27.678312Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/konvis.bsky.social/post/3mmetej5rtafs", "record": "cve-2025-54236", "field": "creation_timestamp", "uuid": "920c4010-02a6-4db4-ae9f-7f4b1644a008", "content": "Session Reaper Bug \u2013 kritischer Bug in Magento Onlineshop (CVE-2025-54236)\n\nEben kam die Info bei uns an, dass es leider wieder einen kritischen Magento Sicherheitsbug gibt. Es...\n\nhttps://www.konvis.de/neuigkeiten/magento/sessionreaper-bug-kritischer-bug-in-magento-onlineshop-cve-2025-54236/", "url": "https://bsky.app/profile/konvis.bsky.social/post/3mmetej5rtafs"}, {"timestamp": "2026-05-24T21:00:04Z", "date_only": false, "value": "2026-05-24T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ob2oA_mupoVDMqE6Q_QCizAK8aYtg6z11DPx_SkAfocJmb0", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "2cb6cfa4-1000-4f67-ac1a-f2ce1af85faa"}, {"timestamp": "2026-06-01T10:42:53Z", "date_only": false, "value": "2026-06-01T10:42:53+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-54236", "field": "timestamps.asserted_at", "uuid": "529db509-c992-45cb-9674-cf0ea04079f4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:42:53Z", "date_only": false, "value": "2026-06-01T10:42:53+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-54236", "field": "timestamps.first_seen_at", "uuid": "529db509-c992-45cb-9674-cf0ea04079f4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:42:53Z", "date_only": false, "value": "2026-06-01T10:42:53+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-54236", "field": "status.status_updated_at", "uuid": "529db509-c992-45cb-9674-cf0ea04079f4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:42:53.943Z", "date_only": false, "value": "2026-06-01T10:42:53.943Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-54236", "field": "evidence.0.details.added_date", "uuid": "529db509-c992-45cb-9674-cf0ea04079f4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-04T14:09:50Z", "date_only": false, "value": "2026-06-04T14:09:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/captainsmok3r_official/349", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "47105baa-19bd-4344-bfbf-b2f6a0c35849", "content": "many people ask me:\nWhat is this vulnerability where attackers upload .txt files (like cox.txt) to websites with these paths? like:\nhttps://www.elgrantlapalero.com/media/customer_address/c/o/cox.txt\nhttps://tulip.store.oysterskin.ai/media/customer_address/a/z/azraelzeroday.txt\nhttps://zone-h.org/mirror/id/42506300\nAnswer: \nThese are two popular unauthenticated file upload vulnerabilities in Magento 2 / Adobe Commerce.\n1. SessionReaper (CVE-2025-54236)  Uses the path: /media/customer_address/c/o/cox.txt Comes from the customer address file upload feature (/customer/address_file/upload).\n2. PolyShell (newer vulnerability)  \nUses the path: /media/custom_options/quote/.../*.txt Exploited through the REST API when adding items to the cart with custom file options.\npoc:\nhttps://github.com/Baba01hacker666/cve-2025-54236", "url": "https://t.me/captainsmok3r_official/349"}, {"timestamp": "2026-06-17T09:39:41.293Z", "date_only": false, "value": "2026-06-17T09:39:41.293", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-54236", "record": "FKIE_CVE-2025-54236", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:23.154Z", "date_only": false, "value": "2026-06-19T12:45:23.154464Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7e217d80-c444-43cf-a298-ce880d13b485", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "324db1a8-5fe0-4f33-bdc3-a9f325f1b50f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7e217d80-c444-43cf-a298-ce880d13b485"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-54236", "field": "timestamps.recorded_at", "uuid": "529db509-c992-45cb-9674-cf0ea04079f4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:48.572Z", "date_only": false, "value": "2026-06-23T14:03:48.572839Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/529db509-c992-45cb-9674-cf0ea04079f4", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "cc325ce1-c233-47e2-a9c6-01aced0e70b5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/529db509-c992-45cb-9674-cf0ea04079f4"}, {"timestamp": "2026-06-30T09:23:53.664Z", "date_only": false, "value": "2026-06-30T09:23:53.664036Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ae149647-44f6-408b-9508-a0b53e79a809", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "53746b1f-8d55-4141-b69b-a853813a6408", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ae149647-44f6-408b-9508-a0b53e79a809"}, {"timestamp": "2026-07-09T03:00:06.250Z", "date_only": false, "value": "2026-07-09T03:00:06.250333Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/2340", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "44b7dc50-b292-4e25-bf33-8a2089087527", "content": "CVE-2025-54236: Improper Input Validation in Magento (Adobe Commerce), 9.1 rating \ud83d\udd25\n\nA critical vulnerability disclosed in a recent advisory allows attackers to perform RCE. Exploitation attempts have already been recorded!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/Edck5\n\ud83d\udc49 Dork: tag.name:\"magento\" AND http.headers.server:\"Apache\"\n\nVendor's advisory: https://helpx.adobe.com/security/products/magento/apsb25-88.html", "url": "https://t.me/brutsecurity/2340"}, {"timestamp": "2026-07-11T11:00:04.671Z", "date_only": false, "value": "2026-07-11T11:00:04.671117Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/brutsecurity/2340", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "3a213f59-9b22-4321-9371-e8ff3a084856", "content": "CVE-2025-54236: Improper Input Validation in Magento (Adobe Commerce), 9.1 rating \ud83d\udd25\n\nA critical vulnerability disclosed in a recent advisory allows attackers to perform RCE. Exploitation attempts have already been recorded!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/Edck5\n\ud83d\udc49 Dork: tag.name:\"magento\" AND http.headers.server:\"Apache\"\n\nVendor's advisory: https://helpx.adobe.com/security/products/magento/apsb25-88.html", "url": "https://t.me/brutsecurity/2340"}, {"timestamp": "2026-07-16T00:00:00Z", "date_only": false, "value": "2026-07-16T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-54236", "field": "timestamps.last_seen_at", "uuid": "ae149647-44f6-408b-9508-a0b53e79a809", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-16T00:00:00Z", "date_only": true, "value": "2026-07-16", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-54236", "field": "evidence.0.details.observation_date", "uuid": "ae149647-44f6-408b-9508-a0b53e79a809", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-16T00:00:00Z", "date_only": false, "value": "2026-07-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-54236", "field": "status.status_updated_at", "uuid": "ae149647-44f6-408b-9508-a0b53e79a809", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-18T01:00:01Z", "date_only": false, "value": "2026-07-18T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-54236", "field": "timestamps.recorded_at", "uuid": "ae149647-44f6-408b-9508-a0b53e79a809", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T19:00:06.230Z", "date_only": false, "value": "2026-07-20T19:00:06.230111Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/6988", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "0618b9c8-1de6-4d3c-aded-812e9dfbb9e8", "content": "Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts \u2013 thehackernews.com\n\nWed, 10 Sep 2025 09:08:00", "url": "https://t.me/MalaysiaHacktivistz/6988"}, {"timestamp": "2026-07-29T12:02:00.370Z", "date_only": false, "value": "2026-07-29T12:02:00.370830Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/5466", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "68cebbd3-bf4b-4088-bdfe-72f8b4df207c", "content": "Why nested deserialization is STILL harmful \u2013 Magento RCE (CVE-2025-54236) https://slcyber.io/research-center/why-nested-deserialization-is-still-harmful-magento-rce-cve-2025-54236/", "url": "https://t.me/reverseame/5466"}, {"timestamp": "2026-08-01T23:00:04.743Z", "date_only": false, "value": "2026-08-01T23:00:04.743897Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/5466", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "94dfb0c9-e0c9-4bd2-89df-37daa5e6f763", "content": "Why nested deserialization is STILL harmful \u2013 Magento RCE (CVE-2025-54236) https://slcyber.io/research-center/why-nested-deserialization-is-still-harmful-magento-rce-cve-2025-54236/", "url": "https://t.me/reverseame/5466"}, {"timestamp": "2026-09-06T00:00:13.747Z", "date_only": false, "value": "2026-09-06T00:00:13.747679Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ytIBXUa5D9dYW6V2Suk5DGu64Rj2iSnkKfMJs44mr_eO", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "798c29e0-626f-4e3b-9fbd-0adcb652d384"}, {"timestamp": "2026-09-06T00:00:13.792Z", "date_only": false, "value": "2026-09-06T00:00:13.792208Z", "kind": "sighting", "label": "Seen", "source": "Telegram/br2T-oiN3yNsroVZDmT0gqjSxsGtSpePUA7khae99oeK", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "f71a4e9e-f2bb-4d2e-8cd9-1272ece5f77e"}, {"timestamp": "2026-09-08T06:50:01.034Z", "date_only": false, "value": "2026-09-08T06:50:01.034112Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/magento_sessionreaper.rb", "record": "CVE-2025-54236", "field": "creation_timestamp", "uuid": "b9c9c5f2-5657-4968-99d7-a375a00164cd", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Blaklis\", \"Tomais Williamson\", \"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits CVE-2025-54236 (SessionReaper), a critical vulnerability in\\n          Magento/Adobe Commerce that allows unauthenticated remote code execution.\\n\\n          The vulnerability stems from improper handling of nested deserialization in the\\n          payment method context, combined with an unauthenticated file upload endpoint.\\n\\n          The exploit chain consists of three steps:\\n          1. Upload a malicious PHP session file containing a Guzzle/FW1 deserialization\\n          payload via the unauthenticated /customer/address_file/upload endpoint\\n          2. Trigger deserialization by sending a crafted JSON payload to the REST API\\n          endpoint /rest/default/V1/guest-carts/{cart_id}/order that modifies the\\n          session savePath to point to the uploaded file\\n          3. Execute the uploaded PHP code to gain remote code execution\\n\\n          This vulnerability affects Magento 2.x instances configured to use file-based\\n          session storage. Patched versions will return a 400 Bad Request response instead\\n          of processing the malicious payload.\", \"disclosure_date\": \"2025-10-22\", \"fullname\": \"exploit/multi/http/magento_sessionreaper\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Magento SessionReaper\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/magento_sessionreaper.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/magento_sessionreaper\", \"references\": [\"CVE-2025-54236\", \"URL-https://slcyber.io/research-center/why-nested-deserialization-is-still-harmful-magento-rce-cve-2025-54236/\", \"URL-https://experienceleague.adobe.com/en/docs/experience-cloud-kcs/kbarticles/ka-27397\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/magento_sessionreaper.rb"}]}