{"metadata": {"vulnerability": "CVE-2026-12372", "count": 33, "kinds": {"milestone": 10, "sighting": 3, "kev": 0, "other": 20}}, "data": [{"timestamp": "2026-06-16T06:05:39.765Z", "date_only": false, "value": "2026-06-16T06:05:39.765Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-12372", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-09T22:45:52.799Z", "date_only": false, "value": "2026-08-09T22:45:52.799Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12372", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-09T22:45:52.799Z", "date_only": false, "value": "2026-08-09T22:45:52.799Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntr_ai", "record": "CVE-2026-12372", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-09T23:16:00Z", "date_only": false, "value": "2026-08-09T23:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-12372", "record": "UBUNTU-CVE-2026-12372", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-09T23:16:35Z", "date_only": false, "value": "2026-08-09T23:16:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2JHM-W3MP-JCWR", "record": "GHSA-2JHM-W3MP-JCWR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-08-09T23:16:35.793Z", "date_only": false, "value": "2026-08-09T23:16:35.793", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12372", "record": "FKIE_CVE-2026-12372", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-09T23:16:35.793Z", "date_only": false, "value": "2026-08-09T23:16:35.793Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-3955", "record": "PYSEC-2026-3955", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-10T00:31:42Z", "date_only": false, "value": "2026-08-10T00:31:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2JHM-W3MP-JCWR", "record": "GHSA-2JHM-W3MP-JCWR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-10T05:17:27.124Z", "date_only": false, "value": "2026-08-10T05:17:27.124372Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117069515758175259", "record": "CVE-2026-12372", "field": "creation_timestamp", "uuid": "6a9f1a0d-c8a8-4e3f-b806-5c06158b7c74", "content": "Attention, elevated activities detected targeting NLTK (CVE-2026-12372) https://vuldb.com/vuln/387288/cti", "url": "https://infosec.exchange/users/vuldb/statuses/117069515758175259"}, {"timestamp": "2026-08-12T15:00:03.562Z", "date_only": false, "value": "2026-08-12T15:00:03.562292Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bdufstecru/3376", "record": "CVE-2026-12372", "field": "creation_timestamp", "uuid": "e8aee809-2781-4400-b49b-36ea1c61a71c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 validate_network_url() \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 nltk.pathsec \u043f\u0430\u043a\u0435\u0442\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0434\u043b\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u044f\u0437\u044b\u043a\u0430 NLTK \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e. \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c SSRF-\u0430\u0442\u0430\u043a\u0443\n\nBDU:2026-11389\nCVE-2026-12372\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/nltk/nltk/pull/3574\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-12372", "url": "https://t.me/bdufstecru/3376"}, {"timestamp": "2026-08-12T17:45:59.173Z", "date_only": false, "value": "2026-08-12T17:45:59.173613Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-12372", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-12T17:45:59.173Z", "date_only": false, "value": "2026-08-12T17:45:59.173613Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12372", "record": "FKIE_CVE-2026-12372", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-08-12T17:48:54.679Z", "date_only": false, "value": "2026-08-12T17:48:54.679Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-12372", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-12T17:48:54.679Z", "date_only": false, "value": "2026-08-12T17:48:54.679Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-12372", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-13T00:00:00Z", "date_only": false, "value": "2026-08-13T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11510-1", "record": "OPENSUSE-SU-2026:11510-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-08-13T00:00:00Z", "date_only": false, "value": "2026-08-13T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11510-1", "record": "OPENSUSE-SU-2026:11510-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-08-13T00:00:00Z", "date_only": false, "value": "2026-08-13T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11510-1", "record": "OPENSUSE-SU-2026:11510-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2026-08-13T00:00:00Z", "date_only": false, "value": "2026-08-13T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11510-1", "record": "OPENSUSE-SU-2026:11510-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-08-13T00:00:08.722Z", "date_only": false, "value": "2026-08-13T00:00:08.722249Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3376", "record": "CVE-2026-12372", "field": "creation_timestamp", "uuid": "da0f6238-28a7-4585-8766-fd4f9cf1880f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 validate_network_url() \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 nltk.pathsec \u043f\u0430\u043a\u0435\u0442\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0434\u043b\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u044f\u0437\u044b\u043a\u0430 NLTK \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e. \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c SSRF-\u0430\u0442\u0430\u043a\u0443\n\nBDU:2026-11389\nCVE-2026-12372\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/nltk/nltk/pull/3574\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-12372", "url": "https://t.me/bdufstecru/3376", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-10T12:38:45.460Z", "date_only": false, "value": "2026-09-10T12:38:45.460423Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-3955", "record": "PYSEC-2026-3955", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-10T18:50:04Z", "date_only": false, "value": "2026-09-10T18:50:04Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-ACRONYM-CVE-2026-12372", "record": "BREW-ACRONYM-CVE-2026-12372", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-10T19:23:30Z", "date_only": false, "value": "2026-09-10T19:23:30Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-GPTLINE-CVE-2026-12372", "record": "BREW-GPTLINE-CVE-2026-12372", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-10T20:49:20Z", "date_only": false, "value": "2026-09-10T20:49:20Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-SAFETY-CVE-2026-12372", "record": "BREW-SAFETY-CVE-2026-12372", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-16T20:23:38Z", "date_only": false, "value": "2026-09-16T20:23:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11510-1", "record": "OPENSUSE-SU-2026:11510-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-16T21:26:05Z", "date_only": false, "value": "2026-09-16T21:26:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11510-1", "record": "OPENSUSE-SU-2026:11510-1", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-09-17T17:19:29Z", "date_only": false, "value": "2026-09-17T17:19:29Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11510-1", "record": "OPENSUSE-SU-2026:11510-1", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-09-17T17:19:29Z", "date_only": false, "value": "2026-09-17T17:19:29Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:11510-1", "record": "OPENSUSE-SU-2026:11510-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-02T23:11:23Z", "date_only": false, "value": "2026-10-02T23:11:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2JHM-W3MP-JCWR", "record": "GHSA-2JHM-W3MP-JCWR", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-17T09:37:59Z", "date_only": false, "value": "2026-10-17T09:37:59Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-12372", "record": "UBUNTU-CVE-2026-12372", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-23T20:10:00.160Z", "date_only": false, "value": "2026-10-23T20:10:00.160", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-12372", "record": "FKIE_CVE-2026-12372", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-27T09:31:28Z", "date_only": false, "value": "2026-10-27T09:31:28Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-GPTLINE-CVE-2026-12372", "record": "BREW-GPTLINE-CVE-2026-12372", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-29T21:42:01Z", "date_only": false, "value": "2026-10-29T21:42:01Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-SAFETY-CVE-2026-12372", "record": "BREW-SAFETY-CVE-2026-12372", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-29T21:52:04Z", "date_only": false, "value": "2026-10-29T21:52:04Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-ACRONYM-CVE-2026-12372", "record": "BREW-ACRONYM-CVE-2026-12372", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-03T14:04:11.602Z", "anchors": {"origin": {"timestamp": "2026-08-09T22:45:52.799Z", "date_only": false, "value": "2026-08-09T22:45:52.799Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12372", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-09T22:45:52.799Z", "date_only": false, "value": "2026-08-09T22:45:52.799Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12372", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-08-13T00:00:08.722Z", "date_only": false, "value": "2026-08-13T00:00:08.722249Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3376", "record": "CVE-2026-12372", "field": "creation_timestamp", "uuid": "da0f6238-28a7-4585-8766-fd4f9cf1880f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 validate_network_url() \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 nltk.pathsec \u043f\u0430\u043a\u0435\u0442\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0434\u043b\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u044f\u0437\u044b\u043a\u0430 NLTK \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e. \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c SSRF-\u0430\u0442\u0430\u043a\u0443\n\nBDU:2026-11389\nCVE-2026-12372\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/nltk/nltk/pull/3574\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-12372", "url": "https://t.me/bdufstecru/3376", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 263655.923, "hours": 73.2377563888889, "days": 3.0515731828703703, "min_seconds": 263655.923, "max_seconds": 263655.923, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-09T22:45:52.799Z", "date_only": false, "value": "2026-08-09T22:45:52.799Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12372", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-13T00:00:08.722Z", "date_only": false, "value": "2026-08-13T00:00:08.722249Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3376", "record": "CVE-2026-12372", "field": "creation_timestamp", "uuid": "da0f6238-28a7-4585-8766-fd4f9cf1880f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 validate_network_url() \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 nltk.pathsec \u043f\u0430\u043a\u0435\u0442\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0434\u043b\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u044f\u0437\u044b\u043a\u0430 NLTK \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e. \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c SSRF-\u0430\u0442\u0430\u043a\u0443\n\nBDU:2026-11389\nCVE-2026-12372\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/nltk/nltk/pull/3574\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-12372", "url": "https://t.me/bdufstecru/3376", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 7399098.80353, "hours": 2055.3052232027776, "days": 85.63771763344907, "min_seconds": 7399098.80353, "max_seconds": 7399098.80353, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-09T22:45:52.799Z", "date_only": false, "value": "2026-08-09T22:45:52.799Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-12372", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-03T14:04:11.602Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 7135442.88053, "hours": 1982.0674668138888, "days": 82.5861444505787, "min_seconds": 7135442.88053, "max_seconds": 7135442.88053, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-13T00:00:08.722Z", "date_only": false, "value": "2026-08-13T00:00:08.722249Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3376", "record": "CVE-2026-12372", "field": "creation_timestamp", "uuid": "da0f6238-28a7-4585-8766-fd4f9cf1880f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 validate_network_url() \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 nltk.pathsec \u043f\u0430\u043a\u0435\u0442\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0434\u043b\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0438 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u044f\u0437\u044b\u043a\u0430 NLTK \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e. \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c SSRF-\u0430\u0442\u0430\u043a\u0443\n\nBDU:2026-11389\nCVE-2026-12372\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/nltk/nltk/pull/3574\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-12372", "url": "https://t.me/bdufstecru/3376", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-03T14:04:11.602Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}