{"metadata": {"vulnerability": "CVE-2026-20931", "count": 58, "kinds": {"milestone": 9, "sighting": 19, "kev": 0, "other": 30}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0007", "record": "NCSC-2026-0007", "field": "document.tracking.generator.date"}, {"timestamp": "2025-12-04T20:04:16.336Z", "date_only": false, "value": "2025-12-04T20:04:16.336Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-20931", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-01-13T00:00:00Z", "date_only": true, "value": "2026-01-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0044", "record": "CERTFR-2026-AVI-0044", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-01-13T08:00:00Z", "date_only": false, "value": "2026-01-13T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-20931", "record": "MSRC_CVE-2026-20931", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-01-13T08:00:00Z", "date_only": false, "value": "2026-01-13T08:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-20931", "record": "MSRC_CVE-2026-20931", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-01-13T08:00:00Z", "date_only": false, "value": "2026-01-13T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-20931", "record": "MSRC_CVE-2026-20931", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-01-13T08:00:00Z", "date_only": false, "value": "2026-01-13T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-20931", "record": "MSRC_CVE-2026-20931", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-01-13T16:00:00Z", "date_only": false, "value": "2026-01-13T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2026-20931", "field": "containers.cna.datePublic"}, {"timestamp": "2026-01-13T17:57:03.440Z", "date_only": false, "value": "2026-01-13T17:57:03.440Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-20931", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-01-13T18:01:16Z", "date_only": false, "value": "2026-01-13T18:01:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "eb168de4-166a-4589-b138-43b8a857c7ea", "url": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review"}, {"timestamp": "2026-01-13T18:03:51.803Z", "date_only": false, "value": "2026-01-13T18:03:51.803Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-20931", "record": "MSRC_CVE-2026-20931", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-13T18:16:20Z", "date_only": false, "value": "2026-01-13T18:16:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QVH8-5V9X-29HH", "record": "GHSA-QVH8-5V9X-29HH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-01-13T18:16:20.003Z", "date_only": false, "value": "2026-01-13T18:16:20.003", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20931", "record": "FKIE_CVE-2026-20931", "field": "published"}, {"timestamp": "2026-01-13T18:16:30Z", "date_only": false, "value": "2026-01-13T18:16:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "0bcee8f2-addf-4dd4-adcc-d8125c7f4c7c", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007"}, {"timestamp": "2026-01-13T18:31:10Z", "date_only": false, "value": "2026-01-13T18:31:10Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QVH8-5V9X-29HH", "record": "GHSA-QVH8-5V9X-29HH", "field": "published"}, {"timestamp": "2026-01-13T19:16:30.720Z", "date_only": false, "value": "2026-01-13T19:16:30.720079Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0007", "record": "NCSC-2026-0007", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-01-13T19:16:30.720Z", "date_only": false, "value": "2026-01-13T19:16:30.720079Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0007", "record": "NCSC-2026-0007", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-01-13T23:00:00Z", "date_only": false, "value": "2026-01-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0083", "record": "WID-SEC-W-2026-0083", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-01-13T23:00:00Z", "date_only": false, "value": "2026-01-13T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0083", "record": "WID-SEC-W-2026-0083", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-01-13T23:00:00Z", "date_only": false, "value": "2026-01-13T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0083", "record": "WID-SEC-W-2026-0083", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-01-14T00:00:00Z", "date_only": false, "value": "2026-01-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0044", "record": "CERTFR-2026-AVI-0044", "field": "last_revision_date"}, {"timestamp": "2026-01-14T00:00:00Z", "date_only": false, "value": "2026-01-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0044", "record": "CERTFR-2026-AVI-0044", "field": "initial_release_date"}, {"timestamp": "2026-01-14T00:00:00Z", "date_only": false, "value": "2026-01-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0044", "record": "CERTFR-2026-AVI-0044", "field": "revisions.0.revision_date"}, {"timestamp": "2026-01-14T04:55:55.493Z", "date_only": false, "value": "2026-01-14T04:55:55.493448Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20931", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-01-14T04:55:55.493Z", "date_only": false, "value": "2026-01-14T04:55:55.493448Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20931", "record": "FKIE_CVE-2026-20931", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-01-14T23:00:00Z", "date_only": false, "value": "2026-01-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0083", "record": "WID-SEC-W-2026-0083", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-01-18T23:00:00Z", "date_only": false, "value": "2026-01-18T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0083", "record": "WID-SEC-W-2026-0083", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-01-24T21:23:49Z", "date_only": false, "value": "2026-01-24T21:23:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/2d3e86b3181f9d89826fddcea380f1d5", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "8bdbc106-24bc-4535-9a42-36ef4be94ebe", "url": "https://gist.github.com/alon710/2d3e86b3181f9d89826fddcea380f1d5"}, {"timestamp": "2026-01-24T22:27:31Z", "date_only": false, "value": "2026-01-24T22:27:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/3f661a066c17d895d31f7bb6d2547a88", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "ca1364a7-ece7-4208-a62b-ce528f97b7fb", "url": "https://gist.github.com/alon710/3f661a066c17d895d31f7bb6d2547a88"}, {"timestamp": "2026-01-24T22:27:34Z", "date_only": false, "value": "2026-01-24T22:27:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/297b3f5379b390af612bc10c64eed8a8", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "a18d501c-4626-4ee8-8bca-29baba97f6f6", "url": "https://gist.github.com/alon710/297b3f5379b390af612bc10c64eed8a8"}, {"timestamp": "2026-02-19T23:00:00Z", "date_only": false, "value": "2026-02-19T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0083", "record": "WID-SEC-W-2026-0083", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-02-20T09:35:00Z", "date_only": false, "value": "2026-02-20T18:35+09:00", "kind": "other", "label": "Dc:date", "source": "jvndb \u00b7 JVNDB-2026-004359", "record": "JVNDB-2026-004359", "field": "dc:date"}, {"timestamp": "2026-02-20T09:35:00Z", "date_only": false, "value": "2026-02-20T18:35+09:00", "kind": "other", "label": "Dcterms:modified", "source": "jvndb \u00b7 JVNDB-2026-004359", "record": "JVNDB-2026-004359", "field": "dcterms:modified"}, {"timestamp": "2026-02-25T21:02:33.224Z", "date_only": false, "value": "2026-02-25T21:02:33.224210Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfpldacvwy2i", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "b527e79a-2980-4dca-bcd9-30157340b72a", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfpldacvwy2i"}, {"timestamp": "2026-02-26T15:04:19.842Z", "date_only": false, "value": "2026-02-26T15:04:19.842Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20931", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-02T23:00:00Z", "date_only": false, "value": "2026-03-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0083", "record": "WID-SEC-W-2026-0083", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-03-02T23:00:00Z", "date_only": false, "value": "2026-03-02T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0083", "record": "WID-SEC-W-2026-0083", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-03T11:12:18.782Z", "date_only": false, "value": "2026-03-03T11:12:18.782+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0083", "record": "WID-SEC-W-2026-0083", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-10T12:53:42.521Z", "date_only": false, "value": "2026-04-10T12:53:42.521564Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0007", "record": "NCSC-2026-0007", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-04-10T12:53:42.521Z", "date_only": false, "value": "2026-04-10T12:53:42.521564Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0007", "record": "NCSC-2026-0007", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-22T17:18:54.023Z", "date_only": false, "value": "2026-04-22T17:18:54.023070Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/0patch/statuses/116449498436577286", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "d6bd21ff-ec70-451c-a208-8013efde4753", "url": "https://infosec.exchange/users/0patch/statuses/116449498436577286"}, {"timestamp": "2026-04-22T22:19:45.122Z", "date_only": false, "value": "2026-04-22T22:19:45.122723Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk4jqw3lvl2i", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "6bbccdcc-b1d6-4bd0-926e-f061210ba6b9", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk4jqw3lvl2i"}, {"timestamp": "2026-04-25T22:42:59.364Z", "date_only": false, "value": "2026-04-25T22:42:59.364613Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mke4hcxlrk2r", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "efe2ea8f-b454-4e05-a297-52df0d9f62f2", "url": "https://bsky.app/profile/etguenni.bsky.social/post/3mke4hcxlrk2r"}, {"timestamp": "2026-04-25T22:43:29.775Z", "date_only": false, "value": "2026-04-25T22:43:29.775400Z", "kind": "sighting", "label": "Seen", "source": "https://social.tchncs.de/users/gborn/statuses/116467761739088336", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "9a18f140-03ac-43cb-9a4f-24a1485c4ad9", "url": "https://social.tchncs.de/users/gborn/statuses/116467761739088336"}, {"timestamp": "2026-04-26T14:36:32.522Z", "date_only": false, "value": "2026-04-26T14:36:32.522553Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/winfuture.de/post/3mkfrqdecp62h", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "e046c42f-6581-461c-9409-044f216a118a", "url": "https://bsky.app/profile/winfuture.de/post/3mkfrqdecp62h"}, {"timestamp": "2026-05-26T17:02:49.387Z", "date_only": false, "value": "2026-05-26T17:02:49.387Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-20931", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-26T18:31:36Z", "date_only": false, "value": "2026-05-26T18:31:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QVH8-5V9X-29HH", "record": "GHSA-QVH8-5V9X-29HH", "field": "modified"}, {"timestamp": "2026-07-25T15:00:10.872Z", "date_only": false, "value": "2026-07-25T15:00:10.872732Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/604", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "373f7f7d-9a2a-4d16-b5e4-8b8b679911af", "content": "\u041f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435\u0441\u044c Windows Server? \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0430 \u043b\u0438 \u0443 \u0432\u0430\u0441 \u0434\u0432\u0435\u0440\u044c \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438\n\n\ud83d\udee1\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2026-20931, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0421\u0435\u0440\u0433\u0435\u0439 \u0411\u043b\u0438\u0437\u043d\u044e\u043a \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b PT SWARM (Positive Technologies). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 8,0 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e CVSS 3.1 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 TapiSrv \u0432 35 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Windows Server \u2014 \u043e\u0442 2008 \u0434\u043e 2025. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u26a0\ufe0f \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043e\u043c\u0435\u043d\u043d\u0430\u044f \u0443\u0447\u0451\u0442\u043a\u0430 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u0430\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u0441\u043b\u0443\u0436\u0431\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 \u2014 \u0447\u0442\u043e \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0440\u0435\u0434\u043a\u043e. \u041e\u0434\u043d\u0430\u043a\u043e \u0442\u0430\u043c, \u0433\u0434\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0434\u043e\u043c\u0435\u043d\u0435, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u2705 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0439 \u0440\u0435\u0436\u0438\u043c \u0441\u043b\u0443\u0436\u0431\u044b \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438.\n\n#\u0432\u0437\u043b\u043e\u043c #zeroday #PositiveTechnologies\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/604"}, {"timestamp": "2026-07-26T02:00:06.780Z", "date_only": false, "value": "2026-07-26T02:00:06.780496Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/1057", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "7775d479-6960-48c2-a162-87d711a51e10", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by researcher Sergey Bliznyuk.\n\nRead the write-up:\n\n\ud83d\udd17 https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/\n\ud83d\udd17 https://habr.com/ru/companies/pt/articles/984934/", "url": "https://t.me/cyberwarehouse/1057"}, {"timestamp": "2026-07-26T02:02:58.134Z", "date_only": false, "value": "2026-07-26T02:02:58.134841Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3992", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "8e51cae3-62d7-4609-8b3e-b9098a9690ff", "content": "\ud83e\uddd0 \u0412\u0441\u0435 \u0435\u0449\u0435 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 Windows? \u0412\u043e\u0442 \u0432\u0430\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0432\u043e\u0434 \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c: \u044d\u043a\u0441\u043f\u0435\u0440\u0442 PT SWARM \u0432\u044b\u044f\u0432\u0438\u043b \u0438 \u043f\u043e\u043c\u043e\u0433 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 TapiSrv \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0421\u0435\u0440\u0433\u0435\u0439 \u0411\u043b\u0438\u0437\u043d\u044e\u043a, \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (8,0 \u043f\u043e CVSS 3.1). \u042d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430\u0445 Windows, \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0441 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0441\u0442\u0430\u0446\u0438\u043e\u043d\u0430\u0440\u043d\u044b\u043c\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u043c\u0438, \u043c\u043e\u0434\u0435\u043c\u0430\u043c\u0438, VoIP-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438).\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 PT-2026-27341 (CVE-2026-20931) \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b 35 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0430\u043a \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 Windows Server 2019/2022/2025, \u0442\u0430\u043a \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 (Windows Server 2008 \u0438 2012). \u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d \u0432 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 Microsoft. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udc68\u200d\ud83d\udcbb \u0427\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0437\u0430\u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u0433\u0438\u043d \u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043b\u044e\u0431\u043e\u0433\u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f.\n\n\u0414\u043b\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u043e \u0431\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0434\u043a\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u043d\u0435\u043c\u0443. \u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u044d\u0442\u0430\u043f\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0434\u043e\u043c\u0435\u043d\u0435 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445, \u0430 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u0440\u0430\u0437\u0432\u0438\u0442\u044c \u043d\u0430\u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0438 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0431\u0438\u0437\u043d\u0435\u0441-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b.\n\n\u2757\ufe0f\u0410\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0430 TapiSrv \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445\n\n\u2022 \u0415\u0441\u043b\u0438 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0439 \u0440\u0435\u0436\u0438\u043c, \u0435\u0441\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u2022 \u0414\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u044b \u0443\u0432\u0438\u0434\u0438\u0442\u0435 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u044d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0438\u0441, \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442.\n\n#PTSWARM \n@Positive_Technologies", "url": "https://t.me/Positive_Technologies/3992"}, {"timestamp": "2026-07-26T07:01:47.040Z", "date_only": false, "value": "2026-07-26T07:01:47.040121Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/zhatez/2367", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "66187850-ef53-419a-9677-7706c73813a2", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by researcher Sergey Bliznyuk.\n\nRead the write-up:\n\n\ud83d\udd17 https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/\n\ud83d\udd17 https://habr.com/ru/companies/pt/articles/984934/", "url": "https://t.me/zhatez/2367"}, {"timestamp": "2026-07-27T00:00:34.075Z", "date_only": false, "value": "2026-07-27T00:00:34.075162Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/1057", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "91e5076f-6f9e-4160-9c48-368a93201fbc", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by researcher Sergey Bliznyuk.\n\nRead the write-up:\n\n\ud83d\udd17 https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/\n\ud83d\udd17 https://habr.com/ru/companies/pt/articles/984934/", "url": "https://t.me/cyberwarehouse/1057"}, {"timestamp": "2026-07-28T23:00:04.781Z", "date_only": false, "value": "2026-07-28T23:00:04.781730Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/zhatez/2367", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "b8a9135b-c878-45ae-b832-38823bb813cb", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by researcher Sergey Bliznyuk.\n\nRead the write-up:\n\n\ud83d\udd17 https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/\n\ud83d\udd17 https://habr.com/ru/companies/pt/articles/984934/", "url": "https://t.me/zhatez/2367"}, {"timestamp": "2026-07-30T20:47:22.551Z", "date_only": false, "value": "2026-07-30T20:47:22.551Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-20931", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-30T20:47:22.551Z", "date_only": false, "value": "2026-07-30T20:47:22.551Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2026-20931", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-30T21:17:09.910Z", "date_only": false, "value": "2026-07-30T21:17:09.910", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20931", "record": "FKIE_CVE-2026-20931", "field": "lastModified"}, {"timestamp": "2026-09-02T06:00:08.588Z", "date_only": false, "value": "2026-09-02T06:00:08.588790Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingTeamGrupoOfficial/46315", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "8844bc9a-f21c-49b7-8431-0fc1f4e322d8", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk.\n\nRead the write-up: https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/", "url": "https://t.me/HackingTeamGrupoOfficial/46315"}, {"timestamp": "2026-09-03T00:00:50.337Z", "date_only": false, "value": "2026-09-03T00:00:50.337261Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingTeamGrupoOfficial/46315", "record": "CVE-2026-20931", "field": "creation_timestamp", "uuid": "db83b253-61d7-44d3-8064-c2b9ecb4c05f", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk.\n\nRead the write-up: https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/", "url": "https://t.me/HackingTeamGrupoOfficial/46315"}]}