{"metadata": {"vulnerability": "CVE-2026-23760", "count": 97, "kinds": {"milestone": 6, "sighting": 53, "kev": 17, "other": 21}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0040", "record": "NCSC-2026-0040", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-15T18:42:20.938Z", "date_only": false, "value": "2026-01-15T18:42:20.938Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-23760", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-01-15T23:00:00Z", "date_only": false, "value": "2026-01-15T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0133", "record": "WID-SEC-W-2026-0133", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-01-15T23:00:00Z", "date_only": false, "value": "2026-01-15T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0133", "record": "WID-SEC-W-2026-0133", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-01-15T23:00:00Z", "date_only": false, "value": "2026-01-15T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0133", "record": "WID-SEC-W-2026-0133", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-01-21T23:00:00Z", "date_only": false, "value": "2026-01-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0133", "record": "WID-SEC-W-2026-0133", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-01-22T00:00:00Z", "date_only": false, "value": "2026-01-22T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-23760", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-01-22T00:00:00Z", "date_only": false, "value": "2026-01-22T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-23760", "record": "FKIE_CVE-2026-23760", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-01-22T14:35:17.235Z", "date_only": false, "value": "2026-01-22T14:35:17.235Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-23760", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-01-22T15:16:55Z", "date_only": false, "value": "2026-01-22T15:16:55Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MJ6X-679W-76WR", "record": "GHSA-MJ6X-679W-76WR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-01-22T15:16:55.120Z", "date_only": false, "value": "2026-01-22T15:16:55.120", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-23760", "record": "FKIE_CVE-2026-23760", "field": "published"}, {"timestamp": "2026-01-22T15:31:33Z", "date_only": false, "value": "2026-01-22T15:31:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MJ6X-679W-76WR", "record": "GHSA-MJ6X-679W-76WR", "field": "published"}, {"timestamp": "2026-01-22T15:50:14.336Z", "date_only": false, "value": "2026-01-22T15:50:14.336990Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczjzl6bjk2c", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "350c8399-3dda-4a6f-85aa-1f68bc343665", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczjzl6bjk2c"}, {"timestamp": "2026-01-22T23:00:00Z", "date_only": false, "value": "2026-01-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0133", "record": "WID-SEC-W-2026-0133", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-01-23T10:46:49.321Z", "date_only": false, "value": "2026-01-23T10:46:49.321242Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3md3jjwravw2d", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "1c0afaf5-aaeb-4846-a70e-93b026837564", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3md3jjwravw2d"}, {"timestamp": "2026-01-23T21:02:58.600Z", "date_only": false, "value": "2026-01-23T21:02:58.600343Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3md4lxoyhrv2v", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "d282d4f5-f2d0-404d-92c8-71c1ea1a4ffb", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3md4lxoyhrv2v"}, {"timestamp": "2026-01-25T00:04:42Z", "date_only": false, "value": "2026-01-25T00:04:42+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2026-23760", "field": "timestamps.asserted_at", "uuid": "8656282e-b328-410d-86e4-392b2c00279a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-25T00:04:42Z", "date_only": false, "value": "2026-01-25T00:04:42+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-23760", "field": "timestamps.first_seen_at", "uuid": "8656282e-b328-410d-86e4-392b2c00279a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-25T23:00:00Z", "date_only": false, "value": "2026-01-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0133", "record": "WID-SEC-W-2026-0133", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-01-25T23:00:00Z", "date_only": false, "value": "2026-01-25T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0133", "record": "WID-SEC-W-2026-0133", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-01-25T23:00:00Z", "date_only": false, "value": "2026-01-25T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0133", "record": "WID-SEC-W-2026-0133", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": false, "value": "2026-01-26T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-23760", "field": "timestamps.asserted_at", "uuid": "adddff13-de5b-496a-88b9-93bf52749bb3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": true, "value": "2026-01-26", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-23760", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": true, "value": "2026-01-26", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-23760", "field": "evidence.0.details.date_added", "uuid": "adddff13-de5b-496a-88b9-93bf52749bb3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": false, "value": "2026-01-26T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-23760", "field": "timestamps.first_seen_at", "uuid": "adddff13-de5b-496a-88b9-93bf52749bb3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": false, "value": "2026-01-26T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-23760", "field": "status.status_updated_at", "uuid": "adddff13-de5b-496a-88b9-93bf52749bb3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-26T09:50:57.302Z", "date_only": false, "value": "2026-01-26T09:50:57.302+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0133", "record": "WID-SEC-W-2026-0133", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-26T14:01:50.921Z", "date_only": false, "value": "2026-01-26T14:01:50.921242Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/115961764885063939", "record": "cve-2026-23760", "field": "creation_timestamp", "uuid": "dd85c4bd-bd1b-4c88-891c-e8798b725900", "url": "https://infosec.exchange/users/shadowserver/statuses/115961764885063939"}, {"timestamp": "2026-01-26T14:03:32.524Z", "date_only": false, "value": "2026-01-26T14:03:32.524887Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mddfwextds26", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "ca6b0a81-9fb1-4460-8261-67dada023272", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3mddfwextds26"}, {"timestamp": "2026-01-26T14:03:33.022Z", "date_only": false, "value": "2026-01-26T14:03:33.022663Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mddfwh3if226", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "76880c68-759b-4962-aa43-5760a9d99716", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3mddfwh3if226"}, {"timestamp": "2026-01-27T00:27:17.787Z", "date_only": false, "value": "2026-01-27T00:27:17.787154Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115964224273488889", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "bf846626-26ee-46ca-9b17-e66b0225fa30", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/115964224273488889"}, {"timestamp": "2026-01-27T09:51:39Z", "date_only": false, "value": "2026-01-27T09:51:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0040", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "84170b31-9408-479a-abb6-40a8ed0e2ca7", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0040"}, {"timestamp": "2026-01-27T10:51:39.476Z", "date_only": false, "value": "2026-01-27T10:51:39.476320Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0040", "record": "NCSC-2026-0040", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-01-27T10:51:39.476Z", "date_only": false, "value": "2026-01-27T10:51:39.476320Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0040", "record": "NCSC-2026-0040", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-01-27T13:16:50.888Z", "date_only": false, "value": "2026-01-27T13:16:50.888151Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdftruqqh42m", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "d3500695-bd92-40e4-9294-33272dd44d5c", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdftruqqh42m"}, {"timestamp": "2026-01-27T14:23:49.744Z", "date_only": false, "value": "2026-01-27T14:23:49.744802Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115967513681913167", "record": "cve-2026-23760", "field": "creation_timestamp", "uuid": "54f3c21e-3fab-45a5-8fc4-0f5bd121c283", "url": "https://infosec.exchange/users/defendopsdiaries/statuses/115967513681913167"}, {"timestamp": "2026-01-27T18:32:11Z", "date_only": false, "value": "2026-01-27T18:32:11Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MJ6X-679W-76WR", "record": "GHSA-MJ6X-679W-76WR", "field": "modified"}, {"timestamp": "2026-01-27T21:03:06.814Z", "date_only": false, "value": "2026-01-27T21:03:06.814641Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdgnthxflt24", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "490d9302-f5fa-4950-a680-6806b689294d", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdgnthxflt24"}, {"timestamp": "2026-01-28T09:55:02.092Z", "date_only": false, "value": "2026-01-28T09:55:02.092497Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mdhyxx2imd2d", "record": "cve-2026-23760", "field": "creation_timestamp", "uuid": "4af6026e-6952-427b-9f38-c21cd742dc79", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mdhyxx2imd2d"}, {"timestamp": "2026-01-28T13:23:54Z", "date_only": false, "value": "2026-01-28T13:23:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/01/28/over-smartermail-servers-exposed-to.html", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "3d03df85-2542-47fa-b512-d310e9595393", "url": "https://threatintel.cc/2026/01/28/over-smartermail-servers-exposed-to.html"}, {"timestamp": "2026-01-28T14:23:42.001Z", "date_only": false, "value": "2026-01-28T14:23:42.001154Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115973175481761215", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "6b34aa62-0446-42ab-ac44-891dfc8b2092", "url": "https://infosec.exchange/users/edwardk/statuses/115973175481761215"}, {"timestamp": "2026-01-30T15:00:05.848Z", "date_only": false, "value": "2026-01-30T15:00:05.848836Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mdnkxbnm3l2h", "record": "cve-2026-23760", "field": "creation_timestamp", "uuid": "5e33be58-8886-491b-b8c3-d50bc2083c9f", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mdnkxbnm3l2h"}, {"timestamp": "2026-01-31T09:52:36.131Z", "date_only": false, "value": "2026-01-31T09:52:36.131710Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mdpkabxjbs2s", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "cf175a43-7733-4b41-a211-a69f9a25a8a5", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mdpkabxjbs2s"}, {"timestamp": "2026-01-31T10:08:21.444Z", "date_only": false, "value": "2026-01-31T10:08:21.444261Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mdpl4ek5ps2s", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "837ea475-4d58-4ff7-b893-50128cd1d596", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mdpl4ek5ps2s"}, {"timestamp": "2026-02-01T02:39:07.870Z", "date_only": false, "value": "2026-02-01T02:39:07.870396Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mdrchvi3h22n", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "84f010d9-fa5f-4deb-93cf-762e37bc3999", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mdrchvi3h22n"}, {"timestamp": "2026-02-01T02:46:45.052Z", "date_only": false, "value": "2026-02-01T02:46:45.052796Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mdrcvm2yn22n", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "836a0850-892d-45c6-b3b0-9a9eb72eed4c", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mdrcvm2yn22n"}, {"timestamp": "2026-02-02T10:39:38.796Z", "date_only": false, "value": "2026-02-02T10:39:38.796816Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/knutix.bsky.social/post/3mdunsceklh2r", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "5cbb56b1-f204-4029-90b0-c864d7784d26", "url": "https://bsky.app/profile/knutix.bsky.social/post/3mdunsceklh2r"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-23760", "field": "timestamps.recorded_at", "uuid": "adddff13-de5b-496a-88b9-93bf52749bb3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:25:40.804Z", "date_only": false, "value": "2026-02-02T12:25:40.804647Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/adddff13-de5b-496a-88b9-93bf52749bb3", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "5ddbc599-0fd3-4600-b9f1-e52238c74211", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/adddff13-de5b-496a-88b9-93bf52749bb3"}, {"timestamp": "2026-02-06T09:25:57.008Z", "date_only": false, "value": "2026-02-06T09:25:57.008166Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0040", "record": "NCSC-2026-0040", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-02-06T09:25:57.008Z", "date_only": false, "value": "2026-02-06T09:25:57.008166Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0040", "record": "NCSC-2026-0040", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-11T16:48:39.621Z", "date_only": false, "value": "2026-02-11T16:48:39.621241Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3melwmfbbok2e", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "fc9c5ce0-fd93-462e-9694-a96c3cf58b54", "url": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3melwmfbbok2e"}, {"timestamp": "2026-02-12T17:52:23.850Z", "date_only": false, "value": "2026-02-12T17:52:23.850671Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116058930606336651", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "dea4f6ba-7935-4196-98e3-393aae71fe20", "url": "https://infosec.exchange/users/threatcodex/statuses/116058930606336651"}, {"timestamp": "2026-02-16T00:00:00Z", "date_only": true, "value": "2026-02-16", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-23760", "field": "evidence.0.details.due_date", "uuid": "adddff13-de5b-496a-88b9-93bf52749bb3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-16T07:11:28Z", "date_only": false, "value": "2026-02-16T07:11:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/2082", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "63196abb-bfef-4dc2-ae74-79f0c7d9a2cd", "content": "\ud83d\udd25 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udfe3APT Head Mare \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0433\u043e\u0434\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u043d\u043e\u0432\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 PhantomHeart \u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 PhantomProxyLite, \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 PowerShell. \u042d\u0442\u043e \u043e\u0442\u0440\u0430\u0436\u0430\u0435\u0442 \u0441\u0442\u0440\u0435\u043c\u043b\u0435\u043d\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c LotL. \u0414\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u00a0 BDU:2025-10114 \u0432\u00a0 TrueConf Server \u0438 \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u044e\u0442 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433.\n\n\ud83d\udfe2\u041f\u043e\u043c\u0438\u043d\u0443\u0442\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 TTPs \u0433\u0440\u0443\u043f\u043f\u044b Scattered Spider/Muddled Libra, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043e\u0431\u0440\u0430\u0437\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043a\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 VMware vSphere\u00a0 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0436\u0435\u0440\u0442\u0432\u044b. \n\n\ud83d\udfe3\u041d\u043e\u0432\u044b\u0435 \u0448\u0442\u0440\u0438\u0445\u0438 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u0441 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0435\u0439 Notepad++ \u2014 \u0440\u0430\u0437\u0431\u043e\u0440 \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u043f\u0430\u0442\u0442\u0435\u0440\u043d\u043e\u0432 \u0432 TTPs \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445. \u0410\u0442\u0430\u043a\u0443 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 APT\u00a0 Lotus Blossom/G0030.\n\n\ud83d\udfe2\u0413\u0440\u0443\u043f\u043f\u0430 Storm-2603 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e CVE-2026-23760 \u0432\u00a0 SmarterMail \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a Warlock \u043d\u0430 \u043f\u043e\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \n\n\ud83d\udfe3\u041d\u043e\u0432\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0441\u0432\u0435\u0436\u0438\u0445 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 BRICKSTORM (\u043a\u043e\u043d\u0435\u0447\u043d\u043e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ivanti).\n\n\ud83d\udfe3\u0422\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u0441\u043f\u0430\u043c\u0430 \u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0437\u0430 2025 \u0433\u043e\u0434. \u041a\u0440\u043e\u043c\u0435 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438, \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0438, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0437\u0430 \u0433\u043e\u0434.\n\n\ud83d\udfe2\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0412\u041f\u041e Lockbit 5.0, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 Windows, Linux \u0438 ESXi. \n\n\ud83d\udfe1\u041e\u0431\u0437\u043e\u0440 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 Google \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f Gemini \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041c\u043d\u043e\u0433\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0418\u0418 \u043d\u0430 \u043f\u043e\u0442\u043e\u043a \u043a \u043a\u043e\u043d\u0446\u0443 \u0433\u043e\u0434\u0430 \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043c\u043f\u043e\u0432 \u043f\u043e\u0447\u0442\u044b \u0438 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0443\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u043f\u0440\u0438\u043c\u0430\u043d\u043e\u043a.\n\n\ud83d\udfe3\u0420\u0430\u0437\u0431\u043e\u0440 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a RenEngine \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b ACR Stealer. \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0438\u0440\u0430\u0442\u0441\u043a\u0438\u0435 \u0438\u0433\u0440\u044b. \n\n\ud83d\udfe2\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u0447\u0442\u0438 \u0433\u043e\u0434\u0438\u0447\u043d\u043e\u0433\u043e \u0437\u0430\u0442\u0438\u0448\u044c\u044f \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u0438\u043b\u043e\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 LummaStealer.\n\n\ud83d\udd35\u041e\u043a\u043e\u043b\u043e 80% \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e WinRAR. \u0414\u0435\u0444\u0435\u043a\u0442\u043e\u043c CVE-2025-8088 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n\ud83d\udfe2\u041c\u043e\u0434\u0430 \u043f\u0438\u0441\u0430\u0442\u044c \u0432\u0441\u0451 \u043f\u043e\u0434\u0440\u044f\u0434 \u043d\u0430 Node.js \u0434\u043e\u0431\u0440\u0430\u043b\u0430\u0441\u044c \u0434\u043e \u0412\u041f\u041e \u2014 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0439\u0442\u0435 LTX stealer.\n\n\ud83d\udfe3\u041e\u0431\u0437\u043e\u0440 ZerodayRAT, \u043f\u0440\u043e\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u0447\u0435\u0440\u0435\u0437 Telegram \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f Android \u0438 iOS. \u0421\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f iOS \u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0442\u043e\u043b\u043a\u043e\u043c \u043d\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u044b, \u0437\u0430\u0442\u043e \u0435\u0441\u0442\u044c \u043c\u043d\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u043e\u0432 \u0430\u0434\u043c\u0438\u043d\u043a\u0438 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430. \n\n\ud83d\udd35Juniper research \u0438 Revolut \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u044e\u0442 \u043e\u0431\u044a\u0451\u043c \u043f\u043b\u0430\u0442\u043d\u043e\u0439 \u0440\u0435\u043a\u043b\u0430\u043c\u044b \u0432 \u0441\u043e\u0446\u0441\u0435\u0442\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0434\u0430\u043b\u0438 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u0432 2025 \u0433\u043e\u0434\u0443 \u0432 \u043e\u0434\u043d\u043e\u0439 \u0415\u0432\u0440\u043e\u043f\u0435, \u0432 \u0441\u043a\u0440\u043e\u043c\u043d\u044b\u0435 3,8 \u043c\u043b\u0440\u0434. \u0444\u0443\u043d\u0442\u043e\u0432. \n\n\ud83d\udd34\u0412\u043e\u0442 \u043e\u043d\u0438, \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u043f\u043e\u0432\u0441\u0435\u0434\u043d\u0435\u0432\u043d\u044b\u0435 \u0443\u0436\u0430\u0441\u044b \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a. \u041e\u0434\u043d\u0430 \u0443\u0442\u0451\u043a\u0448\u0430\u044f \u0443\u0447\u0451\u0442\u043a\u0430 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0444\u0438\u0440\u043c\u044b-\u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043b\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u043f\u043e\u043a\u0440\u0443\u043f\u043d\u0435\u0435, \u0434\u0430\u0432\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 200 (!) \u0430\u044d\u0440\u043e\u043f\u043e\u0440\u0442\u043e\u0432. \u0414\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0430\u044d\u0440\u043e\u043f\u043e\u0440\u0442\u0430\u043c\u0438, \u044d\u0442\u043e \u0431\u044b\u043b \u0443\u0447\u0451\u0442\u043a\u0430 \u043a \u043f\u043e\u0440\u0442\u0430\u043b\u0443 NGOSS (Next Generation Operations Support System).\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/2082"}, {"timestamp": "2026-02-18T20:01:33.261Z", "date_only": false, "value": "2026-02-18T20:01:33.261262Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mf5unsn3ur2i", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "0a5831c0-9897-4a6e-a226-ae187e310bed", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mf5unsn3ur2i"}, {"timestamp": "2026-03-04T01:43:21.033Z", "date_only": false, "value": "2026-03-04T01:43:21.033718Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5922990", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "ffdeb881-e103-46df-86bd-624c5d62a761", "url": "https://feedsin.space/feed/CISAKevBot/items/5922990"}, {"timestamp": "2026-03-05T01:30:23.457Z", "date_only": false, "value": "2026-03-05T01:30:23.457Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-23760", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-06T04:00:00Z", "date_only": false, "value": "2026-04-06T04:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "ed074474-2ca4-4f30-a0a3-789335b1e781", "url": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/"}, {"timestamp": "2026-04-06T16:05:28.645Z", "date_only": false, "value": "2026-04-06T16:05:28.645657Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mitnex2aj62f", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "3540c415-1b1f-4c6f-89c2-2b8f47a9d35d", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mitnex2aj62f"}, {"timestamp": "2026-04-07T04:00:00Z", "date_only": false, "value": "2026-04-07T04:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "887230a6-4691-451e-a07d-ff95f68c4b2d", "url": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-"}, {"timestamp": "2026-04-07T12:17:16.727Z", "date_only": false, "value": "2026-04-07T12:17:16.727080Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/index.espresso.cafecito.tech.ap.brid.gy/post/3mivr3o7ilge2", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "49c8d9d9-e5d2-49d2-8863-73dbdd7af0fd", "url": "https://bsky.app/profile/index.espresso.cafecito.tech.ap.brid.gy/post/3mivr3o7ilge2"}, {"timestamp": "2026-04-08T07:25:51Z", "date_only": false, "value": "2026-04-08T07:25:51.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f3b16ca9-f749-4169-9a68-b159e6aaf5ed", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "a5b16201-8e4c-4dad-945e-1adfad5867b8"}, {"timestamp": "2026-04-18T13:07:24Z", "date_only": false, "value": "2026-04-18T13:07:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f3b16ca9-f749-4169-9a68-b159e6aaf5ed", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "ff0427ea-a50f-471f-a467-a5509a20bf20"}, {"timestamp": "2026-05-06T19:56:10.729Z", "date_only": false, "value": "2026-05-06T19:56:10.729280Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3ml7ib3eiz62t", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "8be78ef9-3eb9-41e7-a05c-6655a8f4e325", "content": "Updated my Ransomware Vuln Matrix with two new bugs:\n- CVE-2026-23760 in Smartertools targeted by WarLock\n- CVE-2025-11371 in CentreStack targeted by Clop\n\nSee them all here\nhttps://t.co/fRIdp2QKE9\n\n\u2014 from @BushidoToken (https://x.com/BushidoToken/status/2052112572246081820)", "url": "https://bsky.app/profile/infosecbot.bsky.social/post/3ml7ib3eiz62t"}, {"timestamp": "2026-06-01T10:49:49Z", "date_only": false, "value": "2026-06-01T10:49:49+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-23760", "field": "timestamps.asserted_at", "uuid": "b6703658-3cde-4c44-b68d-cbdb0b4e479a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:49:49Z", "date_only": false, "value": "2026-06-01T10:49:49+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-23760", "field": "timestamps.first_seen_at", "uuid": "b6703658-3cde-4c44-b68d-cbdb0b4e479a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:49:49Z", "date_only": false, "value": "2026-06-01T10:49:49+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-23760", "field": "status.status_updated_at", "uuid": "b6703658-3cde-4c44-b68d-cbdb0b4e479a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:49:49.943Z", "date_only": false, "value": "2026-06-01T10:49:49.943Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-23760", "field": "evidence.0.details.added_date", "uuid": "b6703658-3cde-4c44-b68d-cbdb0b4e479a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:45:19.029Z", "date_only": false, "value": "2026-06-19T12:45:19.029643Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/917513d7-49fe-4ade-86da-93be9825ba6e", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "45a95789-46ae-4239-9bae-ba772261166a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/917513d7-49fe-4ade-86da-93be9825ba6e"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-23760", "field": "timestamps.recorded_at", "uuid": "b6703658-3cde-4c44-b68d-cbdb0b4e479a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:44.719Z", "date_only": false, "value": "2026-06-23T14:03:44.719372Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b6703658-3cde-4c44-b68d-cbdb0b4e479a", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "8b2ff3a2-9bbb-486f-b4d4-822fbdb9d4a3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b6703658-3cde-4c44-b68d-cbdb0b4e479a"}, {"timestamp": "2026-06-30T09:42:45.961Z", "date_only": false, "value": "2026-06-30T09:42:45.961442Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8656282e-b328-410d-86e4-392b2c00279a", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "653022b0-299b-4751-b3b3-4b4f0984f018", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8656282e-b328-410d-86e4-392b2c00279a"}, {"timestamp": "2026-07-14T10:15:11.159Z", "date_only": false, "value": "2026-07-14T10:15:11.159543Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-13)", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "d631cb7c-692a-40fd-ac14-aadc981ecf9a"}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2026-23760", "field": "timestamps.last_seen_at", "uuid": "8656282e-b328-410d-86e4-392b2c00279a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": true, "value": "2026-07-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2026-23760", "field": "evidence.0.details.observation_date", "uuid": "8656282e-b328-410d-86e4-392b2c00279a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2026-23760", "field": "status.status_updated_at", "uuid": "8656282e-b328-410d-86e4-392b2c00279a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T01:00:01Z", "date_only": false, "value": "2026-07-22T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2026-23760", "field": "timestamps.recorded_at", "uuid": "8656282e-b328-410d-86e4-392b2c00279a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-26T10:15:37.719Z", "date_only": false, "value": "2026-07-26T10:15:37.719959Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-25)", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "53b197d0-3d97-4353-9e94-c5624ff748ae"}, {"timestamp": "2026-07-27T10:15:08.454Z", "date_only": false, "value": "2026-07-27T10:15:08.454923Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-26)", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "9de7d682-a86b-451f-a939-92418af8c38b"}, {"timestamp": "2026-07-28T10:15:23.353Z", "date_only": false, "value": "2026-07-28T10:15:23.353425Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-27)", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "f9b86bf7-17e7-41ca-91bb-4fcf39d4060c"}, {"timestamp": "2026-07-29T10:15:06.430Z", "date_only": false, "value": "2026-07-29T10:15:06.430415Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-28)", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "d9683694-cf92-442a-8750-dcfe63918f25"}, {"timestamp": "2026-08-01T10:15:06.309Z", "date_only": false, "value": "2026-08-01T10:15:06.309027Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "e5989e7d-2dc1-4b2d-8cd0-6911335f170c"}, {"timestamp": "2026-08-04T03:56:03.047Z", "date_only": false, "value": "2026-08-04T03:56:03.047Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-23760", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-04T03:56:03.047Z", "date_only": false, "value": "2026-08-04T03:56:03.047Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-23760", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-04T05:16:38.160Z", "date_only": false, "value": "2026-08-04T05:16:38.160", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-23760", "record": "FKIE_CVE-2026-23760", "field": "lastModified"}, {"timestamp": "2026-08-04T13:02:24.730Z", "date_only": false, "value": "2026-08-04T13:02:24.730581Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msb343n27e2o", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "78336f12-5aa1-4c9a-b14f-4f16a29d99ab", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-23760: SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API\nCVSS 9.8 \u00b7 EPSS 96.3% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2026-23760\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3msb343n27e2o"}, {"timestamp": "2026-08-14T10:15:08.115Z", "date_only": false, "value": "2026-08-14T10:15:08.115112Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-13)", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "0fce8f07-d995-4b3a-9a70-bdbabd0edd23"}, {"timestamp": "2026-08-26T10:15:15.992Z", "date_only": false, "value": "2026-08-26T10:15:15.992863Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-25)", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "ce9bc4b8-8dec-4f3f-84ad-db5236600594"}, {"timestamp": "2026-08-27T10:15:09.517Z", "date_only": false, "value": "2026-08-27T10:15:09.517167Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "886f5e1e-6b4b-43b1-960d-db0f5b47b7f0"}, {"timestamp": "2026-08-28T18:00:04.738Z", "date_only": false, "value": "2026-08-28T18:00:04.738830Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/changelogWAF/6", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "7512f0d6-6572-4454-b31b-3f05dd78cbd8", "content": "New CVE Detections (2026-03-02)\n\nCVE-2025-52691: Arbitrary File Upload vulnerability in SmarterMail allowing attackers to upload malicious files, potentially leading to remote code execution.\n\nCVE-2026-23760: Authentication Bypass vulnerability in SmarterMail enabling unauthorized access to protected resources without valid credentials.\n\nCommand Injection \u2013 Nslookup: Detection for command injection via improper use of nslookup; this beta rule will be merged into the existing rule.", "url": "https://t.me/changelogWAF/6"}, {"timestamp": "2026-08-29T10:15:18.317Z", "date_only": false, "value": "2026-08-29T10:15:18.317396Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "801edf5f-2ab5-4dac-95a2-22744d5801c6"}, {"timestamp": "2026-09-01T10:15:06.835Z", "date_only": false, "value": "2026-09-01T10:15:06.835842Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "ee30de9b-93f5-46e2-a3b9-d80a8880e6d0"}, {"timestamp": "2026-09-04T10:15:02.405Z", "date_only": false, "value": "2026-09-04T10:15:02.405409Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-03)", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "11593a86-4602-4462-87b8-a85828a30e87"}, {"timestamp": "2026-09-24T23:00:16Z", "date_only": false, "value": "2026-09-24T23:00:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Y_V_vwgIFbHNgPXZK0yJcpPYye2oqdo4ftaJELBETT5wOkw", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "98e2d70b-119c-4e8b-9253-9677f9f9d4db"}, {"timestamp": "2026-09-24T23:00:16Z", "date_only": false, "value": "2026-09-24T23:00:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Y_V_vwgIFbHNgPXZK0yJcpPYye2oqdo4ftaJELBETT5wOkw", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "9e695af6-1d86-4c32-a937-c5aa9a4e1e3b"}, {"timestamp": "2026-09-28T00:00:00Z", "date_only": false, "value": "2026-09-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-28)", "record": "CVE-2026-23760", "field": "creation_timestamp", "uuid": "9cea94cf-e47f-4734-88cd-d9e1bdd8a23e"}]}