{"metadata": {"vulnerability": "CVE-2026-24858", "count": 185, "kinds": {"milestone": 11, "sighting": 126, "kev": 17, "other": 31}, "linked_omitted": 0}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0041", "record": "NCSC-2026-0041", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0079", "record": "NCSC-2026-0079", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-24858", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e1546c5c-ee29-412d-8453-540ce5e9e017", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": true, "value": "2026-01-27", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-24858", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": true, "value": "2026-01-27", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-24858", "field": "evidence.0.details.date_added", "uuid": "e1546c5c-ee29-412d-8453-540ce5e9e017", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-24858", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e1546c5c-ee29-412d-8453-540ce5e9e017", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": true, "value": "2026-01-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0097", "record": "CERTFR-2026-AVI-0097", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-24858", "field": "status.status_updated_at", "uuid": "e1546c5c-ee29-412d-8453-540ce5e9e017", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-27T15:11:02.057Z", "date_only": false, "value": "2026-01-27T15:11:02.057Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-24858", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-01-27T19:18:23.591Z", "date_only": false, "value": "2026-01-27T19:18:23.591Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-24858", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-01-27T20:16:24Z", "date_only": false, "value": "2026-01-27T20:16:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2X38-48VP-W23X", "record": "GHSA-2X38-48VP-W23X", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-01-27T20:16:24.477Z", "date_only": false, "value": "2026-01-27T20:16:24.477", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-24858", "record": "FKIE_CVE-2026-24858", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-01-27T20:18:01.898Z", "date_only": false, "value": "2026-01-27T20:18:01.898119Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdglczbdf425", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "e9ee9d30-2323-4fed-beb3-c8b34ad59948", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdglczbdf425"}, {"timestamp": "2026-01-27T20:24:14.677Z", "date_only": false, "value": "2026-01-27T20:24:14.677328Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdglo52jys2c", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "d0265375-b14d-4d91-a124-371678fee91f", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdglo52jys2c"}, {"timestamp": "2026-01-27T20:44:41Z", "date_only": false, "value": "2026-01-27T20:44:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cyber-fortinet-security-advisory-av26-059", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "e2811de4-7f27-458d-9437-875711653fbb", "url": "https://cyber.gc.ca/en/alerts-advisories/cyber-fortinet-security-advisory-av26-059"}, {"timestamp": "2026-01-27T21:31:49Z", "date_only": false, "value": "2026-01-27T21:31:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2X38-48VP-W23X", "record": "GHSA-2X38-48VP-W23X", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-01-27T23:00:00Z", "date_only": false, "value": "2026-01-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0226", "record": "WID-SEC-W-2026-0226", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-01-27T23:00:00Z", "date_only": false, "value": "2026-01-27T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0226", "record": "WID-SEC-W-2026-0226", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-01-27T23:00:00Z", "date_only": false, "value": "2026-01-27T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0226", "record": "WID-SEC-W-2026-0226", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-01-27T23:00:00Z", "date_only": false, "value": "2026-01-27T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0226", "record": "WID-SEC-W-2026-0226", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-01-27T23:20:01.084Z", "date_only": false, "value": "2026-01-27T23:20:01.084938Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mdgvigtcaf2a", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "3bf2940b-611d-4df9-8446-3243e1722d19", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3mdgvigtcaf2a"}, {"timestamp": "2026-01-27T23:29:37.021Z", "date_only": false, "value": "2026-01-27T23:29:37.021436Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mdgvzmayi32o", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "d3f436bc-8079-44b9-90e1-6606bc1fd3ba", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mdgvzmayi32o"}, {"timestamp": "2026-01-27T23:33:01.671Z", "date_only": false, "value": "2026-01-27T23:33:01.671605Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115969673188892982", "record": "cve-2026-24858", "field": "creation_timestamp", "uuid": "5844ce4e-caef-46fb-8a60-ed8c5ca0d5cd", "url": "https://infosec.exchange/users/defendopsdiaries/statuses/115969673188892982"}, {"timestamp": "2026-01-27T23:45:01.719Z", "date_only": false, "value": "2026-01-27T23:45:01.719216Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdgwv5wkwy2o", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "a799af99-94ef-4cde-b788-acd054b3dc22", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdgwv5wkwy2o"}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": false, "value": "2026-01-28T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0097", "record": "CERTFR-2026-AVI-0097", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": false, "value": "2026-01-28T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0097", "record": "CERTFR-2026-AVI-0097", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": false, "value": "2026-01-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0097", "record": "CERTFR-2026-AVI-0097", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-01-28T00:01:40.821Z", "date_only": false, "value": "2026-01-28T00:01:40.821976Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115969785847265606", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "51f23f5c-ba0b-44c3-b978-d2bf6175701e", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/115969785847265606"}, {"timestamp": "2026-01-28T02:27:31.944Z", "date_only": false, "value": "2026-01-28T02:27:31.944898Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdh7xqbwwa2y", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "60e3c64f-8943-4bc3-bfc4-84fb0f7e443b", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mdh7xqbwwa2y"}, {"timestamp": "2026-01-28T03:49:00Z", "date_only": false, "value": "2026-01-28T03:49:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/01/fortinet-patches-cve-2026-24858-after.html", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "5f492177-2e8f-4307-9a04-7c2aa8abafde", "url": "https://thehackernews.com/2026/01/fortinet-patches-cve-2026-24858-after.html"}, {"timestamp": "2026-01-28T04:00:00Z", "date_only": false, "value": "2026-01-28T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1737", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "4df37d82-af6a-43ca-b5cf-6e1fc3a40b7d", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1737"}, {"timestamp": "2026-01-28T04:01:04.868Z", "date_only": false, "value": "2026-01-28T04:01:04.868006Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mdhf6zavmg2c", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "3296ada9-d3d5-46a0-9232-2c92f58e525b", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mdhf6zavmg2c"}, {"timestamp": "2026-01-28T04:55:41.959Z", "date_only": false, "value": "2026-01-28T04:55:41.959755Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-24858", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-01-28T04:55:41.959Z", "date_only": false, "value": "2026-01-28T04:55:41.959755Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-24858", "record": "FKIE_CVE-2026-24858", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-01-28T04:58:01.614Z", "date_only": false, "value": "2026-01-28T04:58:01.614608Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdhieu2e6y23", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "235f491f-c922-4ed0-9077-3bc6b9912a3e", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdhieu2e6y23"}, {"timestamp": "2026-01-28T05:03:11.362Z", "date_only": false, "value": "2026-01-28T05:03:11.362493Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mdhio37jdh2k", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "4d54ad72-a80d-4151-8f59-10d36b324391", "url": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mdhio37jdh2k"}, {"timestamp": "2026-01-28T05:08:08.257Z", "date_only": false, "value": "2026-01-28T05:08:08.257486Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mdhiwrrsfy2l", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "3caa56d5-e0a4-4e7c-b393-21db5b453e1c", "url": "https://bsky.app/profile/ninjaowl.ai/post/3mdhiwrrsfy2l"}, {"timestamp": "2026-01-28T05:18:04.254Z", "date_only": false, "value": "2026-01-28T05:18:04.254757Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdhjioeex42j", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "ac9adc48-ac06-4021-b2d9-6c6de0e1a6e5", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdhjioeex42j"}, {"timestamp": "2026-01-28T05:33:07.677Z", "date_only": false, "value": "2026-01-28T05:33:07.677596Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdhkdimagd23", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "0736126e-85ce-4bf3-92ec-e7b970b71f5c", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdhkdimagd23"}, {"timestamp": "2026-01-28T05:36:51.808Z", "date_only": false, "value": "2026-01-28T05:36:51.808231Z", "kind": "sighting", "label": "Seen", "source": "https://social.circl.lu/users/circl/statuses/115971103833516784", "record": "cve-2026-24858", "field": "creation_timestamp", "uuid": "36422bd1-e539-4bb4-a83e-6409c98c9161", "url": "https://social.circl.lu/users/circl/statuses/115971103833516784"}, {"timestamp": "2026-01-28T05:57:25.303Z", "date_only": false, "value": "2026-01-28T05:57:25.303196Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdhloxnbod42", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "1d05bd57-1a9f-4fb8-9008-f2045195370d", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdhloxnbod42"}, {"timestamp": "2026-01-28T06:22:29.970Z", "date_only": false, "value": "2026-01-28T06:22:29.970287Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redhotcyber.bsky.social/post/3mdhn3v766b2f", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "d080cce5-6a9e-49f0-8982-107e8b37be61", "url": "https://bsky.app/profile/redhotcyber.bsky.social/post/3mdhn3v766b2f"}, {"timestamp": "2026-01-28T06:39:23.459Z", "date_only": false, "value": "2026-01-28T06:39:23.459122Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mdhnxhp7qc2j", "record": "cve-2026-24858", "field": "creation_timestamp", "uuid": "c4dfc796-b5ca-43ae-ba30-690bc9df4127", "url": "https://bsky.app/profile/shiojiri.com/post/3mdhnxhp7qc2j"}, {"timestamp": "2026-01-28T08:10:21.048Z", "date_only": false, "value": "2026-01-28T08:10:21.048774Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techneiro.bsky.social/post/3mdht4qq74d2a", "record": "cve-2026-24858", "field": "creation_timestamp", "uuid": "63238c9f-1342-4b41-a26d-24152dc05648", "url": "https://bsky.app/profile/techneiro.bsky.social/post/3mdht4qq74d2a"}, {"timestamp": "2026-01-28T08:21:50.524Z", "date_only": false, "value": "2026-01-28T08:21:50.524888Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdhtrbp4wx2z", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "cff9771b-448c-4ca3-8cf4-dbeb470db610", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdhtrbp4wx2z"}, {"timestamp": "2026-01-28T09:01:57.489Z", "date_only": false, "value": "2026-01-28T09:01:57.489596Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mdhvyyzqy22e", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "5b95700e-7e01-4d96-8250-f334b7a87a5d", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3mdhvyyzqy22e"}, {"timestamp": "2026-01-28T09:03:33.099Z", "date_only": false, "value": "2026-01-28T09:03:33.099468Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mdhw3tlu3k2k", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "387d8c63-f6ca-4cb8-8606-717c581bc9a4", "url": "https://bsky.app/profile/sctocs.bsky.social/post/3mdhw3tlu3k2k"}, {"timestamp": "2026-01-28T09:15:17.173Z", "date_only": false, "value": "2026-01-28T09:15:17.173101Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mwyr.es/post/3mdhwqtvarb2g", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "cb608910-5a80-4819-adaf-c1a675570390", "url": "https://bsky.app/profile/mwyr.es/post/3mdhwqtvarb2g"}, {"timestamp": "2026-01-28T09:23:05Z", "date_only": false, "value": "2026-01-28T09:23:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/bcf94b25-4437-443f-8768-24f4a2d17f91", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "e66afc7d-0fac-4777-8cda-d2be0fed8eac"}, {"timestamp": "2026-01-28T09:32:41.752Z", "date_only": false, "value": "2026-01-28T09:32:41.752905Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0041", "record": "NCSC-2026-0041", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-01-28T09:32:41.752Z", "date_only": false, "value": "2026-01-28T09:32:41.752905Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0041", "record": "NCSC-2026-0041", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-01-28T09:32:41.752Z", "date_only": false, "value": "2026-01-28T09:32:41.752905Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0041", "record": "NCSC-2026-0041", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-01-28T09:36:03.486Z", "date_only": false, "value": "2026-01-28T09:36:03.486+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0226", "record": "WID-SEC-W-2026-0226", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-01-28T10:04:31.675Z", "date_only": false, "value": "2026-01-28T10:04:31.675660Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mdhziwajzd27", "record": "cve-2026-24858", "field": "creation_timestamp", "uuid": "7e993b28-2f5e-4c67-b931-7f53812d1b32", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mdhziwajzd27"}, {"timestamp": "2026-01-28T10:37:23.254Z", "date_only": false, "value": "2026-01-28T10:37:23.254916Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdi3do6ku72u", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "68edf28a-8c94-4efb-ab1d-b9253498ed04", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdi3do6ku72u"}, {"timestamp": "2026-01-28T10:53:02.189Z", "date_only": false, "value": "2026-01-28T10:53:02.189026Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdi47iwlddm2", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "a1cd6378-0694-42e6-a755-ed23011c3af0", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdi47iwlddm2"}, {"timestamp": "2026-01-28T12:03:43.704Z", "date_only": false, "value": "2026-01-28T12:03:43.704914Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mdia626ym72z", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "496bb6c3-ae7c-4bed-bcfb-0959e67d6a74", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mdia626ym72z"}, {"timestamp": "2026-01-28T12:42:04.286Z", "date_only": false, "value": "2026-01-28T12:42:04.286801Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mdiccmcqh22a", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "855327f3-2bc3-479a-9d86-0b259d4a55cb", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mdiccmcqh22a"}, {"timestamp": "2026-01-28T12:46:55.882Z", "date_only": false, "value": "2026-01-28T12:46:55.882311Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3mdicl4o7ps26", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "701198af-85a5-4a09-99c0-c73aaecfe7b4", "url": "https://bsky.app/profile/reconbee.bsky.social/post/3mdicl4o7ps26"}, {"timestamp": "2026-01-28T12:50:22.374Z", "date_only": false, "value": "2026-01-28T12:50:22.374599Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdicre6lee22", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "bc8d0f01-1db5-48db-a5c1-f220931734c6", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdicre6lee22"}, {"timestamp": "2026-01-28T14:42:09Z", "date_only": false, "value": "2026-01-28T14:42:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/_i8pjU0AVkWA5hlLeGpSEfAEQ10gwc9t7rTL6FtpElzMCbLw", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "1fe34e7a-1126-4f58-9229-d5b3be6551d9", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-01-28T14:42:09Z", "date_only": false, "value": "2026-01-28T14:42:09.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_i8pjU0AVkWA5hlLeGpSEfAEQ10gwc9t7rTL6FtpElzMCbLw", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "cdd5d24f-2272-4fad-aa9a-48c51168ceda"}, {"timestamp": "2026-01-28T15:10:45.145Z", "date_only": false, "value": "2026-01-28T15:10:45.145086Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/technadu/statuses/115973360458150895", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "8ddeff77-357a-4492-94a6-d9da5f72f9e9", "url": "https://infosec.exchange/users/technadu/statuses/115973360458150895"}, {"timestamp": "2026-01-28T15:15:19.225Z", "date_only": false, "value": "2026-01-28T15:15:19.225079Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3mdiktsaqe22f", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "039ee3fa-4b7f-413e-9e6c-fc4d98f9a248", "url": "https://bsky.app/profile/technadu.com/post/3mdiktsaqe22f"}, {"timestamp": "2026-01-28T15:15:19.731Z", "date_only": false, "value": "2026-01-28T15:15:19.731952Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3mdikumjmkk2f", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "20e72045-d894-40f1-8ec0-847f0f1cb271", "url": "https://bsky.app/profile/technadu.com/post/3mdikumjmkk2f"}, {"timestamp": "2026-01-28T15:35:11.179Z", "date_only": false, "value": "2026-01-28T15:35:11.179663Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mdily6owvu2u", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "78e346bc-6d64-4380-8f92-8346f07665ef", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mdily6owvu2u"}, {"timestamp": "2026-01-28T16:20:05Z", "date_only": false, "value": "2026-01-28T16:20:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/qsPBqeS_hRRyxBP5oCzewe5FcP8rxnFYYOhCltCsqr63j8Qs", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "8ca655ee-df90-48d4-b700-d68f57f59e0b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-01-28T16:29:54.223Z", "date_only": false, "value": "2026-01-28T16:29:54.223074Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdiozubrfuu2", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "0c85a223-b99e-431b-943f-14430bf5f4a9", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdiozubrfuu2"}, {"timestamp": "2026-01-28T16:37:57.118Z", "date_only": false, "value": "2026-01-28T16:37:57.118530Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdipifwt3p2w", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "2c3cba1a-3d97-4b28-ad85-ee5ae8523897", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdipifwt3p2w"}, {"timestamp": "2026-01-28T16:41:24.776Z", "date_only": false, "value": "2026-01-28T16:41:24.776871Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdipolios72b", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "f48a16ac-6d59-47a7-9219-3d5cba0c2969", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdipolios72b"}, {"timestamp": "2026-01-28T16:55:17.335Z", "date_only": false, "value": "2026-01-28T16:55:17.335168Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3mdiqh7kxok2k", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "7e827f28-a4ee-4ef7-88be-02ba07afc7fb", "url": "https://bsky.app/profile/cecallihelper.bsky.social/post/3mdiqh7kxok2k"}, {"timestamp": "2026-01-28T18:45:18.853Z", "date_only": false, "value": "2026-01-28T18:45:18.853095Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdiwlv7o3am2", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "1acc40fd-5810-48ec-ac80-c96405430bde", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdiwlv7o3am2"}, {"timestamp": "2026-01-28T18:46:06.365Z", "date_only": false, "value": "2026-01-28T18:46:06.365301Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdiwnkbn6c2a", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "7bb454d8-aa6d-4418-b998-30c71bff1157", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mdiwnkbn6c2a"}, {"timestamp": "2026-01-28T18:48:56.845Z", "date_only": false, "value": "2026-01-28T18:48:56.845010Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdiwshet3s2r", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "b9b4b656-bc87-405c-b676-675c3ff6d4e2", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdiwshet3s2r"}, {"timestamp": "2026-01-28T18:48:57.338Z", "date_only": false, "value": "2026-01-28T18:48:57.338028Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdiwsmsol22r", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "302b6ea2-3ef7-4128-a2e7-c0b98b6c1d20", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdiwsmsol22r"}, {"timestamp": "2026-01-28T18:48:57.846Z", "date_only": false, "value": "2026-01-28T18:48:57.846286Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdiwsmspkc2r", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "086e632b-0175-4aa2-a2c1-fefa21b0d45e", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3mdiwsmspkc2r"}, {"timestamp": "2026-01-28T18:51:47.447Z", "date_only": false, "value": "2026-01-28T18:51:47.447117Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/115974229483980831", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "3a826203-9876-4564-9423-9613cfae8029", "url": "https://infosec.exchange/users/shadowserver/statuses/115974229483980831"}, {"timestamp": "2026-01-28T18:54:56.880Z", "date_only": false, "value": "2026-01-28T18:54:56.880482Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfi-alerts.bsky.social/post/3mdix5ekwuh2m", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "54fa77fc-4d97-4234-93c9-0acf4fecffa1", "url": "https://bsky.app/profile/cyfi-alerts.bsky.social/post/3mdix5ekwuh2m"}, {"timestamp": "2026-01-28T20:01:09.323Z", "date_only": false, "value": "2026-01-28T20:01:09.323829Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mdj2tqwr6h2p", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "76d71b48-c321-4cdd-8bb3-022a4660433a", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mdj2tqwr6h2p"}, {"timestamp": "2026-01-28T21:02:58.603Z", "date_only": false, "value": "2026-01-28T21:02:58.603653Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdj6ccc4fy2q", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "d14862e7-b2c0-4646-a20e-b140352e1a9b", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdj6ccc4fy2q"}, {"timestamp": "2026-01-28T22:26:10.407Z", "date_only": false, "value": "2026-01-28T22:26:10.407570Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mdjcx3ffvq2e", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "35344859-0907-4524-9cd9-fe4862b1e956", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mdjcx3ffvq2e"}, {"timestamp": "2026-01-28T23:25:54.140Z", "date_only": false, "value": "2026-01-28T23:25:54.140456Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mdjgbuyosv2s", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "52ee7a80-f0ce-416f-8b31-ec7501d1a6ac", "url": "https://bsky.app/profile/opsmatters.com/post/3mdjgbuyosv2s"}, {"timestamp": "2026-01-29T00:45:03.947Z", "date_only": false, "value": "2026-01-29T00:45:03.947319Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mdjkpfigmr2r", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "8917136d-bbf0-448e-a93a-1eb8b0e6a0ac", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mdjkpfigmr2r"}, {"timestamp": "2026-01-29T00:53:39.317Z", "date_only": false, "value": "2026-01-29T00:53:39.317426Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/empressbat.bsky.social/post/3mdjl6omkhk2k", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "851642a1-8d82-4ada-875f-2004ccc2c5ac", "url": "https://bsky.app/profile/empressbat.bsky.social/post/3mdjl6omkhk2k"}, {"timestamp": "2026-01-29T02:28:35.964Z", "date_only": false, "value": "2026-01-29T02:28:35.964320Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdjqikohbn2y", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "9bc56770-b9a4-4170-8762-66fb20028c4c", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mdjqikohbn2y"}, {"timestamp": "2026-01-29T06:17:04.412Z", "date_only": false, "value": "2026-01-29T06:17:04.412401Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3mdk5ayu3a22y", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "8defea7a-75f9-4336-aee0-5674b2fefc7d", "url": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3mdk5ayu3a22y"}, {"timestamp": "2026-01-29T06:22:36.506Z", "date_only": false, "value": "2026-01-29T06:22:36.506632Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/keesnk.bsky.social/post/3mdk5kw6hns2t", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "9eb8f4e6-5075-4b4f-9d6c-5398e162d34f", "url": "https://bsky.app/profile/keesnk.bsky.social/post/3mdk5kw6hns2t"}, {"timestamp": "2026-01-29T10:48:12.578Z", "date_only": false, "value": "2026-01-29T10:48:12.578295Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hongybarrosz.bsky.social/post/3mdkmfsvk222d", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "b72f5305-9032-4f67-88dc-3c247035c900", "url": "https://bsky.app/profile/hongybarrosz.bsky.social/post/3mdkmfsvk222d"}, {"timestamp": "2026-01-29T11:41:27.640Z", "date_only": false, "value": "2026-01-29T11:41:27.640588Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mdkpexqb6c2d", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "cfa76b24-2235-4e16-a4f2-1a2d75992efe", "url": "https://bsky.app/profile/modat-io.bsky.social/post/3mdkpexqb6c2d"}, {"timestamp": "2026-01-29T13:48:25.139Z", "date_only": false, "value": "2026-01-29T13:48:25.139505Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mdkwhzxldk2o", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "93def8b4-c337-4be4-b91f-db394ced16ca", "url": "https://bsky.app/profile/samilaiho.com/post/3mdkwhzxldk2o"}, {"timestamp": "2026-01-29T13:54:27.766Z", "date_only": false, "value": "2026-01-29T13:54:27.766898Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdkwsx6yvck2", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "9c7bea14-2960-4682-8cce-f207569d1171", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdkwsx6yvck2"}, {"timestamp": "2026-01-29T16:06:00.083Z", "date_only": false, "value": "2026-01-29T16:06:00.083917Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdl6673aes2q", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "25788d79-abc2-4f20-ae1a-bda3ccc21bca", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdl6673aes2q"}, {"timestamp": "2026-01-29T16:58:39.192Z", "date_only": false, "value": "2026-01-29T16:58:39.192334Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdlb4d5nmc2q", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "896c5296-c294-44c3-be82-280f195c08b4", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdlb4d5nmc2q"}, {"timestamp": "2026-01-29T17:45:20.351Z", "date_only": false, "value": "2026-01-29T17:45:20.351655Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mdldptjq332h", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "a32b4f1b-b2ba-4102-b5b4-2157a89273c4", "url": "https://bsky.app/profile/guardian360.bsky.social/post/3mdldptjq332h"}, {"timestamp": "2026-01-29T18:03:58.721Z", "date_only": false, "value": "2026-01-29T18:03:58.721930Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdler5mukw2i", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "86153084-3dff-4a30-b06e-9dac52c0e8af", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mdler5mukw2i"}, {"timestamp": "2026-01-29T18:32:53.540Z", "date_only": false, "value": "2026-01-29T18:32:53.540830Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdlgetxnts2q", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "28018742-28c7-4f76-bdba-a6cf0f4ac487", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdlgetxnts2q"}, {"timestamp": "2026-01-29T19:29:55.182Z", "date_only": false, "value": "2026-01-29T19:29:55.182584Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redsiege.com/post/3mdljksbei22x", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "ca5617ce-02ba-4675-9139-76660979a1bd", "url": "https://bsky.app/profile/redsiege.com/post/3mdljksbei22x"}, {"timestamp": "2026-01-29T20:39:26.147Z", "date_only": false, "value": "2026-01-29T20:39:26.147103Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cjust/statuses/115980315245013204", "record": "cve-2026-24858", "field": "creation_timestamp", "uuid": "536990dd-5a16-456e-9967-215f2043398f", "url": "https://infosec.exchange/users/cjust/statuses/115980315245013204"}, {"timestamp": "2026-01-29T22:34:47.091Z", "date_only": false, "value": "2026-01-29T22:34:47.091604Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mdltvb2gm22n", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "b90bb2f6-be1f-4d1c-a4db-31d461459aaa", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mdltvb2gm22n"}, {"timestamp": "2026-01-30T00:00:00Z", "date_only": true, "value": "2026-01-30", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-24858", "field": "evidence.0.details.due_date", "uuid": "e1546c5c-ee29-412d-8453-540ce5e9e017", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-01-30T02:28:45.319Z", "date_only": false, "value": "2026-01-30T02:28:45.319226Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdmaxralej2v", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "3d08706e-b8e0-4588-b089-0a4f5962f451", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mdmaxralej2v"}, {"timestamp": "2026-01-30T03:09:15.345Z", "date_only": false, "value": "2026-01-30T03:09:15.345770Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdmda6yzps2q", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "c916ed9a-c879-405c-b6e9-fa738e29bef3", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdmda6yzps2q"}, {"timestamp": "2026-01-30T06:54:53.250Z", "date_only": false, "value": "2026-01-30T06:54:53.250062Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdmptk6omu62", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "6a7b45c2-367b-4e97-84a8-bb98c08aac8e", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdmptk6omu62"}, {"timestamp": "2026-01-30T08:30:06.185Z", "date_only": false, "value": "2026-01-30T08:30:06.185847Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mdmv5vmou62i", "record": "cve-2026-24858", "field": "creation_timestamp", "uuid": "f5183844-6fea-41df-ac3a-17dd6a7f3818", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mdmv5vmou62i"}, {"timestamp": "2026-01-30T13:50:00Z", "date_only": false, "value": "2026-01-30T13:50:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/01/cert-se-veckobrev-v5.html", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "871348d3-7bc2-44eb-ad91-045082c95290", "url": "https://www.cert.se/2026/01/cert-se-veckobrev-v5.html"}, {"timestamp": "2026-01-30T17:56:41.547Z", "date_only": false, "value": "2026-01-30T17:56:41.547140Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mdnusw3pbc2w", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "6c2dab0c-9629-4389-b6bc-2a968f329c50", "url": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mdnusw3pbc2w"}, {"timestamp": "2026-01-31T00:37:39.029Z", "date_only": false, "value": "2026-01-31T00:37:39.029370Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mdol7zbnkw2d", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "582d35e3-6580-436c-98c4-544cea0669a7", "url": "https://bsky.app/profile/opsmatters.com/post/3mdol7zbnkw2d"}, {"timestamp": "2026-01-31T00:39:41.793Z", "date_only": false, "value": "2026-01-31T00:39:41.793736Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mdoldobhb423", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "c9c9dc96-ea9c-429d-a615-9129dd4d696b", "url": "https://bsky.app/profile/opsmatters.com/post/3mdoldobhb423"}, {"timestamp": "2026-01-31T00:56:47.647Z", "date_only": false, "value": "2026-01-31T00:56:47.647841Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3mdomcakwmo25", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "b75c0b4e-582a-4bf3-b79f-56c3d08f7402", "url": "https://bsky.app/profile/potato.software/post/3mdomcakwmo25"}, {"timestamp": "2026-01-31T07:25:44.894Z", "date_only": false, "value": "2026-01-31T07:25:44.894063Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdpbzn4j2mw2", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "3a231089-99df-48f5-b7d6-2605212a52cf", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mdpbzn4j2mw2"}, {"timestamp": "2026-01-31T15:42:03.954Z", "date_only": false, "value": "2026-01-31T15:42:03.954104Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdq5r77vb22g", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "095c89ca-6740-453e-9140-219e41b589f9", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mdq5r77vb22g"}, {"timestamp": "2026-01-31T15:42:07.229Z", "date_only": false, "value": "2026-01-31T15:42:07.229855Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3mdq5rb3ban2i", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "a71abcb9-7aef-4ea0-8e92-850c10aaedfe", "url": "https://bsky.app/profile/potato.software/post/3mdq5rb3ban2i"}, {"timestamp": "2026-02-01T00:36:08Z", "date_only": false, "value": "2026-02-01T00:36:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/wjfthomas318-rgb/e54380790c726df2f711b7af77116d36", "record": "cve-2026-24858", "field": "creation_timestamp", "uuid": "154074b4-4ae9-430f-8cf8-ee13369a1326", "url": "https://gist.github.com/wjfthomas318-rgb/e54380790c726df2f711b7af77116d36"}, {"timestamp": "2026-02-01T02:29:17.830Z", "date_only": false, "value": "2026-02-01T02:29:17.830770Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdrbwl5itf2w", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "0580cbc8-6ded-4177-b47d-114de549c4ed", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mdrbwl5itf2w"}, {"timestamp": "2026-02-02T00:25:52Z", "date_only": false, "value": "2026-02-02T00:25:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/wjfthomas318-rgb/28ecb4023704187aedb65c9a353b8ad4", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "26c3766b-e5ea-43af-9d95-9c7ee0e20db2", "url": "https://gist.github.com/wjfthomas318-rgb/28ecb4023704187aedb65c9a353b8ad4"}, {"timestamp": "2026-02-02T02:28:42.668Z", "date_only": false, "value": "2026-02-02T02:28:42.668545Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdtseh72oi2w", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "d120cbc5-e51e-4f07-a71c-11a349ae6eac", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mdtseh72oi2w"}, {"timestamp": "2026-02-02T10:04:25.664Z", "date_only": false, "value": "2026-02-02T10:04:25.664740Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3mdultap2fpu2", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "bcc4223f-07ac-4222-9c28-e19306ca750a", "url": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3mdultap2fpu2"}, {"timestamp": "2026-02-02T12:25:40.434Z", "date_only": false, "value": "2026-02-02T12:25:40.434685Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e1546c5c-ee29-412d-8453-540ce5e9e017", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "94a41d71-b67c-4bcf-bcaa-53dcc0aacead", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e1546c5c-ee29-412d-8453-540ce5e9e017", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-02T18:33:43.725Z", "date_only": false, "value": "2026-02-02T18:33:43.725465Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mdvibzjguo26", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "dfdc1dbb-16b2-4ed7-ad1e-b8844529e265", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mdvibzjguo26"}, {"timestamp": "2026-02-03T02:28:41.590Z", "date_only": false, "value": "2026-02-03T02:28:41.590114Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdwctdoczv2y", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "598dc2ab-36bb-4c62-b372-007ac664ded9", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mdwctdoczv2y"}, {"timestamp": "2026-02-03T07:36:41Z", "date_only": false, "value": "2026-02-03T07:36:41.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1f6b4be-096d-462b-b40a-faf652ea3a09", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "f4c9049d-fd1a-425f-ad02-a6915f944121"}, {"timestamp": "2026-02-04T02:46:01.975Z", "date_only": false, "value": "2026-02-04T02:46:01.975640Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mdyubbbyab22", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "8c11cd05-08ea-4eff-b0e7-5866f928ed47", "url": "https://bsky.app/profile/opsmatters.com/post/3mdyubbbyab22"}, {"timestamp": "2026-02-05T02:21:17.043Z", "date_only": false, "value": "2026-02-05T02:21:17.043470Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3me3ddwmtod2u", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "2548712c-994e-410f-88d9-840a7de5e0fc", "url": "https://bsky.app/profile/opsmatters.com/post/3me3ddwmtod2u"}, {"timestamp": "2026-02-06T04:28:26.001Z", "date_only": false, "value": "2026-02-06T04:28:26.001442Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3me62w7izym2i", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "474b073a-aa7b-4993-b7b2-242b2c572600", "url": "https://bsky.app/profile/opsmatters.com/post/3me62w7izym2i"}, {"timestamp": "2026-02-10T15:10:05Z", "date_only": false, "value": "2026-02-10T15:10:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7895", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "e2b182f5-6270-4ae5-9369-c41c5d7c369a", "content": "Fortinet \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 FortiClientEMS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-21643\u00a0\u0438 \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS 9,1 \u0438\u0437 10 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445. \u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SQL-\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 FortiClientEMS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0413\u0432\u0435\u043d\u0434\u0430\u043b\u0443 \u0413\u0435\u043d\u044c\u043e \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Fortinet. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 FortiClientEMS 7.4.4 (\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.4.5 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435), FortiClientEMS 7.2 \u0438 FortiClientEMS 8.0 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u044b \u043a\u0430\u043a \u043d\u0435\u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Fortinet \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 CVE-2026-24858 \u0432 FortiOS, FortiManager, FortiAnalyzer, FortiProxy, FortiWeb, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e FortiCloud \u0438 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0432\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 FortiCloud SSO.\n\n\u0412\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 Fortinet \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0435\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0434\u043b\u044f  \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a VPN, \u0438 \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430.", "url": "https://t.me/true_secator/7895", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-11T16:57:16.962Z", "date_only": false, "value": "2026-02-11T16:57:16.962342Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3melx3uguk52p", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "08546cff-9033-4e80-85e9-0f9dda235e98", "url": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3melx3uguk52p"}, {"timestamp": "2026-02-12T10:28:54Z", "date_only": false, "value": "2026-02-12T10:28:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/2079", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "eb390088-eb08-4476-b138-b42edcabb2a4", "content": "\u2705 \u041f\u0440\u0430\u0432\u0438\u043b\u0430 SIEM \u0434\u043b\u044f \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 Fortinet\n\n\u0421 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Fortinet \u0432\u0435\u0434\u0443\u0442\u0441\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0438 VPN-\u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u0438. \u0414\u0435\u043a\u0430\u0431\u0440\u044c\u0441\u043a\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 CVE-2025-59718 \u0438 -59719 (CVSS 9.8), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0443\u0447\u0451\u0442\u043a\u0443 \u0432 FortiCloud, \u0432\u043e\u0439\u0442\u0438 \u0432 \u0447\u0443\u0436\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043d\u0430 \u0431\u0430\u0437\u0435 FortiOS/ FortiManager/ FortiAnalyzer/ FortiProxy/ FortiWeb, \u0435\u0441\u043b\u0438 \u0443 \u0446\u0435\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f SSO.\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0432\u0442\u043e\u0440\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u2014 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043e\u0448\u043b\u0438 \u043f\u0430\u0442\u0447\u0438 \u0438 \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0438\u0441\u044c \u0437\u0438\u0440\u043e\u0434\u0435\u0435\u043c, \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u043c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-24858 (CVSS 9.4). \u0412 Fortinet \u0434\u0430\u0436\u0435 \u0432\u044b\u043d\u0443\u0436\u0434\u0435\u043d\u044b \u0431\u044b\u043b\u0438 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c FortiCloud SSO \u043d\u0430 \u043f\u0430\u0440\u0443 \u0434\u043d\u0435\u0439, \u043f\u043e\u043a\u0430 \u043e\u043d\u0438 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u043b\u0438\u0441\u044c, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u043f\u0430\u0442\u0447\u0438. \n\n\u0425\u043e\u0442\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043d\u0430 \u0431\u0443\u043a\u0432\u0443 F \u0441 2022 \u0433\u043e\u0434\u0430 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0420\u0424 \u0432\u0441\u0451 \u0440\u0435\u0436\u0435, \u0432 \u0440\u044f\u0434\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0435\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0432 \u0441\u0442\u0440\u043e\u044e, \u0438\u00a0 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u043e. \u041f\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0432 \u0442\u043e\u043f\u0435 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445, \u0438 Fortinet \u0443 \u043d\u0438\u0445 \u043d\u0430 \u043e\u0441\u043e\u0431\u043e\u043c \u0441\u0447\u0435\u0442\u0443. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u043a\u0435\u0442 \u043f\u0440\u0430\u0432\u0438\u043b FortiCloud SSO abuse package \u0434\u043b\u044f \u043d\u0430\u0448\u0435\u0439\u00a0 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c\u044b KUMA, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u0438\u0437 \u0442\u0440\u0451\u0445 \u0433\u0440\u0443\u043f\u043f:\n\n\ud83d\udd35IOCs \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0430\u0442\u0430\u043a;\n\ud83d\udd35\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432;\n\ud83d\udd35\u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.\n\n\u0412\u0441\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u0440\u0430\u0432\u0438\u043b \u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u2014 \u0432 \u043f\u043e\u0441\u0442\u0435 \u0432 \u0431\u043b\u043e\u0433\u0435.\n\n#\u0441\u043e\u0432\u0435\u0442\u044b #\u0443\u0433\u0440\u043e\u0437\u044b #SIEM @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/2079", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-15T02:49:19.872Z", "date_only": false, "value": "2026-02-15T02:49:19.872010Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meujlaz5322w", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "2257efa2-da6e-4885-bfcb-d6159f647446", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meujlaz5322w"}, {"timestamp": "2026-02-15T02:51:21.500Z", "date_only": false, "value": "2026-02-15T02:51:21.500244Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meujov4btk2w", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "d9fa53a6-ee96-4b42-9021-f022a550ad25", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meujov4btk2w"}, {"timestamp": "2026-02-26T15:04:50.331Z", "date_only": false, "value": "2026-02-26T15:04:50.331Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-24858", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-04T01:43:25.528Z", "date_only": false, "value": "2026-03-04T01:43:25.528710Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5922993", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "2a7974b6-f7c5-4970-aa78-3b9944ce0600", "url": "https://feedsin.space/feed/CISAKevBot/items/5922993"}, {"timestamp": "2026-03-05T04:14:59.337Z", "date_only": false, "value": "2026-03-05T04:14:59.337543Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mgbwqzq2aw2s", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "78302f0c-19f5-4893-91ae-fa787c3acfe2", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mgbwqzq2aw2s"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-975644", "record": "SSA-975644", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-975644", "record": "SSA-975644", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-10T12:39:14.474Z", "date_only": false, "value": "2026-03-10T12:39:14.474522Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0079", "record": "NCSC-2026-0079", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-03-10T12:39:14.474Z", "date_only": false, "value": "2026-03-10T12:39:14.474522Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0079", "record": "NCSC-2026-0079", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-03-10T12:39:14.474Z", "date_only": false, "value": "2026-03-10T12:39:14.474522Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0079", "record": "NCSC-2026-0079", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-03-10T13:46:18.445Z", "date_only": false, "value": "2026-03-10T13:46:18.445525Z", "kind": "sighting", "label": "Seen", "source": "https://swecyb.com/ap/users/116080658609901341/statuses/116205179719980339", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "58f023b2-358b-4ccd-941a-457f13ea13ee", "url": "https://swecyb.com/ap/users/116080658609901341/statuses/116205179719980339"}, {"timestamp": "2026-03-10T15:25:41Z", "date_only": false, "value": "2026-03-10T15:25:41.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/753d853e-290f-4a82-98e2-25e325fb4496", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "ad20ce21-0f8c-4d0d-8111-fb8094bba2d0"}, {"timestamp": "2026-03-12T06:00:00Z", "date_only": false, "value": "2026-03-12T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-03-12T11:00:00Z", "date_only": false, "value": "2026-03-12T11:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-02", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "7feb7c73-c4a9-4058-9ce2-1db2f4dd83f2", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-02"}, {"timestamp": "2026-04-22T09:12:19.323Z", "date_only": false, "value": "2026-04-22T09:12:19.323163Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mk35qvnov42z", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "25c6caaf-e065-4786-aa0a-cbf141798440", "url": "https://bsky.app/profile/concisecyber.bsky.social/post/3mk35qvnov42z"}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": false, "value": "2026-05-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": false, "value": "2026-05-12T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-975644", "record": "SSA-975644", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": false, "value": "2026-05-12T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-975644", "record": "SSA-975644", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-05-12T12:08:56.335Z", "date_only": false, "value": "2026-05-12T12:08:56.335Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens-SADP", "record": "CVE-2026-24858", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-12T15:31:14Z", "date_only": false, "value": "2026-05-12T15:31:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2X38-48VP-W23X", "record": "GHSA-2X38-48VP-W23X", "field": "modified", "linked_record": true}, {"timestamp": "2026-05-13T15:52:23.117Z", "date_only": false, "value": "2026-05-13T15:52:23.117729Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-05-14T06:00:00Z", "date_only": false, "value": "2026-05-14T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-05-14T06:00:00Z", "date_only": false, "value": "2026-05-14T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-06-01T10:49:56Z", "date_only": false, "value": "2026-06-01T10:49:56+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-24858", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "b2870015-f508-4079-b371-97370d32a7cb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:49:56Z", "date_only": false, "value": "2026-06-01T10:49:56+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-24858", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "b2870015-f508-4079-b371-97370d32a7cb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:49:56Z", "date_only": false, "value": "2026-06-01T10:49:56+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-24858", "field": "status.status_updated_at", "uuid": "b2870015-f508-4079-b371-97370d32a7cb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:49:56.043Z", "date_only": false, "value": "2026-06-01T10:49:56.043Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-24858", "field": "evidence.0.details.added_date", "uuid": "b2870015-f508-4079-b371-97370d32a7cb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-09T14:27:53.379Z", "date_only": false, "value": "2026-06-09T14:27:53.379Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-24858", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-09T14:27:53.379Z", "date_only": false, "value": "2026-06-09T14:27:53.379Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / fortinet", "record": "CVE-2026-24858", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T10:23:43.040Z", "date_only": false, "value": "2026-06-17T10:23:43.040", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-24858", "record": "FKIE_CVE-2026-24858", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:45:18.885Z", "date_only": false, "value": "2026-06-19T12:45:18.885779Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f29edc77-2a97-4c15-a363-997e6af5e54a", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "2c3d49ce-01f1-4f08-918e-7c5729a77204", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f29edc77-2a97-4c15-a363-997e6af5e54a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-22T00:55:34Z", "date_only": false, "value": "2026-06-22T00:55:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.at/de/warnungen/2026/6/angriffswelle-gegen-fortigate-devices-fortibleed", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "fc6a17e5-708f-485d-a100-bbb97316b925", "url": "https://www.cert.at/de/warnungen/2026/6/angriffswelle-gegen-fortigate-devices-fortibleed"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-24858", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "b2870015-f508-4079-b371-97370d32a7cb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:44.594Z", "date_only": false, "value": "2026-06-23T14:03:44.594806Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b2870015-f508-4079-b371-97370d32a7cb", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "8193ffe6-8b0d-4552-aaf7-bf68d3af46e1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b2870015-f508-4079-b371-97370d32a7cb", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T22:40:04.095Z", "date_only": false, "value": "2026-06-23T22:40:04.095165Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3moyhsb55f223", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "5097e949-b677-4692-adab-066067d07ed2", "content": "Fortinet\u3001FortiBleed\u306b\u516c\u5f0f\u898b\u89e3 \u904e\u53bb\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9 \u8106\u5f31\u6027\u304b\u3089\u306e\u6f0f\u6d29-(CVE-2026-24858\u30fbCVE-2025-59718\u30fbCVE-2025-59719)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #cyberattack #incident #databreach", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3moyhsb55f223"}, {"timestamp": "2026-07-13T13:00:07.572Z", "date_only": false, "value": "2026-07-13T13:00:07.572423Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8332", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "a64a71d2-e6a0-4abe-a5b3-4bfb3581ed06", "content": "Fortinet \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e FortiBleed, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043e\u0431\u0440\u0430\u043b\u0438 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435\u00a086 000 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Fortinet \u0432 194 \u0441\u0442\u0440\u0430\u043d\u0430\u0445.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0441\u0431\u043e\u0440\u0443 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0438 VPN-\u0441\u0435\u0442\u0438 \u0435\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0432 Fortinet \u0441\u0447\u0438\u0442\u0430\u044e\u0442, \u0447\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u044d\u0442\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u043c\u0435\u0442\u043e\u0434\u044b \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0441\u043e \u0441\u043b\u0430\u0431\u044b\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0438 \u0431\u0435\u0437 MFA.\n\n\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 Fortinet, \u0440\u0435\u0447\u044c \u0448\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u0432 FortiCloud SSO: CVE-2026-24858, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u044f\u043d\u0432\u0430\u0440\u0435, \u0438 CVE-2025-59718 \u043d\u0430 \u043f\u0430\u0440\u0443 \u0441 CVE-2025-59719, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435.\n\nFortinet \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u0432 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439, \u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u0441\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u044d\u0442\u0438 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u044b\u043b\u0438 \u0432 \u043f\u043e\u043b\u043d\u043e\u043c \u043e\u0431\u044a\u0435\u043c\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b..\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0418\u0418 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0435\u043b\u0435\u0439 \u0438 \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043f\u043b\u043e\u0445\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e FortiBleed \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0442\u0435 \u0436\u0435 \u043c\u0435\u0442\u043e\u0434\u044b, \u0430 \u043d\u0435 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Fortinet. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043d\u0430\u0447\u0430\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0442\u044c \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0432 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b FortiGate, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0438 VPN-\u0441\u0435\u0441\u0441\u0438\u0438, \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c MFA \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 VPN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u041f\u041e \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e PBKDF2.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438 VPN \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0435\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438.", "url": "https://t.me/true_secator/8332"}, {"timestamp": "2026-07-19T16:00:06.483Z", "date_only": false, "value": "2026-07-19T16:00:06.483790Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/18956", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "237d07aa-831b-46b1-bdfe-84ac878a679d", "content": "Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected \u2013 thehackernews.com\n\nWed, 28 Jan 2026 12:49:00", "url": "https://t.me/MalaysiaHacktivistz/18956"}, {"timestamp": "2026-07-20T00:00:20.742Z", "date_only": false, "value": "2026-07-20T00:00:20.742313Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/18956", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "0b878984-3b2d-4215-bda5-41b3d1155eea", "content": "Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected \u2013 thehackernews.com\n\nWed, 28 Jan 2026 12:49:00", "url": "https://t.me/MalaysiaHacktivistz/18956", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T19:00:05.403Z", "date_only": false, "value": "2026-07-20T19:00:05.403255Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/9854", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "dd12f04d-951b-4e42-8181-778c4b245b57", "content": "Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected \u2013 thehackernews.com\n\nWed, 28 Jan 2026 12:49:00", "url": "https://t.me/MalaysiaHacktivistz/9854"}, {"timestamp": "2026-07-22T00:00:31.083Z", "date_only": false, "value": "2026-07-22T00:00:31.083526Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/9854", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "e1b94c00-babd-441a-8b73-5f97dc2b0197", "content": "Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected \u2013 thehackernews.com\n\nWed, 28 Jan 2026 12:49:00", "url": "https://t.me/MalaysiaHacktivistz/9854", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T02:00:25.675Z", "date_only": false, "value": "2026-07-26T02:00:25.675152Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/4305", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "94b6e70c-1de0-413d-b2ee-9a1e24a81cfc", "content": "Fortinet \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0435\u0442\u0430\u043b\u0438 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 FortiGate \u0447\u0435\u0440\u0435\u0437 SSO\n\nFortinet \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u0444\u0430\u0435\u0440\u0432\u043e\u043b\u044b FortiGate, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Arctic Wolf. \u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u0447\u0438\u0442\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u0435\u043d\u0438\u0435\u043c \u0434\u0435\u043a\u0430\u0431\u0440\u044c\u0441\u043a\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 2025 \u0433\u043e\u0434\u0430 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 CVE-2025-59718 \u0438 CVE-2025-59719. \u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 FortiCloud Single Sign-On. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-24858 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9.4).\n\n\u0418\u043c\u0435\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 FortiCloud SSO \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c FortiGate \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c Fortinet, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 VPN-\u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0444\u0430\u0435\u0440\u0432\u043e\u043b\u043e\u0432.\n\n\u0420\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0443\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0439 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 FortiCloud \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0436\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0447\u0435\u0440\u0435\u0437 SSO, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b. Fortinet \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 SSO \u0447\u0435\u0440\u0435\u0437 SAML.\n\n\u0412 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 Fortinet \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 FortiCloud, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0432\u043d\u0435\u0441\u043b\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 FortiCloud, \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0432 \u0440\u0430\u0431\u043e\u0442\u0443 SSO \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430\u043c\u0438. \n\nFortinet \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f FortiOS, FortiManager \u0438 FortiAnalyzer. Fortinet \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043a\u0430\u043a \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0434\u043e\u043b\u0436\u043d\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u043f\u0435\u0440\u0435\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #firewall #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/003b13", "url": "https://t.me/EchelonEyes/4305"}, {"timestamp": "2026-08-03T18:10:08.238Z", "date_only": false, "value": "2026-08-03T18:10:08.238012Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117032917873865889", "record": "cve-2026-24858", "field": "creation_timestamp", "uuid": "d5a05ba6-449b-4a35-9437-72cf26232ba6", "content": "CVE-2026-24858 - Critical auth bypass in Fortinet FortiOS, FortiManager, FortiAnalyzer. CVSS 9.4. Patch immediately. #CVE #Fortinet #infosec\nhttps://www.valtersit.com/cve/cve-2026-24858/", "url": "https://mastodon.social/users/hugovalters/statuses/117032917873865889"}, {"timestamp": "2026-08-04T11:08:33.870Z", "date_only": false, "value": "2026-08-04T11:08:33.870507Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3msauqhyp6s2j", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "6c1d8caf-cd66-4ce9-89f7-44f4f70098d5", "content": "Fortinet CVE-2026-24858: Active Exploitation, SSO Bypass, CVSS 9.8", "url": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3msauqhyp6s2j"}, {"timestamp": "2026-08-04T13:00:04.578Z", "date_only": false, "value": "2026-08-04T13:00:04.578501Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purpleshift/154", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "9bfcfb35-c8e7-46c4-8ebb-57bd44190845", "content": "\u0413\u043e\u0434 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438, \u043a\u0430\u043a \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0442\u044b\u0441\u044f\u0447 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Fortinet \u0443\u0442\u0435\u043a\u043b\u0438 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0418 \u0432\u043e\u0442 \u043e\u043f\u044f\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0442\u043e\u0439 \u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043d\u0435 \u043e\u0447\u0435\u043d\u044c \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u043c\u0438.\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-59718 \u0438 CVE-2025-59719 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Fortinet \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 single sign-on (SSO) \u0438 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 FortiCloud. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e SAML-\u043f\u0430\u043a\u0435\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 FortiOS, FortiWeb, FortiProxy, \u0438\u043b\u0438 FortiSwitch Manager, \u0435\u0441\u043b\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b SSO.\n\n\u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c SSO-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438\u0441\u044c \u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Fortinet \u0438 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435. \u042d\u0442\u043e \u0431\u044b\u043b\u0430 \u0443\u0436\u0435 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-24858, \u0438 \u043e\u043d\u0430 \u0442\u043e\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0443\u0447\u0451\u0442\u043a\u043e\u0439 FortiCloud \u043b\u043e\u0433\u0438\u043d\u0438\u0442\u044c\u0441\u044f \u0432 \u0447\u0443\u0436\u0438\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b FortiOS, FortiManager, FortiAnalyzer, FortiProxy \u0438 FortiWeb. \n\n\u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c\u0441\u044f:\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Fortinet \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 FortiCloud SSO \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432. \u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u044d\u0442\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0442\u043e\u0433\u0434\u0430 SSO- \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0441\u043d\u043e\u0432\u0430 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442. \u041c\u043e\u0436\u043d\u043e \u0438 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SSO \u0432 \u0432\u0430\u0448\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u2013 \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439, \u0435\u0441\u043b\u0438 \u0432\u0441\u043a\u043e\u0440\u0435 \u043d\u0430\u0439\u0434\u0451\u0442\u0441\u044f \u0438 \u0447\u0435\u0442\u0432\u0451\u0440\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u043e\u0433\u043e \u0436\u0435 \u0440\u043e\u0434\u0430.\n\n\u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u043d\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u043c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 FortiCloud, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u0430 \u0442\u0430\u043a\u0436\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e IOCs, \u0430\u0442\u0430\u043a\u0430 \u0432\u044b\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u043c \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443: \u044d\u0442\u043e \u044d\u043a\u0441\u043f\u043e\u0440\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f.\n\n\u0421 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Fortinet \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044e \u0434\u043b\u044f \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438:\n\u2014  \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, IP-\u0430\u0434\u0440\u0435\u0441\u0443 \u0438 \u043c\u0435\u0442\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0435\u0441\u0442\u044c \u0432 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (FTNTFGTmethod=sso \u0438\u043b\u0438 method=sso),\n\u2014 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 (msg=\u201dAdd system.admin \u2026\u201d), \n\u2014 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 (msg=\u201dSystem config file has been downloaded by user \u2026\u201d).\n\n\u0410 \u0435\u0449\u0451 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435, \u043f\u043e\u0447\u0442\u0438 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 Fortinet, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u0418\u0411-\u043f\u0440\u043e\u0434\u0443\u043a\u0442: \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u043e\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u0430 eScan.  \u041c\u043e\u0440\u0430\u043b\u044c: \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u043d\u0443\u0436\u043d\u043e \u0432\u0441\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438 \u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.", "url": "https://t.me/purpleshift/154"}, {"timestamp": "2026-08-15T11:00:07.614Z", "date_only": false, "value": "2026-08-15T11:00:07.614561Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityExploit/29329", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "4577542e-ade0-441b-9e94-7d71182905b0", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "url": "https://t.me/CyberSecurityExploit/29329"}, {"timestamp": "2026-08-16T00:00:23.509Z", "date_only": false, "value": "2026-08-16T00:00:23.509928Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityExploit/29329", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "6cc4f38a-3a2b-4705-bc44-3f0b7f9837ea", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "url": "https://t.me/CyberSecurityExploit/29329", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-27T20:00:10.650Z", "date_only": false, "value": "2026-08-27T20:00:10.650230Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityExploit/16968", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "ab212af1-70d9-47d8-864b-56ca0f8521bf", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "url": "https://t.me/CyberSecurityExploit/16968"}, {"timestamp": "2026-08-29T00:00:31.906Z", "date_only": false, "value": "2026-08-29T00:00:31.906310Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityExploit/16968", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "d721905c-2c1e-446c-8e4e-95ac56b6005f", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "url": "https://t.me/CyberSecurityExploit/16968", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-24858", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "e1546c5c-ee29-412d-8453-540ce5e9e017", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-08T23:34:50Z", "date_only": false, "value": "2026-11-08T23:34:50+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2026-24858", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "55f0cb3e-3687-4b4c-a9ef-2c4bc2c0ceb4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-08T23:34:50Z", "date_only": false, "value": "2026-11-08T23:34:50+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-24858", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "55f0cb3e-3687-4b4c-a9ef-2c4bc2c0ceb4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-10T01:03:28.761Z", "date_only": false, "value": "2026-11-10T01:03:28.761420Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/55f0cb3e-3687-4b4c-a9ef-2c4bc2c0ceb4", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "f7914743-169a-4e19-8c10-5dcb209fb1c3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/55f0cb3e-3687-4b4c-a9ef-2c4bc2c0ceb4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-12T00:00:00Z", "date_only": false, "value": "2026-11-12T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2026-24858", "field": "timestamps.last_seen_at", "uuid": "55f0cb3e-3687-4b4c-a9ef-2c4bc2c0ceb4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-12T00:00:00Z", "date_only": true, "value": "2026-11-12", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2026-24858", "field": "evidence.0.details.observation_date", "uuid": "55f0cb3e-3687-4b4c-a9ef-2c4bc2c0ceb4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-12T00:00:00Z", "date_only": false, "value": "2026-11-12T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2026-24858", "field": "status.status_updated_at", "uuid": "55f0cb3e-3687-4b4c-a9ef-2c4bc2c0ceb4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-14T01:00:01Z", "date_only": false, "value": "2026-11-14T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2026-24858", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "55f0cb3e-3687-4b4c-a9ef-2c4bc2c0ceb4", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-14T04:53:34.203Z", "anchors": {"origin": {"timestamp": "2026-01-27T19:18:23.591Z", "date_only": false, "value": "2026-01-27T19:18:23.591Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-24858", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-01-27T19:18:23.591Z", "date_only": false, "value": "2026-01-27T19:18:23.591Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-24858", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-08-16T00:00:23.509Z", "date_only": false, "value": "2026-08-16T00:00:23.509928Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityExploit/29329", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "6cc4f38a-3a2b-4705-bc44-3f0b7f9837ea", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "url": "https://t.me/CyberSecurityExploit/29329", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-24858", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e1546c5c-ee29-412d-8453-540ce5e9e017", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": -69503.591, "hours": -19.306553055555554, "days": -0.8044397106481481, "min_seconds": -69503.591, "max_seconds": 16896.409, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-27T19:18:23.591Z", "date_only": false, "value": "2026-01-27T19:18:23.591Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-24858", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-24858", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e1546c5c-ee29-412d-8453-540ce5e9e017", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": -69503.591, "hours": -19.306553055555554, "days": -0.8044397106481481, "min_seconds": -69503.591, "max_seconds": 16896.409, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-27T19:18:23.591Z", "date_only": false, "value": "2026-01-27T19:18:23.591Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-24858", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-24858", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e1546c5c-ee29-412d-8453-540ce5e9e017", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 17296919.918, "hours": 4804.6999772222225, "days": 200.19583238425926, "min_seconds": 17296919.918, "max_seconds": 17296919.918, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-27T19:18:23.591Z", "date_only": false, "value": "2026-01-27T19:18:23.591Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-24858", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-16T00:00:23.509Z", "date_only": false, "value": "2026-08-16T00:00:23.509928Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityExploit/29329", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "6cc4f38a-3a2b-4705-bc44-3f0b7f9837ea", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "url": "https://t.me/CyberSecurityExploit/29329", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 25090510.612721, "hours": 6969.586281311389, "days": 290.3994283879745, "min_seconds": 25090510.612721, "max_seconds": 25090510.612721, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-27T19:18:23.591Z", "date_only": false, "value": "2026-01-27T19:18:23.591Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-24858", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T04:53:34.203Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 25160014.203721, "hours": 6988.892834366945, "days": 291.2038680986227, "min_seconds": 25073614.203721, "max_seconds": 25160014.203721, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-24858", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e1546c5c-ee29-412d-8453-540ce5e9e017", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-14T04:53:34.203Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 7793590.694721, "hours": 2164.8863040891665, "days": 90.20359600371528, "min_seconds": 7793590.694721, "max_seconds": 7793590.694721, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-16T00:00:23.509Z", "date_only": false, "value": "2026-08-16T00:00:23.509928Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityExploit/29329", "record": "CVE-2026-24858", "field": "creation_timestamp", "uuid": "6cc4f38a-3a2b-4705-bc44-3f0b7f9837ea", "content": "\ud83d\udd25 Recent RCE & Security Research Highlights\n\n1\ufe0f\u20e3 CVE-2025-11730 \u2013 Zyxel ATP/USG Series RCE\nRCE via DDNS configuration abuse in Zyxel ATP/USG firewalls.\nPoC demonstrates remote command execution through crafted DDNS requests.\n\ud83d\udc49 Critical network edge device vulnerability, high risk in enterprise environments.\n\nBlog : https://rainpwn.blog/blog/cve-2025-11730\nPoC : https://github.com/rainpwn/exploits/blob/main/zyxel/rainpwn_cve-2025-11730_ddns_rce.py\n\n\n2\ufe0f\u20e3 CVE-2026-25049 \u2013 n8n RCE (Deep Dive)\nRemote code execution in n8n workflow automation platform.\nAttackers can execute arbitrary commands via vulnerable workflow handling.\n\ud83d\udc49 High impact for CI/CD, automation, and internal tooling environments.\n\n\ud83d\udd17 https://blog.securelayer7.net/cve-2026-25049\n\n\n3\ufe0f\u20e3 The RCE That AMD Won\u2019t Fix\nTechnical analysis of an RCE-class vulnerability affecting AMD components.\nIssue remains unpatched due to architectural and vendor constraints.\n\ud83d\udc49 Long-term risk: unfixable bugs become permanent attack surface.\n\n\ud83d\udd17 https://web.archive.org/web/20260205155934/https://mrbruh.com/amd\n\n\n4\ufe0f\u20e3 CVE-2026-24858 \u2013 Fortinet FortiCloud SSO Admin Bypass\nAuthentication bypass allowing administrative access to FortiCloud SSO.\nSuccessful exploitation grants elevated privileges without valid credentials.\n\ud83d\udc49 Identity and access control failure \u2014 high-value target for attackers.\n\n\ud83d\udd17 https://github.com/absholi7ly/CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass\n\n\n5\ufe0f\u20e3 CVE-2026-25587 / CVE-2026-25641 \u2013 SandboxJS Sandbox Escape\nSandbox escape vulnerabilities in SandboxJS leading to code execution.\nBreaks isolation guarantees intended to safely run untrusted JavaScript.\n\ud83d\udc49 Sandbox escapes often lead directly to full RCE chains.\n\n\ud83d\udd17 https://github.com/advisories/GHSA-66h4-qj4x-38xp\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\n\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "url": "https://t.me/CyberSecurityExploit/29329", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T04:53:34.203Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}