{"metadata": {"vulnerability": "CVE-2026-2699", "count": 176, "kinds": {"milestone": 4, "sighting": 153, "kev": 11, "other": 8}, "linked_omitted": 0}, "data": [{"timestamp": "2026-02-18T16:18:30.153Z", "date_only": false, "value": "2026-02-18T16:18:30.153Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-2699", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-02T00:00:00Z", "date_only": false, "value": "2026-04-02T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-2699", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-04-02T00:00:00Z", "date_only": false, "value": "2026-04-02T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-2699", "record": "FKIE_CVE-2026-2699", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-04-02T09:59:15Z", "date_only": false, "value": "2026-04-02T09:59:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/progress-disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-sharefile", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "520036e8-c78b-4702-a5c3-ce97ceb7425b", "url": "https://www.acn.gov.it/portale/w/progress-disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-sharefile"}, {"timestamp": "2026-04-02T11:13:09.979Z", "date_only": false, "value": "2026-04-02T11:13:09.979345Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mij36jygvj2d", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "bbc88f22-2f52-4881-91de-ebd407d890bc", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mij36jygvj2d"}, {"timestamp": "2026-04-02T11:16:34.708Z", "date_only": false, "value": "2026-04-02T11:16:34.708059Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mij3ejoqwjj2", "record": "cve-2026-2699", "field": "creation_timestamp", "uuid": "c448661c-0173-4d49-8b46-9d465084d137", "url": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mij3ejoqwjj2"}, {"timestamp": "2026-04-02T11:24:32.164Z", "date_only": false, "value": "2026-04-02T11:24:32.164172Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mij3svljrk2a", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "405a6c51-b755-43ca-9b2b-443d5b37dd52", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mij3svljrk2a"}, {"timestamp": "2026-04-02T11:24:33.079Z", "date_only": false, "value": "2026-04-02T11:24:33.079738Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mij3swjv232b", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "8187efd6-6169-4c07-94b0-19b14e049730", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3mij3swjv232b"}, {"timestamp": "2026-04-02T12:04:25.718Z", "date_only": false, "value": "2026-04-02T12:04:25.718892Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mij62adeh32b", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "346f4cff-860d-465c-be03-8c5e79e7929d", "url": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mij62adeh32b"}, {"timestamp": "2026-04-02T12:19:18.528Z", "date_only": false, "value": "2026-04-02T12:19:18.528807Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "67efc43d-5ca2-455c-9c55-d232ba4811fc", "url": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-02T12:42:13.709Z", "date_only": false, "value": "2026-04-02T12:42:13.709131Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-2699", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "b009fa8f-e48d-4edc-84b7-4ef094071fbc", "url": "https://github.com/watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-2699", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-02T13:04:00.485Z", "date_only": false, "value": "2026-04-02T13:04:00.485Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-2699", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-02T14:13:11.249Z", "date_only": false, "value": "2026-04-02T14:13:11.249001Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mijfahwapp2i", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "e3e7bf7d-3c22-4d3a-92a8-81de88b75342", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mijfahwapp2i"}, {"timestamp": "2026-04-02T14:16:27Z", "date_only": false, "value": "2026-04-02T14:16:27Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PPF9-6X38-42WV", "record": "GHSA-PPF9-6X38-42WV", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-04-02T14:16:27.697Z", "date_only": false, "value": "2026-04-02T14:16:27.697", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-2699", "record": "FKIE_CVE-2026-2699", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-02T14:33:27.681Z", "date_only": false, "value": "2026-04-02T14:33:27.681139Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116335601728170417", "record": "cve-2026-2699", "field": "creation_timestamp", "uuid": "65590806-606f-447e-a7c8-6f40d853ea7a", "url": "https://infosec.exchange/users/threatcodex/statuses/116335601728170417"}, {"timestamp": "2026-04-02T14:50:25.888Z", "date_only": false, "value": "2026-04-02T14:50:25.888571Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3mijhctyxrq32", "record": "cve-2026-2699", "field": "creation_timestamp", "uuid": "80023319-eebd-4538-8ed5-30a81498a1b1", "url": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3mijhctyxrq32"}, {"timestamp": "2026-04-02T15:21:07Z", "date_only": false, "value": "2026-04-02T15:21:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/613aY007LGHyW6_rIrja4BsrlzuBvUbPzSCrjge10VR5WoE", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "259ff098-50b2-4b32-b9b8-490d95ab32c2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-02T15:31:40Z", "date_only": false, "value": "2026-04-02T15:31:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PPF9-6X38-42WV", "record": "GHSA-PPF9-6X38-42WV", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-02T15:31:40Z", "date_only": false, "value": "2026-04-02T15:31:40Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PPF9-6X38-42WV", "record": "GHSA-PPF9-6X38-42WV", "field": "modified", "linked_record": true}, {"timestamp": "2026-04-02T17:18:18.836Z", "date_only": false, "value": "2026-04-02T17:18:18.836708Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116336249890679489", "record": "cve-2026-2699", "field": "creation_timestamp", "uuid": "a4e54519-e839-4435-ab17-2fe710fddb7e", "url": "https://infosec.exchange/users/AAKL/statuses/116336249890679489"}, {"timestamp": "2026-04-02T18:00:21.836Z", "date_only": false, "value": "2026-04-02T18:00:21.836293Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mijrwohifo2z", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "6ae50c9e-c881-4ed5-8015-4d2f7257c328", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mijrwohifo2z"}, {"timestamp": "2026-04-02T20:30:12.797Z", "date_only": false, "value": "2026-04-02T20:30:12.797991Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mik2cnigal2s", "record": "cve-2026-2699", "field": "creation_timestamp", "uuid": "3df545a5-7992-4da3-8569-16e38cfa0ad5", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mik2cnigal2s"}, {"timestamp": "2026-04-03T03:55:24.742Z", "date_only": false, "value": "2026-04-03T03:55:24.742Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-2699", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-03T09:40:23.473Z", "date_only": false, "value": "2026-04-03T09:40:23.473788Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghgzduc2g", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "016c4911-3150-4883-98c3-c85f235b44c1", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghgzduc2g"}, {"timestamp": "2026-04-03T09:40:24.656Z", "date_only": false, "value": "2026-04-03T09:40:24.656795Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwbvs2g", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "44b0adec-74b8-4f93-bbbd-8731c43d1466", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwbvs2g"}, {"timestamp": "2026-04-03T09:40:25.797Z", "date_only": false, "value": "2026-04-03T09:40:25.797983Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwduc2g", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "28559b63-33f9-4d99-9273-7c097fafd18d", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwduc2g"}, {"timestamp": "2026-04-03T09:40:26.961Z", "date_only": false, "value": "2026-04-03T09:40:26.961961Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwetk2g", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "7264d60b-67ec-462b-b5f4-f2b982699609", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwetk2g"}, {"timestamp": "2026-04-03T09:42:06.461Z", "date_only": false, "value": "2026-04-03T09:42:06.461979Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116340118328175816", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "469393cf-9d1e-412a-be08-ff525cd338ae", "url": "https://infosec.exchange/users/shadowserver/statuses/116340118328175816"}, {"timestamp": "2026-04-03T09:43:35Z", "date_only": false, "value": "2026-04-03T09:43:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8063", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "55a82c8f-0e8b-4a63-861b-5f2670de8567", "content": "\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Progress ShareFile, \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043a\u0440\u0430\u0436\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u0437 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0441\u0440\u0435\u0434.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438, \u043a\u0430\u043a \u044d\u0442\u043e \u0443\u0436\u0435 \u0431\u044b\u043b\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0431\u0430\u043d\u0434\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043c\u043e\u043d\u0435\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0445 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Accellion FTA, SolarWinds Serv-U, Gladinet CentreStack, GoAnywhere MFT, MOVEit Transfer \u0438 Cleo.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-2699) \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (CVE-2026-2701) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Storage Zones Controller (SZC), \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c \u0432 \u0432\u0435\u0442\u043a\u0435 5.x Progress ShareFile.\n\nSZC \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0431\u043e\u043b\u044c\u0448\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0432\u043e\u0438\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0438\u043c \u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0438\u0445 \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 (\u043b\u0438\u0431\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e, \u043b\u0438\u0431\u043e \u0443 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430) \u0438\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Progress.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445, \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432 Progress ShareFile 5.12.4, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 10 \u043c\u0430\u0440\u0442\u0430.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 watchTowr \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CVE-2026-2699, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 ShareFile \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 HTTP-\u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0432 \u0432\u043d\u0443\u0442\u0440\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0437\u043e\u043d\u044b \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0432\u0430\u0436\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043f\u0430\u0440\u043e\u043b\u044c \u0437\u043e\u043d\u044b \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432\u0442\u043e\u0440\u0443\u044e CVE-2026-2701 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 ASPX-\u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 HMAC-\u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u0434\u043e\u0441\u0442\u0438\u0436\u0438\u043c\u043e \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-2699 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0444\u0440\u0430\u0437\u043e\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e watchTowr, \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043e\u043a\u043e\u043b\u043e 30 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Storage Zone Controller.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, ShadowServer Foundation \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 700 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432\u00a0Progress ShareFile, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435.\n\nWatchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0441\u0432\u043e\u0438\u0445 \u0432\u044b\u0432\u043e\u0434\u0430\u0445 \u0432 Progress \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 6 \u043f\u043e 13 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0430 \u043f\u043e\u043b\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 18 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0432 Progress ShareFile 5.12.4. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0448\u043b\u0430 10 \u043c\u0430\u0440\u0442\u0430.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u043e\u0434\u043d\u0430\u043a\u043e \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u043e\u043f\u044b\u0442\u0430 Clop \u0438 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0432 \u043f\u0430\u0431\u043b\u0438\u043a \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 ShareFile Storage Zone Controller \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c.", "url": "https://t.me/true_secator/8063"}, {"timestamp": "2026-04-03T12:02:09.476Z", "date_only": false, "value": "2026-04-03T12:02:09.476234Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3milof3qcgn2g", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "b9c0e9a3-7912-4eec-bf33-ec422f1695fe", "url": "https://bsky.app/profile/solomonneas.dev/post/3milof3qcgn2g"}, {"timestamp": "2026-04-04T02:28:34.687Z", "date_only": false, "value": "2026-04-04T02:28:34.687904Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3min6seoyp226", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "2b244eca-9ea8-4e84-8366-5f9d5e1e8616", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3min6seoyp226"}, {"timestamp": "2026-04-04T07:01:23.362Z", "date_only": false, "value": "2026-04-04T07:01:23.362046Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mino27cdlk2u", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "021a8d9f-fa14-4685-a839-8ab711e2c41b", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mino27cdlk2u"}, {"timestamp": "2026-04-05T03:45:47.536Z", "date_only": false, "value": "2026-04-05T03:45:47.536336Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miptle46go2s", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "3b868228-904a-4d88-9900-526184c5e58f", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miptle46go2s"}, {"timestamp": "2026-04-05T13:20:29.667Z", "date_only": false, "value": "2026-04-05T13:20:29.667344Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miqtoyoqq22z", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "7d61d744-4b6b-4f04-8c70-8e90ecdf0260", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miqtoyoqq22z"}, {"timestamp": "2026-04-06T05:29:47Z", "date_only": false, "value": "2026-04-06T05:29:47.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-2699.yaml", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "a5ec1161-f4fa-4b99-8347-d00f25797677", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-2699.yaml"}, {"timestamp": "2026-04-07T00:41:53.185Z", "date_only": false, "value": "2026-04-07T00:41:53.185889Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3miukae62j42f", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "544bdfd0-104d-4f8f-9fbb-0dc0290d346d", "url": "https://bsky.app/profile/opsmatters.com/post/3miukae62j42f"}, {"timestamp": "2026-04-07T10:27:34.882Z", "date_only": false, "value": "2026-04-07T10:27:34.882143Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mivkxkg5g22r", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "4a09b07d-5727-4074-b78a-5da465a73689", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3mivkxkg5g22r"}, {"timestamp": "2026-04-07T10:31:04.283Z", "date_only": false, "value": "2026-04-07T10:31:04.283798Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116362960092149860", "record": "cve-2026-2699", "field": "creation_timestamp", "uuid": "d7a30243-a522-49b3-a7e9-df7b73c1b672", "url": "https://infosec.exchange/users/shadowserver/statuses/116362960092149860"}, {"timestamp": "2026-04-07T21:00:04Z", "date_only": false, "value": "2026-04-07T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/79307", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "5d779edd-da7b-4d89-83fc-5ef93c7581dc", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2699\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-07 20:55:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-2699\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/79307"}, {"timestamp": "2026-04-08T02:30:30.023Z", "date_only": false, "value": "2026-04-08T02:30:30.023822Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mixaoxbf5327", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "50d59980-8a68-40c3-9f47-598db911e2e1", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mixaoxbf5327"}, {"timestamp": "2026-04-08T03:00:06Z", "date_only": false, "value": "2026-04-08T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/d4v8vrJY5-hrjXEnfkoos_XhaR7gsc3x3sr9dmVdI_WOTno", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "4f86f7f7-9439-4d89-b98f-d309d76ed378", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-08T15:25:21.185Z", "date_only": false, "value": "2026-04-08T15:25:21.185Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-2699", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T15:25:21.185Z", "date_only": false, "value": "2026-04-08T15:25:21.185Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ProgressSoftware", "record": "CVE-2026-2699", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-09T02:29:14.658Z", "date_only": false, "value": "2026-04-09T02:29:14.658006Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mizr665myz26", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "02aca3af-2b64-4a91-bf53-b507f99a4efd", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mizr665myz26"}, {"timestamp": "2026-04-10T02:29:14.776Z", "date_only": false, "value": "2026-04-10T02:29:14.776134Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mj4bn3n3ux2s", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "45cf36b4-e1b4-4282-8fd6-c8f6b5e06546", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mj4bn3n3ux2s"}, {"timestamp": "2026-04-10T04:12:53.232Z", "date_only": false, "value": "2026-04-10T04:12:53.232930Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mj4hgg75pq2o", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "3d5205ef-691c-4a80-be3f-616ce9b9f8fc", "url": "https://bsky.app/profile/opsmatters.com/post/3mj4hgg75pq2o"}, {"timestamp": "2026-04-13T10:06:49.774Z", "date_only": false, "value": "2026-04-13T10:06:49.774435Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mjemm2zcx22w", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "73d8eaf4-379e-4ffa-9d85-be73709ff014", "url": "https://bsky.app/profile/concisecyber.bsky.social/post/3mjemm2zcx22w"}, {"timestamp": "2026-04-21T01:07:08.317Z", "date_only": false, "value": "2026-04-21T01:07:08.317021Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjxs6eio3g2r", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "ef43e54e-e5e4-4f90-9c6f-e584676dc299", "url": "https://bsky.app/profile/cyberhub.blog/post/3mjxs6eio3g2r"}, {"timestamp": "2026-05-06T00:28:15.798Z", "date_only": false, "value": "2026-05-06T00:28:15.798029Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3ml5gyosfg526", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "b976a1ca-d2b8-4375-9869-f75a6a41024c", "content": "~Watchtowr~\nA pre-auth RCE chain in Progress ShareFile Storage Zone Controller allows full system compromise.\n-\nIOCs: CVE-2026-2699, CVE-2026-2701\n-\n#RCE #ShareFile #ThreatIntel", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3ml5gyosfg526"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-2699", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "427bdb3e-2dd6-4ecd-b538-9ea4109bf423", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-2699", "field": "evidence.0.details.added_date", "uuid": "427bdb3e-2dd6-4ecd-b538-9ea4109bf423", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-2699", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "427bdb3e-2dd6-4ecd-b538-9ea4109bf423", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-2699", "field": "status.status_updated_at", "uuid": "427bdb3e-2dd6-4ecd-b538-9ea4109bf423", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-10T15:34:10Z", "date_only": false, "value": "2026-07-10T15:34:10+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2026-2699", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5caec942-c9d3-40aa-97c0-b4d94038af7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-10T15:34:10Z", "date_only": false, "value": "2026-07-10T15:34:10+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-2699", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "5caec942-c9d3-40aa-97c0-b4d94038af7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-11T11:00:01Z", "date_only": false, "value": "2026-07-11T11:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-2699", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "427bdb3e-2dd6-4ecd-b538-9ea4109bf423", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-11T11:00:38.264Z", "date_only": false, "value": "2026-07-11T11:00:38.264881Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/427bdb3e-2dd6-4ecd-b538-9ea4109bf423", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "fd2ac5b0-dd28-4864-95f7-88dd73d0f513", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/427bdb3e-2dd6-4ecd-b538-9ea4109bf423", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-12T01:01:45.284Z", "date_only": false, "value": "2026-07-12T01:01:45.284853Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5caec942-c9d3-40aa-97c0-b4d94038af7c", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "40c2f19f-6cb0-4b6f-ba4f-15ff59d9bd62", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5caec942-c9d3-40aa-97c0-b4d94038af7c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-14T13:31:03.999Z", "date_only": false, "value": "2026-07-14T13:31:03.999050Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqmcvxhwmy2r", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "c1f11655-99e0-4072-820b-d87c13d915e7", "content": "Progress Software suspended ShareFile Storage Zone Controller accounts over a credible threat. CVE-2026-2699 (CVSS 9.8) may be involved.\n\n#ShareFile #ProgressSoftware #CVE20262699 #StorageZoneController #DataSecurity", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mqmcvxhwmy2r"}, {"timestamp": "2026-07-17T19:00:03.145Z", "date_only": false, "value": "2026-07-17T19:00:03.145969Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkArmyChannel/5764", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "a4b2580f-91ec-4c85-87ce-611f9e1f15f0", "content": "New Progress ShareFile Flaws Expose Servers to Unauthorized Remote Takeover\n\nSecurity researchers at watchTowr Labs have disclosed a critical exploit chain in the Progress ShareFile Storage Zone Controller.\n\nThe vulnerabilities, tracked as CVE-2026-2699 and CVE-2026-2701, enable unauthenticated attackers to achieve Remote Code Execution (RCE) and completely compromise vulnerable servers.\n\nWith roughly 30,000 instances exposed to the public internet, organizations are urged to patch immediately to prevent catastrophic data breaches.\n\nManaged file transfer (MFT) solutions remain a top target for advanced persistent threat (APT) groups and ransomware syndicates.\n\nFollowing historic breaches involving tools like MOVEit, Cleo Harmony, and GoAnywhere, threat actors continuously hunt for unpatched data-sharing gateways.\n\nSee more here \ud83d\udc4b", "url": "https://t.me/DarkArmyChannel/5764"}, {"timestamp": "2026-07-18T10:15:08.582Z", "date_only": false, "value": "2026-07-18T10:15:08.582127Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-17)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "cd522f7b-2502-4ac0-b9cf-1b484b024f04", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-19T16:00:11.084Z", "date_only": false, "value": "2026-07-19T16:00:11.084063Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1689", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "7f8674c5-eea2-491b-ba74-eda404f79b89", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE (CVE-2026-2699 + CVE-2026-2701) \ud83d\udd34\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u0430 \u2014 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043b\u044e\u0431\u043e\u0439 \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \ud83d\ude31\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n#Progress #ShareFile #CVE #ZeroDay #RCE #critical_bug", "url": "https://t.me/critical_bug/1689"}, {"timestamp": "2026-07-19T16:00:11.155Z", "date_only": false, "value": "2026-07-19T16:00:11.155180Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1690", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "ed4afe91-58cf-4527-90fe-60cfa7c8fb57", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE\nCVE-2026-2699 + CVE-2026-2701 \ud83d\udd34\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Progress ShareFile Storage Zone Controller, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0412\u0441\u0451 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CWE-698 (Execution After Redirect) \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /ConfigService/Admin.aspx. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0433\u043e. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (CVE-2026-2699) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c, \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0435\u0442 Zone Secret \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u2192 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 RCE (CVE-2026-2701).\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u041f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u043a\u043e\u043b\u043e 30 000 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438 \u2014 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 ShareFile Storage Zone Controller \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\n\u2b50\ufe0f \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\\#Progress \\#ShareFile \\#CVE \\#ZeroDay \\#RCE \\#CyberSecurity \\#Infosec \\#critical_bug", "url": "https://t.me/critical_bug/1690"}, {"timestamp": "2026-07-19T16:00:11.232Z", "date_only": false, "value": "2026-07-19T16:00:11.232933Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1691", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "6f56c056-4781-4898-86e1-a0d01bec33be", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: Progress ShareFile Pre-Auth RCE Chain (CVE-2026-2699 & CVE-2026-2701)", "url": "https://t.me/critical_bug/1691"}, {"timestamp": "2026-07-21T00:00:40.928Z", "date_only": false, "value": "2026-07-21T00:00:40.928987Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1691", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "76b557f1-4fbd-4160-82a5-e2523fb9d721", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: Progress ShareFile Pre-Auth RCE Chain (CVE-2026-2699 & CVE-2026-2701)", "url": "https://t.me/critical_bug/1691", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-21T00:00:41.021Z", "date_only": false, "value": "2026-07-21T00:00:41.021939Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1690", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "f555a07d-076a-4ee3-8800-a39ccc06859a", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE\nCVE-2026-2699 + CVE-2026-2701 \ud83d\udd34\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Progress ShareFile Storage Zone Controller, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0412\u0441\u0451 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CWE-698 (Execution After Redirect) \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /ConfigService/Admin.aspx. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0433\u043e. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (CVE-2026-2699) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c, \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0435\u0442 Zone Secret \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u2192 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 RCE (CVE-2026-2701).\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u041f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u043a\u043e\u043b\u043e 30 000 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438 \u2014 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 ShareFile Storage Zone Controller \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\n\u2b50\ufe0f \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\\#Progress \\#ShareFile \\#CVE \\#ZeroDay \\#RCE \\#CyberSecurity \\#Infosec \\#critical_bug", "url": "https://t.me/critical_bug/1690", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-21T00:00:41.112Z", "date_only": false, "value": "2026-07-21T00:00:41.112598Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1689", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "77363477-bbb6-4ee5-89f5-82585f437388", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE (CVE-2026-2699 + CVE-2026-2701) \ud83d\udd34\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u0430 \u2014 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043b\u044e\u0431\u043e\u0439 \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \ud83d\ude31\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n#Progress #ShareFile #CVE #ZeroDay #RCE #critical_bug", "url": "https://t.me/critical_bug/1689", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-24T10:15:06.327Z", "date_only": false, "value": "2026-07-24T10:15:06.327610Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-23)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "5cd7cfce-c576-476c-b6b1-50fe52b466c1", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-25T10:15:15.908Z", "date_only": false, "value": "2026-07-25T10:15:15.908861Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-24)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "f18cd02c-9a29-4bd5-b2e7-50ee95725eb8", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T10:15:38.709Z", "date_only": false, "value": "2026-07-26T10:15:38.709382Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-25)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "110d1c79-a851-4a58-a3c6-47ea3759cd4f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-27T10:15:08.598Z", "date_only": false, "value": "2026-07-27T10:15:08.598639Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-26)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "d4a3c891-e816-42ad-b24c-bd4d2b4f39e9", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-28T10:00:06.881Z", "date_only": false, "value": "2026-07-28T10:00:06.881930Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-27)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "d4ffbca5-253c-46ee-a0ef-fe1790b30b2e"}, {"timestamp": "2026-07-28T10:15:20.132Z", "date_only": false, "value": "2026-07-28T10:15:20.132959Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-27)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "74eb1f3d-90a4-4341-875d-510fa81475ad", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T10:15:09.562Z", "date_only": false, "value": "2026-07-29T10:15:09.562383Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-28)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "66c1cc36-7dbc-4667-8aec-1b7b3d44f3d1", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-04T10:15:08.135Z", "date_only": false, "value": "2026-08-04T10:15:08.135103Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-03)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "5602052a-953b-4341-8652-23a34bea93fa", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-05T10:00:08.465Z", "date_only": false, "value": "2026-08-05T10:00:08.465494Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-04)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "adc58cdf-86d0-46aa-ae7c-f2644b4331bc"}, {"timestamp": "2026-08-05T10:15:13.526Z", "date_only": false, "value": "2026-08-05T10:15:13.526237Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-04)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "4bfe2db3-b270-4707-9cab-72015645d8c4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-07T10:38:41.121Z", "date_only": false, "value": "2026-08-07T10:38:41.121712Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "77cf7b54-dfa6-41e5-8b38-32b8807da7e6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-09T04:19:14.394Z", "date_only": false, "value": "2026-08-09T04:19:14.394214Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/2873", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "63248f6f-3e23-4b3c-b5c2-57c2a4a7ec30", "content": "New Progress ShareFile Flaws Expose Servers to Unauthorized Remote Takeover\n\nSecurity researchers at watchTowr Labs have disclosed a critical exploit chain in the Progress ShareFile Storage Zone Controller.\n\nThe vulnerabilities, tracked as CVE-2026-2699 and CVE-2026-2701, enable unauthenticated attackers to achieve Remote Code Execution (RCE) and completely compromise vulnerable servers.\n\nWith roughly 30,000 instances exposed to the public internet, organizations are urged to patch immediately to prevent catastrophic data breaches.\n\nManaged file transfer (MFT) solutions remain a top target for advanced persistent threat (APT) groups and ransomware syndicates.\n\nFollowing historic breaches involving tools like MOVEit, Cleo Harmony, and GoAnywhere, threat actors continuously hunt for unpatched data-sharing gateways.\n\nSee more here \ud83d\udc4b", "url": "https://t.me/onelab1337/2873"}, {"timestamp": "2026-08-10T10:15:06.870Z", "date_only": false, "value": "2026-08-10T10:15:06.870294Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-09)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "fd49769a-479e-48ee-a545-a980d820e09a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-11T10:15:08.201Z", "date_only": false, "value": "2026-08-11T10:15:08.201984Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-10)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "d0775049-e468-4314-b183-3a89e9c9b282", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-12T10:15:09.626Z", "date_only": false, "value": "2026-08-12T10:15:09.626403Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "0425654e-363a-417e-872a-d1437436ef1d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-14T10:00:17Z", "date_only": false, "value": "2026-08-14T10:00:17.000723Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-13)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "de651e18-b1fb-4271-a85a-396d763b78b5"}, {"timestamp": "2026-08-14T10:15:09.139Z", "date_only": false, "value": "2026-08-14T10:15:09.139251Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-13)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "03a5d7a8-1f37-46c4-9a21-7c85f875d10e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-16T10:15:05.534Z", "date_only": false, "value": "2026-08-16T10:15:05.534827Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-15)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "92ed9025-dc0b-4bb8-aef6-dc34a697ede3", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-17T10:15:06.289Z", "date_only": false, "value": "2026-08-17T10:15:06.289243Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-16)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "d7b72172-69d9-4997-8b26-31d16888264b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-18T10:15:08.302Z", "date_only": false, "value": "2026-08-18T10:15:08.302581Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-17)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "974160b3-923b-4227-95b2-d09ba4ef7888", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-19T10:15:18.473Z", "date_only": false, "value": "2026-08-19T10:15:18.473438Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-18)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "af098533-7cf0-4d3c-aecd-a26f4afa00d2", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-20T10:15:19.767Z", "date_only": false, "value": "2026-08-20T10:15:19.767729Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-19)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "167e9a5a-2e40-45ee-9889-944ac27ef980", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-23T10:15:07.835Z", "date_only": false, "value": "2026-08-23T10:15:07.835249Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-22)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "38de92a8-1874-47f1-bf5c-3c266bde8fff", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-25T10:15:10.055Z", "date_only": false, "value": "2026-08-25T10:15:10.055928Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-24)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "e9be702e-3f54-4ab2-a614-04df3561e2c8", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-28T10:00:09.725Z", "date_only": false, "value": "2026-08-28T10:00:09.725841Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "2172d2ce-3ade-4fc6-8737-8b24b7a7afc9"}, {"timestamp": "2026-08-29T10:15:18.901Z", "date_only": false, "value": "2026-08-29T10:15:18.901704Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "75e78557-5006-4e6f-875b-aeb0bbed0161", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-30T10:00:06.469Z", "date_only": false, "value": "2026-08-30T10:00:06.469404Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-29)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "259fbad2-3e42-4d47-9b89-fa7bd8a69733"}, {"timestamp": "2026-08-30T10:15:07.390Z", "date_only": false, "value": "2026-08-30T10:15:07.390396Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-29)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "34b2fc32-26b4-482f-b5bf-929558d5acf0", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T10:15:07.644Z", "date_only": false, "value": "2026-09-01T10:15:07.644502Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "282e80d7-ad07-4d42-a5d7-9ecdff2ec2d5", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-04T10:00:14.231Z", "date_only": false, "value": "2026-09-04T10:00:14.231824Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-03)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "ced97434-4258-4a23-abd2-f2dbb7e05961"}, {"timestamp": "2026-09-04T10:15:18.301Z", "date_only": false, "value": "2026-09-04T10:15:18.301520Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-03)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "15a6bb77-5db6-40fb-beee-7fdf01d3c195", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-05T10:15:38.622Z", "date_only": false, "value": "2026-09-05T10:15:38.622332Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-04)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "7f75feb1-607d-4f71-87db-2662c17f8e47", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-06T10:15:08.786Z", "date_only": false, "value": "2026-09-06T10:15:08.786157Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "94b50035-5b8d-494c-bae4-2c3fd71f7cc8", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-07T10:15:04.642Z", "date_only": false, "value": "2026-09-07T10:15:04.642699Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-06)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "cf8087be-c16e-4543-9e25-d0e68739c439", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-08T10:15:05.531Z", "date_only": false, "value": "2026-09-08T10:15:05.531758Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-07)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "c23b57c2-6504-4646-93cc-9786c8171725", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-10T10:15:10.689Z", "date_only": false, "value": "2026-09-10T10:15:10.689037Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-09)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "c9bc53f2-b87b-4fc9-9cf9-f601dea14558", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-12T10:15:06.433Z", "date_only": false, "value": "2026-09-12T10:15:06.433750Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-11)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "41c0eb04-82fb-4780-99d5-51a0ac33ded9", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-12T12:00:05.198Z", "date_only": false, "value": "2026-09-12T12:00:05.198731Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iOcWIyahPmzeafXhqZ9UUCxtc99w_uX51aK2YYp91N0S6vc", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "7a32fae3-03dd-44bf-8ae9-75dbd9a20b11", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-12T16:00:09.293Z", "date_only": false, "value": "2026-09-12T16:00:09.293505Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bZF-i5IhMlSk9Qqt6MiijfMvmpmFMWNRxEAF5TS1oCjwtd0", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "370cf2ed-36b0-4591-87e5-0e08f2e0ecbf", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-12T22:00:05.891Z", "date_only": false, "value": "2026-09-12T22:00:05.891286Z", "kind": "sighting", "label": "Seen", "source": "Telegram/tliPHGNmKkBG-rTD24a0CY8dlXHZL0klGojx535X2jpJso0", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "1998e4a0-24cb-4041-8cd1-b433b4991295"}, {"timestamp": "2026-09-13T00:00:05.790Z", "date_only": false, "value": "2026-09-13T00:00:05.790365Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/tliPHGNmKkBG-rTD24a0CY8dlXHZL0klGojx535X2jpJso0", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "5da9fd54-cb26-44fa-8ca7-a8b03e1423b0", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-13T05:00:04.941Z", "date_only": false, "value": "2026-09-13T05:00:04.941623Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7xV42MskB-2ON1T-tQ5sttv7o2et93yeA9hCBsSBpL7qvSw", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "3655f106-e934-40bb-85b7-30a911519afc"}, {"timestamp": "2026-09-13T10:15:07.953Z", "date_only": false, "value": "2026-09-13T10:15:07.953626Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-12)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "cc352285-6ac7-421a-ab26-5581bba0ca19", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-13T15:00:05.209Z", "date_only": false, "value": "2026-09-13T15:00:05.209916Z", "kind": "sighting", "label": "Seen", "source": "Telegram/b5VRLAGNUyRHY6NilediA6h9N6sdyeE0IaG26PfGUbhzmzA", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "6e8831e0-c517-4955-be00-36ef60b2ab8b"}, {"timestamp": "2026-09-13T19:00:06.639Z", "date_only": false, "value": "2026-09-13T19:00:06.639485Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HJHfqXdFTbdlNHLDiq9-rcV9lRzKv5hlqp4ef-N0m_5Hlx8", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "7a284732-1467-4e6d-a1c4-6691f6b29b96", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-13T22:00:08.032Z", "date_only": false, "value": "2026-09-13T22:00:08.032688Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SkZOROHFzO0XNmOTRkDPjQMnCLT7cEQR-5T9RCrLL0Qn5Jo", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "537e4b26-f4ca-4838-a4c1-399d8d3f2270", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T00:00:13.041Z", "date_only": false, "value": "2026-09-14T00:00:13.041166Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/b5VRLAGNUyRHY6NilediA6h9N6sdyeE0IaG26PfGUbhzmzA", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "ba64b9bd-cfe9-48ad-8b45-726d22b83674", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T00:00:30.115Z", "date_only": false, "value": "2026-09-14T00:00:30.115827Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7xV42MskB-2ON1T-tQ5sttv7o2et93yeA9hCBsSBpL7qvSw", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "7e392951-0f91-4e05-ba61-6d08c7d0e7d6", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T04:00:04.304Z", "date_only": false, "value": "2026-09-14T04:00:04.304005Z", "kind": "sighting", "label": "Seen", "source": "Telegram/4ubCWDGxu4WnFOq29PLvDuzY7rtHUTjtN28OWSanTq9JErs", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "3e3af5c5-969c-40f7-b750-8dd5becc6218"}, {"timestamp": "2026-09-14T15:00:04.647Z", "date_only": false, "value": "2026-09-14T15:00:04.647422Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2H2rLLj_yopSB8FXwFjoRrUb_4PBHTp7JA23qh9ZyFZjIdg", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "b41d7386-3b73-4870-8bdf-62b25aaab489", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T20:00:05.924Z", "date_only": false, "value": "2026-09-14T20:00:05.924139Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kvYXJ_fNmwBQ9Yglg1TGim8W6Kuqti0GVwRnrj-jVNkwZyg", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "9eb675a3-9339-46f6-9985-267d594cbc08", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T22:00:04.926Z", "date_only": false, "value": "2026-09-14T22:00:04.926446Z", "kind": "sighting", "label": "Seen", "source": "Telegram/s-8DsyOiId0oPtfl3Cq1DdYK1Hd-LjgtbtPAIB167qtk0_s", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "3a88fe07-77bd-4d11-9267-6b70f19e60ee"}, {"timestamp": "2026-09-15T00:00:09.407Z", "date_only": false, "value": "2026-09-15T00:00:09.407591Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/s-8DsyOiId0oPtfl3Cq1DdYK1Hd-LjgtbtPAIB167qtk0_s", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "25cc1bce-7426-4905-b2c0-71566bc5fdc1", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T00:00:30.367Z", "date_only": false, "value": "2026-09-15T00:00:30.367471Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4ubCWDGxu4WnFOq29PLvDuzY7rtHUTjtN28OWSanTq9JErs", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "dc57d5ab-4af1-4208-9fbb-cd19a7f5b1e1", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T07:00:05.565Z", "date_only": false, "value": "2026-09-15T07:00:05.565962Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lfng4x9E2hruDRzlxi1Nwm4ia2mcZEmtjSxEdebazYmJI2A", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "e271feb2-a9e7-4066-9765-81a29b99fc6e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T10:15:07.581Z", "date_only": false, "value": "2026-09-15T10:15:07.581558Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-14)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "a716a4b0-f206-4d00-a023-f3d6524b8064", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T14:00:06.033Z", "date_only": false, "value": "2026-09-15T14:00:06.033983Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AVHa0ccgfuhd9DVplbaBFLW521wJB58XsX1RjH3vPioGS8M", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "c51f3f3d-ca0f-4634-8a81-d87337bf520c"}, {"timestamp": "2026-09-15T20:00:04.900Z", "date_only": false, "value": "2026-09-15T20:00:04.900226Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ErfJ1Ovdt1-zddZrF_9_--hvD5klp0sk5OK_EEG8YafVg0I", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "e3ba438f-4ff2-4fbb-a362-8c57a1515978"}, {"timestamp": "2026-09-15T23:00:05.380Z", "date_only": false, "value": "2026-09-15T23:00:05.380948Z", "kind": "sighting", "label": "Seen", "source": "Telegram/darA0yLaDDtOvNzNoPMIV1DYpoMUI-prfEIIPb2OESUVKA4", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "69c10560-93a0-4288-958e-25f3453d2903"}, {"timestamp": "2026-09-16T00:00:08.727Z", "date_only": false, "value": "2026-09-16T00:00:08.727836Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/darA0yLaDDtOvNzNoPMIV1DYpoMUI-prfEIIPb2OESUVKA4", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "9bb6aa87-0e48-4ae6-ac79-d86c71b70b10", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T00:00:11.807Z", "date_only": false, "value": "2026-09-16T00:00:11.807583Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ErfJ1Ovdt1-zddZrF_9_--hvD5klp0sk5OK_EEG8YafVg0I", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "618cf69a-0332-41ea-abd1-4d60fd88561a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T00:00:30.699Z", "date_only": false, "value": "2026-09-16T00:00:30.699496Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AVHa0ccgfuhd9DVplbaBFLW521wJB58XsX1RjH3vPioGS8M", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "93d07d49-10a3-42b9-a62f-1173739e4cf5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T10:00:05.604Z", "date_only": false, "value": "2026-09-16T10:00:05.604013Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8Is-3SI6bO9GNCJOmvFyQfWUtIzeYjCZZGsfQ4Xpcb-6Qtk", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "09639522-bc1e-42c2-8acb-e490b816a038", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T10:00:05.669Z", "date_only": false, "value": "2026-09-16T10:00:05.669314Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/62gcesdJfEiUbIen6VNYpv9Wpfrn8s4bwEeJpK-9Ft26ADg", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "2abbfb11-3592-4ab0-9083-c1f6e08e3683", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T10:15:12.380Z", "date_only": false, "value": "2026-09-16T10:15:12.380545Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "cfc46a55-393c-4c82-aa26-a522ce50be0c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-17T10:15:09.856Z", "date_only": false, "value": "2026-09-17T10:15:09.856398Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "42dcfab3-e8f3-4d00-a5dd-f6714d9b413b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-19T10:15:09.796Z", "date_only": false, "value": "2026-09-19T10:15:09.796134Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-18)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "31194fcd-f88e-42d9-8a3c-95f99c6e32c7", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-20T10:15:10.373Z", "date_only": false, "value": "2026-09-20T10:15:10.373182Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-19)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "9a3f5784-725c-4bf0-b4d5-aef79f488d97", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-21T10:15:06.934Z", "date_only": false, "value": "2026-09-21T10:15:06.934167Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-20)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "35da4eb9-6738-41e4-840b-43415e6f84e8", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-23)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "3d395aad-88f1-42b3-81d6-8ac7adf64558", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-25)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "2e539149-d377-48e8-bc31-669c3336aa2d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T09:11:46Z", "date_only": false, "value": "2026-09-25T09:11:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/p5COqCPslf2ZgcuHqwqkPFKZwMS3i8i9QwzsmR97pR9GqWc", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "55d8b6ba-d1bb-4118-9fba-68fd600af21e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T09:11:46Z", "date_only": false, "value": "2026-09-25T09:11:46.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/p5COqCPslf2ZgcuHqwqkPFKZwMS3i8i9QwzsmR97pR9GqWc", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "4d1c4fe4-0d81-40da-97c6-f9b64e3736e9"}, {"timestamp": "2026-09-27T00:00:00Z", "date_only": false, "value": "2026-09-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-27)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "42ea4a5a-ac68-4d0c-9a52-34a72f4a77e3", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-01T00:00:00Z", "date_only": false, "value": "2026-10-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-01)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "802273bc-ee9c-4c6e-a267-955d97351a40", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": false, "value": "2026-10-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-02)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "53a92ac1-b3e4-40e0-8e98-2b39b50d9230", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-03T00:00:00Z", "date_only": false, "value": "2026-10-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-03)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "df94e9ac-d122-48ff-a9f0-e4361b5e3214", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-04T00:00:00Z", "date_only": false, "value": "2026-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-04)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "27d9166f-785f-48c5-ae5b-ffdef9229c20", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-07)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "c18d9d23-32bc-4b61-a669-66e6bd490125", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": false, "value": "2026-10-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-07)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "93a49865-0563-43ef-a9fe-6cc2ce76c8df"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-08)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "df362866-8472-4130-b206-ffbb73f0fea2", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": false, "value": "2026-10-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-09)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "f333292c-fa4e-4fde-b7f3-e5af9b8d43a6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-10T00:00:00Z", "date_only": false, "value": "2026-10-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-10)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "8db5b86f-d6b5-4b0e-9ea5-b1ad01458a8b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-16)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "a4cfdc5f-d5df-425d-bacd-3646a628def1", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-16)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "fe6818cd-92cb-430d-8c56-58721f35ddff"}, {"timestamp": "2026-10-17T00:00:00Z", "date_only": false, "value": "2026-10-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-17)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "2603c327-e504-41fc-84b1-ef26fdeb7108", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-18T00:00:00Z", "date_only": false, "value": "2026-10-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-18)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "c5c055dc-e43d-4310-9289-36f04aee3490", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": false, "value": "2026-10-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-19)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "d8ae5a92-b504-4e45-b5a5-3a384fedf8be", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-20)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "2b638539-f899-4118-9f08-f924bf25302f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-22)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "cdc172bc-6897-4ec4-983a-9532bb739c1e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-23)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "67efe6dc-6d5d-4e9b-98a0-d5d68ef48f01", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-25T00:00:00Z", "date_only": false, "value": "2026-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-25)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "82c2be66-bbfe-4b35-990e-bfb4db14c9df", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-26)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "ed13f1e7-0e7d-47ea-bef5-318a790a52d1", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-26T21:10:00.170Z", "date_only": false, "value": "2026-10-26T21:10:00.170", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-2699", "record": "FKIE_CVE-2026-2699", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-30T00:00:00Z", "date_only": false, "value": "2026-10-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-30)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "9b1ed957-32e4-4b52-81ad-b8b0b566a9ab", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": false, "value": "2026-11-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-01)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "c336f581-6ce1-4541-9530-68e51528a5c3", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-02T00:00:00Z", "date_only": false, "value": "2026-11-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-02)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "8edd51f7-2496-42e6-94fb-cc66fba8c2b2", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-05T00:00:00Z", "date_only": false, "value": "2026-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-05)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "f83f3f38-4903-4db3-8580-6f678d8eae57", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-06)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "8f4c1c05-1db0-4b9c-acdd-2193a85824f6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-07T00:00:00Z", "date_only": false, "value": "2026-11-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-11-07)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "d435834e-7b7b-4e63-8a05-be9591c68691"}, {"timestamp": "2026-11-08T00:00:00Z", "date_only": false, "value": "2026-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-08)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "5e8cadb3-e317-4149-9bee-abd2a00b3196", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-08T00:00:00Z", "date_only": false, "value": "2026-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-11-08)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "7146aab8-935e-414d-bbe4-8656bd6aa4cc"}, {"timestamp": "2026-11-10T00:00:00Z", "date_only": false, "value": "2026-11-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-10)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "8e9c83bd-ae92-47b6-969e-a9f4dee5eaca", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-12T00:00:00Z", "date_only": false, "value": "2026-11-12T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2026-2699", "field": "timestamps.last_seen_at", "uuid": "5caec942-c9d3-40aa-97c0-b4d94038af7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-12T00:00:00Z", "date_only": true, "value": "2026-11-12", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2026-2699", "field": "evidence.0.details.observation_date", "uuid": "5caec942-c9d3-40aa-97c0-b4d94038af7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-12T00:00:00Z", "date_only": false, "value": "2026-11-12T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2026-2699", "field": "status.status_updated_at", "uuid": "5caec942-c9d3-40aa-97c0-b4d94038af7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-13T00:00:00Z", "date_only": false, "value": "2026-11-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-11-13)", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "a22d37e6-01fa-4f9a-acc3-088a2337fb6d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-14T01:00:01Z", "date_only": false, "value": "2026-11-14T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2026-2699", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "5caec942-c9d3-40aa-97c0-b4d94038af7c", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T00:34:08.077Z", "anchors": {"origin": {"timestamp": "2026-04-02T13:04:00.485Z", "date_only": false, "value": "2026-04-02T13:04:00.485Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-2699", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-04-02T13:04:00.485Z", "date_only": false, "value": "2026-04-02T13:04:00.485Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-2699", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-04-02T12:19:18.528Z", "date_only": false, "value": "2026-04-02T12:19:18.528807Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "67efc43d-5ca2-455c-9c55-d232ba4811fc", "url": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-2699", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "427bdb3e-2dd6-4ecd-b538-9ea4109bf423", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 8506559.515, "hours": 2362.9331986111115, "days": 98.45554994212964, "min_seconds": 8506559.515, "max_seconds": 8592959.515, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-02T13:04:00.485Z", "date_only": false, "value": "2026-04-02T13:04:00.485Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-2699", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-2699", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "427bdb3e-2dd6-4ecd-b538-9ea4109bf423", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 8506559.515, "hours": 2362.9331986111115, "days": 98.45554994212964, "min_seconds": 8506559.515, "max_seconds": 8592959.515, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-02T13:04:00.485Z", "date_only": false, "value": "2026-04-02T13:04:00.485Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-2699", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-2699", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "427bdb3e-2dd6-4ecd-b538-9ea4109bf423", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": -2681.957, "hours": -0.7449880555555555, "days": -0.03104116898148148, "min_seconds": -2681.957, "max_seconds": -2681.957, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-04-02T13:04:00.485Z", "date_only": false, "value": "2026-04-02T13:04:00.485Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-2699", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-02T12:19:18.528Z", "date_only": false, "value": "2026-04-02T12:19:18.528807Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "67efc43d-5ca2-455c-9c55-d232ba4811fc", "url": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 19567807.592028, "hours": 5435.502108896667, "days": 226.4792545373611, "min_seconds": 19567807.592028, "max_seconds": 19567807.592028, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-02T13:04:00.485Z", "date_only": false, "value": "2026-04-02T13:04:00.485Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-2699", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T00:34:08.077Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 11061248.077028, "hours": 3072.568910285556, "days": 128.0237045952315, "min_seconds": 10974848.077028, "max_seconds": 11061248.077028, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-2699", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "427bdb3e-2dd6-4ecd-b538-9ea4109bf423", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-15T00:34:08.077Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 19570489.549028, "hours": 5436.247096952223, "days": 226.51029570634262, "min_seconds": 19570489.549028, "max_seconds": 19570489.549028, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-02T12:19:18.528Z", "date_only": false, "value": "2026-04-02T12:19:18.528807Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "record": "CVE-2026-2699", "field": "creation_timestamp", "uuid": "67efc43d-5ca2-455c-9c55-d232ba4811fc", "url": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T00:34:08.077Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}