{"metadata": {"vulnerability": "CVE-2026-2701", "count": 75, "kinds": {"milestone": 4, "sighting": 63, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-02-18T17:20:44.202Z", "date_only": false, "value": "2026-02-18T17:20:44.202Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-2701", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-02T00:00:00Z", "date_only": false, "value": "2026-04-02T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-2701", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-04-02T00:00:00Z", "date_only": false, "value": "2026-04-02T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-2701", "record": "FKIE_CVE-2026-2701", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-04-02T09:59:15Z", "date_only": false, "value": "2026-04-02T09:59:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/progress-disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-sharefile", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "b54baac1-5ce0-441b-b269-de85f7ca329e", "url": "https://www.acn.gov.it/portale/w/progress-disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-sharefile"}, {"timestamp": "2026-04-02T11:13:10.076Z", "date_only": false, "value": "2026-04-02T11:13:10.076864Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mij36jygvj2d", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "063cb432-ed4c-46bb-bbd9-37b4132ed206", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mij36jygvj2d"}, {"timestamp": "2026-04-02T11:16:34.791Z", "date_only": false, "value": "2026-04-02T11:16:34.791525Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mij3ejoqwjj2", "record": "cve-2026-2701", "field": "creation_timestamp", "uuid": "bbc206d1-0cb0-4672-863f-7f0bc6830258", "url": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mij3ejoqwjj2"}, {"timestamp": "2026-04-02T11:24:32.253Z", "date_only": false, "value": "2026-04-02T11:24:32.253715Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mij3svljrk2a", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "065901ac-ef00-4857-bb56-e4dff9b0f054", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mij3svljrk2a"}, {"timestamp": "2026-04-02T12:04:25.820Z", "date_only": false, "value": "2026-04-02T12:04:25.820605Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mij62adeh32b", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "997749c7-5b75-4c40-9404-cc1e6eb5e129", "url": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mij62adeh32b"}, {"timestamp": "2026-04-02T12:19:43.338Z", "date_only": false, "value": "2026-04-02T12:19:43.338524Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "4de73cee-f23f-4838-a628-1db31b58dc0d", "url": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-02T13:04:38.554Z", "date_only": false, "value": "2026-04-02T13:04:38.554Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-2701", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-02T13:04:38.554Z", "date_only": false, "value": "2026-04-02T13:04:38.554Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ProgressSoftware", "record": "CVE-2026-2701", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-02T14:15:55.178Z", "date_only": false, "value": "2026-04-02T14:15:55.178037Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mijffecf3y2o", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "b7e16657-7059-4a2c-9d4b-5a3e0f088711", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mijffecf3y2o"}, {"timestamp": "2026-04-02T14:16:27Z", "date_only": false, "value": "2026-04-02T14:16:27Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2VXX-W4H2-4G8G", "record": "GHSA-2VXX-W4H2-4G8G", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-04-02T14:16:27.917Z", "date_only": false, "value": "2026-04-02T14:16:27.917", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-2701", "record": "FKIE_CVE-2026-2701", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-02T14:33:27.758Z", "date_only": false, "value": "2026-04-02T14:33:27.758391Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116335601728170417", "record": "cve-2026-2701", "field": "creation_timestamp", "uuid": "d475afde-1f67-49fe-889b-aff47facc0fe", "url": "https://infosec.exchange/users/threatcodex/statuses/116335601728170417"}, {"timestamp": "2026-04-02T15:21:32Z", "date_only": false, "value": "2026-04-02T15:21:32.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/2ZRPJX-1sLKzKjRuu5udQKo36EYUbcyEMGSCPR0-mfcyWco", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "561f4ccf-35dc-4787-a493-f408a26ff158"}, {"timestamp": "2026-04-02T15:31:40Z", "date_only": false, "value": "2026-04-02T15:31:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2VXX-W4H2-4G8G", "record": "GHSA-2VXX-W4H2-4G8G", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-02T15:31:40Z", "date_only": false, "value": "2026-04-02T15:31:40Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2VXX-W4H2-4G8G", "record": "GHSA-2VXX-W4H2-4G8G", "field": "modified", "linked_record": true}, {"timestamp": "2026-04-02T17:18:18.960Z", "date_only": false, "value": "2026-04-02T17:18:18.960681Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116336249890679489", "record": "cve-2026-2701", "field": "creation_timestamp", "uuid": "6fc99cea-5b94-4c50-92ea-985f3013c323", "url": "https://infosec.exchange/users/AAKL/statuses/116336249890679489"}, {"timestamp": "2026-04-02T18:00:21.912Z", "date_only": false, "value": "2026-04-02T18:00:21.912685Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mijrwohifo2z", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "9c4c9488-690f-48db-8328-0644941a1442", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mijrwohifo2z"}, {"timestamp": "2026-04-02T20:30:12.901Z", "date_only": false, "value": "2026-04-02T20:30:12.901494Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mik2cnigal2s", "record": "cve-2026-2701", "field": "creation_timestamp", "uuid": "404158d0-7893-4631-9ab3-1e2de4b58273", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mik2cnigal2s"}, {"timestamp": "2026-04-03T03:55:26.174Z", "date_only": false, "value": "2026-04-03T03:55:26.174Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-2701", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-03T03:55:26.174Z", "date_only": false, "value": "2026-04-03T03:55:26.174Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-2701", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-03T09:40:23.566Z", "date_only": false, "value": "2026-04-03T09:40:23.566343Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghgzduc2g", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "c976a107-b5b9-4671-b406-4ba2333f76ca", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghgzduc2g"}, {"timestamp": "2026-04-03T09:40:24.730Z", "date_only": false, "value": "2026-04-03T09:40:24.730076Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwbvs2g", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "3ce1c873-56e8-41de-8c80-bf922dcf7034", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwbvs2g"}, {"timestamp": "2026-04-03T09:40:25.887Z", "date_only": false, "value": "2026-04-03T09:40:25.887772Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwduc2g", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "91aac160-f4d2-4de5-a66e-716358581ae3", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwduc2g"}, {"timestamp": "2026-04-03T09:40:27.054Z", "date_only": false, "value": "2026-04-03T09:40:27.054315Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwetk2g", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "0f6f4de5-bf61-419e-b319-dd461e159dd5", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwetk2g"}, {"timestamp": "2026-04-03T09:42:06.578Z", "date_only": false, "value": "2026-04-03T09:42:06.578339Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116340118328175816", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "c1d1e80a-9013-48ec-87ae-45589354d29e", "url": "https://infosec.exchange/users/shadowserver/statuses/116340118328175816"}, {"timestamp": "2026-04-03T09:43:35Z", "date_only": false, "value": "2026-04-03T09:43:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8063", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "ffb619d7-f1af-447c-9ef5-38f5b778f388", "content": "\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Progress ShareFile, \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043a\u0440\u0430\u0436\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u0437 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0441\u0440\u0435\u0434.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438, \u043a\u0430\u043a \u044d\u0442\u043e \u0443\u0436\u0435 \u0431\u044b\u043b\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0431\u0430\u043d\u0434\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043c\u043e\u043d\u0435\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0445 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Accellion FTA, SolarWinds Serv-U, Gladinet CentreStack, GoAnywhere MFT, MOVEit Transfer \u0438 Cleo.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-2699) \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (CVE-2026-2701) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Storage Zones Controller (SZC), \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c \u0432 \u0432\u0435\u0442\u043a\u0435 5.x Progress ShareFile.\n\nSZC \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0431\u043e\u043b\u044c\u0448\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0432\u043e\u0438\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0438\u043c \u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0438\u0445 \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 (\u043b\u0438\u0431\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e, \u043b\u0438\u0431\u043e \u0443 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430) \u0438\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Progress.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445, \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432 Progress ShareFile 5.12.4, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 10 \u043c\u0430\u0440\u0442\u0430.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 watchTowr \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CVE-2026-2699, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 ShareFile \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 HTTP-\u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0432 \u0432\u043d\u0443\u0442\u0440\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0437\u043e\u043d\u044b \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0432\u0430\u0436\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043f\u0430\u0440\u043e\u043b\u044c \u0437\u043e\u043d\u044b \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432\u0442\u043e\u0440\u0443\u044e CVE-2026-2701 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 ASPX-\u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 HMAC-\u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u0434\u043e\u0441\u0442\u0438\u0436\u0438\u043c\u043e \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-2699 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0444\u0440\u0430\u0437\u043e\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e watchTowr, \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043e\u043a\u043e\u043b\u043e 30 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Storage Zone Controller.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, ShadowServer Foundation \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 700 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432\u00a0Progress ShareFile, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435.\n\nWatchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0441\u0432\u043e\u0438\u0445 \u0432\u044b\u0432\u043e\u0434\u0430\u0445 \u0432 Progress \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 6 \u043f\u043e 13 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0430 \u043f\u043e\u043b\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 18 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0432 Progress ShareFile 5.12.4. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0448\u043b\u0430 10 \u043c\u0430\u0440\u0442\u0430.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u043e\u0434\u043d\u0430\u043a\u043e \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u043e\u043f\u044b\u0442\u0430 Clop \u0438 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0432 \u043f\u0430\u0431\u043b\u0438\u043a \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 ShareFile Storage Zone Controller \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c.", "url": "https://t.me/true_secator/8063"}, {"timestamp": "2026-04-03T12:02:09.565Z", "date_only": false, "value": "2026-04-03T12:02:09.565590Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3milof3qcgn2g", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "7cf1a7f4-361e-4f4c-b3f7-03607a791091", "url": "https://bsky.app/profile/solomonneas.dev/post/3milof3qcgn2g"}, {"timestamp": "2026-04-04T02:28:34.769Z", "date_only": false, "value": "2026-04-04T02:28:34.769228Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3min6seoyp226", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "47691b43-3d84-4fb4-8ca1-7b0944882c53", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3min6seoyp226"}, {"timestamp": "2026-04-04T07:01:23.449Z", "date_only": false, "value": "2026-04-04T07:01:23.449540Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mino27cdlk2u", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "f055cf12-d70c-4128-92af-718020bf1bd4", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mino27cdlk2u"}, {"timestamp": "2026-04-05T03:45:54.155Z", "date_only": false, "value": "2026-04-05T03:45:54.155044Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miptlkjj5e2j", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "3a5172a1-808f-428f-b6d5-3adbda9245b7", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miptlkjj5e2j"}, {"timestamp": "2026-04-05T13:20:29.754Z", "date_only": false, "value": "2026-04-05T13:20:29.754795Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miqtoyoqq22z", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "aefe0018-3e86-4483-8bb2-8a1e5f799d6e", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miqtoyoqq22z"}, {"timestamp": "2026-04-07T00:41:53.276Z", "date_only": false, "value": "2026-04-07T00:41:53.276951Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3miukae62j42f", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "0a538634-2b28-4bae-8973-da31967ac4d3", "url": "https://bsky.app/profile/opsmatters.com/post/3miukae62j42f"}, {"timestamp": "2026-04-10T04:12:53.331Z", "date_only": false, "value": "2026-04-10T04:12:53.331931Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mj4hgg75pq2o", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "e388f38a-32f9-4bab-b264-b8d209cd4e31", "url": "https://bsky.app/profile/opsmatters.com/post/3mj4hgg75pq2o"}, {"timestamp": "2026-04-13T10:06:49.868Z", "date_only": false, "value": "2026-04-13T10:06:49.868267Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mjemm2zcx22w", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "bfd10220-32bc-460d-ad49-26be96d129e5", "url": "https://bsky.app/profile/concisecyber.bsky.social/post/3mjemm2zcx22w"}, {"timestamp": "2026-04-21T06:07:08.002Z", "date_only": false, "value": "2026-04-21T06:07:08.002799Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjycwtdrkx26", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "95284996-d2dd-47a9-a404-7a93e5d8c79d", "url": "https://bsky.app/profile/cyberhub.blog/post/3mjycwtdrkx26"}, {"timestamp": "2026-05-06T00:28:15.949Z", "date_only": false, "value": "2026-05-06T00:28:15.949448Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3ml5gyosfg526", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "79acd93e-244a-48df-94f8-5c8b353d6b6b", "content": "~Watchtowr~\nA pre-auth RCE chain in Progress ShareFile Storage Zone Controller allows full system compromise.\n-\nIOCs: CVE-2026-2699, CVE-2026-2701\n-\n#RCE #ShareFile #ThreatIntel", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3ml5gyosfg526"}, {"timestamp": "2026-07-17T19:00:03.194Z", "date_only": false, "value": "2026-07-17T19:00:03.194594Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkArmyChannel/5764", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "e07c3c20-0f1b-4c23-8ada-084799b9eb3f", "content": "New Progress ShareFile Flaws Expose Servers to Unauthorized Remote Takeover\n\nSecurity researchers at watchTowr Labs have disclosed a critical exploit chain in the Progress ShareFile Storage Zone Controller.\n\nThe vulnerabilities, tracked as CVE-2026-2699 and CVE-2026-2701, enable unauthenticated attackers to achieve Remote Code Execution (RCE) and completely compromise vulnerable servers.\n\nWith roughly 30,000 instances exposed to the public internet, organizations are urged to patch immediately to prevent catastrophic data breaches.\n\nManaged file transfer (MFT) solutions remain a top target for advanced persistent threat (APT) groups and ransomware syndicates.\n\nFollowing historic breaches involving tools like MOVEit, Cleo Harmony, and GoAnywhere, threat actors continuously hunt for unpatched data-sharing gateways.\n\nSee more here \ud83d\udc4b", "url": "https://t.me/DarkArmyChannel/5764"}, {"timestamp": "2026-07-19T16:00:11.122Z", "date_only": false, "value": "2026-07-19T16:00:11.122021Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1689", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "54cf2c1a-bcc0-465f-b7c6-2e0e72ceae5a", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE (CVE-2026-2699 + CVE-2026-2701) \ud83d\udd34\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u0430 \u2014 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043b\u044e\u0431\u043e\u0439 \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \ud83d\ude31\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n#Progress #ShareFile #CVE #ZeroDay #RCE #critical_bug", "url": "https://t.me/critical_bug/1689"}, {"timestamp": "2026-07-19T16:00:11.193Z", "date_only": false, "value": "2026-07-19T16:00:11.193647Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1690", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "c0bf5297-3e94-4a35-a863-36d78c99048f", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE\nCVE-2026-2699 + CVE-2026-2701 \ud83d\udd34\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Progress ShareFile Storage Zone Controller, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0412\u0441\u0451 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CWE-698 (Execution After Redirect) \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /ConfigService/Admin.aspx. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0433\u043e. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (CVE-2026-2699) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c, \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0435\u0442 Zone Secret \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u2192 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 RCE (CVE-2026-2701).\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u041f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u043a\u043e\u043b\u043e 30 000 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438 \u2014 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 ShareFile Storage Zone Controller \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\n\u2b50\ufe0f \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\\#Progress \\#ShareFile \\#CVE \\#ZeroDay \\#RCE \\#CyberSecurity \\#Infosec \\#critical_bug", "url": "https://t.me/critical_bug/1690"}, {"timestamp": "2026-07-19T16:00:11.273Z", "date_only": false, "value": "2026-07-19T16:00:11.273292Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1691", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "f5f818a8-c377-42df-bb6b-954849a7c238", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: Progress ShareFile Pre-Auth RCE Chain (CVE-2026-2699 & CVE-2026-2701)", "url": "https://t.me/critical_bug/1691"}, {"timestamp": "2026-07-21T00:00:40.974Z", "date_only": false, "value": "2026-07-21T00:00:40.974128Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1691", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "598f2c01-2a4d-47a3-9e11-54a862daeb7c", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: Progress ShareFile Pre-Auth RCE Chain (CVE-2026-2699 & CVE-2026-2701)", "url": "https://t.me/critical_bug/1691", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-21T00:00:41.068Z", "date_only": false, "value": "2026-07-21T00:00:41.068333Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1690", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "4be61fb0-03e5-4700-81e7-e703c1b140a1", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE\nCVE-2026-2699 + CVE-2026-2701 \ud83d\udd34\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Progress ShareFile Storage Zone Controller, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0412\u0441\u0451 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CWE-698 (Execution After Redirect) \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /ConfigService/Admin.aspx. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0433\u043e. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (CVE-2026-2699) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c, \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0435\u0442 Zone Secret \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u2192 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 RCE (CVE-2026-2701).\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u041f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u043a\u043e\u043b\u043e 30 000 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438 \u2014 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 ShareFile Storage Zone Controller \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\n\u2b50\ufe0f \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\\#Progress \\#ShareFile \\#CVE \\#ZeroDay \\#RCE \\#CyberSecurity \\#Infosec \\#critical_bug", "url": "https://t.me/critical_bug/1690", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-21T00:00:41.156Z", "date_only": false, "value": "2026-07-21T00:00:41.156477Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1689", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "30fdb371-3769-4cce-bdd8-e464358c90ad", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE (CVE-2026-2699 + CVE-2026-2701) \ud83d\udd34\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u0430 \u2014 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043b\u044e\u0431\u043e\u0439 \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \ud83d\ude31\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n#Progress #ShareFile #CVE #ZeroDay #RCE #critical_bug", "url": "https://t.me/critical_bug/1689", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-09T04:19:14.451Z", "date_only": false, "value": "2026-08-09T04:19:14.451155Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/2873", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "82a38536-1ebc-4e1e-954a-b9c8666e8b86", "content": "New Progress ShareFile Flaws Expose Servers to Unauthorized Remote Takeover\n\nSecurity researchers at watchTowr Labs have disclosed a critical exploit chain in the Progress ShareFile Storage Zone Controller.\n\nThe vulnerabilities, tracked as CVE-2026-2699 and CVE-2026-2701, enable unauthenticated attackers to achieve Remote Code Execution (RCE) and completely compromise vulnerable servers.\n\nWith roughly 30,000 instances exposed to the public internet, organizations are urged to patch immediately to prevent catastrophic data breaches.\n\nManaged file transfer (MFT) solutions remain a top target for advanced persistent threat (APT) groups and ransomware syndicates.\n\nFollowing historic breaches involving tools like MOVEit, Cleo Harmony, and GoAnywhere, threat actors continuously hunt for unpatched data-sharing gateways.\n\nSee more here \ud83d\udc4b", "url": "https://t.me/onelab1337/2873"}, {"timestamp": "2026-09-12T12:00:05.235Z", "date_only": false, "value": "2026-09-12T12:00:05.235897Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iOcWIyahPmzeafXhqZ9UUCxtc99w_uX51aK2YYp91N0S6vc", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "75af3316-621f-4c72-9319-3c3ce57fe20b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-12T16:00:09.232Z", "date_only": false, "value": "2026-09-12T16:00:09.232376Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bZF-i5IhMlSk9Qqt6MiijfMvmpmFMWNRxEAF5TS1oCjwtd0", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "f3264b3c-bec5-401c-acdb-51a6048497a8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-12T22:00:05.832Z", "date_only": false, "value": "2026-09-12T22:00:05.832580Z", "kind": "sighting", "label": "Seen", "source": "Telegram/tliPHGNmKkBG-rTD24a0CY8dlXHZL0klGojx535X2jpJso0", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "d619f863-ea49-4908-898c-3eed57bb0830"}, {"timestamp": "2026-09-13T00:00:05.750Z", "date_only": false, "value": "2026-09-13T00:00:05.750826Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/tliPHGNmKkBG-rTD24a0CY8dlXHZL0klGojx535X2jpJso0", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "6235292b-39db-4967-9fcd-2b90314237be", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-13T05:00:04.897Z", "date_only": false, "value": "2026-09-13T05:00:04.897548Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7xV42MskB-2ON1T-tQ5sttv7o2et93yeA9hCBsSBpL7qvSw", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "a81ba2c7-6234-4a0e-90df-0855d337e516"}, {"timestamp": "2026-09-13T15:00:05.161Z", "date_only": false, "value": "2026-09-13T15:00:05.161854Z", "kind": "sighting", "label": "Seen", "source": "Telegram/b5VRLAGNUyRHY6NilediA6h9N6sdyeE0IaG26PfGUbhzmzA", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "c5b8341a-950e-4431-a73c-2a5c25ce749e"}, {"timestamp": "2026-09-13T19:00:06.585Z", "date_only": false, "value": "2026-09-13T19:00:06.585493Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HJHfqXdFTbdlNHLDiq9-rcV9lRzKv5hlqp4ef-N0m_5Hlx8", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "704f5669-ce6d-489a-861a-ce4c646a8fa8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-13T22:00:07.972Z", "date_only": false, "value": "2026-09-13T22:00:07.972764Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SkZOROHFzO0XNmOTRkDPjQMnCLT7cEQR-5T9RCrLL0Qn5Jo", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "26d1f008-24c4-4da7-a6c1-94cf8bfe97b1", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T00:00:12.990Z", "date_only": false, "value": "2026-09-14T00:00:12.990494Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/b5VRLAGNUyRHY6NilediA6h9N6sdyeE0IaG26PfGUbhzmzA", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "9e3e2781-b48a-483a-8396-dfa167f6d20a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T00:00:30.065Z", "date_only": false, "value": "2026-09-14T00:00:30.065366Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7xV42MskB-2ON1T-tQ5sttv7o2et93yeA9hCBsSBpL7qvSw", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "0bd5ae3a-9646-40ab-803b-3be3189a8a09", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T04:00:04.261Z", "date_only": false, "value": "2026-09-14T04:00:04.261789Z", "kind": "sighting", "label": "Seen", "source": "Telegram/4ubCWDGxu4WnFOq29PLvDuzY7rtHUTjtN28OWSanTq9JErs", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "8b69fec1-bd38-4e50-aa0f-e78b5b1a6191"}, {"timestamp": "2026-09-14T15:00:04.699Z", "date_only": false, "value": "2026-09-14T15:00:04.699447Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2H2rLLj_yopSB8FXwFjoRrUb_4PBHTp7JA23qh9ZyFZjIdg", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "94ae69ad-f3c7-4259-a4e0-3d128bc252d8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T20:00:05.891Z", "date_only": false, "value": "2026-09-14T20:00:05.891826Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kvYXJ_fNmwBQ9Yglg1TGim8W6Kuqti0GVwRnrj-jVNkwZyg", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "e73a1337-c5de-4e88-bd1b-e504a5c3a20c", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T22:00:04.945Z", "date_only": false, "value": "2026-09-14T22:00:04.945981Z", "kind": "sighting", "label": "Seen", "source": "Telegram/s-8DsyOiId0oPtfl3Cq1DdYK1Hd-LjgtbtPAIB167qtk0_s", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "492c2677-dd53-46b2-83b6-d52c35d1e2c7"}, {"timestamp": "2026-09-15T00:00:09.436Z", "date_only": false, "value": "2026-09-15T00:00:09.436605Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/s-8DsyOiId0oPtfl3Cq1DdYK1Hd-LjgtbtPAIB167qtk0_s", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "596bb5bb-ca9d-48a9-9c94-9e1510fa1c9a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T00:00:30.338Z", "date_only": false, "value": "2026-09-15T00:00:30.338169Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4ubCWDGxu4WnFOq29PLvDuzY7rtHUTjtN28OWSanTq9JErs", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "999e4888-a3db-42bd-83fd-b434cc8377fe", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T07:00:05.531Z", "date_only": false, "value": "2026-09-15T07:00:05.531147Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lfng4x9E2hruDRzlxi1Nwm4ia2mcZEmtjSxEdebazYmJI2A", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "b3ddb499-a61a-4e1b-963b-d525748b8695", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T14:00:05.984Z", "date_only": false, "value": "2026-09-15T14:00:05.984080Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AVHa0ccgfuhd9DVplbaBFLW521wJB58XsX1RjH3vPioGS8M", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "b2246dca-8536-4dd5-81d2-b7d7507b738c"}, {"timestamp": "2026-09-15T20:00:04.842Z", "date_only": false, "value": "2026-09-15T20:00:04.842488Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ErfJ1Ovdt1-zddZrF_9_--hvD5klp0sk5OK_EEG8YafVg0I", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "20446e7e-0896-4119-aa2a-c586b1ecb75f"}, {"timestamp": "2026-09-15T23:00:06.175Z", "date_only": false, "value": "2026-09-15T23:00:06.175647Z", "kind": "sighting", "label": "Seen", "source": "Telegram/darA0yLaDDtOvNzNoPMIV1DYpoMUI-prfEIIPb2OESUVKA4", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "6774f42a-27c7-4644-8fe8-da0cceba2750"}, {"timestamp": "2026-09-16T00:00:08.656Z", "date_only": false, "value": "2026-09-16T00:00:08.656905Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/darA0yLaDDtOvNzNoPMIV1DYpoMUI-prfEIIPb2OESUVKA4", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "43a5a8c4-1ca9-4a9e-a899-c24fceaa7377", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T00:00:11.702Z", "date_only": false, "value": "2026-09-16T00:00:11.702849Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ErfJ1Ovdt1-zddZrF_9_--hvD5klp0sk5OK_EEG8YafVg0I", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "9c32b25b-3c68-4881-8be2-b964e7e7d61a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T00:00:30.648Z", "date_only": false, "value": "2026-09-16T00:00:30.648460Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AVHa0ccgfuhd9DVplbaBFLW521wJB58XsX1RjH3vPioGS8M", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "2ea491b3-365c-4645-a6f2-80d5602360db", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T10:00:05.584Z", "date_only": false, "value": "2026-09-16T10:00:05.584684Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8Is-3SI6bO9GNCJOmvFyQfWUtIzeYjCZZGsfQ4Xpcb-6Qtk", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "f716e2d4-16f3-4f9b-bd08-740f32412de3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T10:00:05.648Z", "date_only": false, "value": "2026-09-16T10:00:05.648937Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/62gcesdJfEiUbIen6VNYpv9Wpfrn8s4bwEeJpK-9Ft26ADg", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "80638a6f-d625-40db-a2bd-29aef4263c76", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T09:11:46Z", "date_only": false, "value": "2026-09-25T09:11:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/p5COqCPslf2ZgcuHqwqkPFKZwMS3i8i9QwzsmR97pR9GqWc", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "db8d1741-bf2b-4b07-9b33-b76141ad6522", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T09:11:46Z", "date_only": false, "value": "2026-09-25T09:11:46.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/p5COqCPslf2ZgcuHqwqkPFKZwMS3i8i9QwzsmR97pR9GqWc", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "e751a409-8c94-4429-809c-cbe4042b9f56"}, {"timestamp": "2026-10-26T21:10:00.170Z", "date_only": false, "value": "2026-10-26T21:10:00.170", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-2701", "record": "FKIE_CVE-2026-2701", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-05T02:52:43.084Z", "anchors": {"origin": {"timestamp": "2026-04-02T13:04:38.554Z", "date_only": false, "value": "2026-04-02T13:04:38.554Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-2701", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-04-02T13:04:38.554Z", "date_only": false, "value": "2026-04-02T13:04:38.554Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-2701", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-04-02T12:19:43.338Z", "date_only": false, "value": "2026-04-02T12:19:43.338524Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "4de73cee-f23f-4838-a628-1db31b58dc0d", "url": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -2695.216, "hours": -0.7486711111111111, "days": -0.031194629629629628, "min_seconds": -2695.216, "max_seconds": -2695.216, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-04-02T13:04:38.554Z", "date_only": false, "value": "2026-04-02T13:04:38.554Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-2701", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-02T12:19:43.338Z", "date_only": false, "value": "2026-04-02T12:19:43.338524Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "4de73cee-f23f-4838-a628-1db31b58dc0d", "url": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 18712084.530165, "hours": 5197.801258379167, "days": 216.5750524324653, "min_seconds": 18712084.530165, "max_seconds": 18712084.530165, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-02T13:04:38.554Z", "date_only": false, "value": "2026-04-02T13:04:38.554Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-2701", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T02:52:43.084Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 18714779.746165, "hours": 5198.5499294902775, "days": 216.6062470620949, "min_seconds": 18714779.746165, "max_seconds": 18714779.746165, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-02T12:19:43.338Z", "date_only": false, "value": "2026-04-02T12:19:43.338524Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "record": "CVE-2026-2701", "field": "creation_timestamp", "uuid": "4de73cee-f23f-4838-a628-1db31b58dc0d", "url": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-05T02:52:43.084Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}