{"metadata": {"vulnerability": "CVE-2026-39364", "count": 83, "kinds": {"milestone": 6, "sighting": 24, "kev": 5, "other": 48}}, "data": [{"timestamp": "2026-01-16T19:03:36.442Z", "date_only": false, "value": "2026-01-16T19:03:36.442000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-01-16T20:03:33.790Z", "date_only": false, "value": "2026-01-16T20:03:33.790513+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-03-20T20:22:59.090Z", "date_only": false, "value": "2026-03-20T20:22:59.090000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-03-20T21:01:35.498Z", "date_only": false, "value": "2026-03-20T21:01:35.498935+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-03-26T18:59:38Z", "date_only": false, "value": "2026-03-26T18:59:38+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-03-26T20:03:28.427Z", "date_only": false, "value": "2026-03-26T20:03:28.427630+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-04-06T12:12:37Z", "date_only": false, "value": "2026-04-06T12:12:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/vitejs/vite/security/advisories/GHSA-v2wj-q39q-566r", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "b4455ae6-26fe-4a0d-969d-a06018e2e39b", "url": "https://github.com/vitejs/vite/security/advisories/GHSA-v2wj-q39q-566r", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-06T18:03:32Z", "date_only": false, "value": "2026-04-06T18:03:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V2WJ-Q39Q-566R", "record": "GHSA-V2WJ-Q39Q-566R", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-06T21:29:17.349Z", "date_only": false, "value": "2026-04-06T21:29:17.349Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-39364", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-07T19:10:44.916Z", "date_only": false, "value": "2026-04-07T19:10:44.916000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-04-07T19:12:47.577Z", "date_only": false, "value": "2026-04-07T19:12:47.577Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-39364", "field": "containers.adp.1.datePublic"}, {"timestamp": "2026-04-07T19:12:47.577Z", "date_only": false, "value": "2026-04-07T19:12:47.577Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-39364", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-07T19:12:47.577Z", "date_only": false, "value": "2026-04-07T19:12:47.577000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-07T19:12:47.577Z", "date_only": false, "value": "2026-04-07T19:12:47.577Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-39364", "field": "containers.adp.1.timeline.1.time"}, {"timestamp": "2026-04-07T19:12:47.577Z", "date_only": false, "value": "2026-04-07T19:12:47.577Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-39364", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-07T20:01:48.579Z", "date_only": false, "value": "2026-04-07T20:01:48.579074Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-39364", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-04-07T20:01:48.579Z", "date_only": false, "value": "2026-04-07T20:01:48.579074Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-39364", "record": "FKIE_CVE-2026-39364", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-04-07T20:01:56.564Z", "date_only": false, "value": "2026-04-07T20:01:56.564Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-39364", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-07T20:02:11.316Z", "date_only": false, "value": "2026-04-07T20:02:11.316801+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-04-07T20:02:18.458Z", "date_only": false, "value": "2026-04-07T20:02:18.458760+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-07T20:02:18.458Z", "date_only": false, "value": "2026-04-07T20:02:18.458Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-39364", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2026-04-07T20:16:30Z", "date_only": false, "value": "2026-04-07T20:16:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V2WJ-Q39Q-566R", "record": "GHSA-V2WJ-Q39Q-566R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-04-07T20:16:30.170Z", "date_only": false, "value": "2026-04-07T20:16:30.170", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-39364", "record": "FKIE_CVE-2026-39364", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-07T21:22:19Z", "date_only": false, "value": "2026-04-07T21:22:19.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ORzlugWNJSN1mBT3L8tDKZ1H7oYKkiEmKL9E7e5xnpgHaiU", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "a31b9169-3f1a-41b2-b5e2-cf12dcddfc8a"}, {"timestamp": "2026-04-07T22:00:54.172Z", "date_only": false, "value": "2026-04-07T22:00:54.172000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-04-07T22:16:17Z", "date_only": false, "value": "2026-04-07T22:16:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V2WJ-Q39Q-566R", "record": "GHSA-V2WJ-Q39Q-566R", "field": "modified"}, {"timestamp": "2026-04-07T22:58:19.274Z", "date_only": false, "value": "2026-04-07T22:58:19.274091Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miwuw3lij52s", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "f1ed90eb-6a32-4f53-8e81-bec538cea797", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3miwuw3lij52s"}, {"timestamp": "2026-04-07T23:01:18.313Z", "date_only": false, "value": "2026-04-07T23:01:18.313921+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-04-08T06:18:07.159Z", "date_only": false, "value": "2026-04-08T06:18:07.159765Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/schalkneethling.com/post/3mixnigoqfc2m", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "312a6f51-a7de-4bec-a2eb-e1f01aaa60c1", "url": "https://bsky.app/profile/schalkneethling.com/post/3mixnigoqfc2m"}, {"timestamp": "2026-04-08T20:49:41.967Z", "date_only": false, "value": "2026-04-08T20:49:41.967000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-04-08T22:00:59.416Z", "date_only": false, "value": "2026-04-08T22:00:59.416053+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-04-09T04:16:38Z", "date_only": false, "value": "2026-04-09T04:16:38.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-39364.yaml", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "f37cb9ae-7840-4466-9ef3-a4b3a212dbea", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-39364.yaml"}, {"timestamp": "2026-04-09T14:31:46.067Z", "date_only": false, "value": "2026-04-09T14:31:46.067000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-04-09T15:01:48.111Z", "date_only": false, "value": "2026-04-09T15:01:48.111177+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-04-09T21:02:48.823Z", "date_only": false, "value": "2026-04-09T21:02:48.823222Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mj3pezsqe52d", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "7f7d9b67-163d-42e5-bca8-ffc951b04726", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mj3pezsqe52d"}, {"timestamp": "2026-04-10T13:43:23.147Z", "date_only": false, "value": "2026-04-10T13:43:23.147000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-04-10T15:01:29.063Z", "date_only": false, "value": "2026-04-10T15:01:29.063442+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-04-14T00:24:36.166Z", "date_only": false, "value": "2026-04-14T00:24:36.166785Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mjg4jrwpy22e", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "3787910b-6fdc-4735-972d-4c578d434008", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mjg4jrwpy22e"}, {"timestamp": "2026-04-15T22:53:56.147Z", "date_only": false, "value": "2026-04-15T22:53:56.147000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-04-16T00:00:49.590Z", "date_only": false, "value": "2026-04-16T00:00:49.590876+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-04-20T16:25:12.302Z", "date_only": false, "value": "2026-04-20T16:25:12.302000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-04-20T17:02:18.205Z", "date_only": false, "value": "2026-04-20T17:02:18.205732+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-04-24T17:10:33.869Z", "date_only": false, "value": "2026-04-24T17:10:33.869000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.12.release_date"}, {"timestamp": "2026-04-24T18:01:10.709Z", "date_only": false, "value": "2026-04-24T18:01:10.709072+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.12.discovery_date"}, {"timestamp": "2026-05-04T19:31:57.253Z", "date_only": false, "value": "2026-05-04T19:31:57.253000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-04T20:01:14.938Z", "date_only": false, "value": "2026-05-04T20:01:14.938426+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-26T21:54:54.393Z", "date_only": false, "value": "2026-05-26T21:54:54.393000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.13.release_date"}, {"timestamp": "2026-05-26T23:01:03.204Z", "date_only": false, "value": "2026-05-26T23:01:03.204374+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.13.discovery_date"}, {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-04T13:18:24.733Z", "date_only": false, "value": "2026-08-04T13:18:24.733", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-39364", "record": "FKIE_CVE-2026-39364", "field": "lastModified"}, {"timestamp": "2026-08-13T17:48:54Z", "date_only": false, "value": "2026-08-13T17:48:54Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-VITE-CVE-2026-39364", "record": "BREW-VITE-CVE-2026-39364", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-17T12:05:13.339Z", "date_only": false, "value": "2026-08-17T12:05:13.339Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-39364", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-17T12:05:13.339Z", "date_only": false, "value": "2026-08-17T12:05:13.339Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-39364", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-02T00:00:00Z", "date_only": false, "value": "2026-09-02T00:00:00+00:00", "kind": "other", "label": "Exploit status", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.13.threats.0.date"}, {"timestamp": "2026-09-04T00:36:24Z", "date_only": false, "value": "2026-09-04T00:36:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-14T19:09:11.882Z", "date_only": false, "value": "2026-09-14T19:09:11.882076Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvispov6at2j", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "82eebae4-3b44-4a5c-b98f-101247c6c045", "content": "Exposed Vite dev servers are being mass-scanned for AWS/Azure secrets (CVE-2026-39364). Patch to Vite 8.0.5, block port 5173. https://bleepingcomputer.com/news/security/hackers-target-exposed-vite-dev-servers-to-steal-aws-azure-secrets", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvispov6at2j"}, {"timestamp": "2026-09-14T19:30:27.541Z", "date_only": false, "value": "2026-09-14T19:30:27.541165Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvitvn6gkw24", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "6c4be425-6e51-486a-a256-ddfad8b26820", "content": "Mass scanning of exposed Vite dev servers is exploiting CVE-2026-39364 to read .env files, AWS creds, Azure tokens, and Terraform data. F5 saw hundreds of attacks. #Vite #AWS #Azure", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvitvn6gkw24"}, {"timestamp": "2026-09-15T01:40:38.315Z", "date_only": false, "value": "2026-09-15T01:40:38.315077Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvjilmjzcc2o", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "42b7ec26-a096-4868-a903-996c8c1f298f", "content": "The Vite development server vulnerability CVE-2026-39364 is exploited in mass scanning for credential harvesting. F5 Labs logged 32,000 events. Patch now.\n\n#Vite #CVE202639364 #CloudSecurity #CredentialHarvesting #F5Labs #DevSecOps #FileDisclosure #InfoSec #AWS #MassScanning", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mvjilmjzcc2o"}, {"timestamp": "2026-09-15T10:28:26.859Z", "date_only": false, "value": "2026-09-15T10:28:26.859836Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvkg3gsliq2r", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "23b4ce35-5ce9-4691-a7d8-947dd281a943", "content": "Cloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364) #appsec", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvkg3gsliq2r"}, {"timestamp": "2026-09-15T13:00:05.128Z", "date_only": false, "value": "2026-09-15T13:00:05.128056Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8610", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "c05f42b7-a7ba-4367-9ed6-5bf4918b39eb", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Vite, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u044b\u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 AWS \u0438 Azure.\n\n\u0412 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2026-39364, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u043f\u0440\u0438 \u0447\u0442\u0435\u043d\u0438\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Vite \u043e\u0442 7.1.0 \u0434\u043e 7.3.2, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0432\u0435\u0442\u043a\u0435 8.x \u0434\u043e 8.0.5.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 7 \u0430\u043f\u0440\u0435\u043b\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432 HTTP GET-\u0437\u0430\u043f\u0440\u043e\u0441\u0435, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0438\u0437 \u043c\u0435\u0441\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u043b\u0436\u043d\u044b \u0431\u044b\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\nF5 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u0432\u043e\u044e \u0441\u0435\u0442\u043a\u0443 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u043e\u0432, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0432 \u0431\u043e\u043b\u0435\u0435 800 \u0430\u0442\u0430\u043a \u0438 \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e 32 000 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0437\u0430 \u043c\u0435\u0441\u044f\u0446.\n\n\u041f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0430\u043a\u0435\u0440\u044b \u0444\u043e\u043a\u0443\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u043e\u0438\u0441\u043a\u0435 \u0446\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432: .env, .env.production, .env.local \u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0444\u0430\u0439\u043b\u044b \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 AWS, \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 AWS \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u0440\u0435\u0434\u044b \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Azure, \u0444\u0430\u0439\u043b\u044b \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 Terraform, \u0431\u0435\u0441\u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f, /proc/self/environ, /proc/1/environ \u0438 /proc/self/cwd/.env, \u0430 \u0442\u0430\u043a\u0436\u0435 /etc/passwd.\n\nF5 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0430\u043f\u0440\u043e\u0431\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u043e\u0431\u0445\u043e\u0434\u0430 \u0438 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0441 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438\u043b\u0438 WAF.\n\n\u0411\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0430 \u0438\u0437 \u0421\u0428\u0410, \u0411\u0435\u043b\u044c\u0433\u0438\u0438 \u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b IP Google Cloud \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 IP \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 Vite: CVE-2025-30208, CVE-2025-31125 (\u043f\u043e\u043c\u0435\u0447\u0435\u043d\u044b \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435) \u0438 CVE-2024-45811.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Vite \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a localhost, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 F5 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043a \u043d\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u043d\u043b\u0430\u0439\u043d, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u044f \u0444\u043b\u0430\u0433 --host, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044f server.host \u0438\u043b\u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044f \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 Docker.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b Vite \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 5173 \u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 (34.14.15[.]105, 34.16.200[.]129 \u0438 34.11.196[.]206), \u043e\u0442\u043a\u043b\u043e\u043d\u044f\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b /@fs/ \u0438 \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u043a \u0441\u0442\u0440\u043e\u043a\u0430\u043c User-Agent \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0440\u043e\u0431\u043e\u0442\u043e\u0432.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Vite \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0435\u0441\u044f \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u0434\u043e\u0441\u044f\u0433\u0430\u0435\u043c\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.", "url": "https://t.me/true_secator/8610"}, {"timestamp": "2026-09-15T14:39:32.541Z", "date_only": false, "value": "2026-09-15T14:39:32.541089Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvku4ggnob2b", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "af1a58d3-e89b-4976-baef-b45876846377", "content": "Cloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364)", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvku4ggnob2b"}, {"timestamp": "2026-09-15T14:55:37.025Z", "date_only": false, "value": "2026-09-15T14:55:37.025444Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvkuz3dd6a2i", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "a1fdf0ce-b465-4f38-be05-6eb35ae51a8e", "content": "Attackers scan internet-exposed Vite servers to steal environment files, cloud credentials, and infrastructure configuration using CVE-2026-39364 file-access bypasses.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvkuz3dd6a2i"}, {"timestamp": "2026-09-15T14:55:39.544Z", "date_only": false, "value": "2026-09-15T14:55:39.544340Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/javascriptbriefly.bsky.social/post/3mvkuz4x3cd24", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "058854eb-d85e-4849-98e3-ee9da67eb7de", "content": "Attackers scan internet-exposed Vite servers to steal environment files, cloud credentials, and infrastructure configuration using CVE-2026-39364 file-access bypasses.\n", "url": "https://bsky.app/profile/javascriptbriefly.bsky.social/post/3mvkuz4x3cd24"}, {"timestamp": "2026-09-15T14:55:59.021Z", "date_only": false, "value": "2026-09-15T14:55:59.021426Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvkuzsqewy2w", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "225274e5-7674-43e0-8443-dff637192e8c", "content": "Attackers scan internet-exposed Vite servers to steal environment files, cloud credentials, and infrastructure configuration using CVE-2026-39364 file-access bypasses.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvkuzsqewy2w"}, {"timestamp": "2026-09-15T15:40:00Z", "date_only": false, "value": "2026-09-15T15:40:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-39364", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "47057eba-3e4c-438e-a031-8cc7697b9d7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-15T15:40:00Z", "date_only": false, "value": "2026-09-15T15:40:00.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-39364", "field": "evidence.0.details.added_date", "uuid": "47057eba-3e4c-438e-a031-8cc7697b9d7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-15T15:40:00Z", "date_only": false, "value": "2026-09-15T15:40:00+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-39364", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "47057eba-3e4c-438e-a031-8cc7697b9d7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-15T15:40:00Z", "date_only": false, "value": "2026-09-15T15:40:00+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-39364", "field": "status.status_updated_at", "uuid": "47057eba-3e4c-438e-a031-8cc7697b9d7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-15T16:01:40.963Z", "date_only": false, "value": "2026-09-15T16:01:40.963410Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ichintu/6579574f2d6f7759d85ca961b532236a", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "7d085db9-a5d0-4040-9692-2f350c4e97f7", "content": "This cybersecurity briefing highlights three primary trends:\n\n\u2022 **AI & Agent Security:** New platforms (ELITZE, Exaforce) focus on governing AI agent identities, permissions, and runtime access. Researchers also demonstrate OpenAI Codex sandbox escapes and note AI-accelerated exploitation (e.g., Marimo RCE compromising an SSH bastion in seconds).\n\u2022 **Active Threats & Vulnerabilities:** Attackers are mass-scanning exposed Vite development servers to harvest cloud credentials (exploiting CVE-2026-39364). Critical unauthenticated flaws were disclosed for TrxTimeATTENDANCE (RCE, CVE-2026-89308) and OpenAM (SOAP auth bypass, CVE-2026-45052). Additionally, the BambooToken malware continues targeting Windows/Linux systems via MQTT.\n\u2022 **Community & Tools:** Practitioners are sharing practical resources, including a verification tool for leaked cloud secrets and a low-cost guide to entering the EMFI hacking competition.\n\n**Overall:** The threat landscape is increasingly defined by AI workload governance challenges, automated credential harvesting from misconfigured dev servers, and rapidly exploited critical vulnerabilities.", "url": "https://gist.github.com/ichintu/6579574f2d6f7759d85ca961b532236a"}, {"timestamp": "2026-09-15T21:16:52.629Z", "date_only": false, "value": "2026-09-15T21:16:52.629422Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mvlkcv3wrm2w", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "e74ef5cf-f19f-484d-a6ac-4b910365df55", "content": "Hackers are mass-scanning exposed Vite development servers to steal AWS and Azure credentials, exploiting CVE-2026-39364, a high-severity file-disclosure vulnerability. In August 2026, F5 recorded 807 attacks and 32,000 events, a significant increase.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mvlkcv3wrm2w"}, {"timestamp": "2026-09-16T00:00:31.724Z", "date_only": false, "value": "2026-09-16T00:00:31.724101Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8610", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "8d476662-a1d9-4d01-9497-96873566ba91", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0438\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Vite, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u044b\u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 AWS \u0438 Azure.\n\n\u0412 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2026-39364, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u043f\u0440\u0438 \u0447\u0442\u0435\u043d\u0438\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Vite \u043e\u0442 7.1.0 \u0434\u043e 7.3.2, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0432\u0435\u0442\u043a\u0435 8.x \u0434\u043e 8.0.5.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 7 \u0430\u043f\u0440\u0435\u043b\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432 HTTP GET-\u0437\u0430\u043f\u0440\u043e\u0441\u0435, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435 \u0438\u0437 \u043c\u0435\u0441\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u043b\u0436\u043d\u044b \u0431\u044b\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\nF5 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u0432\u043e\u044e \u0441\u0435\u0442\u043a\u0443 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u043e\u0432, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0432 \u0431\u043e\u043b\u0435\u0435 800 \u0430\u0442\u0430\u043a \u0438 \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e 32 000 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0437\u0430 \u043c\u0435\u0441\u044f\u0446.\n\n\u041f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0430\u043a\u0435\u0440\u044b \u0444\u043e\u043a\u0443\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043d\u0430 \u043f\u043e\u0438\u0441\u043a\u0435 \u0446\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432: .env, .env.production, .env.local \u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0444\u0430\u0439\u043b\u044b \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 AWS, \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 AWS \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u0440\u0435\u0434\u044b \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Azure, \u0444\u0430\u0439\u043b\u044b \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 Terraform, \u0431\u0435\u0441\u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f, /proc/self/environ, /proc/1/environ \u0438 /proc/self/cwd/.env, \u0430 \u0442\u0430\u043a\u0436\u0435 /etc/passwd.\n\nF5 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0430\u043f\u0440\u043e\u0431\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u043e\u0431\u0445\u043e\u0434\u0430 \u0438 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0441 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438\u043b\u0438 WAF.\n\n\u0411\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0430 \u0438\u0437 \u0421\u0428\u0410, \u0411\u0435\u043b\u044c\u0433\u0438\u0438 \u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b IP Google Cloud \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 IP \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 Vite: CVE-2025-30208, CVE-2025-31125 (\u043f\u043e\u043c\u0435\u0447\u0435\u043d\u044b \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435) \u0438 CVE-2024-45811.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Vite \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a localhost, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 F5 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043a \u043d\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u043d\u043b\u0430\u0439\u043d, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u044f \u0444\u043b\u0430\u0433 --host, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044f server.host \u0438\u043b\u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u044f \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 Docker.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b Vite \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 5173 \u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 (34.14.15[.]105, 34.16.200[.]129 \u0438 34.11.196[.]206), \u043e\u0442\u043a\u043b\u043e\u043d\u044f\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b /@fs/ \u0438 \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u043a \u0441\u0442\u0440\u043e\u043a\u0430\u043c User-Agent \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0440\u043e\u0431\u043e\u0442\u043e\u0432.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Vite \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0440\u043e\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0435\u0441\u044f \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u0434\u043e\u0441\u044f\u0433\u0430\u0435\u043c\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.", "url": "https://t.me/true_secator/8610", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T16:00:01Z", "date_only": false, "value": "2026-09-16T16:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-39364", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "47057eba-3e4c-438e-a031-8cc7697b9d7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-16T16:00:28.068Z", "date_only": false, "value": "2026-09-16T16:00:28.068030Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/47057eba-3e4c-438e-a031-8cc7697b9d7c", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "9a5f4e38-de5e-4deb-a0c3-ea3bb0526a0b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/47057eba-3e4c-438e-a031-8cc7697b9d7c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-17T11:00:04.565Z", "date_only": false, "value": "2026-09-17T11:00:04.565722Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/3152", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "4bd6d2a3-aa85-4b4d-a1f9-9c69f37acaf4", "content": "\ud83d\udd34 Hackers target exposed Vite dev servers to steal AWS, Azure secrets\n\nA mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments.\n\nThe operation leverages an exploit for CVE-2026-39364, a high-severity vulnerability that allows bypassing file read/access controls in Vite versions 7.1.0 through 7.3.2, as well as the 8.x branch before 8.0.5.\n\nThe flaw was disclosed on April 7 and allows an unauthenticated attacker to manipulate query parameters in an HTTP GET request to bypass security restrictions and retrieve files in plaintext from locations that should normally be out of their reach.", "url": "https://t.me/pphm_HackerNews/3152"}, {"timestamp": "2026-09-18T00:00:06.355Z", "date_only": false, "value": "2026-09-18T00:00:06.355526Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/3152", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "3d3f61e5-2981-4e61-b313-8609779fab05", "content": "\ud83d\udd34 Hackers target exposed Vite dev servers to steal AWS, Azure secrets\n\nA mass-scanning campaign targeting internet-exposed Vite development servers is attempting to steal cloud credentials and configurations from AWS and Azure deployments.\n\nThe operation leverages an exploit for CVE-2026-39364, a high-severity vulnerability that allows bypassing file read/access controls in Vite versions 7.1.0 through 7.3.2, as well as the 8.x branch before 8.0.5.\n\nThe flaw was disclosed on April 7 and allows an unauthenticated attacker to manipulate query parameters in an HTTP GET request to bypass security restrictions and retrieve files in plaintext from locations that should normally be out of their reach.", "url": "https://t.me/pphm_HackerNews/3152", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-22T08:30:11.661Z", "date_only": false, "value": "2026-09-22T08:30:11.661988Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/frontenddogma.com/post/3mw3sqfmxrb2t", "record": "cve-2026-39364", "field": "creation_timestamp", "uuid": "fddff220-a323-4c65-903b-10d1a845c9eb", "content": "Cloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364), by @f5labs.bsky.social:\n\nhttps://www.f5.com/labs/articles/cloud-takeover-mass-scanning-for-exposed-vite-endpoints-cve-2026-39364?ref=frontenddogma.com\n\n#vite #security", "url": "https://bsky.app/profile/frontenddogma.com/post/3mw3sqfmxrb2t"}, {"timestamp": "2026-09-23T14:29:28.673Z", "date_only": false, "value": "2026-09-23T14:29:28.673021Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/u11g.com/post/3mw6xbsa37b2n", "record": "cve-2026-39364", "field": "creation_timestamp", "uuid": "b505634b-341a-4e81-8d00-43b1874dfb2e", "content": "Actionable incident write-up with patched versions and a clear attack path.\n\nhttps://www.f5.com/labs/articles/cloud-takeover-mass-scanning-for-exposed-vite-endpoints-cve-2026-39364", "url": "https://bsky.app/profile/u11g.com/post/3mw6xbsa37b2n"}, {"timestamp": "2026-10-23T10:23:51Z", "date_only": false, "value": "2026-10-23T10:23:51Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-VITE-CVE-2026-39364", "record": "BREW-VITE-CVE-2026-39364", "field": "modified"}, {"timestamp": "2026-10-30T07:47:49Z", "date_only": false, "value": "2026-10-30T07:47:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-30T07:47:49Z", "date_only": false, "value": "2026-10-30T07:47:49+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-30T07:47:49Z", "date_only": false, "value": "2026-10-30T07:47:49+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-11-02T03:08:25.339Z", "anchors": {"origin": {"timestamp": "2026-04-07T20:02:18.458Z", "date_only": false, "value": "2026-04-07T20:02:18.458760+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2026-04-07T20:02:18.458Z", "date_only": false, "value": "2026-04-07T20:02:18.458760+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-04-06T18:03:32Z", "date_only": false, "value": "2026-04-06T18:03:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V2WJ-Q39Q-566R", "record": "GHSA-V2WJ-Q39Q-566R", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-04-06T12:12:37Z", "date_only": false, "value": "2026-04-06T12:12:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/vitejs/vite/security/advisories/GHSA-v2wj-q39q-566r", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "b4455ae6-26fe-4a0d-969d-a06018e2e39b", "url": "https://github.com/vitejs/vite/security/advisories/GHSA-v2wj-q39q-566r", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-09-15T15:40:00Z", "date_only": false, "value": "2026-09-15T15:40:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-39364", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "47057eba-3e4c-438e-a031-8cc7697b9d7c", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 13894661.542, "hours": 3859.628206111111, "days": 160.8178419212963, "min_seconds": 13894661.542, "max_seconds": 13894661.542, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-07T20:02:18.458Z", "date_only": false, "value": "2026-04-07T20:02:18.458760+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-15T15:40:00Z", "date_only": false, "value": "2026-09-15T15:40:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-39364", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "47057eba-3e4c-438e-a031-8cc7697b9d7c", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 13988188.0, "hours": 3885.6077777777778, "days": 161.90032407407406, "min_seconds": 13988188.0, "max_seconds": 13988188.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-06T18:03:32Z", "date_only": false, "value": "2026-04-06T18:03:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V2WJ-Q39Q-566R", "record": "GHSA-V2WJ-Q39Q-566R", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-15T15:40:00Z", "date_only": false, "value": "2026-09-15T15:40:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-39364", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "47057eba-3e4c-438e-a031-8cc7697b9d7c", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": -21055.0, "hours": -5.848611111111111, "days": -0.24369212962962963, "min_seconds": -21055.0, "max_seconds": -21055.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-04-06T18:03:32Z", "date_only": false, "value": "2026-04-06T18:03:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V2WJ-Q39Q-566R", "record": "GHSA-V2WJ-Q39Q-566R", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-06T12:12:37Z", "date_only": false, "value": "2026-04-06T12:12:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/vitejs/vite/security/advisories/GHSA-v2wj-q39q-566r", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "b4455ae6-26fe-4a0d-969d-a06018e2e39b", "url": "https://github.com/vitejs/vite/security/advisories/GHSA-v2wj-q39q-566r", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 5432845.542, "hours": 1509.1237616666667, "days": 62.88015673611112, "min_seconds": 5432845.542, "max_seconds": 5432845.542, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-07T20:02:18.458Z", "date_only": false, "value": "2026-04-07T20:02:18.458760+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 5526372.0, "hours": 1535.1033333333332, "days": 63.96263888888889, "min_seconds": 5526372.0, "max_seconds": 5526372.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-06T18:03:32Z", "date_only": false, "value": "2026-04-06T18:03:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V2WJ-Q39Q-566R", "record": "GHSA-V2WJ-Q39Q-566R", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 5432845.542, "hours": 1509.1237616666667, "days": 62.88015673611112, "min_seconds": 5432845.542, "max_seconds": 5432845.542, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-07T20:02:18.458Z", "date_only": false, "value": "2026-04-07T20:02:18.458760+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": true, "seconds": -8461816.0, "hours": -2350.5044444444443, "days": -97.93768518518519, "min_seconds": -8461816.0, "max_seconds": -8461816.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-09-15T15:40:00Z", "date_only": false, "value": "2026-09-15T15:40:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-39364", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "47057eba-3e4c-438e-a031-8cc7697b9d7c", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploit_publication_to_patch": {"available": true, "seconds": 5547427.0, "hours": 1540.9519444444445, "days": 64.20633101851851, "min_seconds": 5547427.0, "max_seconds": 5547427.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-06T12:12:37Z", "date_only": false, "value": "2026-04-06T12:12:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/vitejs/vite/security/advisories/GHSA-v2wj-q39q-566r", "record": "CVE-2026-39364", "field": "creation_timestamp", "uuid": "b4455ae6-26fe-4a0d-969d-a06018e2e39b", "url": "https://github.com/vitejs/vite/security/advisories/GHSA-v2wj-q39q-566r", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-06-09T17:09:44Z", "date_only": false, "value": "2026-06-09T17:09:44+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2026:24866", "record": "RHSA-2026:24866", "field": "vulnerabilities.8.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}}}