{"metadata": {"vulnerability": "CVE-2026-42589", "count": 40, "kinds": {"milestone": 4, "sighting": 17, "kev": 11, "other": 8}, "linked_omitted": 0}, "data": [{"timestamp": "2026-04-29T00:31:15.724Z", "date_only": false, "value": "2026-04-29T00:31:15.724Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-42589", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-30T18:30:59Z", "date_only": false, "value": "2026-04-30T18:30:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/gotenberg/gotenberg/security/advisories/GHSA-rqgh-gxv4-6657", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "5e4916db-27be-4bcc-93ee-f2fa3ce37166", "url": "https://github.com/gotenberg/gotenberg/security/advisories/GHSA-rqgh-gxv4-6657", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-05-07T00:55:01Z", "date_only": false, "value": "2026-05-07T00:55:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RQGH-GXV4-6657", "record": "GHSA-RQGH-GXV4-6657", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-14T15:11:30.619Z", "date_only": false, "value": "2026-05-14T15:11:30.619Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-42589", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-05-14T15:11:30.619Z", "date_only": false, "value": "2026-05-14T15:11:30.619Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-42589", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-14T16:16:21Z", "date_only": false, "value": "2026-05-14T16:16:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RQGH-GXV4-6657", "record": "GHSA-RQGH-GXV4-6657", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-05-14T16:16:21.867Z", "date_only": false, "value": "2026-05-14T16:16:21.867", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42589", "record": "FKIE_CVE-2026-42589", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-05-14T18:58:43.735Z", "date_only": false, "value": "2026-05-14T18:58:43.735611Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42589", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-14T18:58:43.735Z", "date_only": false, "value": "2026-05-14T18:58:43.735611Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42589", "record": "FKIE_CVE-2026-42589", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-05-14T18:59:21.125Z", "date_only": false, "value": "2026-05-14T18:59:21.125Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-42589", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-14T18:59:21.125Z", "date_only": false, "value": "2026-05-14T18:59:21.125Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42589", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-14T20:52:07Z", "date_only": false, "value": "2026-05-14T20:52:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RQGH-GXV4-6657", "record": "GHSA-RQGH-GXV4-6657", "field": "modified", "linked_record": true}, {"timestamp": "2026-05-30T07:00:03Z", "date_only": false, "value": "2026-05-30T07:00:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/86500", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "f593d7fa-1fb2-4410-a5d5-0043b2c8e9db", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC_CVE-2026-42589\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fineman999\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-30 06:54:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC_CVE-2026-42589\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/86500"}, {"timestamp": "2026-05-30T07:38:57Z", "date_only": false, "value": "2026-05-30T07:38:57.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-42589.yaml", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "72431738-796b-4a76-8f72-e4d73502e79f", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-42589.yaml"}, {"timestamp": "2026-06-15T17:02:26Z", "date_only": false, "value": "2026-06-15T17:02:26.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d511a704-eba2-411a-9543-41e0e130f522", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "64cb0b6d-86d5-487c-8c64-97c55e9626cf"}, {"timestamp": "2026-06-17T10:48:06.530Z", "date_only": false, "value": "2026-06-17T10:48:06.530", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42589", "record": "FKIE_CVE-2026-42589", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-02T14:06:54Z", "date_only": false, "value": "2026-10-02T14:06:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104079", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "b12cc0cc-d66f-4010-915f-3a944ff25d77", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-42589xCVE-2026-40281-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a codeb0ssx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-02 14:05:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-42589 & CVE-2026-40281 - GotenBerg\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104079", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-03T22:12:31Z", "date_only": false, "value": "2026-10-03T22:12:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104223", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "d2128477-cb4a-4764-b2a9-837ebc5db571", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a -GOTENBERG-RCE-CHAIN\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackfutSecRoot\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-03 21:58:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGotenberg RCE Chain \u2014 CVE-2026-42589 + CVE-2026-40281\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104223", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-03T22:12:31Z", "date_only": false, "value": "2026-10-03T22:12:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/104223", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "5d8fde71-68fe-4b59-aa4a-ee7f274ec2f0", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a -GOTENBERG-RCE-CHAIN\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackfutSecRoot\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-03 21:58:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGotenberg RCE Chain \u2014 CVE-2026-42589 + CVE-2026-40281\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104223"}, {"timestamp": "2026-10-04T09:00:04Z", "date_only": false, "value": "2026-10-04T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-9HqiMpJrVRoF5DT6xyGDlXoBXTS2EKvZkUk0IoSJ9aKykE", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "9e652d1d-46a0-4a73-ba3e-7419c1040431", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-04T09:00:04Z", "date_only": false, "value": "2026-10-04T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-9HqiMpJrVRoF5DT6xyGDlXoBXTS2EKvZkUk0IoSJ9aKykE", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "46151882-0e0b-4bb8-989e-9661c407d792"}, {"timestamp": "2026-10-06T03:05:50.141Z", "date_only": false, "value": "2026-10-06T03:05:50.141108Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mx6h5d5k322u", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "0695ca7c-e08e-479a-9a67-34b2cea9c18b", "content": "CVE-2026-42589 is trending. Hype score 10, currently #6 on cvemon.\n\nGotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg's /forms/pdfengines/metadata/write HTTP endpoint accepts a JSON metadata object and passes its\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-42589", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mx6h5d5k322u"}, {"timestamp": "2026-10-30T16:14:53Z", "date_only": false, "value": "2026-10-30T16:14:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8771", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "5d780fda-b331-4fcc-b7c2-385c0b7dd209", "content": "\u0417\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u043c \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u043e\u0439 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\n1. Defiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c WordPress \u0441\u043f\u0443\u0441\u0442\u044f \u043f\u0430\u0440\u0443 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 WordPress 7.1.4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f WordPress \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043d\u0430 \u0441\u0430\u0439\u0442\u0435, \u043d\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u00ab\u0443\u043b\u043e\u0436\u0438\u0442\u044c\u0441\u044f \u0432 \u043e\u0447\u0435\u043d\u044c \u0443\u0437\u043a\u0438\u0439 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u043a \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u043e\u043a\u0430 WordPress \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u044f\u0434\u0440\u0430. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Wordfence, \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a.\n\n2. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c CISA, CVE-2026-97229 \u0432 GitLab \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0442\u043e\u0440 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 CI/CD.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 CI/CD \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Alpine Linux, 20 \u0438 21 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u0435\u0451 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 GitLab, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2026-97229. \u0410\u0442\u0430\u043a\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u0430\u0441\u044c, \u043d\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 Linux \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0441 \u043d\u0443\u043b\u044f.\n\n3. Steam \u043e\u0442 Valve \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f RCE ZeroClick \u043c\u0435\u0436\u0434\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c\u0438, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043a \u043e\u0434\u043d\u043e\u0439 \u0438 \u0442\u043e\u0439 \u0436\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Atredis Partners.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u0438\u0431\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b, \u043b\u0438\u0431\u043e \u0441\u0440\u043e\u043a \u0438\u0445 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u0441\u0442\u0435\u043a. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043d \u0441\u0442\u0430\u0442\u0443\u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n4. Telegram \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043e\u0434\u043d\u0438\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c \u043c\u044b\u0448\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Rlottie, \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438 \u0441\u0442\u0438\u043a\u0435\u0440\u043e\u0432.\n\nTrend Micro, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0430\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0447\u0435\u0440\u0435\u0437 ZDI, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u00ab\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u043c\u00bb.\n\n5. Drupal \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Commerce Core, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. CVE-2026-118539 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Commerce Core \u043e\u0442 0.0.0 \u0434\u043e 2.41 \u0438 \u043e\u0442 3.0.0 \u0434\u043e 3.3.13.\n\n6. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 PHP2Shell \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Palo Alto Networks. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438.\n\n7. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \u0441\u0436\u0430\u0442\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 Brotli \u043e\u0442 Google. CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u044e \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 KEV \u0432 \u0441\u0440\u0435\u0434\u0443. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC.\n\n\u041e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Ellio \u0438 Previdian. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Brotli \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n8. \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 ZIP \u044f\u0437\u044b\u043a\u0430 Rust \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 ZIP-\u0430\u0440\u0445\u0438\u0432\u043e\u0432.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u0434\u0435 TCP \u044f\u0434\u0440\u0430 Linux, CVE-2026-98432 (\u0441 9,8 \u043f\u043e CVSS), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Ubuntu, Red Hat Enterprise Linux (RHEL) \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b Linux. 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f Anthropic \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0435\u0435 \u043c\u043e\u0434\u0435\u043b\u044c \u0418\u0418 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\nDebian, Oracle Linux, SUSE \u0438 Amazon Linux \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b, \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435, \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0432\u043e\u0438\u0445 \u044f\u0434\u0435\u0440, \u043d\u043e Ubuntu \u0438 RHEL - \u043d\u0435\u0442.\n\n10. TeamViewer \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u0440\u044f\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f RCE \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u044d\u043a\u0440\u0430\u043d\u0430 \u043f\u0440\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438.\n\n11. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2026-97631, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0432 TianoCore EDK II, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043c\u0438\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0426\u041e\u0414\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a AMI, Insyde \u0438 Phoenix, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n12. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 \u0431\u044d\u043a\u0434\u043e\u0440\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2026-42589 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Gotenberg \u0434\u043b\u044f \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 PDF.\n\n13. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a EoP, \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 ALPC \u0432 Windows \u2013  CVE-2026-85880 \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a RCE, \u0432 \u0448\u043b\u044e\u0437\u0430\u0445 Check Point Security Gateway \u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 Spark Firewall (CVE-2026-85102).", "url": "https://t.me/true_secator/8771"}, {"timestamp": "2026-10-31T00:00:00Z", "date_only": false, "value": "2026-10-31T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-42589", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2b26057c-406f-4f97-9889-f30893b0b106", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-31T00:00:00Z", "date_only": false, "value": "2026-10-31T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-42589", "field": "evidence.0.details.added_date", "uuid": "2b26057c-406f-4f97-9889-f30893b0b106", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-31T00:00:00Z", "date_only": false, "value": "2026-10-31T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-42589", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2b26057c-406f-4f97-9889-f30893b0b106", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-31T00:00:00Z", "date_only": false, "value": "2026-10-31T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-42589", "field": "status.status_updated_at", "uuid": "2b26057c-406f-4f97-9889-f30893b0b106", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-31T14:13:52Z", "date_only": false, "value": "2026-10-31T14:13:52+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2026-42589", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "9489dcce-d976-4f90-9775-ed13c521834b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-31T14:13:52Z", "date_only": false, "value": "2026-10-31T14:13:52+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-42589", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "9489dcce-d976-4f90-9775-ed13c521834b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T12:00:01Z", "date_only": false, "value": "2026-11-01T12:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-42589", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2b26057c-406f-4f97-9889-f30893b0b106", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T12:00:30.507Z", "date_only": false, "value": "2026-11-01T12:00:30.507059Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2b26057c-406f-4f97-9889-f30893b0b106", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "e6531e37-466d-411a-9147-77bcbe0a2968", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2b26057c-406f-4f97-9889-f30893b0b106", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-01T13:31:54Z", "date_only": false, "value": "2026-11-01T13:31:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/S_E_Reborn/6720", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "57e25424-11fa-4b6a-bbdb-f30e484936e8", "content": "\u0417\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u043c \u0440\u0430\u0431\u043e\u0447\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u043e\u0439 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\n1. Defiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c WordPress \u0441\u043f\u0443\u0441\u0442\u044f \u043f\u0430\u0440\u0443 \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 WordPress 7.1.4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f WordPress \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043d\u0430 \u0441\u0430\u0439\u0442\u0435, \u043d\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u00ab\u0443\u043b\u043e\u0436\u0438\u0442\u044c\u0441\u044f \u0432 \u043e\u0447\u0435\u043d\u044c \u0443\u0437\u043a\u0438\u0439 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u043a \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u043f\u043e\u043a\u0430 WordPress \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u044f\u0434\u0440\u0430. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Wordfence, \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a.\n\n2. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c CISA, CVE-2026-97229 \u0432 GitLab \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0442\u043e\u0440 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 CI/CD.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 CI/CD \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Alpine Linux, 20 \u0438 21 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u0435\u0451 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 GitLab, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2026-97229. \u0410\u0442\u0430\u043a\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u0430\u0441\u044c, \u043d\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 Linux \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0441 \u043d\u0443\u043b\u044f.\n\n3. Steam \u043e\u0442 Valve \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f RCE ZeroClick \u043c\u0435\u0436\u0434\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c\u0438, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043a \u043e\u0434\u043d\u043e\u0439 \u0438 \u0442\u043e\u0439 \u0436\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Atredis Partners.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u0438\u0431\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b, \u043b\u0438\u0431\u043e \u0441\u0440\u043e\u043a \u0438\u0445 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u0441\u0442\u0435\u043a. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043d \u0441\u0442\u0430\u0442\u0443\u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n4. Telegram \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043e\u0434\u043d\u0438\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c \u043c\u044b\u0448\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Rlottie, \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u043d\u0438\u043c\u0430\u0446\u0438\u0438 \u0441\u0442\u0438\u043a\u0435\u0440\u043e\u0432.\n\nTrend Micro, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0430\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0447\u0435\u0440\u0435\u0437 ZDI, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u00ab\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u043c\u00bb.\n\n5. Drupal \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Commerce Core, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. CVE-2026-118539 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Commerce Core \u043e\u0442 0.0.0 \u0434\u043e 2.41 \u0438 \u043e\u0442 3.0.0 \u0434\u043e 3.3.13.\n\n6. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 PHP2Shell \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Palo Alto Networks. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438.\n\n7. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 \u0441\u0436\u0430\u0442\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 Brotli \u043e\u0442 Google. CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u044e \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 KEV \u0432 \u0441\u0440\u0435\u0434\u0443. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC.\n\n\u041e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Ellio \u0438 Previdian. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Brotli \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n8. \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 ZIP \u044f\u0437\u044b\u043a\u0430 Rust \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 ZIP-\u0430\u0440\u0445\u0438\u0432\u043e\u0432.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u0434\u0435 TCP \u044f\u0434\u0440\u0430 Linux, CVE-2026-98432 (\u0441 9,8 \u043f\u043e CVSS), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Ubuntu, Red Hat Enterprise Linux (RHEL) \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b Linux. 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f Anthropic \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0435\u0435 \u043c\u043e\u0434\u0435\u043b\u044c \u0418\u0418 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\nDebian, Oracle Linux, SUSE \u0438 Amazon Linux \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b, \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435, \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0432\u043e\u0438\u0445 \u044f\u0434\u0435\u0440, \u043d\u043e Ubuntu \u0438 RHEL - \u043d\u0435\u0442.\n\n10. TeamViewer \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u0440\u044f\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f RCE \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u044d\u043a\u0440\u0430\u043d\u0430 \u043f\u0440\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438.\n\n11. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2026-97631, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0432 TianoCore EDK II, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043c\u0438\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0426\u041e\u0414\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a AMI, Insyde \u0438 Phoenix, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n12. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 \u0431\u044d\u043a\u0434\u043e\u0440\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2026-42589 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Gotenberg \u0434\u043b\u044f \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 PDF.\n\n13. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a EoP, \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 ALPC \u0432 Windows \u2013  CVE-2026-85880 \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a RCE, \u0432 \u0448\u043b\u044e\u0437\u0430\u0445 Check Point Security Gateway \u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 Spark Firewall (CVE-2026-85102).", "url": "https://t.me/S_E_Reborn/6720"}, {"timestamp": "2026-11-02T01:02:19.799Z", "date_only": false, "value": "2026-11-02T01:02:19.799326Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9489dcce-d976-4f90-9775-ed13c521834b", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "31bab621-848f-4c4f-9511-8a170d9d9d5b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9489dcce-d976-4f90-9775-ed13c521834b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-03T23:15:02Z", "date_only": false, "value": "2026-11-03T23:15:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ncixoRKNMNbEHE5MBI6vjUnGOA-VY7IWFnEmOvNbkI4wbik", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "b1e15e4f-6ab4-4af1-8369-2a503be81f45", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-03T23:15:02Z", "date_only": false, "value": "2026-11-03T23:15:02.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ncixoRKNMNbEHE5MBI6vjUnGOA-VY7IWFnEmOvNbkI4wbik", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "fb0dc953-70a2-4048-b602-eb26b609d3b4"}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2026-42589", "field": "timestamps.last_seen_at", "uuid": "9489dcce-d976-4f90-9775-ed13c521834b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": true, "value": "2026-11-04", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2026-42589", "field": "evidence.0.details.observation_date", "uuid": "9489dcce-d976-4f90-9775-ed13c521834b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2026-42589", "field": "status.status_updated_at", "uuid": "9489dcce-d976-4f90-9775-ed13c521834b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T16:07:28Z", "date_only": false, "value": "2026-11-04T16:07:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/VByR6ooZC88bj2f7Xrtcr9Ct3pAcodUfzqRBOtIE52et_NM", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "814bdfd8-442f-4b70-9b69-c77ec0b6dd6b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-06T01:00:01Z", "date_only": false, "value": "2026-11-06T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2026-42589", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "9489dcce-d976-4f90-9775-ed13c521834b", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-11T08:42:28.743Z", "anchors": {"origin": {"timestamp": "2026-05-07T00:55:01Z", "date_only": false, "value": "2026-05-07T00:55:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RQGH-GXV4-6657", "record": "GHSA-RQGH-GXV4-6657", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-05-07T00:55:01Z", "date_only": false, "value": "2026-05-07T00:55:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RQGH-GXV4-6657", "record": "GHSA-RQGH-GXV4-6657", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2026-04-30T18:30:59Z", "date_only": false, "value": "2026-04-30T18:30:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/gotenberg/gotenberg/security/advisories/GHSA-rqgh-gxv4-6657", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "5e4916db-27be-4bcc-93ee-f2fa3ce37166", "url": "https://github.com/gotenberg/gotenberg/security/advisories/GHSA-rqgh-gxv4-6657", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-10-31T00:00:00Z", "date_only": false, "value": "2026-10-31T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-42589", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2b26057c-406f-4f97-9889-f30893b0b106", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 15289499.0, "hours": 4247.083055555556, "days": 176.9617939814815, "min_seconds": 15289499.0, "max_seconds": 15375899.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-07T00:55:01Z", "date_only": false, "value": "2026-05-07T00:55:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RQGH-GXV4-6657", "record": "GHSA-RQGH-GXV4-6657", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-31T00:00:00Z", "date_only": false, "value": "2026-10-31T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-42589", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2b26057c-406f-4f97-9889-f30893b0b106", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 15289499.0, "hours": 4247.083055555556, "days": 176.9617939814815, "min_seconds": 15289499.0, "max_seconds": 15375899.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-07T00:55:01Z", "date_only": false, "value": "2026-05-07T00:55:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RQGH-GXV4-6657", "record": "GHSA-RQGH-GXV4-6657", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-10-31T00:00:00Z", "date_only": false, "value": "2026-10-31T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-42589", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2b26057c-406f-4f97-9889-f30893b0b106", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": -541442.0, "hours": -150.40055555555554, "days": -6.266689814814815, "min_seconds": -541442.0, "max_seconds": -541442.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-05-07T00:55:01Z", "date_only": false, "value": "2026-05-07T00:55:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RQGH-GXV4-6657", "record": "GHSA-RQGH-GXV4-6657", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-04-30T18:30:59Z", "date_only": false, "value": "2026-04-30T18:30:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/gotenberg/gotenberg/security/advisories/GHSA-rqgh-gxv4-6657", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "5e4916db-27be-4bcc-93ee-f2fa3ce37166", "url": "https://github.com/gotenberg/gotenberg/security/advisories/GHSA-rqgh-gxv4-6657", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 16271247.743627, "hours": 4519.791039896389, "days": 188.32462666234954, "min_seconds": 16271247.743627, "max_seconds": 16271247.743627, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-07T00:55:01Z", "date_only": false, "value": "2026-05-07T00:55:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RQGH-GXV4-6657", "record": "GHSA-RQGH-GXV4-6657", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-11T08:42:28.743Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 981748.743627, "hours": 272.7079843408333, "days": 11.362832680868056, "min_seconds": 895348.743627, "max_seconds": 981748.743627, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-31T00:00:00Z", "date_only": false, "value": "2026-10-31T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-42589", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2b26057c-406f-4f97-9889-f30893b0b106", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-11T08:42:28.743Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 16812689.743627, "hours": 4670.1915954519445, "days": 194.59131647716436, "min_seconds": 16812689.743627, "max_seconds": 16812689.743627, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-30T18:30:59Z", "date_only": false, "value": "2026-04-30T18:30:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/gotenberg/gotenberg/security/advisories/GHSA-rqgh-gxv4-6657", "record": "CVE-2026-42589", "field": "creation_timestamp", "uuid": "5e4916db-27be-4bcc-93ee-f2fa3ce37166", "url": "https://github.com/gotenberg/gotenberg/security/advisories/GHSA-rqgh-gxv4-6657", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T08:42:28.743Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}