{"metadata": {"vulnerability": "CVE-2026-4681", "count": 45, "kinds": {"milestone": 5, "sighting": 27, "kev": 0, "other": 13}}, "data": [{"timestamp": "2026-03-22T23:00:00Z", "date_only": false, "value": "2026-03-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0822", "record": "WID-SEC-W-2026-0822", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-03-22T23:00:00Z", "date_only": false, "value": "2026-03-22T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0822", "record": "WID-SEC-W-2026-0822", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-03-22T23:00:00Z", "date_only": false, "value": "2026-03-22T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0822", "record": "WID-SEC-W-2026-0822", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-03-23T21:42:24.158Z", "date_only": false, "value": "2026-03-23T21:42:24.158Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-4681", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-03-23T21:48:05.652Z", "date_only": false, "value": "2026-03-23T21:48:05.652Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-4681", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-03-23T21:48:05.652Z", "date_only": false, "value": "2026-03-23T21:48:05.652Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / PTC", "record": "CVE-2026-4681", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-23T22:16:31Z", "date_only": false, "value": "2026-03-23T22:16:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JFRX-FMG3-3P8M", "record": "GHSA-JFRX-FMG3-3P8M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-03-23T22:16:31.890Z", "date_only": false, "value": "2026-03-23T22:16:31.890", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4681", "record": "FKIE_CVE-2026-4681", "field": "published"}, {"timestamp": "2026-03-23T22:47:10.690Z", "date_only": false, "value": "2026-03-23T22:47:10.690111Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhr5cdwqy32n", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "58c28f4f-e466-4222-98de-850d4176de7f", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhr5cdwqy32n"}, {"timestamp": "2026-03-23T23:00:00Z", "date_only": false, "value": "2026-03-23T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0822", "record": "WID-SEC-W-2026-0822", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-03-23T23:00:00Z", "date_only": false, "value": "2026-03-23T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0822", "record": "WID-SEC-W-2026-0822", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-24T00:30:25Z", "date_only": false, "value": "2026-03-24T00:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JFRX-FMG3-3P8M", "record": "GHSA-JFRX-FMG3-3P8M", "field": "published"}, {"timestamp": "2026-03-24T00:30:25Z", "date_only": false, "value": "2026-03-24T00:30:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JFRX-FMG3-3P8M", "record": "GHSA-JFRX-FMG3-3P8M", "field": "modified"}, {"timestamp": "2026-03-24T06:11:07.619Z", "date_only": false, "value": "2026-03-24T06:11:07.619+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0822", "record": "WID-SEC-W-2026-0822", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-24T14:48:53.854Z", "date_only": false, "value": "2026-03-24T14:48:53.854433Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-4681", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-03-24T14:48:53.854Z", "date_only": false, "value": "2026-03-24T14:48:53.854433Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4681", "record": "FKIE_CVE-2026-4681", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-03-24T14:49:43.425Z", "date_only": false, "value": "2026-03-24T14:49:43.425Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-4681", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-03-24T14:49:43.425Z", "date_only": false, "value": "2026-03-24T14:49:43.425Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-4681", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-25T04:20:26.666Z", "date_only": false, "value": "2026-03-25T04:20:26.666993Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhuaf6mnjx2z", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "fb9f923a-9c0a-46b6-9a3d-c48f10df34a9", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhuaf6mnjx2z"}, {"timestamp": "2026-03-25T14:20:31.224Z", "date_only": false, "value": "2026-03-25T14:20:31.224122Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhvbw73kr72f", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "e1f1fbff-b6ba-4720-8958-8ed9c13f87c4", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhvbw73kr72f"}, {"timestamp": "2026-03-25T15:00:08Z", "date_only": false, "value": "2026-03-25T15:00:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8031", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "5cf27874-9623-46b1-9051-789057687c90", "content": "PTC Inc. \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Windchill \u0438 FlexPLM, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u043c \u0446\u0438\u043a\u043b\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 (PLM), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-4681 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u0431\u0443\u0434\u0438\u043b\u0430 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0445 \u0441\u0438\u043b\u043e\u0432\u0438\u043a\u043e\u0432 (BKA) \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0440\u0435\u0439\u0434\u044b \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0439 \u043d\u043e\u0447\u044c\u044e, \u0432 3 \u0447\u0430\u0441\u0430 \u0443\u0442\u0440\u0430, \u0434\u043b\u044f \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 Windchill \u0438 FlexPLM, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0442\u044c \u043e \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u0430\u0445.\n\n\u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442, \u043d\u043e PTC \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u00ab\u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windchill\u00bb \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 Windchill \u0438 FlexPLM, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u043d\u0430\u0431\u043e\u0440\u043e\u0432 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 (CPS).\n\n\u0414\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e Apache/IIS \u0434\u043b\u044f \u0437\u0430\u043f\u0440\u0435\u0442\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c\u0443 \u043f\u0443\u0442\u0438 \u0441\u0435\u0440\u0432\u043b\u0435\u0442\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c PTC, \u0434\u0430\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043d\u0435 \u043d\u0430\u0440\u0443\u0448\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c.\n\n\u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e \u0440\u0438\u0441\u043a\u043e\u0432 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043a\u043e \u0432\u0441\u0435\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Windchill, FlexPLM \u0438 \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435/\u0440\u0435\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0430 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e PTC \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0442\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442 \u043c\u0435\u0440\u0430\u043c \u043f\u043e \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e \u0440\u0438\u0441\u043a\u043e\u0432 \u0434\u043b\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430. \u0415\u0441\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b \u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0438\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0435\u0440\u0432\u0438\u0441\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, PTC \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0430\u0431\u043e\u0440 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 IOCs, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0445 \u0441\u0442\u0440\u043e\u043a\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0430\u0433\u0435\u043d\u0442\u0430 \u0438 \u0444\u0430\u0439\u043b\u044b.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a (\u0444\u0430\u0439\u043b\u043e\u0432 GW.class, payload.bin \u0438\u043b\u0438 dpr_.jsp), \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u0448\u0430\u0431\u043b\u043e\u043d\u0430\u043c\u0438 \u0442\u0438\u043f\u0430 run?p= / .jsp?c= \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e User-Agent, \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 GW, GW_READY_OK \u0438\u043b\u0438 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u0448\u043b\u044e\u0437\u0430.\n\n\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 GW.class \u0438\u043b\u0438 dpr_<8-\u0448\u0435\u0441\u0442\u043d\u0430\u0434\u0446\u0430\u0442\u0435\u0440\u0438\u0447\u043d\u044b\u0445-\u0446\u0438\u0444\u0440>.jsp \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Windchill \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u0434\u043e \u0435\u0433\u043e \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u043c \u043f\u0438\u0441\u044c\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c PTC \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u00ab\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00bb.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Heise, \u0432 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u043d\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438 \u0411\u044e\u0440\u043e \u043f\u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441 \u043a\u043e\u0440\u0440\u0443\u043f\u0446\u0438\u0435\u0439 \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u0439 \u0441\u0442\u0440\u0430\u043d\u0435 \u043e \u0440\u0438\u0441\u043a\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f CVE-2026-4681, \u0434\u0430\u0436\u0435 \u0442\u0435\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b.\n\n\u041d\u0435\u043c\u0435\u0446\u043a\u043e\u0435 \u0438\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0433\u043e\u043b\u043e\u0432\u043d\u043e\u0433\u043e \u0440\u043e\u0437\u044b\u0441\u043a\u0430 (BKA) \u0440\u0430\u0437\u0431\u0443\u0434\u0438\u043b\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043f\u043e\u0441\u0440\u0435\u0434\u0438 \u043d\u043e\u0447\u0438 \u0434\u043b\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043f\u0438\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043e\u0442 PTC, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u043e\u0432\u0435\u0441\u0442\u0438\u043b\u043e \u0433\u043e\u0441\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0433\u043e\u043b\u043e\u0432\u043d\u043e\u0433\u043e \u0440\u043e\u0437\u044b\u0441\u043a\u0430 (LKA) \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0437\u0435\u043c\u043b\u044f\u0445.\n\n\u0421\u0442\u043e\u043b\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u0430\u044f \u0440\u0435\u0430\u043a\u0446\u0438\u044f \u0432\u043b\u0430\u0441\u0442\u0435\u0439 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0435 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e CVE-2026-4681 \u0432\u0441\u0435 \u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u043b\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u0441\u0430\u043c\u043e\u0435 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u044b PLM \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u043c\u0438 \u0444\u0438\u0440\u043c\u0430\u043c\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435 \u0438 \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0446\u0435\u043f\u043e\u0447\u043a\u0430\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a, \u044d\u043a\u0441\u0442\u0440\u0430\u043e\u0440\u0434\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0432\u043b\u0430\u0441\u0442\u0435\u0439 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043d\u044b. \u0411\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "url": "https://t.me/true_secator/8031"}, {"timestamp": "2026-03-26T03:00:15Z", "date_only": false, "value": "2026-03-26T03:00:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.bleepingcomputer.com/news/security/ptc-warns-of-imminent-threat-from-critical-windchill-flexplm-rce-bug/", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "00d2ab6c-9b22-4c11-bb17-a3fd01b02993", "url": "https://www.bleepingcomputer.com/news/security/ptc-warns-of-imminent-threat-from-critical-windchill-flexplm-rce-bug/"}, {"timestamp": "2026-03-26T11:00:00Z", "date_only": false, "value": "2026-03-26T11:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-085-03", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "7764f8f8-444c-4284-bc07-62940b8c1236", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-085-03"}, {"timestamp": "2026-03-27T09:50:03.363Z", "date_only": false, "value": "2026-03-27T09:50:03.363070Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhztqgbyl42e", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "4fc183fc-3ff2-4602-90ab-6d10661bf6bb", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mhztqgbyl42e"}, {"timestamp": "2026-03-27T10:04:23Z", "date_only": false, "value": "2026-03-27T10:04:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/55049", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "87b0a9e3-94b1-4b0a-bb25-a47438d7da2a", "content": "CISA Flags Critical PTC Vulnerability That Had German Police Mobilized\nhttps://www.securityweek.com/cisa-flags-critical-ptc-vulnerability-that-had-german-police-mobilized/\n\nPolice in Germany physically warned organizations about the critical PTC Windchill vulnerability tracked as CVE-2026-4681.\nThe post CISA Flags Critical PTC Vulnerability That Had German Police Mobilized (https://www.securityweek.com/cisa-flags-critical-ptc-vulnerability-that-had-german-police-mobilized/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/55049"}, {"timestamp": "2026-03-27T10:08:57.021Z", "date_only": false, "value": "2026-03-27T10:08:57.021902Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mhzus3vccn22", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "8dfca865-2ecf-4d26-ac86-b89e7c267be0", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mhzus3vccn22"}, {"timestamp": "2026-03-27T10:30:30.025Z", "date_only": false, "value": "2026-03-27T10:30:30.025707Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116300672485423831", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "eb4804ec-4d28-4257-8bf6-019cef75b052", "url": "https://infosec.exchange/users/offseq/statuses/116300672485423831"}, {"timestamp": "2026-03-27T10:30:31.982Z", "date_only": false, "value": "2026-03-27T10:30:31.982325Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhzvyse2hl2q", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "9efa0401-4f4e-413c-be37-72eda8ad2478", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mhzvyse2hl2q"}, {"timestamp": "2026-03-27T12:00:26.454Z", "date_only": false, "value": "2026-03-27T12:00:26.454285Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mi22zlanth2z", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "3efbf9aa-452e-4398-8966-e1e6f787152e", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mi22zlanth2z"}, {"timestamp": "2026-03-27T15:46:44.559Z", "date_only": false, "value": "2026-03-27T15:46:44.559814Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116301915921046312", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "b6f6ab7f-8896-4546-a7cd-77cc84800075", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/116301915921046312"}, {"timestamp": "2026-03-27T15:46:58.851Z", "date_only": false, "value": "2026-03-27T15:46:58.851593Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mi2honvtpx2p", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "7dc26a89-dcee-4679-9683-cec8b493cb9c", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mi2honvtpx2p"}, {"timestamp": "2026-03-27T23:55:29.234Z", "date_only": false, "value": "2026-03-27T23:55:29.234042Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/christinaayiotis.bsky.social/post/3mi3cy5swsk2x", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "1d7209f7-4663-4df7-b0f1-632887609a4a", "url": "https://bsky.app/profile/christinaayiotis.bsky.social/post/3mi3cy5swsk2x"}, {"timestamp": "2026-03-28T12:35:06.333Z", "date_only": false, "value": "2026-03-28T12:35:06.333043Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mi4nght3bs23", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "6dcd5e5b-1f68-4076-ac1e-867b73b06dd3", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mi4nght3bs23"}, {"timestamp": "2026-03-29T11:23:43.489Z", "date_only": false, "value": "2026-03-29T11:23:43.489078Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3mi6zvrdjbz2b", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "64a2abbd-5124-4fa2-a58d-f6d75f879b65", "url": "https://bsky.app/profile/solomonneas.dev/post/3mi6zvrdjbz2b"}, {"timestamp": "2026-03-29T11:29:07.018Z", "date_only": false, "value": "2026-03-29T11:29:07.018695Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3mi727emara2r", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "0f258d2c-9c05-4ac6-ac72-e8728b03afd2", "url": "https://bsky.app/profile/potato.software/post/3mi727emara2r"}, {"timestamp": "2026-03-29T12:31:47.503Z", "date_only": false, "value": "2026-03-29T12:31:47.503686Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3mi75phwvru2v", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "7eaa0908-295b-4d7b-850f-da464662effa", "url": "https://bsky.app/profile/solomonneas.dev/post/3mi75phwvru2v"}, {"timestamp": "2026-03-31T00:29:57Z", "date_only": false, "value": "2026-03-31T00:29:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/stone776/7cbc72973c8ff35883584144357c67da", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "fdc49b13-45bf-4164-a305-e2f78bca1a51", "url": "https://gist.github.com/stone776/7cbc72973c8ff35883584144357c67da"}, {"timestamp": "2026-04-04T11:16:43.236Z", "date_only": false, "value": "2026-04-04T11:16:43.236148Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mio4crfw462l", "record": "cve-2026-4681", "field": "creation_timestamp", "uuid": "586a946d-66c1-4f8f-a598-18d01a705b53", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mio4crfw462l"}, {"timestamp": "2026-06-17T10:57:01.310Z", "date_only": false, "value": "2026-06-17T10:57:01.310", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4681", "record": "FKIE_CVE-2026-4681", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:36.825Z", "date_only": false, "value": "2026-06-19T12:45:36.825459Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/40ab2430-d5be-479c-b1a6-3a2f6dc4f9c7", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "26523686-9658-4b8e-a797-992619fd72f2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/40ab2430-d5be-479c-b1a6-3a2f6dc4f9c7"}, {"timestamp": "2026-07-13T13:00:06.936Z", "date_only": false, "value": "2026-07-13T13:00:06.936706Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8352", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "e054703a-014b-4272-85bb-7f0cacd2852b", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0438 \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438:\n\n1. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PTC Windchill, \u0447\u0442\u043e \u0441\u0442\u0430\u043b\u043e \u043f\u0435\u0440\u0432\u044b\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u044b\u043c \u0441\u043b\u0443\u0447\u0430\u0435\u043c \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u043c \u0446\u0438\u043a\u043b\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 (PLM) \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\nCVE-2026-12569 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Windchill \u0438 FlexPLM \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 PTC. \u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u042d\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 PTC, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV CISA, \u0438, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 \u043d\u0435\u043c\u0435\u0446\u043a\u0430\u044f \u043f\u043e\u043b\u0438\u0446\u0438\u044f\u00a0\u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438\u00a0\u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e PTC Windchill, CVE-2026-4681.\n\n\u0414\u043b\u044f CVE-2026-12569 PTC \u043d\u0430\u0447\u0430\u043b\u0430 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043c\u0435\u0440\u044b \u043f\u043e \u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e 17 \u0438\u044e\u043d\u044f. \u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b (IoC, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0435\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a JSP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041d\u0435\u0437\u0430\u0434\u043e\u043b\u0433\u043e \u0434\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0444\u0430\u043a\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043d\u0435\u043c\u0435\u0446\u043a\u0430\u044f \u043f\u043e\u043b\u0438\u0446\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u043f\u043e\u0432\u0435\u0449\u0430\u0442\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PTC \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u0437\u043d\u0430\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u0445.\u00a0\n\n2. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u043c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445. \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 Ethernet \u043e\u0442 Lantronix. \u042d\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 ICS \u043f\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044e.\n\n3. \u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 GitLab CE/EE \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 13 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2026-10086, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 XSS \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 GitLab EE, \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441\u0435\u0441\u0441\u0438\u0439 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f CVE-2026-10712 - XSS \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0441\u0440\u0435\u0434\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Web IDE, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 JavaScript \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u044f\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0422\u0440\u0435\u0442\u044c\u044f CVE-2026-12053 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 Duo Workflows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u043d\u043e\u0439 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442.\n\n4. \u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ubiquiti, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u041e\u0421 UniFi. \u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u043e\u0441\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\nUniFi \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445, \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0442\u0435\u043b\u044f\u0445 Wi-Fi, \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u0445 (NAS) \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ubiquiti. \u0423\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043d\u043e \u044d\u0442\u0438 \u0442\u0440\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 UniFi OS, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 KEV CISA.\n\n5. Microsoft \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Windows 10 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0433\u043e\u0434 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 Windows 10 ESU \u043f\u0440\u043e\u0434\u043b\u0435\u043d\u0430 \u0434\u043e 12 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2027 \u0433\u043e\u0434\u0430. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043e\u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u043b\u0430 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c\u0441\u044f \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0418\u0442\u043e\u043d \u0417\u0432\u0435\u0430\u0440\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0432\u0443\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 Johnson&Johnson, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u0445 \u0438 \u0441\u0442\u0430\u0436\u0435\u0440\u0430\u0445.\n\n7. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a:\u00a0Aikido Security, Microsoft, SafeDep, Socket Security, Step Security, Step Security.\n\n8. Trend Micro \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Langflow AI \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u0430.\n\n9. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b Ghost CMS \u0432 \u043c\u0430\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2026-26980, \u043d\u043e \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0438 ClickFix \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445.\n\n10. Breached[.]hn, \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043b\u043e\u043d\u043e\u0432 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e BreachForums, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443, \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u043b\u0441\u044f \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u00abShinyHunters, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0443\u0431\u044c\u044e\u0442 \u043d\u0430\u0441 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e\u00bb.", "url": "https://t.me/true_secator/8352"}, {"timestamp": "2026-07-18T13:00:05.349Z", "date_only": false, "value": "2026-07-18T13:00:05.349945Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/41586", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "351f4ff9-abc8-411a-9af4-d485f5a13eb6", "content": "CISA Flags Critical PTC Vulnerability That Had German Police Mobilized\n\nPolice in Germany physically warned organizations about the critical PTC Windchill vulnerability tracked as CVE-2026-4681.\nThe post CISA Flags Critical PTC Vulnerability That Had German Police Mobilized appeared first on SecurityWeek.\nhttps://www.securityweek.com/cisa-flags-critical-ptc-vulnerability-that-had-german-police-mobilized/", "url": "https://t.me/VulnerabilityNews/41586"}, {"timestamp": "2026-07-24T13:00:04.136Z", "date_only": false, "value": "2026-07-24T13:00:04.136034Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8439", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "4b44e5d7-eff1-44a3-81d2-7dd4e9ab1ce4", "content": "\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop (\u0438\u043b\u0438 Cl0p) \u0432\u0435\u0440\u043d\u0443\u043b\u0430\u0441\u044c \u0441 \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0435\u0439, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b PTC Windchill \u0438 FlexPLM.\n\nPTC Windchill \u0438 PTC FlexPLM - \u044d\u0442\u043e \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043e\u0442\u043d\u043e\u0441\u044f\u0449\u0438\u0435\u0441\u044f \u043a \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0436\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u043c \u0446\u0438\u043a\u043b\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 (PLM), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f, \u043f\u0440\u043e\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u0434\u0435\u0438 \u0434\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430.\n\n\u041e\u0431\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b PLM \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0440\u0435\u0434\u0438 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u0445, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e-\u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u043b\u043e\u0433\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0431\u043e\u0440\u043e\u043d\u043d\u043e\u0439, \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0439, \u043c\u0430\u0448\u0438\u043d\u043e\u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439, \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u043e\u0439 \u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u043e\u0439 \u043e\u0442\u0440\u0430\u0441\u043b\u044f\u0445. \n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a, \u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 30 000 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0431\u043e\u043b\u0435\u0435 1500 \u0431\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0438 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 FlexPLM.\n\n\u041f\u043e \u0438\u043c\u0435\u044e\u0449\u0438\u043c\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c, Clop \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CVE-2026-12569), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 Windchill \u0438 FlexPLM.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 ReliaQuest, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Clop \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u044e\u0442 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 JSP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0438\u043c \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 PLM-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u0414\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u043d\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0438\u043c\u0435\u044e\u0442 \u043e\u0431\u0449\u0438\u0435 \u0447\u0435\u0440\u0442\u044b \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 Cl0p, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u0446\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. Ransom-ISAC \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 Windchill \u0438 FlexPLM \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c Clop.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0441 support@cryptohox.com, \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Clop.\n\nPTC\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f CVE-2026-12569 17 \u0438\u044e\u043d\u044f, \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0432 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0444\u0430\u043a\u0442 \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u0432\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u0432 \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438\u00a0\u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u044b \u043d\u0430 IOCs.\n \n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a 26 \u0438\u044e\u043d\u044f PTC \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u00ab\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0437\u00bb, CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e\u00a0\u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u00a0\u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Heise, CVE-2026-12569 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0431\u0443\u0434\u0438\u043b\u0430 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0435 \u0432\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b: \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (BSI) \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043b\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u0438 \u0437\u0432\u043e\u043d\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c PTC \u043f\u043e\u0441\u0440\u0435\u0434\u0438 \u043d\u043e\u0447\u0438, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u0438\u0445 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 \u043d\u0435\u043c\u0435\u0446\u043a\u0438\u0435 \u0432\u043b\u0430\u0441\u0442\u0438\u00a0\u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u00a0\u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windchill \u0438 FlexPLM (CVE-2026-4681) \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0438\u043b\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n\u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 ReliaQuest \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c PTC \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windchill \u0438 FlexPLM \u0438, \u043f\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0438\u0445 \u0437\u0430 VPN-\u0441\u0435\u0442\u044f\u043c\u0438 \u0438\u043b\u0438 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043f\u0440\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u0438 \u043d\u0430 \u0432\u0437\u043b\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0434 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0435\u0440\u0432\u0438\u0441\u0430.", "url": "https://t.me/true_secator/8439"}, {"timestamp": "2026-10-09T10:36:07Z", "date_only": false, "value": "2026-10-09T10:36:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/baseleeak/412", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "40422826-7c86-427d-9832-1b7ae287bba3", "content": "\ud83d\udd10 INCIDENT: PHILIPS.COM\n\ud83d\udcc5 Date of attackers' claim: August 12, 2026\n\n\ud83e\udda0 Attacker: Ransomware group Clop (also known as Cl0p)\n\n\ud83c\udfaf Compromised domain: PHILIPS.COM\n\n\ud83c\udfe2 About the company: Royal Philips is a Dutch multinational health technology company headquartered in Amsterdam. Founded in 1891, the company specialises in diagnostic imaging, patient monitoring, medical devices, and personal health products. Philips generated approximately \u20ac18 billion in 2025 sales and employs approximately 63,700 people with sales and services in more than 100 countries .\n\n\ud83d\udcb0 Ransom demanded: not specified\n\n\ud83d\udce6 Total volume of the claimed archive: 13.5 GB \n\n\ud83d\udcc2 WHAT IS CLAIMED ABOUT THE LEAK:\n\n* PDF drawings\n* Diagrams\n* Blueprints\n* IT infrastructure data \n\nA later analysis by BNR found that the stolen files included PDF documents with designs and technical drawings of MRI scanners and other medical equipment, as well as CAD files for 3D modelling .\n\n\ud83d\udd13 ADDITIONAL COMPROMISE DATA (HudsonRock):\n\n* Compromised employees: 413\n* Compromised users: 60,802\n* Third-party employee credentials: 793\n* External attack surface: 200 \n\n\ud83c\udf10 DETECTED INFRASTRUCTURE:\n\n* MX records: philips-com.mail.protection.outlook.com (Microsoft 365)\n* SaaS services: Atlassian, Smartsheet, Slack, Notion, OpenAI, Cloudflare, Airtable, Jamf, OneTrust \n\n\ud83e\uddfe STATUS:\n\u26a0\ufe0f Claim by the hacker group Clop. On August 12, 2026, Clop listed Philips on its leak site as part of a campaign affecting nearly 50 organisations, claiming the theft of 13.5 GB of data . Philips officially confirmed: \"Philips has identified and contained an attempted cybersecurity compromise of a specific enterprise server related to internal data. This has no impact on customer environments\" . The attack is part of a large-scale Clop campaign linked to the exploitation of critical vulnerability CVE-2026-12569 in PTC Windchill and FlexPLM (CVSS 9.8) . PTC began releasing patches on June 17, 2026; CISA added the flaw to its Known Exploited Vulnerabilities catalog. Clop deployed JSP webshells for persistence and data exfiltration . On October 6, 2026, BNR reported that Clop had published Philips' stolen data on the dark web after the company apparently did not enter negotiations .\n\n\ud83d\udcab Note: The extraordinarily high HudsonRock figures (413 employees and 60,802 users) indicate extensive credential compromise via infostealers. Combined with 793 third-party employee credentials, this may suggest that access to the environment was obtained through both external accounts and the PTC vulnerability, rather than exclusively through direct employee credentials.\n\n\u23ea PREVIOUS INCIDENTS\nJune\u2013July 2026 \u2014 CVE-2026-12569 in PTC Windchill/FlexPLM (Clop campaign)\nThis incident is part of a broader Clop campaign affecting nearly 50 organisations, including Shell (89 GB), General Electric, Fiserv, and others . The attack exploited a critical remote code execution flaw in PTC's PLM platforms. PTC began issuing patches on June 17, 2026, CISA added the vulnerability to its Known Exploited Vulnerabilities catalog, and Germany's BSI issued overnight emergency notifications to PTC customers .\n\nMarch 2026 \u2014 CVE-2026-4681 (related Windchill/FlexPLM flaw)\nGermany's BSI took emergency action in March 2026 over a related flaw tracked as CVE-2026-4681 in Windchill and FlexPLM, indicating that Clop or other groups were already exploiting PTC products earlier in 2026", "url": "https://t.me/baseleeak/412"}, {"timestamp": "2026-10-09T10:36:07Z", "date_only": false, "value": "2026-10-09T10:36:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/baseleeak/412", "record": "CVE-2026-4681", "field": "creation_timestamp", "uuid": "5e186f31-337a-42e8-809f-31b6b2342e6e", "content": "\ud83d\udd10 INCIDENT: PHILIPS.COM\n\ud83d\udcc5 Date of attackers' claim: August 12, 2026\n\n\ud83e\udda0 Attacker: Ransomware group Clop (also known as Cl0p)\n\n\ud83c\udfaf Compromised domain: PHILIPS.COM\n\n\ud83c\udfe2 About the company: Royal Philips is a Dutch multinational health technology company headquartered in Amsterdam. Founded in 1891, the company specialises in diagnostic imaging, patient monitoring, medical devices, and personal health products. Philips generated approximately \u20ac18 billion in 2025 sales and employs approximately 63,700 people with sales and services in more than 100 countries .\n\n\ud83d\udcb0 Ransom demanded: not specified\n\n\ud83d\udce6 Total volume of the claimed archive: 13.5 GB \n\n\ud83d\udcc2 WHAT IS CLAIMED ABOUT THE LEAK:\n\n* PDF drawings\n* Diagrams\n* Blueprints\n* IT infrastructure data \n\nA later analysis by BNR found that the stolen files included PDF documents with designs and technical drawings of MRI scanners and other medical equipment, as well as CAD files for 3D modelling .\n\n\ud83d\udd13 ADDITIONAL COMPROMISE DATA (HudsonRock):\n\n* Compromised employees: 413\n* Compromised users: 60,802\n* Third-party employee credentials: 793\n* External attack surface: 200 \n\n\ud83c\udf10 DETECTED INFRASTRUCTURE:\n\n* MX records: philips-com.mail.protection.outlook.com (Microsoft 365)\n* SaaS services: Atlassian, Smartsheet, Slack, Notion, OpenAI, Cloudflare, Airtable, Jamf, OneTrust \n\n\ud83e\uddfe STATUS:\n\u26a0\ufe0f Claim by the hacker group Clop. On August 12, 2026, Clop listed Philips on its leak site as part of a campaign affecting nearly 50 organisations, claiming the theft of 13.5 GB of data . Philips officially confirmed: \"Philips has identified and contained an attempted cybersecurity compromise of a specific enterprise server related to internal data. This has no impact on customer environments\" . The attack is part of a large-scale Clop campaign linked to the exploitation of critical vulnerability CVE-2026-12569 in PTC Windchill and FlexPLM (CVSS 9.8) . PTC began releasing patches on June 17, 2026; CISA added the flaw to its Known Exploited Vulnerabilities catalog. Clop deployed JSP webshells for persistence and data exfiltration . On October 6, 2026, BNR reported that Clop had published Philips' stolen data on the dark web after the company apparently did not enter negotiations .\n\n\ud83d\udcab Note: The extraordinarily high HudsonRock figures (413 employees and 60,802 users) indicate extensive credential compromise via infostealers. Combined with 793 third-party employee credentials, this may suggest that access to the environment was obtained through both external accounts and the PTC vulnerability, rather than exclusively through direct employee credentials.\n\n\u23ea PREVIOUS INCIDENTS\nJune\u2013July 2026 \u2014 CVE-2026-12569 in PTC Windchill/FlexPLM (Clop campaign)\nThis incident is part of a broader Clop campaign affecting nearly 50 organisations, including Shell (89 GB), General Electric, Fiserv, and others . The attack exploited a critical remote code execution flaw in PTC's PLM platforms. PTC began issuing patches on June 17, 2026, CISA added the vulnerability to its Known Exploited Vulnerabilities catalog, and Germany's BSI issued overnight emergency notifications to PTC customers .\n\nMarch 2026 \u2014 CVE-2026-4681 (related Windchill/FlexPLM flaw)\nGermany's BSI took emergency action in March 2026 over a related flaw tracked as CVE-2026-4681 in Windchill and FlexPLM, indicating that Clop or other groups were already exploiting PTC products earlier in 2026", "url": "https://t.me/baseleeak/412"}]}