{"metadata": {"vulnerability": "CVE-2026-67367", "count": 29, "kinds": {"milestone": 7, "sighting": 4, "kev": 0, "other": 18}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0346", "record": "NCSC-2026-0346", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-29T14:51:27Z", "date_only": false, "value": "2026-07-29T14:51:27.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-67367", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-265-07", "record": "ICSA-26-265-07", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-517424", "record": "SSA-517424", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-265-07", "record": "ICSA-26-265-07", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-517424", "record": "SSA-517424", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-517424", "record": "SSA-517424", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-08T08:11:36.311Z", "date_only": false, "value": "2026-09-08T08:11:36.311Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-67367", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-08T08:11:36.311Z", "date_only": false, "value": "2026-09-08T08:11:36.311Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens", "record": "CVE-2026-67367", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-08T09:18:20Z", "date_only": false, "value": "2026-09-08T09:18:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2W9M-R38P-RPWQ", "record": "GHSA-2W9M-R38P-RPWQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-08T09:18:20.577Z", "date_only": false, "value": "2026-09-08T09:18:20.577", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-67367", "record": "FKIE_CVE-2026-67367", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-08T09:35:39Z", "date_only": false, "value": "2026-09-08T09:35:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2W9M-R38P-RPWQ", "record": "GHSA-2W9M-R38P-RPWQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-08T09:35:39Z", "date_only": false, "value": "2026-09-08T09:35:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2W9M-R38P-RPWQ", "record": "GHSA-2W9M-R38P-RPWQ", "field": "modified"}, {"timestamp": "2026-09-08T10:07:41.869Z", "date_only": false, "value": "2026-09-08T10:07:41.869022Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muyrnvi23q2f", "record": "CVE-2026-67367", "field": "creation_timestamp", "uuid": "838f2d1b-55c8-4c9c-8a6e-10e0b297a83d", "content": "\ud83d\udea8 CVE-2026-67367 \u2014 CVSS 9.2 CRITICAL\n\nA vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanag...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-67367\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3muyrnvi23q2f"}, {"timestamp": "2026-09-08T13:46:45.990Z", "date_only": false, "value": "2026-09-08T13:46:45.990639Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0346", "record": "NCSC-2026-0346", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-08T13:46:45.990Z", "date_only": false, "value": "2026-09-08T13:46:45.990639Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0346", "record": "NCSC-2026-0346", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-08T13:49:56.829Z", "date_only": false, "value": "2026-09-08T13:49:56.829348Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0346", "record": "NCSC-2026-0346", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-08T13:49:56.829Z", "date_only": false, "value": "2026-09-08T13:49:56.829348Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0346", "record": "NCSC-2026-0346", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-08T17:30:05.959Z", "date_only": false, "value": "2026-09-08T17:30:05.959052Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzkexsema2f", "record": "CVE-2026-67367", "field": "creation_timestamp", "uuid": "92afcfd5-5ae3-4e12-affd-2f0941b81008", "content": "CVE-2026-67367\nVersions of SIMOVE Fleetmanager before 3.1.13, 3.2.4, 3.3.2 and 4.0.1, and all versions of SIPLANT up to 3.1.4, have a weakness in their built\u2011in web server. An attacker on the network can request files\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3muzkexsema2f"}, {"timestamp": "2026-09-09T15:56:26.529Z", "date_only": false, "value": "2026-09-09T15:56:26.529587Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-67367", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-09T15:56:26.529Z", "date_only": false, "value": "2026-09-09T15:56:26.529587Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-67367", "record": "FKIE_CVE-2026-67367", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-09T15:56:42.377Z", "date_only": false, "value": "2026-09-09T15:56:42.377Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-67367", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-09T15:56:42.377Z", "date_only": false, "value": "2026-09-09T15:56:42.377Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-67367", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-09T16:17:03.757Z", "date_only": false, "value": "2026-09-09T16:17:03.757", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-67367", "record": "FKIE_CVE-2026-67367", "field": "lastModified"}, {"timestamp": "2026-09-15T18:05:13.172Z", "date_only": false, "value": "2026-09-15T18:05:13.172100Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-265-07", "record": "ICSA-26-265-07", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-18T20:00:04.640Z", "date_only": false, "value": "2026-09-18T20:00:04.640736Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/1428", "record": "CVE-2026-67367", "field": "creation_timestamp", "uuid": "53c8cef9-e5da-4de0-ae30-25162c17a96f", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Path Traversal \u062f\u0631 Siemens SIMOVE Fleetmanager\n\nSIMOVE Fleetmanager\u060c \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0627\u0632 \u0634\u0631\u06a9\u062a Siemens \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0646\u0627\u0648\u06af\u0627\u0646 \u0648\u0633\u0627\u06cc\u0644 \u0646\u0642\u0644\u06cc\u0647 \u062e\u0648\u062f\u06a9\u0627\u0631 (AGV) \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0648\u0638\u0627\u06cc\u0641 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648 \u0647\u0645\u0627\u0647\u0646\u06af\u06cc \u0627\u06cc\u0646 \u0646\u0627\u0648\u06af\u0627\u0646 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\nCVE-2026-67367\u060c CVSS 8.6\u060c CWE-23\n\n\u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc (endpoint) \u0627\u0631\u0627\u0626\u0647 \u0641\u0627\u06cc\u0644 \u062f\u0631 \u0633\u0631\u0648\u0631 HTTP \u062f\u0627\u062e\u0644\u06cc\u060c \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0627\u0641\u06cc \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u067e\u06cc\u0645\u0627\u06cc\u0634 \u0645\u0633\u06cc\u0631 (path traversal) \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0646\u0645\u06cc\u200c\u062f\u0647\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0631\u0627 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0628\u062e\u0648\u0627\u0646\u062f. \u0634\u0631\u06a9\u062a Siemens\u060c \u062f\u0631 \u0645\u06cc\u0627\u0646 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0628\u0627\u0644\u0642\u0648\u0647 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631\u060c \u0628\u0647 \u0645\u062e\u0627\u0632\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0648 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647 \u0627\u0634\u0627\u0631\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631: Fleetmanager V3.1 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.1.13)\u060c V3.2 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.2.4)\u060c V3.3 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.3.2) \u0648 V4.0 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 4.0.1).\n\n\u0645\u0646\u0628\u0639: Siemens ProductCERT\u060c SSA-517424\n\nhttps://cert-portal.siemens.com/productcert/html/ssa-517424.html\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Path Traversal \u062f\u0631 Siemens SIPLANT\n\nSIPLANT\u060c \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0627\u0632 \u0634\u0631\u06a9\u062a Siemens \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0628\u0631 \u062e\u0637\u0648\u0637 \u062a\u0648\u0644\u06cc\u062f \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0628\u0631\u0627\u06cc \u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc\u060c \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0648 \u062a\u062d\u0644\u06cc\u0644 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0641\u0631\u0622\u06cc\u0646\u062f\u0647\u0627\u06cc \u062a\u0648\u0644\u06cc\u062f \u06af\u0633\u0633\u062a\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\nCVE-2026-67367\u060c CVSS 8.6\u060c CWE-23\n\n\u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc (endpoint) \u0627\u0631\u0627\u0626\u0647 \u0641\u0627\u06cc\u0644 \u062f\u0631 \u0633\u0631\u0648\u0631 HTTP \u062f\u0627\u062e\u0644\u06cc\u060c \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0627\u0641\u06cc \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u067e\u06cc\u0645\u0627\u06cc\u0634 \u0645\u0633\u06cc\u0631 (path traversal) \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0646\u0645\u06cc\u200c\u062f\u0647\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0631\u0627 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0628\u062e\u0648\u0627\u0646\u062f\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0645\u062e\u0627\u0632\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0648 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647. \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc SIPLANT V1.7\u060c V2.2 \u0648 V3.0\u060c \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 V3.1 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.1.4) \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f.\n\n\u0645\u0646\u0628\u0639: Siemens ProductCERT\u060c SSA-517424\n\nhttps://cert-portal.siemens.com/productcert/html/ssa-517424.html\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "url": "https://t.me/ics_cert/1428", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-22T06:00:00Z", "date_only": false, "value": "2026-09-22T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-265-07", "record": "ICSA-26-265-07", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-22T06:00:00Z", "date_only": false, "value": "2026-09-22T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-265-07", "record": "ICSA-26-265-07", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-22T16:15:10.173Z", "date_only": false, "value": "2026-09-22T16:15:10.173034Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-07", "record": "CVE-2026-67367", "field": "creation_timestamp", "uuid": "a9018867-6f97-4e9a-8845-a25c7e1d9310", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-07"}], "metrics": {"as_of": "2026-10-29T10:39:25.533Z", "anchors": {"origin": {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-265-07", "record": "ICSA-26-265-07", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-265-07", "record": "ICSA-26-265-07", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-09-18T20:00:04.640Z", "date_only": false, "value": "2026-09-18T20:00:04.640736Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/1428", "record": "CVE-2026-67367", "field": "creation_timestamp", "uuid": "53c8cef9-e5da-4de0-ae30-25162c17a96f", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Path Traversal \u062f\u0631 Siemens SIMOVE Fleetmanager\n\nSIMOVE Fleetmanager\u060c \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0627\u0632 \u0634\u0631\u06a9\u062a Siemens \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0646\u0627\u0648\u06af\u0627\u0646 \u0648\u0633\u0627\u06cc\u0644 \u0646\u0642\u0644\u06cc\u0647 \u062e\u0648\u062f\u06a9\u0627\u0631 (AGV) \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0648\u0638\u0627\u06cc\u0641 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648 \u0647\u0645\u0627\u0647\u0646\u06af\u06cc \u0627\u06cc\u0646 \u0646\u0627\u0648\u06af\u0627\u0646 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\nCVE-2026-67367\u060c CVSS 8.6\u060c CWE-23\n\n\u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc (endpoint) \u0627\u0631\u0627\u0626\u0647 \u0641\u0627\u06cc\u0644 \u062f\u0631 \u0633\u0631\u0648\u0631 HTTP \u062f\u0627\u062e\u0644\u06cc\u060c \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0627\u0641\u06cc \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u067e\u06cc\u0645\u0627\u06cc\u0634 \u0645\u0633\u06cc\u0631 (path traversal) \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0646\u0645\u06cc\u200c\u062f\u0647\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0631\u0627 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0628\u062e\u0648\u0627\u0646\u062f. \u0634\u0631\u06a9\u062a Siemens\u060c \u062f\u0631 \u0645\u06cc\u0627\u0646 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0628\u0627\u0644\u0642\u0648\u0647 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631\u060c \u0628\u0647 \u0645\u062e\u0627\u0632\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0648 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647 \u0627\u0634\u0627\u0631\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631: Fleetmanager V3.1 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.1.13)\u060c V3.2 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.2.4)\u060c V3.3 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.3.2) \u0648 V4.0 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 4.0.1).\n\n\u0645\u0646\u0628\u0639: Siemens ProductCERT\u060c SSA-517424\n\nhttps://cert-portal.siemens.com/productcert/html/ssa-517424.html\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Path Traversal \u062f\u0631 Siemens SIPLANT\n\nSIPLANT\u060c \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0627\u0632 \u0634\u0631\u06a9\u062a Siemens \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0628\u0631 \u062e\u0637\u0648\u0637 \u062a\u0648\u0644\u06cc\u062f \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0628\u0631\u0627\u06cc \u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc\u060c \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0648 \u062a\u062d\u0644\u06cc\u0644 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0641\u0631\u0622\u06cc\u0646\u062f\u0647\u0627\u06cc \u062a\u0648\u0644\u06cc\u062f \u06af\u0633\u0633\u062a\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\nCVE-2026-67367\u060c CVSS 8.6\u060c CWE-23\n\n\u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc (endpoint) \u0627\u0631\u0627\u0626\u0647 \u0641\u0627\u06cc\u0644 \u062f\u0631 \u0633\u0631\u0648\u0631 HTTP \u062f\u0627\u062e\u0644\u06cc\u060c \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0627\u0641\u06cc \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u067e\u06cc\u0645\u0627\u06cc\u0634 \u0645\u0633\u06cc\u0631 (path traversal) \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0646\u0645\u06cc\u200c\u062f\u0647\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0631\u0627 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0628\u062e\u0648\u0627\u0646\u062f\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0645\u062e\u0627\u0632\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0648 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647. \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc SIPLANT V1.7\u060c V2.2 \u0648 V3.0\u060c \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 V3.1 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.1.4) \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f.\n\n\u0645\u0646\u0628\u0639: Siemens ProductCERT\u060c SSA-517424\n\nhttps://cert-portal.siemens.com/productcert/html/ssa-517424.html\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "url": "https://t.me/ics_cert/1428", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 936004.64, "hours": 260.0012888888889, "days": 10.833387037037037, "min_seconds": 849604.64, "max_seconds": 936004.64, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-265-07", "record": "ICSA-26-265-07", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-18T20:00:04.640Z", "date_only": false, "value": "2026-09-18T20:00:04.640736Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/1428", "record": "CVE-2026-67367", "field": "creation_timestamp", "uuid": "53c8cef9-e5da-4de0-ae30-25162c17a96f", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Path Traversal \u062f\u0631 Siemens SIMOVE Fleetmanager\n\nSIMOVE Fleetmanager\u060c \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0627\u0632 \u0634\u0631\u06a9\u062a Siemens \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0646\u0627\u0648\u06af\u0627\u0646 \u0648\u0633\u0627\u06cc\u0644 \u0646\u0642\u0644\u06cc\u0647 \u062e\u0648\u062f\u06a9\u0627\u0631 (AGV) \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0648\u0638\u0627\u06cc\u0641 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648 \u0647\u0645\u0627\u0647\u0646\u06af\u06cc \u0627\u06cc\u0646 \u0646\u0627\u0648\u06af\u0627\u0646 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\nCVE-2026-67367\u060c CVSS 8.6\u060c CWE-23\n\n\u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc (endpoint) \u0627\u0631\u0627\u0626\u0647 \u0641\u0627\u06cc\u0644 \u062f\u0631 \u0633\u0631\u0648\u0631 HTTP \u062f\u0627\u062e\u0644\u06cc\u060c \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0627\u0641\u06cc \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u067e\u06cc\u0645\u0627\u06cc\u0634 \u0645\u0633\u06cc\u0631 (path traversal) \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0646\u0645\u06cc\u200c\u062f\u0647\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0631\u0627 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0628\u062e\u0648\u0627\u0646\u062f. \u0634\u0631\u06a9\u062a Siemens\u060c \u062f\u0631 \u0645\u06cc\u0627\u0646 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0628\u0627\u0644\u0642\u0648\u0647 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631\u060c \u0628\u0647 \u0645\u062e\u0627\u0632\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0648 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647 \u0627\u0634\u0627\u0631\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631: Fleetmanager V3.1 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.1.13)\u060c V3.2 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.2.4)\u060c V3.3 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.3.2) \u0648 V4.0 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 4.0.1).\n\n\u0645\u0646\u0628\u0639: Siemens ProductCERT\u060c SSA-517424\n\nhttps://cert-portal.siemens.com/productcert/html/ssa-517424.html\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Path Traversal \u062f\u0631 Siemens SIPLANT\n\nSIPLANT\u060c \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0627\u0632 \u0634\u0631\u06a9\u062a Siemens \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0628\u0631 \u062e\u0637\u0648\u0637 \u062a\u0648\u0644\u06cc\u062f \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0628\u0631\u0627\u06cc \u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc\u060c \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0648 \u062a\u062d\u0644\u06cc\u0644 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0641\u0631\u0622\u06cc\u0646\u062f\u0647\u0627\u06cc \u062a\u0648\u0644\u06cc\u062f \u06af\u0633\u0633\u062a\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\nCVE-2026-67367\u060c CVSS 8.6\u060c CWE-23\n\n\u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc (endpoint) \u0627\u0631\u0627\u0626\u0647 \u0641\u0627\u06cc\u0644 \u062f\u0631 \u0633\u0631\u0648\u0631 HTTP \u062f\u0627\u062e\u0644\u06cc\u060c \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0627\u0641\u06cc \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u067e\u06cc\u0645\u0627\u06cc\u0634 \u0645\u0633\u06cc\u0631 (path traversal) \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0646\u0645\u06cc\u200c\u062f\u0647\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0631\u0627 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0628\u062e\u0648\u0627\u0646\u062f\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0645\u062e\u0627\u0632\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0648 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647. \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc SIPLANT V1.7\u060c V2.2 \u0648 V3.0\u060c \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 V3.1 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.1.4) \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f.\n\n\u0645\u0646\u0628\u0639: Siemens ProductCERT\u060c SSA-517424\n\nhttps://cert-portal.siemens.com/productcert/html/ssa-517424.html\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "url": "https://t.me/ics_cert/1428", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 4444765.533934, "hours": 1234.6570927594444, "days": 51.44404553164352, "min_seconds": 4358365.533934, "max_seconds": 4444765.533934, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-265-07", "record": "ICSA-26-265-07", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T10:39:25.533Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 3508760.893934, "hours": 974.6558038705555, "days": 40.61065849460648, "min_seconds": 3508760.893934, "max_seconds": 3508760.893934, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-18T20:00:04.640Z", "date_only": false, "value": "2026-09-18T20:00:04.640736Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/1428", "record": "CVE-2026-67367", "field": "creation_timestamp", "uuid": "53c8cef9-e5da-4de0-ae30-25162c17a96f", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Path Traversal \u062f\u0631 Siemens SIMOVE Fleetmanager\n\nSIMOVE Fleetmanager\u060c \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0627\u0632 \u0634\u0631\u06a9\u062a Siemens \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0646\u0627\u0648\u06af\u0627\u0646 \u0648\u0633\u0627\u06cc\u0644 \u0646\u0642\u0644\u06cc\u0647 \u062e\u0648\u062f\u06a9\u0627\u0631 (AGV) \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0648\u0638\u0627\u06cc\u0641 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648 \u0647\u0645\u0627\u0647\u0646\u06af\u06cc \u0627\u06cc\u0646 \u0646\u0627\u0648\u06af\u0627\u0646 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u062f\u0647\u062f.\n\nCVE-2026-67367\u060c CVSS 8.6\u060c CWE-23\n\n\u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc (endpoint) \u0627\u0631\u0627\u0626\u0647 \u0641\u0627\u06cc\u0644 \u062f\u0631 \u0633\u0631\u0648\u0631 HTTP \u062f\u0627\u062e\u0644\u06cc\u060c \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0627\u0641\u06cc \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u067e\u06cc\u0645\u0627\u06cc\u0634 \u0645\u0633\u06cc\u0631 (path traversal) \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0646\u0645\u06cc\u200c\u062f\u0647\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0631\u0627 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0628\u062e\u0648\u0627\u0646\u062f. \u0634\u0631\u06a9\u062a Siemens\u060c \u062f\u0631 \u0645\u06cc\u0627\u0646 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0628\u0627\u0644\u0642\u0648\u0647 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631\u060c \u0628\u0647 \u0645\u062e\u0627\u0632\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0648 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647 \u0627\u0634\u0627\u0631\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631: Fleetmanager V3.1 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.1.13)\u060c V3.2 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.2.4)\u060c V3.3 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.3.2) \u0648 V4.0 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 4.0.1).\n\n\u0645\u0646\u0628\u0639: Siemens ProductCERT\u060c SSA-517424\n\nhttps://cert-portal.siemens.com/productcert/html/ssa-517424.html\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Path Traversal \u062f\u0631 Siemens SIPLANT\n\nSIPLANT\u060c \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u06cc \u0627\u0632 \u0634\u0631\u06a9\u062a Siemens \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0628\u0631 \u062e\u0637\u0648\u0637 \u062a\u0648\u0644\u06cc\u062f \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0628\u0631\u0627\u06cc \u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc\u060c \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0648 \u062a\u062d\u0644\u06cc\u0644 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0641\u0631\u0622\u06cc\u0646\u062f\u0647\u0627\u06cc \u062a\u0648\u0644\u06cc\u062f \u06af\u0633\u0633\u062a\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\nCVE-2026-67367\u060c CVSS 8.6\u060c CWE-23\n\n\u0646\u0642\u0637\u0647 \u067e\u0627\u06cc\u0627\u0646\u06cc (endpoint) \u0627\u0631\u0627\u0626\u0647 \u0641\u0627\u06cc\u0644 \u062f\u0631 \u0633\u0631\u0648\u0631 HTTP \u062f\u0627\u062e\u0644\u06cc\u060c \u0628\u0631\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u06a9\u0627\u0641\u06cc \u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u067e\u06cc\u0645\u0627\u06cc\u0634 \u0645\u0633\u06cc\u0631 (path traversal) \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u0646\u0645\u06cc\u200c\u062f\u0647\u062f. \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0631\u0627 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0628\u062e\u0648\u0627\u0646\u062f\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0645\u062e\u0627\u0632\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u06cc\u060c \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0648 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647. \u062a\u0645\u0627\u0645 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc SIPLANT V1.7\u060c V2.2 \u0648 V3.0\u060c \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 V3.1 (\u06a9\u0648\u0686\u06a9\u062a\u0631 \u0627\u0632 3.1.4) \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f.\n\n\u0645\u0646\u0628\u0639: Siemens ProductCERT\u060c SSA-517424\n\nhttps://cert-portal.siemens.com/productcert/html/ssa-517424.html\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "url": "https://t.me/ics_cert/1428", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T10:39:25.533Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}