{"metadata": {"vulnerability": "CVE-2026-86131", "count": 33, "kinds": {"milestone": 5, "sighting": 17, "kev": 0, "other": 11}, "linked_omitted": 0}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0404", "record": "NCSC-2026-0404", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-09-05T02:50:33.788Z", "date_only": false, "value": "2026-09-05T02:50:33.788Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-86131", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-29T23:05:47.700Z", "date_only": false, "value": "2026-09-29T23:05:47.700Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-86131", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-29T23:05:47.700Z", "date_only": false, "value": "2026-09-29T23:05:47.700Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WatchGuard", "record": "CVE-2026-86131", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-30T00:16:36Z", "date_only": false, "value": "2026-09-30T00:16:36Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HRQ5-FH6W-QJMH", "record": "GHSA-HRQ5-FH6W-QJMH", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-09-30T00:16:36.817Z", "date_only": false, "value": "2026-09-30T00:16:36.817", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86131", "record": "FKIE_CVE-2026-86131", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-30T00:32:48Z", "date_only": false, "value": "2026-09-30T00:32:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HRQ5-FH6W-QJMH", "record": "GHSA-HRQ5-FH6W-QJMH", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-09-30T01:30:24.498Z", "date_only": false, "value": "2026-09-30T01:30:24.498651Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117357400806892577", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "3751a40d-ed3b-4d12-9f18-dcc2b814c45e", "content": "CVE-2026-86131: CRITICAL code injection in WatchGuard Fireware OS BOVPN Over TLS. Attackers controlling a VPN server can execute root commands on Firebox devices. Avoid untrusted VPNs until patched. https://radar.offseq.com/threat/a-code-injection-vulnerability-in-watchguard-fireware-oss-bovpn-over-tls-client-configuration-handling-678dbd9b2069781f #OffSeq #WatchGuard #FirewareOS #Vuln", "url": "https://infosec.exchange/users/offseq/statuses/117357400806892577"}, {"timestamp": "2026-09-30T01:30:26.938Z", "date_only": false, "value": "2026-09-30T01:30:26.938109Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwp6z7eeza24", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "406036ed-b0d6-4ee2-88c1-408ab621d36e", "content": "WatchGuard Fireware OS hit by CRITICAL code injection (CVE-2026-86131). Attackers with VPN server control can gain root on Firebox devices. Avoid connecting to untrusted VPNs until a fix. \ud83d\udd12 https://radar.offseq.com/threat/a-code-injection-vulnerability-in-watchguard-fireware-oss-bovpn-over-tls-cl...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwp6z7eeza24"}, {"timestamp": "2026-09-30T02:08:26.555Z", "date_only": false, "value": "2026-09-30T02:08:26.555488Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwpb55zbls2u", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "04f1bafe-6b99-44ed-bd8c-1e91cd940dfe", "content": "\ud83d\udea8 CVE-2026-86131 \u2014 CVSS 9.2 CRITICAL\n\nA code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling all...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86131\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwpb55zbls2u"}, {"timestamp": "2026-09-30T02:32:02Z", "date_only": false, "value": "2026-09-30T02:32:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-watchguard-2", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "ba9b1876-95a2-4a35-b841-0cdf5bbe11e2", "url": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-watchguard-2"}, {"timestamp": "2026-09-30T02:39:41.386Z", "date_only": false, "value": "2026-09-30T02:39:41.386570Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwpcuzobtf2c", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "be68d736-c899-43a8-88e1-b1c4356cda4e", "content": "WatchGuard patched 14 Fireware OS vulnerabilities, including CVSS 9.2 RCE flaw CVE-2026-86131 in BOVPN Over TLS. Update Firebox appliances now.\n\n#WatchGuard #FirewareOS #Firebox #CVE202686131 #FirewallSecurity #VPN #NetworkSecurity #PatchNow", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mwpcuzobtf2c"}, {"timestamp": "2026-09-30T04:07:46.279Z", "date_only": false, "value": "2026-09-30T04:07:46.279402Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/117358019514104109", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "477207f8-55a9-4b23-a417-7fafed9a1b12", "content": "Another one from Watch Guard.\n\nA code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox.\nhttps://psirt.watchguard.com/CVE-2026-86131", "url": "https://infosec.exchange/users/cR0w/statuses/117358019514104109"}, {"timestamp": "2026-09-30T13:24:37.177Z", "date_only": false, "value": "2026-09-30T13:24:37.177258Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwqgwaapj52i", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "1380c930-2410-41cc-883e-dce9d40c01e3", "content": "WatchGuard released Fireware OS patches fixing 15 vulnerabilities, including a critical CVE-2026-86131 RCE that can grant root command execution via BOVPN over TLS.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwqgwaapj52i"}, {"timestamp": "2026-09-30T13:30:31.526Z", "date_only": false, "value": "2026-09-30T13:30:31.526308Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117360232414282274", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "469b6d9d-0c6f-4605-b8eb-ff49b7dffdbb", "content": "CRITICAL RCE (CVE-2026-86131) in WatchGuard Fireware OS enables root code execution via BOVPN over TLS. Multiple high-severity flaws also patched. No known in-the-wild attacks, but update ASAP. https://radar.offseq.com/threat/watchguard-patches-critical-fireware-os-code-injection-vulnerability-36035f2a6c97cfc4 #OffSeq #Vuln #WatchGuard #PatchTuesday #InfoSec", "url": "https://infosec.exchange/users/offseq/statuses/117360232414282274"}, {"timestamp": "2026-09-30T13:30:33.862Z", "date_only": false, "value": "2026-09-30T13:30:33.862006Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwqhaupfpv2j", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "85470799-0e98-41eb-ad19-1a01aafa3142", "content": "Fireware OS CRITICAL code injection (CVE-2026-86131): remote attackers can gain root via BOVPN over TLS. Patch affected WatchGuard systems & APs immediately. Details: https://radar.offseq.com/threat/watchguard-patches-critical-fireware-os-code-injection-vulnerability-36035f2a6c97cfc4 #OffSeq #Vul...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mwqhaupfpv2j"}, {"timestamp": "2026-09-30T17:30:27.679Z", "date_only": false, "value": "2026-09-30T17:30:27.679185Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwquntqwvm2v", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "24be13b6-e0f2-4005-9e86-d5b376a19dbb", "content": "WatchGuard fixed 15 Fireware OS flaws, including CVE-2026-86131, a critical code injection bug that could let a remote attacker run commands as root on Firebox appliances. #WatchGuard #FirewareOS #Firebox", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwquntqwvm2v"}, {"timestamp": "2026-09-30T20:09:07.960Z", "date_only": false, "value": "2026-09-30T20:09:07.960432Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-61d108e9-b1fca82f3ad9a154", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "32ca3730-e3e7-4717-95e5-1271db7bba4f", "content": "WatchGuard fixes 15 Fireware OS flaws, including a critical RCE bug that could give attackers root access to vulnerable Firebox appliances. WatchGuard has released security updates for Fireware OS that address 15 vulnerabilities, including a critical code injection flaw, tracked as CVE-2026-86131 (CVSS score of 9.2), that could allow an attacker to execute commands with [\u2026]WatchGuard fixes critical Fireware OS flaw allowing remote code execution", "url": "https://poliverso.org/objects/0477a01e-61d108e9-b1fca82f3ad9a154"}, {"timestamp": "2026-10-01T03:55:39.882Z", "date_only": false, "value": "2026-10-01T03:55:39.882228Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-86131", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-01T03:55:39.882Z", "date_only": false, "value": "2026-10-01T03:55:39.882228Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86131", "record": "FKIE_CVE-2026-86131", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-01T17:00:06Z", "date_only": false, "value": "2026-10-01T17:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8670", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "e660ea64-896b-4455-9047-b6142899ae1f", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u044b\u0434\u0435\u043b\u0438\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:\n\n1. TeamViewer \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0440\u044f\u0434\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0435 \u0438 \u0445\u043e\u0441\u0442-\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f - \u044d\u0442\u043e \u043e\u0431\u0445\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0441\u0441\u0438\u044f\u043c (CVE-2026-92370), \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0438\u0439 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 TeamViewer Full Client \u0438 Host \u0434\u043b\u044f Windows, Linux \u0438 macOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a RCE \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u0427\u0435\u0442\u044b\u0440\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2026-19743), \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435 (CVE-2026-92368), \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 TOCTOU (CVE-2026-92369) \u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0443\u0442\u0438 (CVE-2026-92371), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f.\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f NT AUHORITY/SYSTEM \u0438\u043b\u0438 root.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e PoC \u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043e\u043d\u0430 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c TeamViewer \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 15.82.\n\n2. \u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 Microsoft, \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 CVE-2026-73570 (CVSS 8,9) \u0432 Zimbra Collaboration Suite (ZCS) \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 10.1.20 \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0435\u0449\u0435 \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2026-73570 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b 20 \u0438\u044e\u043b\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 ZCS 10.1.20, \u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043d\u0435\u0439 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u0430 13 \u0430\u0432\u0433\u0443\u0441\u0442\u0430. \u0412 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 28 \u0438\u044e\u043b\u044f \u043f\u043e 7 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 Microsoft \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0432\u043d\u0435 \u043f\u043e\u043b\u043e\u0441\u044b \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u043d\u0438\u044f \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0442\u043e\u0447\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f.\n\n3. WatchGuard \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, DoS-\u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0438 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0435\u0439 \u0432 Fireware OS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 RCE.\n\nCVE-2026-86131 (CVSS 9.2), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 BOVPN \u0447\u0435\u0440\u0435\u0437 TLS.  \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 VPN-\u0441\u0435\u0440\u0432\u0435\u0440, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u043c\u0441\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 Firebox.\n\n4. Bitget \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0443\u043a\u0440\u0430\u0432\u0448\u0438\u0435 \u0443 \u043d\u0435\u0435 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 387,5 \u043c\u043b\u043d. \u0434\u043e\u043b\u043b., \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f 0-day \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c SlowMist \u0438 Mandiant (1 \u0438 2), \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u0434\u0430\u043d\u0438\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u043e\u0439 \u0431\u0438\u0440\u0436\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u043d\u043e\u0447\u0438 25 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f.\n\nBitget \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u0431\u0435\u0449\u0430\u0435\u0442 5% \u0442\u0435\u043c, \u043a\u0442\u043e \u043f\u043e\u043c\u043e\u0436\u0435\u0442 \u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0438\u043b\u0438 \u0437\u0430\u043c\u043e\u0440\u043e\u0437\u0438\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n5. KiteWorks \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u0432\u043e\u0435\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0442\u0435\u043c, \u0447\u0442\u043e \u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0436\u043d\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u0441\u043d\u043e\u0432\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443.\n\n\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 Kiteworks \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0442 \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0433\u043e\u0442\u043e\u0432\u044f\u0442\u0441\u044f \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u043d\u0430 \u0435\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b.\n\n6. \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430 Python Authlib \u043d\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c \u043f\u043e\u043b\u0435\u043c \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 OAuth \u0438 OpenID.\n\n7. Palo Alto Networks \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 27 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0438\u043c\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 50 000 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0434\u043b\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 CVE-2026-88772 \u0438 CVE-2026-88771 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 NetScaler.\n\n8. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u041f\u041e \u041d\u0430\u0442\u0430\u043d \u0424\u0430\u0440\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b Relapse, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 PS5. \u041e\u043d \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430 GitHub.\n\n9. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 Google \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u043a\u0430\u043a \u0418\u0418 \u043c\u0435\u043d\u044f\u0435\u0442 \u0442\u0435\u043c\u043f\u044b \u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443 GTIG, \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0432\u044b\u044f\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u0436\u0434\u044b\u0439 \u043c\u0435\u0441\u044f\u0446 \u0432 2026 \u0433\u043e\u0434\u0443, \u043a\u0430\u043a \u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445, \u0443\u0434\u0432\u043e\u0438\u043b\u043e\u0441\u044c.\n\n10. \u041f\u043e\u0437\u0438\u0442\u0438\u0432\u044b \u0432 \u0431\u043b\u043e\u0433\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043f\u0440\u043e \u0442\u043e, \u043a\u0430\u043a \u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043d\u0430\u0439\u0442\u0438  CVE-2026-43783: LPE \u0447\u0435\u0440\u0435\u0437 DesktopServicesHelper \u0432 macOS 26.5.", "url": "https://t.me/true_secator/8670"}, {"timestamp": "2026-10-01T17:08:46.734Z", "date_only": false, "value": "2026-10-01T17:08:46.734Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-86131", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-01T17:08:46.734Z", "date_only": false, "value": "2026-10-01T17:08:46.734Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-86131", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-02T05:40:28.019Z", "date_only": false, "value": "2026-10-02T05:40:28.019673Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mwunw473ek2b", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "118b4c4a-4d0c-4861-abe3-f07b12f63e28", "content": "WatchGuard Firebox\u306b15\u4ef6\u306e\u8106\u5f31\u6027\u3001Critical RCE\u300cCVE-2026-86131\u300d\u306a\u3069\u3092\u4fee\u6b63\u2015Fireware OS\u306e\u66f4\u65b0\u3092\u63a8\u5968 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mwunw473ek2b"}, {"timestamp": "2026-10-02T05:49:42.771Z", "date_only": false, "value": "2026-10-02T05:49:42.771743Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mwuogoah3h2z", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "748750da-f399-4208-aa61-44c8f55d9d82", "content": "CVE-2026-86131 is trending. Hype score 2, currently #9 on cvemon.\n\nA code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-86131", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mwuogoah3h2z"}, {"timestamp": "2026-10-06T20:39:54.950Z", "date_only": false, "value": "2026-10-06T20:39:54.950", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-86131", "record": "FKIE_CVE-2026-86131", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-06T21:31:35Z", "date_only": false, "value": "2026-10-06T21:31:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HRQ5-FH6W-QJMH", "record": "GHSA-HRQ5-FH6W-QJMH", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-07T03:37:06.765Z", "date_only": false, "value": "2026-10-07T03:37:06.765545Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxaze5yrxq2b", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "f10da4e7-0d8c-41b2-8664-a109b593a3ad", "content": "\ud83d\udccc CVE-2026-86131 - A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN... https://www.cyberhub.blog/cves/CVE-2026-86131", "url": "https://bsky.app/profile/cyberhub.blog/post/3mxaze5yrxq2b"}, {"timestamp": "2026-10-07T07:27:17.612Z", "date_only": false, "value": "2026-10-07T07:27:17.612003Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0404", "record": "NCSC-2026-0404", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-10-07T07:27:17.612Z", "date_only": false, "value": "2026-10-07T07:27:17.612003Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0404", "record": "NCSC-2026-0404", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-07T07:27:17.612Z", "date_only": false, "value": "2026-10-07T07:27:17.612003Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0404", "record": "NCSC-2026-0404", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-13T14:13:32.851Z", "date_only": false, "value": "2026-10-13T14:13:32.851756Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxr7ppro2o23", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "b66d5e4e-fc8a-4bee-ae7e-452764706df6", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 3\n\u2022 Extension Bricksforge pour WordPress (CVE-2026-85097), CVSS 9.8 (Hacktualit\u00e9s)\n\u2022 Biblioth\u00e8que Exposed de JetBrains (CVE-2026-108474), CVSS 9.8 (Cyberveille Esant\u00e9)\n\u2022 WatchGuard Firebox (Fireware 12.12.3) (CVE-2026-86131), CVSS 9.2 (Radio CSIRT)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mxr7ppro2o23"}, {"timestamp": "2026-11-01T19:29:09.587Z", "date_only": false, "value": "2026-11-01T19:29:09.587895Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mzbk7jly2c2z", "record": "CVE-2026-86131", "field": "creation_timestamp", "uuid": "8042216b-0772-4289-9fe2-eff51d6cb244", "content": "WatchGuard\u306e\u300cFireware OS\u300d\u306b15\u4ef6\u306e\u8106\u5f31\u6027\n\nWatchGuard Technologies\u306eUTM\u306b\u642d\u8f09\u3055\u308c\u3066\u3044\u308b\u300cFireware OS\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\n\u540c\u793e\u306f2026\u5e749\u670829\u65e5\u304b\u308930\u65e5\u306b\u304b\u3051\u3066\u8907\u6570\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u305f\u3082\u306e\u3002\n\n\u74b0\u5883\u306b\u3088\u3063\u3066\u5f71\u97ff\u3092\u53d7\u3051\u308b\u8106\u5f31\u6027\u306f\u7570\u306a\u308b\u304c\u300115\u4ef6\u306e\u8106\u5f31\u6027\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u8a8d\u53ef\u4e0d\u5099\u3001\u30d5\u30a1\u30a4\u30eb\u306e\u8aad\u307f\u53d6\u308a\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u306a\u3069\u306b\u3064\u306a\u304c\u308b\u8106\u5f31\u6027\u3067\u3001\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u306e\u516c\u958b\u6642\u70b9\u3067\u60aa\u7528\u306f\u78ba\u8a8d\u3055\u308c\u3066\u3044\u306a\u3044\u3068\u3044\u3046\u3002\n\n\u306a\u304b\u3067\u3082\u300cBOVPN Over TLS\u300d\u306b\u5224\u660e\u3057\u305f\u8106\u5f31\u6027\u300cCVE-2026-86131\u300d...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mzbk7jly2c2z"}], "metrics": {"as_of": "2026-11-14T13:25:05.353Z", "anchors": {"origin": {"timestamp": "2026-09-29T23:05:47.700Z", "date_only": false, "value": "2026-09-29T23:05:47.700Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-86131", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-29T23:05:47.700Z", "date_only": false, "value": "2026-09-29T23:05:47.700Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-86131", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 3939557.653385, "hours": 1094.3215703847222, "days": 45.59673209936342, "min_seconds": 3939557.653385, "max_seconds": 3939557.653385, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-29T23:05:47.700Z", "date_only": false, "value": "2026-09-29T23:05:47.700Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-86131", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T13:25:05.353Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}