{"metadata": {"vulnerability": "CVE-2026-9853", "count": 22, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 13}}, "data": [{"timestamp": "2026-05-28T15:04:56.583Z", "date_only": false, "value": "2026-05-28T15:04:56.583Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-9853", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-01T00:00:00Z", "date_only": false, "value": "2026-09-01T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-293-04", "record": "ICSA-26-293-04", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-01T00:00:00Z", "date_only": false, "value": "2026-09-01T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-293-04", "record": "ICSA-26-293-04", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-03T07:53:35.276Z", "date_only": false, "value": "2026-09-03T07:53:35.276Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-9853", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-03T07:53:35.276Z", "date_only": false, "value": "2026-09-03T07:53:35.276Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Hitachi Energy", "record": "CVE-2026-9853", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-03T12:49:03.918Z", "date_only": false, "value": "2026-09-03T12:49:03.918502Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-9853", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-03T12:49:03.918Z", "date_only": false, "value": "2026-09-03T12:49:03.918502Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9853", "record": "FKIE_CVE-2026-9853", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-03T12:49:23.783Z", "date_only": false, "value": "2026-09-03T12:49:23.783Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-9853", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-03T12:49:23.783Z", "date_only": false, "value": "2026-09-03T12:49:23.783Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-9853", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-03T13:06:25Z", "date_only": false, "value": "2026-09-03T13:06:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9HQ3-8GR4-57HV", "record": "GHSA-9HQ3-8GR4-57HV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-03T13:06:25.943Z", "date_only": false, "value": "2026-09-03T13:06:25.943", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9853", "record": "FKIE_CVE-2026-9853", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-03T15:32:22Z", "date_only": false, "value": "2026-09-03T15:32:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9HQ3-8GR4-57HV", "record": "GHSA-9HQ3-8GR4-57HV", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-09T19:36:31.563Z", "date_only": false, "value": "2026-09-09T19:36:31.563", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9853", "record": "FKIE_CVE-2026-9853", "field": "lastModified"}, {"timestamp": "2026-09-09T21:31:15Z", "date_only": false, "value": "2026-09-09T21:31:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9HQ3-8GR4-57HV", "record": "GHSA-9HQ3-8GR4-57HV", "field": "modified"}, {"timestamp": "2026-09-13T01:37:07.228Z", "date_only": false, "value": "2026-09-13T01:37:07.228868Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvehhiwcbv2b", "record": "CVE-2026-9853", "field": "creation_timestamp", "uuid": "ea339080-18ae-4beb-ba93-b6c518f99f06", "content": "\ud83d\udccc CVE-2026-9853 - A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify ... https://www.cyberhub.blog/cves/CVE-2026-9853", "url": "https://bsky.app/profile/cyberhub.blog/post/3mvehhiwcbv2b"}, {"timestamp": "2026-09-13T02:01:20.795Z", "date_only": false, "value": "2026-09-13T02:01:20.795057Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3mveist5tev2n", "record": "CVE-2026-9853", "field": "creation_timestamp", "uuid": "f12a6862-a8be-4522-bae8-744934a04656", "content": "\ud83d\udccc CVE-2026-9853 - A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify ... https://www.potatohub.blog/cves/CVE-2026-9853", "url": "https://bsky.app/profile/potato.software/post/3mveist5tev2n"}, {"timestamp": "2026-09-29T00:00:00Z", "date_only": false, "value": "2026-09-29T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-293-04", "record": "ICSA-26-293-04", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-14T20:33:28.753Z", "date_only": false, "value": "2026-10-14T20:33:28.753319Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-293-04", "record": "ICSA-26-293-04", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-20T05:00:00Z", "date_only": false, "value": "2026-10-20T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-293-04", "record": "CVE-2026-9853", "field": "creation_timestamp", "uuid": "1c88b8a3-123d-4915-bd5a-5d51d3671f70", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-293-04"}, {"timestamp": "2026-10-20T06:00:00Z", "date_only": false, "value": "2026-10-20T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-293-04", "record": "ICSA-26-293-04", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-20T06:00:00Z", "date_only": false, "value": "2026-10-20T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-293-04", "record": "ICSA-26-293-04", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-28T11:37:27Z", "date_only": false, "value": "2026-10-28T11:37:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/1495", "record": "CVE-2026-9853", "field": "creation_timestamp", "uuid": "1a38715a-1a1f-4b7a-b864-1e40f1f4a1c9", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u062f\u0631 Hitachi Energy Microscada X SYS600 Hitachi Energy Microscada X SYS600 \u06cc\u06a9 \u0633\u06cc\u0633\u062a\u0645 SCADA \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0648 \u0645\u062f\u06cc\u0631\u06cc\u062a \u067e\u0633\u062a\u200c\u0647\u0627\u06cc \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9\u06cc \u0648 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062a\u0648\u0632\u06cc\u0639 \u0627\u0633\u062a. \u0645\u062c\u0645\u0648\u0639\u0647 \u0627\u06cc \u0627\u0632 \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u062a\u06a9\u0646\u0648\u0644\u0648\u0698\u06cc\u06a9\u06cc\u060c \u06a9\u0646\u062a\u0631\u0644 \u0627\u0639\u0632\u0627\u0645 \u0648 \u062a\u0639\u0627\u0645\u0644 \u0628\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0631\u0627 \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc \u062f\u0647\u062f. CVE-2026-9852\u060c CVSS 4.6\u060c CWE-1236 CSV Injection \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0635\u0627\u062f\u0631\u0627\u062a \u06af\u0632\u0627\u0631\u0634 \u0631\u0648\u06cc\u062f\u0627\u062f. \u06cc\u06a9 \u0645\u062a\u062e\u0644\u0641 \u06a9\u0647 \u0642\u0627\u062f\u0631 \u0628\u0647 \u0627\u06cc\u062c\u0627\u062f \u0648\u0631\u0648\u062f\u06cc \u0647\u0627\u06cc \u06af\u0632\u0627\u0631\u0634 \u062f\u0644\u062e\u0648\u0627\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627\u06cc SCIL\u060c \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 SYS600 \u06cc\u0627 \u0633\u0627\u06cc\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0628\u0627\u0634\u062f\u060c \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0641\u0631\u0645\u0648\u0644 \u0647\u0627 \u0631\u0627 \u062f\u0631 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 CSV \u062c\u0627\u0633\u0627\u0632\u06cc \u06a9\u0646\u062f. \u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0628\u0627\u0632 \u0645\u06cc \u0634\u0648\u062f\u060c \u0645\u06cc \u062a\u0648\u0627\u0646 \u062f\u0627\u062f\u0647 \u0647\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0631\u0627 \u0645\u0646\u062a\u0642\u0644 \u06a9\u0631\u062f \u0648 \u0628\u0627 \u06cc\u06a9 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062e\u0627\u0635\u060c \u06a9\u062f \u0631\u0627 \u062f\u0631 \u0631\u0627\u06cc\u0627\u0646\u0647 \u0622\u0646 \u0627\u062c\u0631\u0627 \u06a9\u0631\u062f. \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 10.0-10.7. CVE-2026-9853, CVSS 8.5, CWE-303 \u067e\u06cc\u0627\u062f\u0647 \u0633\u0627\u0632\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u062d\u0633\u0627\u0628 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0633\u0631\u0648\u0631 \u0645\u062d\u0644\u06cc \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0627\u0634\u06cc\u0627\u0621 \u0628\u0631\u0646\u0627\u0645\u0647 \u0631\u0627 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062c\u062f\u0627\u06af\u0627\u0646\u0647 \u062f\u0631 SYS600 \u0628\u062e\u0648\u0627\u0646\u062f \u0648 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f. \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u06a9\u0645 \u0628\u0647 \u0627\u0646\u062f\u0627\u0632\u0647 \u06a9\u0627\u0641\u06cc \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644. \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 10.0-10.8. CVE-2026-9854, CVSS 8.5, CWE-303 \u0645\u0639\u0627\u06cc\u0628 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u062a\u062d\u062f\u06cc\u062f \u062f\u0633\u062a\u0631\u0633\u06cc RBAC \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0645\u0647\u0646\u062f\u0633\u06cc SYS600 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0647\u062f. \u0639\u0645\u0644\u06cc\u0627\u062a \u0645\u062d\u0644\u06cc \u0627\u0633\u062a \u0648 \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u062a\u0639\u0627\u0645\u0644 \u06a9\u0627\u0631\u0628\u0631 \u062f\u06cc\u06af\u0631\u06cc \u0646\u062f\u0627\u0631\u062f. \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 10.0-10.7. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc CVE-2026-9852 \u0648 CVE-2026-9854 \u062b\u0627\u0628\u062a \u062f\u0631 \u0646\u0633\u062e\u0647 10.8. \u0628\u0631\u0627\u06cc CVE-2026-9853\u060c \u0646\u0633\u062e\u0647 10.8 \u0646\u06cc\u0632 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u062f \u0648 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0628\u06cc\u0634\u062a\u0631\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u0632 \u0628\u06cc\u0646 \u0628\u0631\u062f\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc \u062f\u0647\u062f. The Original Advisory Hitachi Energy \u062f\u0631 1 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 2026 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f. CISA \u0622\u0646 \u0631\u0627 \u062f\u0631 20 \u0627\u06a9\u062a\u0628\u0631 2026 \u0645\u062c\u062f\u062f\u0627\u064b \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f. \u0645\u0646\u0628\u0639: Hitachi Energy, 8dbd000249 https://publisher.hitachienergy.com/preview?documentid=8dbd000249&languagecode=en&documentpartid=&action=launch \u0645\u0646\u0628\u0639: CISA, ICSA-26-293-04 https://www.cisa.gov/news-events/ics-advisories/ICSA-26-293-04\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "url": "https://t.me/ics_cert/1495", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-02T11:09:54.170Z", "anchors": {"origin": {"timestamp": "2026-09-01T00:00:00Z", "date_only": false, "value": "2026-09-01T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-293-04", "record": "ICSA-26-293-04", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-01T00:00:00Z", "date_only": false, "value": "2026-09-01T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-293-04", "record": "ICSA-26-293-04", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-10-28T11:37:27Z", "date_only": false, "value": "2026-10-28T11:37:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/1495", "record": "CVE-2026-9853", "field": "creation_timestamp", "uuid": "1a38715a-1a1f-4b7a-b864-1e40f1f4a1c9", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u062f\u0631 Hitachi Energy Microscada X SYS600 Hitachi Energy Microscada X SYS600 \u06cc\u06a9 \u0633\u06cc\u0633\u062a\u0645 SCADA \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0648 \u0645\u062f\u06cc\u0631\u06cc\u062a \u067e\u0633\u062a\u200c\u0647\u0627\u06cc \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9\u06cc \u0648 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062a\u0648\u0632\u06cc\u0639 \u0627\u0633\u062a. \u0645\u062c\u0645\u0648\u0639\u0647 \u0627\u06cc \u0627\u0632 \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u062a\u06a9\u0646\u0648\u0644\u0648\u0698\u06cc\u06a9\u06cc\u060c \u06a9\u0646\u062a\u0631\u0644 \u0627\u0639\u0632\u0627\u0645 \u0648 \u062a\u0639\u0627\u0645\u0644 \u0628\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0631\u0627 \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc \u062f\u0647\u062f. CVE-2026-9852\u060c CVSS 4.6\u060c CWE-1236 CSV Injection \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0635\u0627\u062f\u0631\u0627\u062a \u06af\u0632\u0627\u0631\u0634 \u0631\u0648\u06cc\u062f\u0627\u062f. \u06cc\u06a9 \u0645\u062a\u062e\u0644\u0641 \u06a9\u0647 \u0642\u0627\u062f\u0631 \u0628\u0647 \u0627\u06cc\u062c\u0627\u062f \u0648\u0631\u0648\u062f\u06cc \u0647\u0627\u06cc \u06af\u0632\u0627\u0631\u0634 \u062f\u0644\u062e\u0648\u0627\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627\u06cc SCIL\u060c \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 SYS600 \u06cc\u0627 \u0633\u0627\u06cc\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0628\u0627\u0634\u062f\u060c \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0641\u0631\u0645\u0648\u0644 \u0647\u0627 \u0631\u0627 \u062f\u0631 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 CSV \u062c\u0627\u0633\u0627\u0632\u06cc \u06a9\u0646\u062f. \u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0628\u0627\u0632 \u0645\u06cc \u0634\u0648\u062f\u060c \u0645\u06cc \u062a\u0648\u0627\u0646 \u062f\u0627\u062f\u0647 \u0647\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0631\u0627 \u0645\u0646\u062a\u0642\u0644 \u06a9\u0631\u062f \u0648 \u0628\u0627 \u06cc\u06a9 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062e\u0627\u0635\u060c \u06a9\u062f \u0631\u0627 \u062f\u0631 \u0631\u0627\u06cc\u0627\u0646\u0647 \u0622\u0646 \u0627\u062c\u0631\u0627 \u06a9\u0631\u062f. \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 10.0-10.7. CVE-2026-9853, CVSS 8.5, CWE-303 \u067e\u06cc\u0627\u062f\u0647 \u0633\u0627\u0632\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u062d\u0633\u0627\u0628 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0633\u0631\u0648\u0631 \u0645\u062d\u0644\u06cc \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0627\u0634\u06cc\u0627\u0621 \u0628\u0631\u0646\u0627\u0645\u0647 \u0631\u0627 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062c\u062f\u0627\u06af\u0627\u0646\u0647 \u062f\u0631 SYS600 \u0628\u062e\u0648\u0627\u0646\u062f \u0648 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f. \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u06a9\u0645 \u0628\u0647 \u0627\u0646\u062f\u0627\u0632\u0647 \u06a9\u0627\u0641\u06cc \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644. \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 10.0-10.8. CVE-2026-9854, CVSS 8.5, CWE-303 \u0645\u0639\u0627\u06cc\u0628 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u062a\u062d\u062f\u06cc\u062f \u062f\u0633\u062a\u0631\u0633\u06cc RBAC \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0645\u0647\u0646\u062f\u0633\u06cc SYS600 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0647\u062f. \u0639\u0645\u0644\u06cc\u0627\u062a \u0645\u062d\u0644\u06cc \u0627\u0633\u062a \u0648 \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u062a\u0639\u0627\u0645\u0644 \u06a9\u0627\u0631\u0628\u0631 \u062f\u06cc\u06af\u0631\u06cc \u0646\u062f\u0627\u0631\u062f. \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 10.0-10.7. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc CVE-2026-9852 \u0648 CVE-2026-9854 \u062b\u0627\u0628\u062a \u062f\u0631 \u0646\u0633\u062e\u0647 10.8. \u0628\u0631\u0627\u06cc CVE-2026-9853\u060c \u0646\u0633\u062e\u0647 10.8 \u0646\u06cc\u0632 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u062f \u0648 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0628\u06cc\u0634\u062a\u0631\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u0632 \u0628\u06cc\u0646 \u0628\u0631\u062f\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc \u062f\u0647\u062f. The Original Advisory Hitachi Energy \u062f\u0631 1 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 2026 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f. CISA \u0622\u0646 \u0631\u0627 \u062f\u0631 20 \u0627\u06a9\u062a\u0628\u0631 2026 \u0645\u062c\u062f\u062f\u0627\u064b \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f. \u0645\u0646\u0628\u0639: Hitachi Energy, 8dbd000249 https://publisher.hitachienergy.com/preview?documentid=8dbd000249&languagecode=en&documentpartid=&action=launch \u0645\u0646\u0628\u0639: CISA, ICSA-26-293-04 https://www.cisa.gov/news-events/ics-advisories/ICSA-26-293-04\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "url": "https://t.me/ics_cert/1495", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 4966647.0, "hours": 1379.6241666666667, "days": 57.484340277777775, "min_seconds": 4880247.0, "max_seconds": 4966647.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-01T00:00:00Z", "date_only": false, "value": "2026-09-01T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-293-04", "record": "ICSA-26-293-04", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T11:37:27Z", "date_only": false, "value": "2026-10-28T11:37:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/1495", "record": "CVE-2026-9853", "field": "creation_timestamp", "uuid": "1a38715a-1a1f-4b7a-b864-1e40f1f4a1c9", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u062f\u0631 Hitachi Energy Microscada X SYS600 Hitachi Energy Microscada X SYS600 \u06cc\u06a9 \u0633\u06cc\u0633\u062a\u0645 SCADA \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0648 \u0645\u062f\u06cc\u0631\u06cc\u062a \u067e\u0633\u062a\u200c\u0647\u0627\u06cc \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9\u06cc \u0648 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062a\u0648\u0632\u06cc\u0639 \u0627\u0633\u062a. \u0645\u062c\u0645\u0648\u0639\u0647 \u0627\u06cc \u0627\u0632 \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u062a\u06a9\u0646\u0648\u0644\u0648\u0698\u06cc\u06a9\u06cc\u060c \u06a9\u0646\u062a\u0631\u0644 \u0627\u0639\u0632\u0627\u0645 \u0648 \u062a\u0639\u0627\u0645\u0644 \u0628\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0631\u0627 \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc \u062f\u0647\u062f. CVE-2026-9852\u060c CVSS 4.6\u060c CWE-1236 CSV Injection \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0635\u0627\u062f\u0631\u0627\u062a \u06af\u0632\u0627\u0631\u0634 \u0631\u0648\u06cc\u062f\u0627\u062f. \u06cc\u06a9 \u0645\u062a\u062e\u0644\u0641 \u06a9\u0647 \u0642\u0627\u062f\u0631 \u0628\u0647 \u0627\u06cc\u062c\u0627\u062f \u0648\u0631\u0648\u062f\u06cc \u0647\u0627\u06cc \u06af\u0632\u0627\u0631\u0634 \u062f\u0644\u062e\u0648\u0627\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627\u06cc SCIL\u060c \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 SYS600 \u06cc\u0627 \u0633\u0627\u06cc\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0628\u0627\u0634\u062f\u060c \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0641\u0631\u0645\u0648\u0644 \u0647\u0627 \u0631\u0627 \u062f\u0631 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 CSV \u062c\u0627\u0633\u0627\u0632\u06cc \u06a9\u0646\u062f. \u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0628\u0627\u0632 \u0645\u06cc \u0634\u0648\u062f\u060c \u0645\u06cc \u062a\u0648\u0627\u0646 \u062f\u0627\u062f\u0647 \u0647\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0631\u0627 \u0645\u0646\u062a\u0642\u0644 \u06a9\u0631\u062f \u0648 \u0628\u0627 \u06cc\u06a9 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062e\u0627\u0635\u060c \u06a9\u062f \u0631\u0627 \u062f\u0631 \u0631\u0627\u06cc\u0627\u0646\u0647 \u0622\u0646 \u0627\u062c\u0631\u0627 \u06a9\u0631\u062f. \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 10.0-10.7. CVE-2026-9853, CVSS 8.5, CWE-303 \u067e\u06cc\u0627\u062f\u0647 \u0633\u0627\u0632\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u062d\u0633\u0627\u0628 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0633\u0631\u0648\u0631 \u0645\u062d\u0644\u06cc \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0627\u0634\u06cc\u0627\u0621 \u0628\u0631\u0646\u0627\u0645\u0647 \u0631\u0627 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062c\u062f\u0627\u06af\u0627\u0646\u0647 \u062f\u0631 SYS600 \u0628\u062e\u0648\u0627\u0646\u062f \u0648 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f. \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u06a9\u0645 \u0628\u0647 \u0627\u0646\u062f\u0627\u0632\u0647 \u06a9\u0627\u0641\u06cc \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644. \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 10.0-10.8. CVE-2026-9854, CVSS 8.5, CWE-303 \u0645\u0639\u0627\u06cc\u0628 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u062a\u062d\u062f\u06cc\u062f \u062f\u0633\u062a\u0631\u0633\u06cc RBAC \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0645\u0647\u0646\u062f\u0633\u06cc SYS600 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0647\u062f. \u0639\u0645\u0644\u06cc\u0627\u062a \u0645\u062d\u0644\u06cc \u0627\u0633\u062a \u0648 \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u062a\u0639\u0627\u0645\u0644 \u06a9\u0627\u0631\u0628\u0631 \u062f\u06cc\u06af\u0631\u06cc \u0646\u062f\u0627\u0631\u062f. \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 10.0-10.7. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc CVE-2026-9852 \u0648 CVE-2026-9854 \u062b\u0627\u0628\u062a \u062f\u0631 \u0646\u0633\u062e\u0647 10.8. \u0628\u0631\u0627\u06cc CVE-2026-9853\u060c \u0646\u0633\u062e\u0647 10.8 \u0646\u06cc\u0632 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u062f \u0648 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0628\u06cc\u0634\u062a\u0631\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u0632 \u0628\u06cc\u0646 \u0628\u0631\u062f\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc \u062f\u0647\u062f. The Original Advisory Hitachi Energy \u062f\u0631 1 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 2026 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f. CISA \u0622\u0646 \u0631\u0627 \u062f\u0631 20 \u0627\u06a9\u062a\u0628\u0631 2026 \u0645\u062c\u062f\u062f\u0627\u064b \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f. \u0645\u0646\u0628\u0639: Hitachi Energy, 8dbd000249 https://publisher.hitachienergy.com/preview?documentid=8dbd000249&languagecode=en&documentpartid=&action=launch \u0645\u0646\u0628\u0639: CISA, ICSA-26-293-04 https://www.cisa.gov/news-events/ics-advisories/ICSA-26-293-04\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "url": "https://t.me/ics_cert/1495", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 5396994.170893, "hours": 1499.1650474702778, "days": 62.46521031126158, "min_seconds": 5310594.170893, "max_seconds": 5396994.170893, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-01T00:00:00Z", "date_only": false, "value": "2026-09-01T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-293-04", "record": "ICSA-26-293-04", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-02T11:09:54.170Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 430347.170893, "hours": 119.5408808036111, "days": 4.980870033483796, "min_seconds": 430347.170893, "max_seconds": 430347.170893, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-28T11:37:27Z", "date_only": false, "value": "2026-10-28T11:37:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/1495", "record": "CVE-2026-9853", "field": "creation_timestamp", "uuid": "1a38715a-1a1f-4b7a-b864-1e40f1f4a1c9", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u062f\u0631 Hitachi Energy Microscada X SYS600 Hitachi Energy Microscada X SYS600 \u06cc\u06a9 \u0633\u06cc\u0633\u062a\u0645 SCADA \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0648 \u0645\u062f\u06cc\u0631\u06cc\u062a \u067e\u0633\u062a\u200c\u0647\u0627\u06cc \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9\u06cc \u0648 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062a\u0648\u0632\u06cc\u0639 \u0627\u0633\u062a. \u0645\u062c\u0645\u0648\u0639\u0647 \u0627\u06cc \u0627\u0632 \u062f\u0627\u062f\u0647 \u0647\u0627\u06cc \u062a\u06a9\u0646\u0648\u0644\u0648\u0698\u06cc\u06a9\u06cc\u060c \u06a9\u0646\u062a\u0631\u0644 \u0627\u0639\u0632\u0627\u0645 \u0648 \u062a\u0639\u0627\u0645\u0644 \u0628\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0631\u0627 \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc \u062f\u0647\u062f. CVE-2026-9852\u060c CVSS 4.6\u060c CWE-1236 CSV Injection \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0635\u0627\u062f\u0631\u0627\u062a \u06af\u0632\u0627\u0631\u0634 \u0631\u0648\u06cc\u062f\u0627\u062f. \u06cc\u06a9 \u0645\u062a\u062e\u0644\u0641 \u06a9\u0647 \u0642\u0627\u062f\u0631 \u0628\u0647 \u0627\u06cc\u062c\u0627\u062f \u0648\u0631\u0648\u062f\u06cc \u0647\u0627\u06cc \u06af\u0632\u0627\u0631\u0634 \u062f\u0644\u062e\u0648\u0627\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0647\u0627\u06cc SCIL\u060c \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 SYS600 \u06cc\u0627 \u0633\u0627\u06cc\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627 \u0628\u0627\u0634\u062f\u060c \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0641\u0631\u0645\u0648\u0644 \u0647\u0627 \u0631\u0627 \u062f\u0631 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 CSV \u062c\u0627\u0633\u0627\u0632\u06cc \u06a9\u0646\u062f. \u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0628\u0627\u0632 \u0645\u06cc \u0634\u0648\u062f\u060c \u0645\u06cc \u062a\u0648\u0627\u0646 \u062f\u0627\u062f\u0647 \u0647\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0631\u0627 \u0645\u0646\u062a\u0642\u0644 \u06a9\u0631\u062f \u0648 \u0628\u0627 \u06cc\u06a9 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062e\u0627\u0635\u060c \u06a9\u062f \u0631\u0627 \u062f\u0631 \u0631\u0627\u06cc\u0627\u0646\u0647 \u0622\u0646 \u0627\u062c\u0631\u0627 \u06a9\u0631\u062f. \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 10.0-10.7. CVE-2026-9853, CVSS 8.5, CWE-303 \u067e\u06cc\u0627\u062f\u0647 \u0633\u0627\u0632\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u062d\u0633\u0627\u0628 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0633\u0631\u0648\u0631 \u0645\u062d\u0644\u06cc \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0627\u0634\u06cc\u0627\u0621 \u0628\u0631\u0646\u0627\u0645\u0647 \u0631\u0627 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062c\u062f\u0627\u06af\u0627\u0646\u0647 \u062f\u0631 SYS600 \u0628\u062e\u0648\u0627\u0646\u062f \u0648 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u062f. \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u06a9\u0645 \u0628\u0647 \u0627\u0646\u062f\u0627\u0632\u0647 \u06a9\u0627\u0641\u06cc \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644. \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 10.0-10.8. CVE-2026-9854, CVSS 8.5, CWE-303 \u0645\u0639\u0627\u06cc\u0628 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u062a\u062d\u062f\u06cc\u062f \u062f\u0633\u062a\u0631\u0633\u06cc RBAC \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0645\u0647\u0646\u062f\u0633\u06cc SYS600 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0647\u062f. \u0639\u0645\u0644\u06cc\u0627\u062a \u0645\u062d\u0644\u06cc \u0627\u0633\u062a \u0648 \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u062a\u0639\u0627\u0645\u0644 \u06a9\u0627\u0631\u0628\u0631 \u062f\u06cc\u06af\u0631\u06cc \u0646\u062f\u0627\u0631\u062f. \u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u062f\u06cc\u062f\u0647 10.0-10.7. \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc CVE-2026-9852 \u0648 CVE-2026-9854 \u062b\u0627\u0628\u062a \u062f\u0631 \u0646\u0633\u062e\u0647 10.8. \u0628\u0631\u0627\u06cc CVE-2026-9853\u060c \u0646\u0633\u062e\u0647 10.8 \u0646\u06cc\u0632 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u062f \u0648 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0628\u06cc\u0634\u062a\u0631\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u0632 \u0628\u06cc\u0646 \u0628\u0631\u062f\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc \u062f\u0647\u062f. The Original Advisory Hitachi Energy \u062f\u0631 1 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 2026 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f. CISA \u0622\u0646 \u0631\u0627 \u062f\u0631 20 \u0627\u06a9\u062a\u0628\u0631 2026 \u0645\u062c\u062f\u062f\u0627\u064b \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f. \u0645\u0646\u0628\u0639: Hitachi Energy, 8dbd000249 https://publisher.hitachienergy.com/preview?documentid=8dbd000249&languagecode=en&documentpartid=&action=launch \u0645\u0646\u0628\u0639: CISA, ICSA-26-293-04 https://www.cisa.gov/news-events/ics-advisories/ICSA-26-293-04\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "url": "https://t.me/ics_cert/1495", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-02T11:09:54.170Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}