{"metadata": {"vulnerability": "cve-2026-48313", "count": 67, "kinds": {"milestone": 8, "sighting": 26, "kev": 11, "other": 22}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0217", "record": "NCSC-2026-0217", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-21T15:28:38.136Z", "date_only": false, "value": "2026-05-21T15:28:38.136Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-48313", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-30T00:00:00Z", "date_only": true, "value": "2026-06-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0821", "record": "CERTFR-2026-AVI-0821", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-30T15:12:00.200Z", "date_only": false, "value": "2026-06-30T15:12:00.200Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-48313", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-30T16:07:05.541Z", "date_only": false, "value": "2026-06-30T16:07:05.541392Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-48313", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-30T16:07:05.541Z", "date_only": false, "value": "2026-06-30T16:07:05.541392Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48313", "record": "FKIE_CVE-2026-48313", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-30T16:08:32.189Z", "date_only": false, "value": "2026-06-30T16:08:32.189Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-48313", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-30T16:16:55Z", "date_only": false, "value": "2026-06-30T16:16:55Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-68PC-WH27-VGM6", "record": "GHSA-68PC-WH27-VGM6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-30T16:16:55.093Z", "date_only": false, "value": "2026-06-30T16:16:55.093", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48313", "record": "FKIE_CVE-2026-48313", "field": "published"}, {"timestamp": "2026-06-30T17:00:00Z", "date_only": false, "value": "2026-06-30T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "cve-2026-48313", "field": "containers.cna.datePublic"}, {"timestamp": "2026-06-30T18:31:37Z", "date_only": false, "value": "2026-06-30T18:31:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-68PC-WH27-VGM6", "record": "GHSA-68PC-WH27-VGM6", "field": "published"}, {"timestamp": "2026-06-30T18:31:38Z", "date_only": false, "value": "2026-06-30T18:31:38Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-68PC-WH27-VGM6", "record": "GHSA-68PC-WH27-VGM6", "field": "modified"}, {"timestamp": "2026-06-30T22:00:00Z", "date_only": false, "value": "2026-06-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-30T22:00:00Z", "date_only": false, "value": "2026-06-30T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-30T22:00:00Z", "date_only": false, "value": "2026-06-30T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-07-01T00:00:00Z", "date_only": false, "value": "2026-07-01T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0821", "record": "CERTFR-2026-AVI-0821", "field": "last_revision_date"}, {"timestamp": "2026-07-01T00:00:00Z", "date_only": false, "value": "2026-07-01T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0821", "record": "CERTFR-2026-AVI-0821", "field": "initial_release_date"}, {"timestamp": "2026-07-01T00:00:00Z", "date_only": false, "value": "2026-07-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0821", "record": "CERTFR-2026-AVI-0821", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-01T08:52:48.391Z", "date_only": false, "value": "2026-07-01T08:52:48.391910Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0217", "record": "NCSC-2026-0217", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-01T08:52:48.391Z", "date_only": false, "value": "2026-07-01T08:52:48.391910Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0217", "record": "NCSC-2026-0217", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-01T08:52:48.391Z", "date_only": false, "value": "2026-07-01T08:52:48.391910Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0217", "record": "NCSC-2026-0217", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-01T09:45:16.870Z", "date_only": false, "value": "2026-07-01T09:45:16.870029Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "c17d99a8-e23e-4911-9ed7-9e08f0a2b56e", "url": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse"}, {"timestamp": "2026-07-01T13:00:13.327Z", "date_only": false, "value": "2026-07-01T13:00:13.327521Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "eb5ea2d2-943a-474b-a470-33cc2a51374d", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q"}, {"timestamp": "2026-07-02T20:06:10.741Z", "date_only": false, "value": "2026-07-02T20:06:10.741935Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mpotfgidrq26", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "c70356b4-0967-4425-bfeb-c2b564382dae", "content": "~Watchtowr~\nAdobe ColdFusion APSB26-68 patches 11 CVEs including multiple RCE and arbitrary file read/write via RDS and CKEditor path traversal.\n-\nIOCs: CVE-2026-48282, CVE-2026-48276, CVE-2026-48313\n-\n#CVE #ColdFusion #RCE #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mpotfgidrq26"}, {"timestamp": "2026-07-02T22:00:00Z", "date_only": false, "value": "2026-07-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-07-03T04:01:03.897Z", "date_only": false, "value": "2026-07-03T04:01:03.897917Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/its-37oc-and-all-we-can-think-about-is-coldfusion-adobe-coldfusion-security-bulletin-apsb26-68-cve-bonanza", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "f3c02861-2e04-4412-b14c-5a1a62127158", "url": "https://labs.watchtowr.com/its-37oc-and-all-we-can-think-about-is-coldfusion-adobe-coldfusion-security-bulletin-apsb26-68-cve-bonanza"}, {"timestamp": "2026-07-06T00:00:00Z", "date_only": true, "value": "2026-07-06", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-26845", "record": "CNVD-2026-26845", "field": "submitTime"}, {"timestamp": "2026-07-06T22:00:00Z", "date_only": false, "value": "2026-07-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-07-06T22:00:00Z", "date_only": false, "value": "2026-07-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-07T07:51:42.896Z", "date_only": false, "value": "2026-07-07T07:51:42.896+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-08T08:45:21.311Z", "date_only": false, "value": "2026-07-08T08:45:21.311582Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "eb79a2a6-1875-4905-8917-2d5bcccb5159", "url": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17"}, {"timestamp": "2026-07-09T00:00:00Z", "date_only": true, "value": "2026-07-09", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-26845", "record": "CNVD-2026-26845", "field": "openTime"}, {"timestamp": "2026-07-29T07:09:02.164Z", "date_only": false, "value": "2026-07-29T07:09:02.164684Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mrreknn7qm22", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "18b31824-76a1-448e-bc79-05622a37d8a9", "content": "[RSS] ColdFusion Under Fire: Breaking Down CVE-2026-48283 and CVE-2026-48313\n\n\n horizon3.ai -> \n\n\nOriginal->", "url": "https://bsky.app/profile/buherator.bsky.social/post/3mrreknn7qm22"}, {"timestamp": "2026-08-03T04:12:13Z", "date_only": false, "value": "2026-08-03T04:12:13+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2026-48313", "field": "timestamps.asserted_at", "uuid": "3f091595-d12a-4563-a4b7-3265b21c20fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-03T04:12:13Z", "date_only": false, "value": "2026-08-03T04:12:13+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-48313", "field": "timestamps.first_seen_at", "uuid": "3f091595-d12a-4563-a4b7-3265b21c20fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-04T10:48:59Z", "date_only": false, "value": "2026-08-04T10:48:59+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-48313", "field": "timestamps.asserted_at", "uuid": "965243f3-0595-449c-b576-93d84bd2262e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-04T10:48:59Z", "date_only": false, "value": "2026-08-04T10:48:59+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-48313", "field": "timestamps.first_seen_at", "uuid": "965243f3-0595-449c-b576-93d84bd2262e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-04T10:48:59Z", "date_only": false, "value": "2026-08-04T10:48:59+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-48313", "field": "status.status_updated_at", "uuid": "965243f3-0595-449c-b576-93d84bd2262e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-04T10:48:59.031Z", "date_only": false, "value": "2026-08-04T10:48:59.031Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-48313", "field": "evidence.0.details.added_date", "uuid": "965243f3-0595-449c-b576-93d84bd2262e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-04T11:00:01Z", "date_only": false, "value": "2026-08-04T11:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-48313", "field": "timestamps.recorded_at", "uuid": "965243f3-0595-449c-b576-93d84bd2262e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-04T11:00:26.496Z", "date_only": false, "value": "2026-08-04T11:00:26.496406Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/965243f3-0595-449c-b576-93d84bd2262e", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "fbee51e6-b04b-42f8-b032-aeed69d7fc80", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/965243f3-0595-449c-b576-93d84bd2262e"}, {"timestamp": "2026-08-05T01:00:36.777Z", "date_only": false, "value": "2026-08-05T01:00:36.777495Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3f091595-d12a-4563-a4b7-3265b21c20fc", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "0a19880c-faef-493d-b6fe-bbd87a8dcf70", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3f091595-d12a-4563-a4b7-3265b21c20fc"}, {"timestamp": "2026-08-27T22:32:59.580Z", "date_only": false, "value": "2026-08-27T22:32:59.580Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-48313", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-27T22:32:59.580Z", "date_only": false, "value": "2026-08-27T22:32:59.580Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / adobe", "record": "cve-2026-48313", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-28T00:17:47.090Z", "date_only": false, "value": "2026-08-28T00:17:47.090", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48313", "record": "FKIE_CVE-2026-48313", "field": "lastModified"}, {"timestamp": "2026-09-05T18:00:06.731Z", "date_only": false, "value": "2026-09-05T18:00:06.731478Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/haccking/13015", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "1873677c-b39a-4fcd-8e2b-09a06e465287", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Adobe ColdFusion (APSB26-68): \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c \u0438 RCE \u0447\u0435\u0440\u0435\u0437 RDS \u0438 CKEditor\n\n#cve #Adobe #RCE #RDS\n\n30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 Adobe \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 11 CVE \u0432 ColdFusion 2025 (Update 9 \u0438 \u043d\u0438\u0436\u0435) \u0438 2023 (Update 20 \u0438 \u043d\u0438\u0436\u0435). \u042d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u0430\u043b\u043e\u0432 \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 RDS \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 CKEditor.\n\nRDS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 HTTP. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e RDS \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d, \u043d\u043e \u0435\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0435\u0433\u043e \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /CFIDE/main/ide.cfm \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c ACTION=FILEIO \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u2014 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u0443\u0442\u0435\u0439 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\u0412 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043c\u0435\u0442\u043e\u0434 FileReadOperator() \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u043b \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432 getFile() \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0438 (CVE-2026-48313). \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 C:\\Windows\\win.ini. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f WRITE (CVE-2026-48282) \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0430 \u043f\u0443\u0442\u044c, \u0434\u0430\u0432\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u0432 wwwroot \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 HTTP \u0437\u0430\u043f\u0440\u043e\u0441\u044b (RCE).\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 CKEditor: \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. \u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 endpoint \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 multipart-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c path, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043e\u0431\u0445\u043e\u0434 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b \u0432 \u043b\u044e\u0431\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u043e \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438. \u042d\u0442\u043e\u0442 \u0436\u0435 \u043f\u0430\u0442\u0447 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043b\u0438\u0441\u0442\u0438\u043d\u0433 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 filemanager.cfc?method=getfmfiles.\n\n\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 XSLT-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, SSRF \u0438 XXE, \u043d\u043e \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u043c .cfm-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u043c \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0432\u0432\u043e\u0434\u043e\u043c, \u0447\u0442\u043e \u043c\u0435\u043d\u0435\u0435 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e.\n\n\u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0441 RDS \u2014 watchTowr \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u043e \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c, \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u043d\u043e Adobe \u00ab\u0437\u0430\u0431\u044b\u043b\u0430\u00bb \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nLH | News | OSINT | AI", "url": "https://t.me/haccking/13015"}, {"timestamp": "2026-09-06T00:00:38.685Z", "date_only": false, "value": "2026-09-06T00:00:38.685934Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/haccking/13015", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "f9aad6fe-f1e8-484e-b96a-89362e15f6e1", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Adobe ColdFusion (APSB26-68): \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c \u0438 RCE \u0447\u0435\u0440\u0435\u0437 RDS \u0438 CKEditor\n\n#cve #Adobe #RCE #RDS\n\n30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 Adobe \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 11 CVE \u0432 ColdFusion 2025 (Update 9 \u0438 \u043d\u0438\u0436\u0435) \u0438 2023 (Update 20 \u0438 \u043d\u0438\u0436\u0435). \u042d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u0430\u043b\u043e\u0432 \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 RDS \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 CKEditor.\n\nRDS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 HTTP. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e RDS \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d, \u043d\u043e \u0435\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0435\u0433\u043e \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /CFIDE/main/ide.cfm \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c ACTION=FILEIO \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u2014 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u0443\u0442\u0435\u0439 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\u0412 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043c\u0435\u0442\u043e\u0434 FileReadOperator() \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u043b \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432 getFile() \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0438 (CVE-2026-48313). \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 C:\\Windows\\win.ini. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f WRITE (CVE-2026-48282) \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0430 \u043f\u0443\u0442\u044c, \u0434\u0430\u0432\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u0432 wwwroot \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 HTTP \u0437\u0430\u043f\u0440\u043e\u0441\u044b (RCE).\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 CKEditor: \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. \u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 endpoint \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 multipart-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c path, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043e\u0431\u0445\u043e\u0434 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b \u0432 \u043b\u044e\u0431\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u043e \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438. \u042d\u0442\u043e\u0442 \u0436\u0435 \u043f\u0430\u0442\u0447 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043b\u0438\u0441\u0442\u0438\u043d\u0433 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 filemanager.cfc?method=getfmfiles.\n\n\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 XSLT-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, SSRF \u0438 XXE, \u043d\u043e \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u043c .cfm-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u043c \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0432\u0432\u043e\u0434\u043e\u043c, \u0447\u0442\u043e \u043c\u0435\u043d\u0435\u0435 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e.\n\n\u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0441 RDS \u2014 watchTowr \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u043e \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c, \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u043d\u043e Adobe \u00ab\u0437\u0430\u0431\u044b\u043b\u0430\u00bb \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nLH | News | OSINT | AI", "url": "https://t.me/haccking/13015"}, {"timestamp": "2026-09-12T12:00:05.037Z", "date_only": false, "value": "2026-09-12T12:00:05.037079Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4ITBQs_VeuIKJI_vGsXuapej81LyBL_CkqFO9ehPCpzQhW8", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "62181aa5-ef9a-4ffb-815d-6a0892b8af0f"}, {"timestamp": "2026-09-12T18:00:05.855Z", "date_only": false, "value": "2026-09-12T18:00:05.855538Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/xijd_pXali92ICckY7Pfz_ZfF34tolJFnspmAF2EnViaG8Y", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "941c5519-3650-4a7b-8266-cafeb97691fc"}, {"timestamp": "2026-09-12T22:00:06.008Z", "date_only": false, "value": "2026-09-12T22:00:06.008535Z", "kind": "sighting", "label": "Seen", "source": "Telegram/WA1am3wVED1ihI_ltluQoBPVeOrk0DZDBz6Puwasnq4ACY8", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "f32e95f6-5d63-46de-88da-20ee7e9bb4f5"}, {"timestamp": "2026-09-13T00:00:06.707Z", "date_only": false, "value": "2026-09-13T00:00:06.707893Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/WA1am3wVED1ihI_ltluQoBPVeOrk0DZDBz6Puwasnq4ACY8", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "5be92679-cef1-4530-ba38-08e7be62a357"}, {"timestamp": "2026-09-13T05:00:04.049Z", "date_only": false, "value": "2026-09-13T05:00:04.049700Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mrTZfT-xgev30sNQrG5wfoUDAhdRfewFglwj142qioDHDd8", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "08b72453-f289-4862-a36e-055d1ef7514c"}, {"timestamp": "2026-09-13T22:00:08.575Z", "date_only": false, "value": "2026-09-13T22:00:08.575172Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/MV-6lEfTAEIhei4hXYwO8dT-IrhtJUZgAa0y0F-BLXlRdpY", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "1e772d39-9979-44d3-b391-f3f51f0a5cba"}, {"timestamp": "2026-09-14T00:00:31.193Z", "date_only": false, "value": "2026-09-14T00:00:31.193114Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mrTZfT-xgev30sNQrG5wfoUDAhdRfewFglwj142qioDHDd8", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "8e20624f-23c5-4ef2-ba9e-8f1eae72a52e"}, {"timestamp": "2026-09-14T04:00:04.456Z", "date_only": false, "value": "2026-09-14T04:00:04.456245Z", "kind": "sighting", "label": "Seen", "source": "Telegram/QPnhAkcSv65O9z5khy-2YhN2_-wH59LYz7G9vcOVyzjPCUs", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "09109c31-0e87-44d9-b2ff-96f4eba73ab0"}, {"timestamp": "2026-09-14T15:00:04.472Z", "date_only": false, "value": "2026-09-14T15:00:04.472727Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ogktPEPaYzH7h4_etJAszEPQ2lOhy0CQ5rMUy6B8ErhzKPE", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "27911a6c-ec3e-4c5b-bfdb-07e69fc413ad"}, {"timestamp": "2026-09-15T00:00:30.255Z", "date_only": false, "value": "2026-09-15T00:00:30.255105Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QPnhAkcSv65O9z5khy-2YhN2_-wH59LYz7G9vcOVyzjPCUs", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "d91b5f08-09e5-4ef3-a7e3-cc71ac91e7aa"}, {"timestamp": "2026-09-15T14:00:06.137Z", "date_only": false, "value": "2026-09-15T14:00:06.137886Z", "kind": "sighting", "label": "Seen", "source": "Telegram/voXjSXn9jH4Uuz8v6oWgQ6wY3LHxoNXW8ZACcBHLR0PcWkA", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "0a2bda13-66e5-4a8c-a7ef-c414c750e8b5"}, {"timestamp": "2026-09-15T20:00:04.949Z", "date_only": false, "value": "2026-09-15T20:00:04.949618Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_TFxB3pDnXrZuvduo2zkQLN-Ru_utGkCFI6p0IlRWz_Xk3s", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "e9ff0275-eb70-4f69-8e68-1e5b86f412d2"}, {"timestamp": "2026-09-15T23:00:05.610Z", "date_only": false, "value": "2026-09-15T23:00:05.610767Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cHChk-32VMe1rqwRa6GJfVvCPJWnYrhIFRNxIOW8bZ4FvwU", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "e6e7529e-03b8-4c3e-8e11-f76533c27291"}, {"timestamp": "2026-09-16T00:00:08.488Z", "date_only": false, "value": "2026-09-16T00:00:08.488111Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cHChk-32VMe1rqwRa6GJfVvCPJWnYrhIFRNxIOW8bZ4FvwU", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "81e4db2b-d27a-481b-8998-2460e4f8e0d8"}, {"timestamp": "2026-09-16T00:00:11.436Z", "date_only": false, "value": "2026-09-16T00:00:11.436140Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_TFxB3pDnXrZuvduo2zkQLN-Ru_utGkCFI6p0IlRWz_Xk3s", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "162ab342-373b-404e-bae1-9ba4651cb72c"}, {"timestamp": "2026-09-16T00:00:30.540Z", "date_only": false, "value": "2026-09-16T00:00:30.540660Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/voXjSXn9jH4Uuz8v6oWgQ6wY3LHxoNXW8ZACcBHLR0PcWkA", "record": "CVE-2026-48313", "field": "creation_timestamp", "uuid": "3fdb6b88-7936-423e-b99e-6ed4b0cd0598"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2026-48313", "field": "timestamps.last_seen_at", "uuid": "3f091595-d12a-4563-a4b7-3265b21c20fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": true, "value": "2026-10-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2026-48313", "field": "evidence.0.details.observation_date", "uuid": "3f091595-d12a-4563-a4b7-3265b21c20fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2026-48313", "field": "status.status_updated_at", "uuid": "3f091595-d12a-4563-a4b7-3265b21c20fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-22T01:00:02Z", "date_only": false, "value": "2026-10-22T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2026-48313", "field": "timestamps.recorded_at", "uuid": "3f091595-d12a-4563-a4b7-3265b21c20fc", "status": {"status_reason": "confirmed", "exploited": true}}]}