{"uuid": "0b252484-d757-4923-a607-1184403f97ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "seen", "source": "https://t.me/thehackernews/9836", "content": "\u26a0\ufe0f Clop-linked Windchill web shell decrypts credentials and maps engineering data.\n\nDeployed after CVE-2026-12569 exploitation, the custom implant can extract LDAP and admin credentials and load Java payloads in memory.\n\nSee what the implant can do: https://thehackernews.com/2026/08/clop-linked-windchill-web-shell.html", "creation_timestamp": "2026-08-23T20:00:06.388286Z"}