{"uuid": "2ad3b8a7-18f1-4e2e-963f-a3636bafa062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-12569", "type": "exploited", "source": "https://t.me/thehackernews/9836", "content": "\u26a0\ufe0f Clop-linked Windchill web shell decrypts credentials and maps engineering data.\n\nDeployed after CVE-2026-12569 exploitation, the custom implant can extract LDAP and admin credentials and load Java payloads in memory.\n\nSee what the implant can do: https://thehackernews.com/2026/08/clop-linked-windchill-web-shell.html", "creation_timestamp": "2026-08-24T00:00:04.896745Z"}