GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Community

Sightings

Recent sightings
Author Source Vulnerability Type Date Other
automation Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YO_LawI6LgE5lPyRWI CVE-2025-66516 published-proof-of-concept 2026-09-15 00:00:30
cedric https://github.com/CollaboraOnline/richdocumentscode/issues/354 CVE-2025-66208 seen 2026-09-14 09:20:41
automation Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YO_LawI6LgE5lPyRWI CVE-2025-66516 seen 2026-09-14 03:00:06
automation https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/freepbx_firmware_file_upload.rb CVE-2025-66039 seen 2026-09-08 06:50:36
automation https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/freepbx_custom_extension_rce.rb CVE-2025-66039 seen 2026-09-08 06:50:36
automation https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/react2shell_unauth_rce_cve_2025_55182.rb CVE-2025-66478 seen 2026-09-08 06:50:11
automation https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/grav_twig_ssti_sandbox_bypass_rce.rb CVE-2025-66301 seen 2026-09-08 06:49:49
automation https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/grav_twig_ssti_sandbox_bypass_rce.rb CVE-2025-66294 seen 2026-09-08 06:49:49
automation https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/freepbx_custom_extension_injection.rb CVE-2025-66039 seen 2026-09-08 06:47:14
automation https://t.me/SecLabNews/17979 CVE-2025-66376 seen 2026-09-03 00:00:41
displaying 1 - 10 sightings in total 1628

If a line is highlighted in yellow, it indicates that the vulnerability advisory has not yet been published.

Sightings Sources.