https://vulnerability.circl.lu/sightings/feed 2026-09-18T13:42:49.496176+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d95d118f-c68a-40f8-b31d-52e4883f9df0/export 2026-09-18T13:42:49.506644+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d95d118f-c68a-40f8-b31d-52e4883f9df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0300", "type": "seen", "source": "https://t.me/VulnerabilityNews/42354", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its\u00a0Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2026-0300\u00a0Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities\u00a0established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the\u00a0BOD 22-01 Fact Sheet\u00a0for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing\u00a0timely\u00a0remediation of\u00a0KEV Catalog vulnerabilities\u00a0as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the\u00a0specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/05/06/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-09-18T05:00:07.944621Z"} 2026-09-18T05:00:07.944621+00:00 https://vulnerability.circl.lu/sighting/9160ac44-765d-4bc8-9202-9a7d11042deb/export 2026-09-18T13:42:49.508461+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9160ac44-765d-4bc8-9202-9a7d11042deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0300", "type": "seen", "source": "https://t.me/VulnerabilityNews/42351", "content": "Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls\n\nCVE-2026-0300 affects the Captive Portal service of PAN-OS software on PA and VM series firewalls.\nThe post Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls appeared first on SecurityWeek.\nhttps://www.securityweek.com/palo-alto-networks-to-patch-zero-day-exploited-to-hack-firewalls/", "creation_timestamp": "2026-09-18T05:00:07.891342Z"} 2026-09-18T05:00:07.891342+00:00 https://vulnerability.circl.lu/sighting/fdf145c4-c937-4206-b2fa-695259f58cee/export 2026-09-18T13:42:49.508584+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fdf145c4-c937-4206-b2fa-695259f58cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0307", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mvm5oeu3pa27", "content": "Paloalto\u306e\u8106\u5f31\u6027\u60c5\u5831 \u300cCVE-2026-0307 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM)\u300d\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u2192 https://security.paloaltonetworks.com/CVE-2026-0307", "creation_timestamp": "2026-09-16T03:03:56.580788Z"} 2026-09-16T03:03:56.580788+00:00 https://vulnerability.circl.lu/sighting/0cfac377-58e1-4605-9a75-f4145f2489c2/export 2026-09-18T13:42:49.508671+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0cfac377-58e1-4605-9a75-f4145f2489c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhahybpxq2j", "content": "3/ FIREWALLS + PATCH: FortiGate CVE-2025-25249 exploited (PivotC2 RAT, 178 devices). PAN-OS CVE-2026-0310 (CVSS 9.2) root RCE. Sept Patch Tuesday: 973 vulns, 2 zero-days. Audit SSO, rotate creds, patch edge. #ThreatIntel", "creation_timestamp": "2026-09-14T04:10:06.280948Z"} 2026-09-14T04:10:06.280948+00:00 https://vulnerability.circl.lu/sighting/2898daea-a6aa-44a4-a92b-ede21fc88f0c/export 2026-09-18T13:42:49.508754+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2898daea-a6aa-44a4-a92b-ede21fc88f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhaflnz2v2l", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:08:46.237478Z"} 2026-09-14T04:08:46.237478+00:00 https://vulnerability.circl.lu/sighting/f3ab3198-8792-4e79-a5d3-54f0bfe2e27d/export 2026-09-18T13:42:49.508834+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f3ab3198-8792-4e79-a5d3-54f0bfe2e27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhacnfvtx2e", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:07:06.975224Z"} 2026-09-14T04:07:06.975224+00:00 https://vulnerability.circl.lu/sighting/a9163203-3870-4624-ba3c-193e00dac434/export 2026-09-18T13:42:49.508913+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a9163203-3870-4624-ba3c-193e00dac434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvhabwj2xn2k", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email BO CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #PotatoSecurity", "creation_timestamp": "2026-09-14T04:06:43.107050Z"} 2026-09-14T04:06:43.107050+00:00 https://vulnerability.circl.lu/sighting/674b4c6b-a0d4-43c8-8843-98f9429826eb/export 2026-09-18T13:42:49.508991+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "674b4c6b-a0d4-43c8-8843-98f9429826eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0310", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhabw3evq2i", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:06:42.489143Z"} 2026-09-14T04:06:42.489143+00:00 https://vulnerability.circl.lu/sighting/60b28f8d-54aa-4856-b254-e124695ae5ee/export 2026-09-18T13:42:49.509066+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "60b28f8d-54aa-4856-b254-e124695ae5ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0300", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/82", "content": "\ud83d\udee1 \u0623\u0628\u0631\u0632 \u0627\u0644\u0623\u062e\u0628\u0627\u0631 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0644\u0647\u0630\u0627 \u0627\u0644\u0623\u0633\u0628\u0648\u0639 .\n\n\ud83d\uddd3 \u062a\u0627\u0631\u064a\u062e \u0627\u0644\u064a\u0648\u0645: 15 \u0645\u0627\u064a\u0648 2026\n\n\u2705 \u0637\u0648\u0631 \u0645\u0647\u0627\u0631\u062a\u0643 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0639\u0628\u0631 \u0627\u0644\u062f\u0648\u0631\u0627\u062a \u0627\u0644\u0627\u062d\u062a\u0631\u0627\u0641\u064a\u0629 \u0639\u0644\u0649 \u0623\u0643\u0627\u062f\u064a\u0645\u064a\u0629 \u0627\u0644\u062f\u0631\u0639 \u0627\u0644\u0623\u062e\u0636\u0631 \ud83d\udc47\ud83c\udffb\nhttps://greenarmor.academy\n\n\n1\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Cisco\u060c \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a SD-WAN:\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0641\u0639\u0644\u064a \u0644\u062b\u063a\u0631\u0629 CVE-2026-20127 \u0628\u062a\u0642\u064a\u064a\u0645 CVSS 10.0 \u0641\u064a Cisco Catalyst SD-WAN Controller\u060c \u0648\u0642\u062f \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062a\u062c\u0627\u0648\u0632 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0625\u062f\u0627\u0631\u064a\u0629.\n\ud83d\udccc https://thehackernews.com/2026/02/cisco-sd-wan-zero-day-cve-2026-20127.html\n\n2\ufe0f\u20e3 \u0645\u0646\u0635\u0629 Ollama\u060c \u062a\u0633\u0631\u064a\u0628 \u0630\u0627\u0643\u0631\u0629 \u0645\u0646 \u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0630\u0643\u0627\u0621 \u0627\u0644\u0627\u0635\u0637\u0646\u0627\u0639\u064a:\n\u062b\u063a\u0631\u0629 CVE-2026-7482 \u0642\u062f \u062a\u0633\u0645\u062d \u0644\u0645\u0647\u0627\u062c\u0645 \u0639\u0646 \u0628\u064f\u0639\u062f \u0648\u0628\u062f\u0648\u0646 \u0645\u0635\u0627\u062f\u0642\u0629 \u0628\u062a\u0633\u0631\u064a\u0628 \u0630\u0627\u0643\u0631\u0629 \u0627\u0644\u0639\u0645\u0644\u064a\u0629 \u0639\u0628\u0631 \u0645\u0644\u0641\u0627\u062a GGUF \u062e\u0628\u064a\u062b\u0629\u060c \u0645\u0639 \u0627\u062d\u062a\u0645\u0627\u0644 \u062a\u0623\u062b\u0631 \u0623\u0643\u062b\u0631 \u0645\u0646 300,000 \u062e\u0627\u062f\u0645 \u0645\u0643\u0634\u0648\u0641. \n\ud83d\udccc https://thehackernews.com/2026/05/ollama-out-of-bounds-read-vulnerability.html\n\n3\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Microsoft\u060c \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0648\u0627\u0633\u0639\u0629:\n\u0645\u0627\u064a\u0643\u0631\u0648\u0633\u0648\u0641\u062a \u0623\u0635\u062f\u0631\u062a \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0644\u0645\u0639\u0627\u0644\u062c\u0629 138 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0645\u0646\u062a\u062c\u0627\u062a\u0647\u0627\u060c \u0645\u0646 \u0628\u064a\u0646\u0647\u0627 \u062b\u063a\u0631\u0627\u062a \u062d\u0631\u062c\u0629 \u0641\u064a Windows DNS \u0648Netlogon \u0648Azure \u0648Dynamics 365 \u0648Hyper-V. \n\ud83d\udccc https://thehackernews.com/2026/05/microsoft-patches-138-vulnerabilities.html\n\n4\ufe0f\u20e3 \u0646\u0638\u0627\u0645 Windows\u060c \u062b\u063a\u0631\u0627\u062a Zero-Day \u062c\u062f\u064a\u062f\u0629:\n\u062a\u0645 \u0646\u0634\u0631 \u062a\u0641\u0627\u0635\u064a\u0644 \u062b\u063a\u0631\u062a\u064a\u0646 \u0644\u0645 \u064a\u062a\u0645 \u0627\u0635\u0644\u0627\u062d\u0647\u0645 \u0628\u0639\u062f \u0641\u064a Windows: YellowKey \u0644\u062a\u062c\u0627\u0648\u0632 BitLocker\u060c \u0648GreenPlasma \u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0639\u0628\u0631 CTFMON. \n\ud83d\udccc https://thehackernews.com/2026/05/windows-zero-days-expose-bitlocker.html\n\n5\ufe0f\u20e3 \u0645\u0646\u0635\u0629 cPanel\u060c \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0627\u0633\u0639 \u0644\u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629:\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0646\u0634\u0637 \u0644\u062b\u063a\u0631\u0629 CVE-2026-41940 \u0641\u064a cPanel \u0648WHM \u0644\u0646\u0634\u0631 Backdoor \u0628\u0627\u0633\u0645 Filemanager\u060c \u0645\u0639 \u0631\u0628\u0637 \u0627\u0644\u062d\u0645\u0644\u0629 \u0628\u062c\u0647\u0629 \u062a\u0647\u062f\u064a\u062f \u062a\u064f\u0639\u0631\u0641 \u0628\u0627\u0633\u0645 Mr_Rot13. \n\ud83d\udccc https://thehackernews.com/2026/05/cpanel-cve-2026-41940-under-active.html\n\n6\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Palo Alto Networks\u060c \u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a PAN-OS:\n\u062b\u063a\u0631\u0629 CVE-2026-0300 \u0641\u064a User-ID Authentication Portal \u062a\u0633\u0645\u062d \u0628\u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u0629 PA-Series \u0648VM-Series\u060c \u0648\u062a\u0645 \u0631\u0635\u062f \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u0639\u0644\u064a\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/palo-alto-pan-os-flaw-under-active.html\n\n7\ufe0f\u20e3 \u062e\u0627\u062f\u0645 Exim\u060c \u062b\u063a\u0631\u0629 Dead.Letter\n\u062b\u063a\u0631\u0629 CVE-2026-45185 \u0641\u064a Exim: \u0639\u0646\u062f \u0627\u0633\u062a\u062e\u062f\u0627\u0645 GnuTLS \u0642\u062f \u062a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0644\u0641 \u0641\u064a \u0627\u0644\u0630\u0627\u0643\u0631\u0629 \u0648\u0631\u0628\u0645\u0627 \u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f\u060c \u0644\u0630\u0644\u0643 \u064a\u064f\u0646\u0635\u062d \u0628\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0641\u0648\u0631\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/new-exim-bdat-vulnerability-exposes.html\n\n8\ufe0f\u20e3 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f\u060c Mini Shai-Hulud:\n\u062d\u0645\u0644\u0629 Supply Chain \u062e\u0628\u064a\u062b\u0629 \u0627\u0633\u062a\u0647\u062f\u0641\u062a \u062d\u0632\u0645 npm \u0648PyPI \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0645\u0634\u0627\u0631\u064a\u0639 \u0645\u062b\u0644 TanStack \u0648Mistral AI \u0648Guardrails AI\u060c \u0645\u0639 \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0639\u062a\u0645\u0627\u062f \u0648GitHub/OIDC tokens. \n\ud83d\udccc https://thehackernews.com/2026/05/mini-shai-hulud-worm-compromises.html\n\n9\ufe0f\u20e3 \u0645\u0646\u0635\u0629 Hugging Face\u060c \u0645\u0633\u062a\u0648\u062f\u0639 OpenAI \u0645\u0632\u064a\u0641:\n\u0645\u0633\u062a\u0648\u062f\u0639 \u062e\u0628\u064a\u062b \u0627\u0646\u062a\u062d\u0644 \u0627\u0633\u0645 OpenAI Privacy Filter \u0648\u0648\u0635\u0644 \u0625\u0644\u0649 \u0627\u0644\u0645\u0631\u0643\u0632 \u0627\u0644\u0623\u0648\u0644 \u0641\u064a \u0627\u0644\u062a\u0631\u0646\u062f\u060c \u0648\u062d\u0642\u0642 \u0646\u062d\u0648 244,000 \u062a\u062d\u0645\u064a\u0644 \u062e\u0644\u0627\u0644 18 \u0633\u0627\u0639\u0629\u060c \u0648\u0643\u0627\u0646 \u064a\u0646\u0634\u0631 Infostealer \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u0629 Windows. \n\ud83d\udccc https://thehackernews.com/2026/05/fake-openai-privacy-filter-repo-hits-1.html\n\n\ud83d\udd1f \u0646\u0638\u0627\u0645 Linux\u060c \u062b\u063a\u0631\u0629 Fragnesia \u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a:\n\u062b\u063a\u0631\u0629 CVE-2026-46300 \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629 \u0628\u0627\u0633\u0645 Fragnesia \u062a\u0633\u0645\u062d \u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0645\u062d\u0644\u064a \u0628\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0625\u0644\u0649 root \u0639\u0628\u0631 \u062e\u0644\u0644 \u0641\u064a Linux Kernel\u060c \u0648\u0647\u064a \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0633\u0644\u0633\u0644\u0629 Dirty Frag. \n\ud83d\udccc https://www.microsoft.com/en-us/security/blog/2026/05/08/active-attack-dirty-frag-linux-vulnerability-expands-post-compromise-risk/\n\n1\ufe0f\u20e31\ufe0f\u20e3 \u062e\u0627\u062f\u0645 NGINX\u060c \u062b\u063a\u0631\u0629 \u0639\u0645\u0631\u0647\u0627 18 \u0633\u0646\u0629:\n\u062b\u063a\u0631\u0629 NGINX Rift CVE-2026-42945 \u0641\u064a ngx_http_rewrite_module \u0642\u062f \u062a\u0633\u0645\u062d \u0628\u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f \u0623\u0648 \u062a\u0639\u0637\u064a\u0644 \u0627\u0644\u062e\u062f\u0645\u0629 \u0639\u0628\u0631 \u0637\u0644\u0628\u0627\u062a HTTP \u0645\u0635\u0645\u0645\u0629 \u062e\u0635\u064a\u0635\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/18-year-old-nginx-rewrite-module-flaw.html", "creation_timestamp": "2026-09-14T00:00:10.809933Z"} 2026-09-14T00:00:10.809933+00:00 https://vulnerability.circl.lu/sighting/b3491cd2-061f-48c8-9040-82a67887f3b4/export 2026-09-18T13:42:49.509192+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b3491cd2-061f-48c8-9040-82a67887f3b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0300", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/82", "content": "\ud83d\udee1 \u0623\u0628\u0631\u0632 \u0627\u0644\u0623\u062e\u0628\u0627\u0631 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0644\u0647\u0630\u0627 \u0627\u0644\u0623\u0633\u0628\u0648\u0639 .\n\n\ud83d\uddd3 \u062a\u0627\u0631\u064a\u062e \u0627\u0644\u064a\u0648\u0645: 15 \u0645\u0627\u064a\u0648 2026\n\n\u2705 \u0637\u0648\u0631 \u0645\u0647\u0627\u0631\u062a\u0643 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0639\u0628\u0631 \u0627\u0644\u062f\u0648\u0631\u0627\u062a \u0627\u0644\u0627\u062d\u062a\u0631\u0627\u0641\u064a\u0629 \u0639\u0644\u0649 \u0623\u0643\u0627\u062f\u064a\u0645\u064a\u0629 \u0627\u0644\u062f\u0631\u0639 \u0627\u0644\u0623\u062e\u0636\u0631 \ud83d\udc47\ud83c\udffb\nhttps://greenarmor.academy\n\n\n1\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Cisco\u060c \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a SD-WAN:\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0641\u0639\u0644\u064a \u0644\u062b\u063a\u0631\u0629 CVE-2026-20127 \u0628\u062a\u0642\u064a\u064a\u0645 CVSS 10.0 \u0641\u064a Cisco Catalyst SD-WAN Controller\u060c \u0648\u0642\u062f \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062a\u062c\u0627\u0648\u0632 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0625\u062f\u0627\u0631\u064a\u0629.\n\ud83d\udccc https://thehackernews.com/2026/02/cisco-sd-wan-zero-day-cve-2026-20127.html\n\n2\ufe0f\u20e3 \u0645\u0646\u0635\u0629 Ollama\u060c \u062a\u0633\u0631\u064a\u0628 \u0630\u0627\u0643\u0631\u0629 \u0645\u0646 \u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0630\u0643\u0627\u0621 \u0627\u0644\u0627\u0635\u0637\u0646\u0627\u0639\u064a:\n\u062b\u063a\u0631\u0629 CVE-2026-7482 \u0642\u062f \u062a\u0633\u0645\u062d \u0644\u0645\u0647\u0627\u062c\u0645 \u0639\u0646 \u0628\u064f\u0639\u062f \u0648\u0628\u062f\u0648\u0646 \u0645\u0635\u0627\u062f\u0642\u0629 \u0628\u062a\u0633\u0631\u064a\u0628 \u0630\u0627\u0643\u0631\u0629 \u0627\u0644\u0639\u0645\u0644\u064a\u0629 \u0639\u0628\u0631 \u0645\u0644\u0641\u0627\u062a GGUF \u062e\u0628\u064a\u062b\u0629\u060c \u0645\u0639 \u0627\u062d\u062a\u0645\u0627\u0644 \u062a\u0623\u062b\u0631 \u0623\u0643\u062b\u0631 \u0645\u0646 300,000 \u062e\u0627\u062f\u0645 \u0645\u0643\u0634\u0648\u0641. \n\ud83d\udccc https://thehackernews.com/2026/05/ollama-out-of-bounds-read-vulnerability.html\n\n3\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Microsoft\u060c \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0648\u0627\u0633\u0639\u0629:\n\u0645\u0627\u064a\u0643\u0631\u0648\u0633\u0648\u0641\u062a \u0623\u0635\u062f\u0631\u062a \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0644\u0645\u0639\u0627\u0644\u062c\u0629 138 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0645\u0646\u062a\u062c\u0627\u062a\u0647\u0627\u060c \u0645\u0646 \u0628\u064a\u0646\u0647\u0627 \u062b\u063a\u0631\u0627\u062a \u062d\u0631\u062c\u0629 \u0641\u064a Windows DNS \u0648Netlogon \u0648Azure \u0648Dynamics 365 \u0648Hyper-V. \n\ud83d\udccc https://thehackernews.com/2026/05/microsoft-patches-138-vulnerabilities.html\n\n4\ufe0f\u20e3 \u0646\u0638\u0627\u0645 Windows\u060c \u062b\u063a\u0631\u0627\u062a Zero-Day \u062c\u062f\u064a\u062f\u0629:\n\u062a\u0645 \u0646\u0634\u0631 \u062a\u0641\u0627\u0635\u064a\u0644 \u062b\u063a\u0631\u062a\u064a\u0646 \u0644\u0645 \u064a\u062a\u0645 \u0627\u0635\u0644\u0627\u062d\u0647\u0645 \u0628\u0639\u062f \u0641\u064a Windows: YellowKey \u0644\u062a\u062c\u0627\u0648\u0632 BitLocker\u060c \u0648GreenPlasma \u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0639\u0628\u0631 CTFMON. \n\ud83d\udccc https://thehackernews.com/2026/05/windows-zero-days-expose-bitlocker.html\n\n5\ufe0f\u20e3 \u0645\u0646\u0635\u0629 cPanel\u060c \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0627\u0633\u0639 \u0644\u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629:\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0646\u0634\u0637 \u0644\u062b\u063a\u0631\u0629 CVE-2026-41940 \u0641\u064a cPanel \u0648WHM \u0644\u0646\u0634\u0631 Backdoor \u0628\u0627\u0633\u0645 Filemanager\u060c \u0645\u0639 \u0631\u0628\u0637 \u0627\u0644\u062d\u0645\u0644\u0629 \u0628\u062c\u0647\u0629 \u062a\u0647\u062f\u064a\u062f \u062a\u064f\u0639\u0631\u0641 \u0628\u0627\u0633\u0645 Mr_Rot13. \n\ud83d\udccc https://thehackernews.com/2026/05/cpanel-cve-2026-41940-under-active.html\n\n6\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Palo Alto Networks\u060c \u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a PAN-OS:\n\u062b\u063a\u0631\u0629 CVE-2026-0300 \u0641\u064a User-ID Authentication Portal \u062a\u0633\u0645\u062d \u0628\u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u0629 PA-Series \u0648VM-Series\u060c \u0648\u062a\u0645 \u0631\u0635\u062f \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u0639\u0644\u064a\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/palo-alto-pan-os-flaw-under-active.html\n\n7\ufe0f\u20e3 \u062e\u0627\u062f\u0645 Exim\u060c \u062b\u063a\u0631\u0629 Dead.Letter\n\u062b\u063a\u0631\u0629 CVE-2026-45185 \u0641\u064a Exim: \u0639\u0646\u062f \u0627\u0633\u062a\u062e\u062f\u0627\u0645 GnuTLS \u0642\u062f \u062a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0644\u0641 \u0641\u064a \u0627\u0644\u0630\u0627\u0643\u0631\u0629 \u0648\u0631\u0628\u0645\u0627 \u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f\u060c \u0644\u0630\u0644\u0643 \u064a\u064f\u0646\u0635\u062d \u0628\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0641\u0648\u0631\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/new-exim-bdat-vulnerability-exposes.html\n\n8\ufe0f\u20e3 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f\u060c Mini Shai-Hulud:\n\u062d\u0645\u0644\u0629 Supply Chain \u062e\u0628\u064a\u062b\u0629 \u0627\u0633\u062a\u0647\u062f\u0641\u062a \u062d\u0632\u0645 npm \u0648PyPI \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0645\u0634\u0627\u0631\u064a\u0639 \u0645\u062b\u0644 TanStack \u0648Mistral AI \u0648Guardrails AI\u060c \u0645\u0639 \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0639\u062a\u0645\u0627\u062f \u0648GitHub/OIDC tokens. \n\ud83d\udccc https://thehackernews.com/2026/05/mini-shai-hulud-worm-compromises.html\n\n9\ufe0f\u20e3 \u0645\u0646\u0635\u0629 Hugging Face\u060c \u0645\u0633\u062a\u0648\u062f\u0639 OpenAI \u0645\u0632\u064a\u0641:\n\u0645\u0633\u062a\u0648\u062f\u0639 \u062e\u0628\u064a\u062b \u0627\u0646\u062a\u062d\u0644 \u0627\u0633\u0645 OpenAI Privacy Filter \u0648\u0648\u0635\u0644 \u0625\u0644\u0649 \u0627\u0644\u0645\u0631\u0643\u0632 \u0627\u0644\u0623\u0648\u0644 \u0641\u064a \u0627\u0644\u062a\u0631\u0646\u062f\u060c \u0648\u062d\u0642\u0642 \u0646\u062d\u0648 244,000 \u062a\u062d\u0645\u064a\u0644 \u062e\u0644\u0627\u0644 18 \u0633\u0627\u0639\u0629\u060c \u0648\u0643\u0627\u0646 \u064a\u0646\u0634\u0631 Infostealer \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u0629 Windows. \n\ud83d\udccc https://thehackernews.com/2026/05/fake-openai-privacy-filter-repo-hits-1.html\n\n\ud83d\udd1f \u0646\u0638\u0627\u0645 Linux\u060c \u062b\u063a\u0631\u0629 Fragnesia \u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a:\n\u062b\u063a\u0631\u0629 CVE-2026-46300 \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629 \u0628\u0627\u0633\u0645 Fragnesia \u062a\u0633\u0645\u062d \u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0645\u062d\u0644\u064a \u0628\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0625\u0644\u0649 root \u0639\u0628\u0631 \u062e\u0644\u0644 \u0641\u064a Linux Kernel\u060c \u0648\u0647\u064a \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0633\u0644\u0633\u0644\u0629 Dirty Frag. \n\ud83d\udccc https://www.microsoft.com/en-us/security/blog/2026/05/08/active-attack-dirty-frag-linux-vulnerability-expands-post-compromise-risk/\n\n1\ufe0f\u20e31\ufe0f\u20e3 \u062e\u0627\u062f\u0645 NGINX\u060c \u062b\u063a\u0631\u0629 \u0639\u0645\u0631\u0647\u0627 18 \u0633\u0646\u0629:\n\u062b\u063a\u0631\u0629 NGINX Rift CVE-2026-42945 \u0641\u064a ngx_http_rewrite_module \u0642\u062f \u062a\u0633\u0645\u062d \u0628\u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f \u0623\u0648 \u062a\u0639\u0637\u064a\u0644 \u0627\u0644\u062e\u062f\u0645\u0629 \u0639\u0628\u0631 \u0637\u0644\u0628\u0627\u062a HTTP \u0645\u0635\u0645\u0645\u0629 \u062e\u0635\u064a\u0635\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/18-year-old-nginx-rewrite-module-flaw.html", "creation_timestamp": "2026-09-13T20:00:04.795027Z"} 2026-09-13T20:00:04.795027+00:00