<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 17 Sep 2026 10:25:57 +0000</lastBuildDate>
    <item>
      <title>cbb05742-869f-4ee2-9943-4174371cb19c</title>
      <link>https://vulnerability.circl.lu/sighting/cbb05742-869f-4ee2-9943-4174371cb19c/export</link>
      <description>{"uuid": "cbb05742-869f-4ee2-9943-4174371cb19c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22686", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102471", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-22686-RemoteCodeExecution-RCE-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a moi404\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 11:55:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-22686-RemoteCodeExecution-RCE-PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-17T01:00:03.794453Z"}</description>
      <content:encoded>{"uuid": "cbb05742-869f-4ee2-9943-4174371cb19c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22686", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102471", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-22686-RemoteCodeExecution-RCE-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a moi404\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 11:55:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-22686-RemoteCodeExecution-RCE-PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-17T01:00:03.794453Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cbb05742-869f-4ee2-9943-4174371cb19c/export</guid>
      <pubDate>Thu, 17 Sep 2026 01:00:03 +0000</pubDate>
    </item>
    <item>
      <title>d9e38bd5-991d-4144-abcc-cb9e8373006b</title>
      <link>https://vulnerability.circl.lu/sighting/d9e38bd5-991d-4144-abcc-cb9e8373006b/export</link>
      <description>{"uuid": "d9e38bd5-991d-4144-abcc-cb9e8373006b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22686", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102471", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-22686-RemoteCodeExecution-RCE-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a moi404\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 11:55:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-22686-RemoteCodeExecution-RCE-PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-16T16:00:03.788892Z"}</description>
      <content:encoded>{"uuid": "d9e38bd5-991d-4144-abcc-cb9e8373006b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22686", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102471", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-22686-RemoteCodeExecution-RCE-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a moi404\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 11:55:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-22686-RemoteCodeExecution-RCE-PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-16T16:00:03.788892Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d9e38bd5-991d-4144-abcc-cb9e8373006b/export</guid>
      <pubDate>Wed, 16 Sep 2026 16:00:03 +0000</pubDate>
    </item>
    <item>
      <title>98b51701-65ad-43df-a895-df01d977357e</title>
      <link>https://vulnerability.circl.lu/sighting/98b51701-65ad-43df-a895-df01d977357e/export</link>
      <description>{"uuid": "98b51701-65ad-43df-a895-df01d977357e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22706", "type": "published-proof-of-concept", "source": "Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4", "content": "", "creation_timestamp": "2026-09-15T00:00:21.156652Z"}</description>
      <content:encoded>{"uuid": "98b51701-65ad-43df-a895-df01d977357e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22706", "type": "published-proof-of-concept", "source": "Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4", "content": "", "creation_timestamp": "2026-09-15T00:00:21.156652Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/98b51701-65ad-43df-a895-df01d977357e/export</guid>
      <pubDate>Tue, 15 Sep 2026 00:00:21 +0000</pubDate>
    </item>
    <item>
      <title>79b30f41-f38a-4187-8ef6-5d7f9460a195</title>
      <link>https://vulnerability.circl.lu/sighting/79b30f41-f38a-4187-8ef6-5d7f9460a195/export</link>
      <description>{"uuid": "79b30f41-f38a-4187-8ef6-5d7f9460a195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22738", "type": "seen", "source": "https://t.me/purp_sec/1473", "content": "SpEL Injection \u0432 Spring AI \u2192 RCE \u0447\u0435\u0440\u0435\u0437 vector search (CVE-2026-22738)\n\n\u0412 Spring AI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-22738, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 SpEL injection \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SimpleVectorStore. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 filter-\u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0431\u0435\u0437 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0432 SpEL-\u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0442\u043e\u0440 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043e \u043a\u0430\u043a \u043a\u043e\u0434.\n\n\u041a\u0430\u043a \u0430\u0442\u0430\u043a\u0443\u0435\u043c:\n\n\u25b6\ufe0f\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 filter expression\n\u25b6\ufe0fExpression \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0432 SpEL engine\n\u25b6\ufe0f\u0412\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f SpEL payload\n\u25b6\ufe0f\u0412\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\n\u25b6\ufe0f\u041f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0442\u0438\u043f\u0430\u043c JVM (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Runtime, ProcessBuilder) \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043a RCE\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 (env, \u0442\u043e\u043a\u0435\u043d\u044b, \u043a\u043b\u044e\u0447\u0438), \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n\u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 injection, \u043d\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u0432 \u0441\u043b\u043e\u0439 AI-\u043f\u043e\u0438\u0441\u043a\u0430. \u041c\u0435\u043d\u0435\u0435 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u0430\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0435\u043c\u0430.\n\n\u27a1\ufe0f\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\n\n#red_team", "creation_timestamp": "2026-09-15T00:00:11.269723Z"}</description>
      <content:encoded>{"uuid": "79b30f41-f38a-4187-8ef6-5d7f9460a195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22738", "type": "seen", "source": "https://t.me/purp_sec/1473", "content": "SpEL Injection \u0432 Spring AI \u2192 RCE \u0447\u0435\u0440\u0435\u0437 vector search (CVE-2026-22738)\n\n\u0412 Spring AI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-22738, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 SpEL injection \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SimpleVectorStore. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 filter-\u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0431\u0435\u0437 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0432 SpEL-\u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0442\u043e\u0440 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043e \u043a\u0430\u043a \u043a\u043e\u0434.\n\n\u041a\u0430\u043a \u0430\u0442\u0430\u043a\u0443\u0435\u043c:\n\n\u25b6\ufe0f\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 filter expression\n\u25b6\ufe0fExpression \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0432 SpEL engine\n\u25b6\ufe0f\u0412\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f SpEL payload\n\u25b6\ufe0f\u0412\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\n\u25b6\ufe0f\u041f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0442\u0438\u043f\u0430\u043c JVM (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Runtime, ProcessBuilder) \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043a RCE\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 (env, \u0442\u043e\u043a\u0435\u043d\u044b, \u043a\u043b\u044e\u0447\u0438), \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n\u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 injection, \u043d\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u0432 \u0441\u043b\u043e\u0439 AI-\u043f\u043e\u0438\u0441\u043a\u0430. \u041c\u0435\u043d\u0435\u0435 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u0430\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0435\u043c\u0430.\n\n\u27a1\ufe0f\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\n\n#red_team", "creation_timestamp": "2026-09-15T00:00:11.269723Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/79b30f41-f38a-4187-8ef6-5d7f9460a195/export</guid>
      <pubDate>Tue, 15 Sep 2026 00:00:11 +0000</pubDate>
    </item>
    <item>
      <title>6ed7ad2b-bb2d-41b8-80c9-0eada8f4441b</title>
      <link>https://vulnerability.circl.lu/sighting/6ed7ad2b-bb2d-41b8-80c9-0eada8f4441b/export</link>
      <description>{"uuid": "6ed7ad2b-bb2d-41b8-80c9-0eada8f4441b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22738", "type": "seen", "source": "https://t.me/purp_sec/1473", "content": "SpEL Injection \u0432 Spring AI \u2192 RCE \u0447\u0435\u0440\u0435\u0437 vector search (CVE-2026-22738)\n\n\u0412 Spring AI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-22738, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 SpEL injection \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SimpleVectorStore. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 filter-\u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0431\u0435\u0437 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0432 SpEL-\u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0442\u043e\u0440 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043e \u043a\u0430\u043a \u043a\u043e\u0434.\n\n\u041a\u0430\u043a \u0430\u0442\u0430\u043a\u0443\u0435\u043c:\n\n\u25b6\ufe0f\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 filter expression\n\u25b6\ufe0fExpression \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0432 SpEL engine\n\u25b6\ufe0f\u0412\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f SpEL payload\n\u25b6\ufe0f\u0412\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\n\u25b6\ufe0f\u041f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0442\u0438\u043f\u0430\u043c JVM (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Runtime, ProcessBuilder) \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043a RCE\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 (env, \u0442\u043e\u043a\u0435\u043d\u044b, \u043a\u043b\u044e\u0447\u0438), \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n\u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 injection, \u043d\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u0432 \u0441\u043b\u043e\u0439 AI-\u043f\u043e\u0438\u0441\u043a\u0430. \u041c\u0435\u043d\u0435\u0435 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u0430\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0435\u043c\u0430.\n\n\u27a1\ufe0f\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\n\n#red_team", "creation_timestamp": "2026-09-14T18:00:06.700532Z"}</description>
      <content:encoded>{"uuid": "6ed7ad2b-bb2d-41b8-80c9-0eada8f4441b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22738", "type": "seen", "source": "https://t.me/purp_sec/1473", "content": "SpEL Injection \u0432 Spring AI \u2192 RCE \u0447\u0435\u0440\u0435\u0437 vector search (CVE-2026-22738)\n\n\u0412 Spring AI \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-22738, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 SpEL injection \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SimpleVectorStore. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 filter-\u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0431\u0435\u0437 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0432 SpEL-\u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0442\u043e\u0440 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043e \u043a\u0430\u043a \u043a\u043e\u0434.\n\n\u041a\u0430\u043a \u0430\u0442\u0430\u043a\u0443\u0435\u043c:\n\n\u25b6\ufe0f\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 filter expression\n\u25b6\ufe0fExpression \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0432 SpEL engine\n\u25b6\ufe0f\u0412\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f SpEL payload\n\u25b6\ufe0f\u0412\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\n\u25b6\ufe0f\u041f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0442\u0438\u043f\u0430\u043c JVM (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Runtime, ProcessBuilder) \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043a RCE\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u0447\u0442\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 (env, \u0442\u043e\u043a\u0435\u043d\u044b, \u043a\u043b\u044e\u0447\u0438), \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n\u0424\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 injection, \u043d\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u0432 \u0441\u043b\u043e\u0439 AI-\u043f\u043e\u0438\u0441\u043a\u0430. \u041c\u0435\u043d\u0435\u0435 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u0430\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0442\u0435\u043c\u0430.\n\n\u27a1\ufe0f\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\n\n#red_team", "creation_timestamp": "2026-09-14T18:00:06.700532Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6ed7ad2b-bb2d-41b8-80c9-0eada8f4441b/export</guid>
      <pubDate>Mon, 14 Sep 2026 18:00:06 +0000</pubDate>
    </item>
    <item>
      <title>26e83bb8-9bae-4c32-8a70-e74b06601cc2</title>
      <link>https://vulnerability.circl.lu/sighting/26e83bb8-9bae-4c32-8a70-e74b06601cc2/export</link>
      <description>{"uuid": "26e83bb8-9bae-4c32-8a70-e74b06601cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22770", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvi77frxef2t", "content": "CVE-2026-22770 - imagemagick\nThe magick.net libraries for various platforms can be tricked into running unwanted code when processing specially crafted image files. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#imagemagick #dirklemstra #dotnet #CVE #infosec", "creation_timestamp": "2026-09-14T13:20:05.007739Z"}</description>
      <content:encoded>{"uuid": "26e83bb8-9bae-4c32-8a70-e74b06601cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22770", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvi77frxef2t", "content": "CVE-2026-22770 - imagemagick\nThe magick.net libraries for various platforms can be tricked into running unwanted code when processing specially crafted image files. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#imagemagick #dirklemstra #dotnet #CVE #infosec", "creation_timestamp": "2026-09-14T13:20:05.007739Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/26e83bb8-9bae-4c32-8a70-e74b06601cc2/export</guid>
      <pubDate>Mon, 14 Sep 2026 13:20:05 +0000</pubDate>
    </item>
    <item>
      <title>4f13b8f9-ba0c-4a2b-b5e1-3de0497ae811</title>
      <link>https://vulnerability.circl.lu/sighting/4f13b8f9-ba0c-4a2b-b5e1-3de0497ae811/export</link>
      <description>{"uuid": "4f13b8f9-ba0c-4a2b-b5e1-3de0497ae811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22706", "type": "seen", "source": "Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4", "content": "", "creation_timestamp": "2026-09-14T03:00:15.185120Z"}</description>
      <content:encoded>{"uuid": "4f13b8f9-ba0c-4a2b-b5e1-3de0497ae811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22706", "type": "seen", "source": "Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4", "content": "", "creation_timestamp": "2026-09-14T03:00:15.185120Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4f13b8f9-ba0c-4a2b-b5e1-3de0497ae811/export</guid>
      <pubDate>Mon, 14 Sep 2026 03:00:15 +0000</pubDate>
    </item>
    <item>
      <title>0717d46e-d461-43a0-8c03-5c314c4a0b13</title>
      <link>https://vulnerability.circl.lu/sighting/0717d46e-d461-43a0-8c03-5c314c4a0b13/export</link>
      <description>{"uuid": "0717d46e-d461-43a0-8c03-5c314c4a0b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22924", "type": "seen", "source": "https://t.me/shimiscyberworld/1383", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-22924 \u2014 CVSS 9.1\nSIMATIC CN 4100 Critical Vulnerability: Unauthenticated Resource Exhaustion\n\nCVE-2026-22924 \u2014 A vulnerability has been identified in SIMATIC CN 4100 (All versions &amp;lt; V5.0). The affected application does not properly restrict unauthenticated connections and i\n\n\ud83d\udd34 Critical \u00b7 2 ATT&amp;amp;CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-22924 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:51.767325Z"}</description>
      <content:encoded>{"uuid": "0717d46e-d461-43a0-8c03-5c314c4a0b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22924", "type": "seen", "source": "https://t.me/shimiscyberworld/1383", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-22924 \u2014 CVSS 9.1\nSIMATIC CN 4100 Critical Vulnerability: Unauthenticated Resource Exhaustion\n\nCVE-2026-22924 \u2014 A vulnerability has been identified in SIMATIC CN 4100 (All versions &amp;lt; V5.0). The affected application does not properly restrict unauthenticated connections and i\n\n\ud83d\udd34 Critical \u00b7 2 ATT&amp;amp;CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-22924 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:51.767325Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0717d46e-d461-43a0-8c03-5c314c4a0b13/export</guid>
      <pubDate>Sun, 13 Sep 2026 00:00:51 +0000</pubDate>
    </item>
    <item>
      <title>167e9728-f145-4a96-972c-49154153fc52</title>
      <link>https://vulnerability.circl.lu/sighting/167e9728-f145-4a96-972c-49154153fc52/export</link>
      <description>{"uuid": "167e9728-f145-4a96-972c-49154153fc52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22924", "type": "seen", "source": "https://t.me/shimiscyberworld/1383", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-22924 \u2014 CVSS 9.1\nSIMATIC CN 4100 Critical Vulnerability: Unauthenticated Resource Exhaustion\n\nCVE-2026-22924 \u2014 A vulnerability has been identified in SIMATIC CN 4100 (All versions &amp;lt; V5.0). The affected application does not properly restrict unauthenticated connections and i\n\n\ud83d\udd34 Critical \u00b7 2 ATT&amp;amp;CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-22924 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:07.229403Z"}</description>
      <content:encoded>{"uuid": "167e9728-f145-4a96-972c-49154153fc52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22924", "type": "seen", "source": "https://t.me/shimiscyberworld/1383", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-22924 \u2014 CVSS 9.1\nSIMATIC CN 4100 Critical Vulnerability: Unauthenticated Resource Exhaustion\n\nCVE-2026-22924 \u2014 A vulnerability has been identified in SIMATIC CN 4100 (All versions &amp;lt; V5.0). The affected application does not properly restrict unauthenticated connections and i\n\n\ud83d\udd34 Critical \u00b7 2 ATT&amp;amp;CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-22924 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:07.229403Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/167e9728-f145-4a96-972c-49154153fc52/export</guid>
      <pubDate>Sat, 12 Sep 2026 10:00:07 +0000</pubDate>
    </item>
    <item>
      <title>be154145-eb92-4fda-934f-38f22207d67e</title>
      <link>https://vulnerability.circl.lu/sighting/be154145-eb92-4fda-934f-38f22207d67e/export</link>
      <description>{"uuid": "be154145-eb92-4fda-934f-38f22207d67e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22732", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102041", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-22732-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dylan-chainguard\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-11 13:16:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-12T00:00:36.361048Z"}</description>
      <content:encoded>{"uuid": "be154145-eb92-4fda-934f-38f22207d67e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-22732", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102041", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-22732-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dylan-chainguard\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-11 13:16:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-12T00:00:36.361048Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/be154145-eb92-4fda-934f-38f22207d67e/export</guid>
      <pubDate>Sat, 12 Sep 2026 00:00:36 +0000</pubDate>
    </item>
  </channel>
</rss>
