https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 20 Sep 2026 18:49:43 +0000 https://vulnerability.circl.lu/sighting/96a43dee-313d-494f-a662-ac55b47e207c/export {"uuid": "96a43dee-313d-494f-a662-ac55b47e207c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3854", "type": "seen", "source": "https://t.me/VulnerabilityNews/42217", "content": "GitHub fixes RCE flaw that gave access to millions of private repos\n\nIn early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854)\u00a0that could have allowed\u00a0attackers to access millions of private repositories. [...]\nhttps://www.bleepingcomputer.com/news/security/github-fixes-rce-flaw-that-gave-access-to-millions-of-private-repos/", "creation_timestamp": "2026-09-19T00:00:39.488065Z"} {"uuid": "96a43dee-313d-494f-a662-ac55b47e207c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3854", "type": "seen", "source": "https://t.me/VulnerabilityNews/42217", "content": "GitHub fixes RCE flaw that gave access to millions of private repos\n\nIn early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854)\u00a0that could have allowed\u00a0attackers to access millions of private repositories. [...]\nhttps://www.bleepingcomputer.com/news/security/github-fixes-rce-flaw-that-gave-access-to-millions-of-private-repos/", "creation_timestamp": "2026-09-19T00:00:39.488065Z"} https://vulnerability.circl.lu/sighting/96a43dee-313d-494f-a662-ac55b47e207c/export Sat, 19 Sep 2026 00:00:39 +0000 https://vulnerability.circl.lu/sighting/23e0c78c-0d20-4df7-a896-d4ecaaa08717/export {"uuid": "23e0c78c-0d20-4df7-a896-d4ecaaa08717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3854", "type": "seen", "source": "https://t.me/VulnerabilityNews/42226", "content": "Critical GitHub Vulnerability Exposed Millions of Repositories\n\nThe remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server.\nThe post Critical GitHub Vulnerability Exposed Millions of Repositories appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-github-vulnerability-exposed-millions-of-repositories/", "creation_timestamp": "2026-09-19T00:00:39.245378Z"} {"uuid": "23e0c78c-0d20-4df7-a896-d4ecaaa08717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3854", "type": "seen", "source": "https://t.me/VulnerabilityNews/42226", "content": "Critical GitHub Vulnerability Exposed Millions of Repositories\n\nThe remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server.\nThe post Critical GitHub Vulnerability Exposed Millions of Repositories appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-github-vulnerability-exposed-millions-of-repositories/", "creation_timestamp": "2026-09-19T00:00:39.245378Z"} https://vulnerability.circl.lu/sighting/23e0c78c-0d20-4df7-a896-d4ecaaa08717/export Sat, 19 Sep 2026 00:00:39 +0000 https://vulnerability.circl.lu/sighting/922387fa-563b-48b5-a974-7108f1c5c298/export {"uuid": "922387fa-563b-48b5-a974-7108f1c5c298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "seen", "source": "Telegram/Ju4nXUcZ89SCb6DOoV0Fnk2-ohcFzBtu5nTPyHJPzCZSCZ0", "content": "", "creation_timestamp": "2026-09-19T00:00:22.891489Z"} {"uuid": "922387fa-563b-48b5-a974-7108f1c5c298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "seen", "source": "Telegram/Ju4nXUcZ89SCb6DOoV0Fnk2-ohcFzBtu5nTPyHJPzCZSCZ0", "content": "", "creation_timestamp": "2026-09-19T00:00:22.891489Z"} https://vulnerability.circl.lu/sighting/922387fa-563b-48b5-a974-7108f1c5c298/export Sat, 19 Sep 2026 00:00:22 +0000 https://vulnerability.circl.lu/sighting/e05b49e6-95ba-4414-b559-3741cb951f64/export {"uuid": "e05b49e6-95ba-4414-b559-3741cb951f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3869", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1430", "content": "\u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9 \u0645\u062f\u06cc\u06a9\u0648\u0646 M580/M580 Safety: \u06cc\u06a9 \u062e\u0637\u0627\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u0632 \u062f\u0633\u062a \u0631\u0641\u062a\u0646 \u0645\u062d\u0631\u0645\u0627\u0646\u06af\u06cc\u060c \u06cc\u06a9\u067e\u0627\u0631\u0686\u06af\u06cc \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 PLC \u0634\u0648\u062f.\n\nCVE-2026-3869\n\u0645\u062f\u06cc\u06a9\u0648\u0646 M580: \u062a\u0645\u0627\u0645 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627 \u0628\u0627 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0645\u062a\u0631 \u0627\u0632 4.00\u061b\n\u0645\u062f\u06cc\u06a9\u0648\u0646 M580 Safety: \u062a\u0645\u0627\u0645 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627 \u0628\u0627 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0645\u062a\u0631 \u0627\u0632 4.20.\nCVSS 3.1\u060c \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9: 9.8 \u2013 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc.\nCVSS 4.0\u060c \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9: 9.2 \u2013 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc. \u0622\u062e\u0631\u06cc\u0646 \u0646\u0634\u0631\u06cc\u0627\u062a \u0635\u0646\u0639\u062a\u06cc\u060c \u0639\u062f\u062f 9.2 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0641\u0639\u0644\u06cc \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0630\u06a9\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u061b \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u062e\u062a\u0627\u0631\u06cc\u0627\u0641\u062a\u0647 \u0645\u0648\u062c\u0648\u062f\u060c \u0647\u0645\u0632\u0645\u0627\u0646 \u0634\u0627\u0645\u0644 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0627\u0648\u0644\u06cc\u0647 CVSS 3.1 \u0628\u0627 \u0645\u0642\u062f\u0627\u0631 9.8 \u0647\u0633\u062a\u0646\u062f.\n\nCWE-303 \u2013 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a: \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u062f\u0631\u0633\u062a\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0646\u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062f\u0631 \u06cc\u06a9 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062e\u0627\u0635 \u0627\u0632 \u0628\u0631\u0646\u0627\u0645\u0647\u060c \u0627\u0632 \u0633\u0637\u062d \u062d\u0641\u0627\u0638\u062a \u0645\u0648\u0631\u062f \u0627\u0646\u062a\u0638\u0627\u0631 \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0646\u06cc\u0633\u062a.\n\n\u0627\u0647\u0645\u06cc\u062a \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0627\u0632 \u0627\u06cc\u0646 \u0631\u0648 \u0627\u0633\u062a \u06a9\u0647 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 PLC \u0645\u062f\u06cc\u06a9\u0648\u0646 M580 \u0648 \u0628\u0631\u0627\u06cc \u0646\u0633\u062e\u0647 Safety\u060c \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644\u0631\u0647\u0627\u06cc\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0639\u0645\u0644\u06a9\u0631\u062f\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0627\u06cc\u0645\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0631\u0648\u06cc PLC \u062f\u0631 \u062d\u0627\u0644 \u0627\u062c\u0631\u0627 \u0647\u0633\u062a\u0646\u062f \u0648 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0627\u0641\u06cc \u0646\u062f\u0627\u0631\u0646\u062f\u060c \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f.\n\nhttps://download.se.com/files?p_Doc_Ref=SEVD-2026-251-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-251-04.pdf\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-09-19T00:00:11.040712Z"} {"uuid": "e05b49e6-95ba-4414-b559-3741cb951f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3869", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1430", "content": "\u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9 \u0645\u062f\u06cc\u06a9\u0648\u0646 M580/M580 Safety: \u06cc\u06a9 \u062e\u0637\u0627\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u0632 \u062f\u0633\u062a \u0631\u0641\u062a\u0646 \u0645\u062d\u0631\u0645\u0627\u0646\u06af\u06cc\u060c \u06cc\u06a9\u067e\u0627\u0631\u0686\u06af\u06cc \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 PLC \u0634\u0648\u062f.\n\nCVE-2026-3869\n\u0645\u062f\u06cc\u06a9\u0648\u0646 M580: \u062a\u0645\u0627\u0645 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627 \u0628\u0627 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0645\u062a\u0631 \u0627\u0632 4.00\u061b\n\u0645\u062f\u06cc\u06a9\u0648\u0646 M580 Safety: \u062a\u0645\u0627\u0645 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627 \u0628\u0627 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0645\u062a\u0631 \u0627\u0632 4.20.\nCVSS 3.1\u060c \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9: 9.8 \u2013 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc.\nCVSS 4.0\u060c \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9: 9.2 \u2013 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc. \u0622\u062e\u0631\u06cc\u0646 \u0646\u0634\u0631\u06cc\u0627\u062a \u0635\u0646\u0639\u062a\u06cc\u060c \u0639\u062f\u062f 9.2 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0641\u0639\u0644\u06cc \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0630\u06a9\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u061b \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u062e\u062a\u0627\u0631\u06cc\u0627\u0641\u062a\u0647 \u0645\u0648\u062c\u0648\u062f\u060c \u0647\u0645\u0632\u0645\u0627\u0646 \u0634\u0627\u0645\u0644 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0627\u0648\u0644\u06cc\u0647 CVSS 3.1 \u0628\u0627 \u0645\u0642\u062f\u0627\u0631 9.8 \u0647\u0633\u062a\u0646\u062f.\n\nCWE-303 \u2013 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a: \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u062f\u0631\u0633\u062a\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0646\u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062f\u0631 \u06cc\u06a9 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062e\u0627\u0635 \u0627\u0632 \u0628\u0631\u0646\u0627\u0645\u0647\u060c \u0627\u0632 \u0633\u0637\u062d \u062d\u0641\u0627\u0638\u062a \u0645\u0648\u0631\u062f \u0627\u0646\u062a\u0638\u0627\u0631 \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0646\u06cc\u0633\u062a.\n\n\u0627\u0647\u0645\u06cc\u062a \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0627\u0632 \u0627\u06cc\u0646 \u0631\u0648 \u0627\u0633\u062a \u06a9\u0647 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 PLC \u0645\u062f\u06cc\u06a9\u0648\u0646 M580 \u0648 \u0628\u0631\u0627\u06cc \u0646\u0633\u062e\u0647 Safety\u060c \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644\u0631\u0647\u0627\u06cc\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0639\u0645\u0644\u06a9\u0631\u062f\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0627\u06cc\u0645\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0631\u0648\u06cc PLC \u062f\u0631 \u062d\u0627\u0644 \u0627\u062c\u0631\u0627 \u0647\u0633\u062a\u0646\u062f \u0648 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0627\u0641\u06cc \u0646\u062f\u0627\u0631\u0646\u062f\u060c \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f.\n\nhttps://download.se.com/files?p_Doc_Ref=SEVD-2026-251-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-251-04.pdf\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-09-19T00:00:11.040712Z"} https://vulnerability.circl.lu/sighting/e05b49e6-95ba-4414-b559-3741cb951f64/export Sat, 19 Sep 2026 00:00:11 +0000 https://vulnerability.circl.lu/sighting/19fef7af-cb50-4ab0-a15e-6897ee853683/export {"uuid": "19fef7af-cb50-4ab0-a15e-6897ee853683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3869", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1430", "content": "\u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9 \u0645\u062f\u06cc\u06a9\u0648\u0646 M580/M580 Safety: \u06cc\u06a9 \u062e\u0637\u0627\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u0632 \u062f\u0633\u062a \u0631\u0641\u062a\u0646 \u0645\u062d\u0631\u0645\u0627\u0646\u06af\u06cc\u060c \u06cc\u06a9\u067e\u0627\u0631\u0686\u06af\u06cc \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 PLC \u0634\u0648\u062f.\n\nCVE-2026-3869\n\u0645\u062f\u06cc\u06a9\u0648\u0646 M580: \u062a\u0645\u0627\u0645 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627 \u0628\u0627 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0645\u062a\u0631 \u0627\u0632 4.00\u061b\n\u0645\u062f\u06cc\u06a9\u0648\u0646 M580 Safety: \u062a\u0645\u0627\u0645 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627 \u0628\u0627 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0645\u062a\u0631 \u0627\u0632 4.20.\nCVSS 3.1\u060c \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9: 9.8 \u2013 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc.\nCVSS 4.0\u060c \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9: 9.2 \u2013 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc. \u0622\u062e\u0631\u06cc\u0646 \u0646\u0634\u0631\u06cc\u0627\u062a \u0635\u0646\u0639\u062a\u06cc\u060c \u0639\u062f\u062f 9.2 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0641\u0639\u0644\u06cc \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0630\u06a9\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u061b \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u062e\u062a\u0627\u0631\u06cc\u0627\u0641\u062a\u0647 \u0645\u0648\u062c\u0648\u062f\u060c \u0647\u0645\u0632\u0645\u0627\u0646 \u0634\u0627\u0645\u0644 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0627\u0648\u0644\u06cc\u0647 CVSS 3.1 \u0628\u0627 \u0645\u0642\u062f\u0627\u0631 9.8 \u0647\u0633\u062a\u0646\u062f.\n\nCWE-303 \u2013 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a: \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u062f\u0631\u0633\u062a\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0646\u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062f\u0631 \u06cc\u06a9 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062e\u0627\u0635 \u0627\u0632 \u0628\u0631\u0646\u0627\u0645\u0647\u060c \u0627\u0632 \u0633\u0637\u062d \u062d\u0641\u0627\u0638\u062a \u0645\u0648\u0631\u062f \u0627\u0646\u062a\u0638\u0627\u0631 \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0646\u06cc\u0633\u062a.\n\n\u0627\u0647\u0645\u06cc\u062a \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0627\u0632 \u0627\u06cc\u0646 \u0631\u0648 \u0627\u0633\u062a \u06a9\u0647 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 PLC \u0645\u062f\u06cc\u06a9\u0648\u0646 M580 \u0648 \u0628\u0631\u0627\u06cc \u0646\u0633\u062e\u0647 Safety\u060c \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644\u0631\u0647\u0627\u06cc\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0639\u0645\u0644\u06a9\u0631\u062f\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0627\u06cc\u0645\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0631\u0648\u06cc PLC \u062f\u0631 \u062d\u0627\u0644 \u0627\u062c\u0631\u0627 \u0647\u0633\u062a\u0646\u062f \u0648 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0627\u0641\u06cc \u0646\u062f\u0627\u0631\u0646\u062f\u060c \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f.\n\nhttps://download.se.com/files?p_Doc_Ref=SEVD-2026-251-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-251-04.pdf\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-09-18T20:00:04.545015Z"} {"uuid": "19fef7af-cb50-4ab0-a15e-6897ee853683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3869", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1430", "content": "\u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9 \u0645\u062f\u06cc\u06a9\u0648\u0646 M580/M580 Safety: \u06cc\u06a9 \u062e\u0637\u0627\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u0632 \u062f\u0633\u062a \u0631\u0641\u062a\u0646 \u0645\u062d\u0631\u0645\u0627\u0646\u06af\u06cc\u060c \u06cc\u06a9\u067e\u0627\u0631\u0686\u06af\u06cc \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 PLC \u0634\u0648\u062f.\n\nCVE-2026-3869\n\u0645\u062f\u06cc\u06a9\u0648\u0646 M580: \u062a\u0645\u0627\u0645 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627 \u0628\u0627 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0645\u062a\u0631 \u0627\u0632 4.00\u061b\n\u0645\u062f\u06cc\u06a9\u0648\u0646 M580 Safety: \u062a\u0645\u0627\u0645 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627 \u0628\u0627 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0645\u062a\u0631 \u0627\u0632 4.20.\nCVSS 3.1\u060c \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9: 9.8 \u2013 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc.\nCVSS 4.0\u060c \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9: 9.2 \u2013 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc. \u0622\u062e\u0631\u06cc\u0646 \u0646\u0634\u0631\u06cc\u0627\u062a \u0635\u0646\u0639\u062a\u06cc\u060c \u0639\u062f\u062f 9.2 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0641\u0639\u0644\u06cc \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0630\u06a9\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u061b \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u062e\u062a\u0627\u0631\u06cc\u0627\u0641\u062a\u0647 \u0645\u0648\u062c\u0648\u062f\u060c \u0647\u0645\u0632\u0645\u0627\u0646 \u0634\u0627\u0645\u0644 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0627\u0648\u0644\u06cc\u0647 CVSS 3.1 \u0628\u0627 \u0645\u0642\u062f\u0627\u0631 9.8 \u0647\u0633\u062a\u0646\u062f.\n\nCWE-303 \u2013 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0646\u0627\u062f\u0631\u0633\u062a \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a: \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u062f\u0631\u0633\u062a\u06cc \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0646\u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062f\u0631 \u06cc\u06a9 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062e\u0627\u0635 \u0627\u0632 \u0628\u0631\u0646\u0627\u0645\u0647\u060c \u0627\u0632 \u0633\u0637\u062d \u062d\u0641\u0627\u0638\u062a \u0645\u0648\u0631\u062f \u0627\u0646\u062a\u0638\u0627\u0631 \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0646\u06cc\u0633\u062a.\n\n\u0627\u0647\u0645\u06cc\u062a \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0627\u0632 \u0627\u06cc\u0646 \u0631\u0648 \u0627\u0633\u062a \u06a9\u0647 \u0645\u0633\u062a\u0642\u06cc\u0645\u0627\u064b \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 PLC \u0645\u062f\u06cc\u06a9\u0648\u0646 M580 \u0648 \u0628\u0631\u0627\u06cc \u0646\u0633\u062e\u0647 Safety\u060c \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644\u0631\u0647\u0627\u06cc\u06cc \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0639\u0645\u0644\u06a9\u0631\u062f\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0627\u06cc\u0645\u0646\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f. \u0627\u0634\u0646\u0627\u06cc\u062f\u0631 \u0627\u0634\u0627\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0631\u0648\u06cc PLC \u062f\u0631 \u062d\u0627\u0644 \u0627\u062c\u0631\u0627 \u0647\u0633\u062a\u0646\u062f \u0648 \u0633\u0637\u062d \u0628\u0631\u0646\u0627\u0645\u0647 (application level) \u06a9\u0627\u0641\u06cc \u0646\u062f\u0627\u0631\u0646\u062f\u060c \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f.\n\nhttps://download.se.com/files?p_Doc_Ref=SEVD-2026-251-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-251-04.pdf\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-09-18T20:00:04.545015Z"} https://vulnerability.circl.lu/sighting/19fef7af-cb50-4ab0-a15e-6897ee853683/export Fri, 18 Sep 2026 20:00:04 +0000 https://vulnerability.circl.lu/sighting/f1235825-4b11-41b7-a6ac-319eb35e259e/export {"uuid": "f1235825-4b11-41b7-a6ac-319eb35e259e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3854", "type": "seen", "source": "https://t.me/VulnerabilityNews/42226", "content": "Critical GitHub Vulnerability Exposed Millions of Repositories\n\nThe remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server.\nThe post Critical GitHub Vulnerability Exposed Millions of Repositories appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-github-vulnerability-exposed-millions-of-repositories/", "creation_timestamp": "2026-09-18T05:00:08.078494Z"} {"uuid": "f1235825-4b11-41b7-a6ac-319eb35e259e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3854", "type": "seen", "source": "https://t.me/VulnerabilityNews/42226", "content": "Critical GitHub Vulnerability Exposed Millions of Repositories\n\nThe remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server.\nThe post Critical GitHub Vulnerability Exposed Millions of Repositories appeared first on SecurityWeek.\nhttps://www.securityweek.com/critical-github-vulnerability-exposed-millions-of-repositories/", "creation_timestamp": "2026-09-18T05:00:08.078494Z"} https://vulnerability.circl.lu/sighting/f1235825-4b11-41b7-a6ac-319eb35e259e/export Fri, 18 Sep 2026 05:00:08 +0000 https://vulnerability.circl.lu/sighting/68057c7f-0b2c-4751-969f-7560e311f802/export {"uuid": "68057c7f-0b2c-4751-969f-7560e311f802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3854", "type": "seen", "source": "https://t.me/VulnerabilityNews/42217", "content": "GitHub fixes RCE flaw that gave access to millions of private repos\n\nIn early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854)\u00a0that could have allowed\u00a0attackers to access millions of private repositories. [...]\nhttps://www.bleepingcomputer.com/news/security/github-fixes-rce-flaw-that-gave-access-to-millions-of-private-repos/", "creation_timestamp": "2026-09-18T05:00:08.039850Z"} {"uuid": "68057c7f-0b2c-4751-969f-7560e311f802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3854", "type": "seen", "source": "https://t.me/VulnerabilityNews/42217", "content": "GitHub fixes RCE flaw that gave access to millions of private repos\n\nIn early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854)\u00a0that could have allowed\u00a0attackers to access millions of private repositories. [...]\nhttps://www.bleepingcomputer.com/news/security/github-fixes-rce-flaw-that-gave-access-to-millions-of-private-repos/", "creation_timestamp": "2026-09-18T05:00:08.039850Z"} https://vulnerability.circl.lu/sighting/68057c7f-0b2c-4751-969f-7560e311f802/export Fri, 18 Sep 2026 05:00:08 +0000 https://vulnerability.circl.lu/sighting/91cee9c1-b194-4916-9ee1-6810212d9957/export {"uuid": "91cee9c1-b194-4916-9ee1-6810212d9957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "seen", "source": "Telegram/Ju4nXUcZ89SCb6DOoV0Fnk2-ohcFzBtu5nTPyHJPzCZSCZ0", "content": "", "creation_timestamp": "2026-09-18T04:00:12.152258Z"} {"uuid": "91cee9c1-b194-4916-9ee1-6810212d9957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "seen", "source": "Telegram/Ju4nXUcZ89SCb6DOoV0Fnk2-ohcFzBtu5nTPyHJPzCZSCZ0", "content": "", "creation_timestamp": "2026-09-18T04:00:12.152258Z"} https://vulnerability.circl.lu/sighting/91cee9c1-b194-4916-9ee1-6810212d9957/export Fri, 18 Sep 2026 04:00:12 +0000 https://vulnerability.circl.lu/sighting/7662c37c-b563-4f7a-b24e-ef54729cd26e/export {"uuid": "7662c37c-b563-4f7a-b24e-ef54729cd26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3888", "type": "seen", "source": "https://gist.github.com/alon710/fd2ccd5d6fcb2bc32573ddafa189b58f", "content": "# CVE-2026-3888: CVE-2026-3888: Local Privilege Escalation in snapd via systemd-tmpfiles\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-03-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-3888\n\n## Summary\nCVE-2026-3888 is a critical local privilege escalation vulnerability arising from the insecure interaction between Canonical's snap-confine helper binary and systemd-tmpfiles within the world-writable /tmp directory.\n\n## TL;DR\nAn interaction flaw between snap-confine and systemd-tmpfiles allows a local unprivileged attacker to take control of tracking directories in /tmp after they are cleaned up, permitting sandbox escape and host root access.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-268\n- **Attack Vector**: Local\n- **CVSS Score**: 7.8\n- **EPSS Score**: 0.00383\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Ubuntu Desktop 24.04 LTS\n- Ubuntu Desktop 25.10\n- Any system running snapd with cleanup configurations active in /tmp\n- **snapd**: < 2.73+ubuntu24.04.2 (Fixed in: `2.73+ubuntu24.04.2`)\n- **snapd**: < 2.73+ubuntu25.10.1 (Fixed in: `2.73+ubuntu25.10.1`)\n\n## Mitigation\n\n- Upgrade snapd to a patched version\n- Add manual exclusion rules to systemd-tmpfiles configuration\n\n**Remediation Steps:**\n1. Run command: sudo apt update && sudo apt install --only-upgrade snapd\n2. Verify snapd package version is 2.73+ubuntu24.04.2 (Ubuntu 24.04) or newer\n3. If patching is not possible immediately, edit /usr/lib/tmpfiles.d/snapd.conf to add exclusion rules\n4. Restart systemd-tmpfiles-clean.service\n\n## References\n\n- [Official Qualys Technical Advisory](https://cdn2.qualys.com/advisory/2026/03/17/snap-confine-systemd-tmpfiles.txt)\n- [Qualys Threat Research Blog](https://blog.qualys.com/vulnerabilities-threat-research/2026/03/17/cve-2026-3888-important-snap-flaw-enables-local-privilege-escalation-to-root)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-3888) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-15T10:32:52.848216Z"} {"uuid": "7662c37c-b563-4f7a-b24e-ef54729cd26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-3888", "type": "seen", "source": "https://gist.github.com/alon710/fd2ccd5d6fcb2bc32573ddafa189b58f", "content": "# CVE-2026-3888: CVE-2026-3888: Local Privilege Escalation in snapd via systemd-tmpfiles\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-03-17\n> **Full Report:** https://cvereports.com/reports/CVE-2026-3888\n\n## Summary\nCVE-2026-3888 is a critical local privilege escalation vulnerability arising from the insecure interaction between Canonical's snap-confine helper binary and systemd-tmpfiles within the world-writable /tmp directory.\n\n## TL;DR\nAn interaction flaw between snap-confine and systemd-tmpfiles allows a local unprivileged attacker to take control of tracking directories in /tmp after they are cleaned up, permitting sandbox escape and host root access.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-268\n- **Attack Vector**: Local\n- **CVSS Score**: 7.8\n- **EPSS Score**: 0.00383\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Ubuntu Desktop 24.04 LTS\n- Ubuntu Desktop 25.10\n- Any system running snapd with cleanup configurations active in /tmp\n- **snapd**: < 2.73+ubuntu24.04.2 (Fixed in: `2.73+ubuntu24.04.2`)\n- **snapd**: < 2.73+ubuntu25.10.1 (Fixed in: `2.73+ubuntu25.10.1`)\n\n## Mitigation\n\n- Upgrade snapd to a patched version\n- Add manual exclusion rules to systemd-tmpfiles configuration\n\n**Remediation Steps:**\n1. Run command: sudo apt update && sudo apt install --only-upgrade snapd\n2. Verify snapd package version is 2.73+ubuntu24.04.2 (Ubuntu 24.04) or newer\n3. If patching is not possible immediately, edit /usr/lib/tmpfiles.d/snapd.conf to add exclusion rules\n4. Restart systemd-tmpfiles-clean.service\n\n## References\n\n- [Official Qualys Technical Advisory](https://cdn2.qualys.com/advisory/2026/03/17/snap-confine-systemd-tmpfiles.txt)\n- [Qualys Threat Research Blog](https://blog.qualys.com/vulnerabilities-threat-research/2026/03/17/cve-2026-3888-important-snap-flaw-enables-local-privilege-escalation-to-root)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-3888) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-15T10:32:52.848216Z"} https://vulnerability.circl.lu/sighting/7662c37c-b563-4f7a-b24e-ef54729cd26e/export Tue, 15 Sep 2026 10:32:52 +0000 https://vulnerability.circl.lu/sighting/b3aff8c6-364a-4383-b004-a9e706236bbd/export {"uuid": "b3aff8c6-364a-4383-b004-a9e706236bbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102292", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Gitea-template-sync-Path-Traversal-Privilege-Escalation-CVE-2026-38526-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Shirouuu\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 11:51:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC and write-up for the HackTheBox \"Nexus\" privilege escalation: root-run Gitea template-sync service vulnerable to path traversal via forged Git objects. Educational use only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T00:00:21.960645Z"} {"uuid": "b3aff8c6-364a-4383-b004-a9e706236bbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-38526", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102292", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Gitea-template-sync-Path-Traversal-Privilege-Escalation-CVE-2026-38526-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Shirouuu\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 11:51:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC and write-up for the HackTheBox \"Nexus\" privilege escalation: root-run Gitea template-sync service vulnerable to path traversal via forged Git objects. Educational use only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T00:00:21.960645Z"} https://vulnerability.circl.lu/sighting/b3aff8c6-364a-4383-b004-a9e706236bbd/export Tue, 15 Sep 2026 00:00:21 +0000