{"vulnerability": "2026-07", "sightings": [{"uuid": "138931f5-e516-451a-9305-606380ce5df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me72cr4ei32e", "content": "", "creation_timestamp": "2026-02-06T13:50:12.723104Z"}, {"uuid": "fa7b0fa0-0f4b-454c-b21b-282724b01d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0715", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me72cr4ei32e", "content": "", "creation_timestamp": "2026-02-06T13:50:12.835065Z"}, {"uuid": "94966cf6-3d56-4e7e-bbd8-f2f5292105b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mf7yypev722e", "content": "", "creation_timestamp": "2026-02-19T16:24:33.156711Z"}, {"uuid": "88fa6647-0a25-41c5-a9c9-47b5ea96eda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-094", "content": "", "creation_timestamp": "2026-02-06T13:26:19.000000Z"}, {"uuid": "37871952-df0a-4536-9b4c-0747a7185575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0715", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-094", "content": "", "creation_timestamp": "2026-02-06T13:26:19.000000Z"}, {"uuid": "c539d699-5541-458e-bb6f-c020359f3a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0797", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfnjb23f5g2h", "content": "", "creation_timestamp": "2026-02-25T01:20:09.390593Z"}, {"uuid": "f4d42b5f-8079-45a3-8221-b067829a38b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0777", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-069/", "content": "", "creation_timestamp": "2026-02-06T05:00:00.000000Z"}, {"uuid": "5b4f7d8e-c610-4e29-93f2-f0a94fdf506c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0709", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdng6xaruz2g", "content": "", "creation_timestamp": "2026-01-30T13:34:54.647526Z"}, {"uuid": "aacfdbc3-761f-4996-97a5-ad6b818108de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdlfkd3mka2o", "content": "", "creation_timestamp": "2026-01-29T18:18:03.929559Z"}, {"uuid": "1fdbc482-ff2d-44bb-854e-708e1f09c641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mfzn3qtzyat2", "content": "", "creation_timestamp": "2026-03-01T21:01:12.218427Z"}, {"uuid": "d8e3e551-2e83-4f87-8882-1e3c11d2f99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3mfznfdx2xx2r", "content": "", "creation_timestamp": "2026-03-01T21:06:07.022613Z"}, {"uuid": "9585bc98-2805-4e40-9262-28b6c88811e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mfznibfhob23", "content": "", "creation_timestamp": "2026-03-01T21:07:43.635256Z"}, {"uuid": "471e5043-a9ff-4109-a7de-391ea5539cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0754", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg4vc3hhpa2v", "content": "", "creation_timestamp": "2026-03-03T04:05:25.398871Z"}, {"uuid": "aea25202-2efe-456d-88e6-e5daa4127fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0754", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg4vkzvqvk2e", "content": "", "creation_timestamp": "2026-03-03T04:10:25.681605Z"}, {"uuid": "062be482-0788-46a8-aaa6-b5c5705af3a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3mfzrkhijhf2t", "content": "", "creation_timestamp": "2026-03-01T22:20:32.270772Z"}, {"uuid": "6c84c3ce-523e-4334-8197-d786b45e30cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116103786851049772", "content": "", "creation_timestamp": "2026-02-20T15:59:53.361424Z"}, {"uuid": "d6a7502c-f7da-451d-b985-bf64a93c6f7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3me5xiuowra2b", "content": "", "creation_timestamp": "2026-02-06T03:27:16.934284Z"}, {"uuid": "14eb1790-6cdf-44ee-be2b-87bc72c7459b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0715", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3me5xiuowra2b", "content": "", "creation_timestamp": "2026-02-06T03:27:17.048420Z"}, {"uuid": "30c0ab61-43ee-4b3d-8b6e-10d87166a7bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://bsky.app/profile/nono2357.bsky.social/post/3mffcmyf6pf2t", "content": "", "creation_timestamp": "2026-02-21T19:00:16.107996Z"}, {"uuid": "9da8ad2a-811a-4c2f-9958-e70170f0a609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0750", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdjbijauap2j", "content": "", "creation_timestamp": "2026-01-28T22:00:09.416095Z"}, {"uuid": "1724d580-c523-4c68-8f5f-b55000694580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115985606322071908", "content": "", "creation_timestamp": "2026-01-30T19:05:02.137151Z"}, {"uuid": "99b334ae-5399-421b-901f-357c7867e8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0753", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116071703605105791", "content": "", "creation_timestamp": "2026-02-15T00:00:43.746932Z"}, {"uuid": "15f5d286-47f4-49f1-8a96-d645fc2b9c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0753", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3meua5sotrt2s", "content": "", "creation_timestamp": "2026-02-15T00:00:44.191073Z"}, {"uuid": "d63653c1-9681-4f73-8548-e0d5a7574483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0797", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-050/", "content": "", "creation_timestamp": "2026-01-30T05:00:00.000000Z"}, {"uuid": "61efc744-ad19-47cc-9305-5567526193d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116159235840755413", "content": "", "creation_timestamp": "2026-03-02T11:01:19.012472Z"}, {"uuid": "fade055f-66c2-4e95-9b94-a13b19ae192d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0704", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mftb7acb6b2c", "content": "", "creation_timestamp": "2026-02-27T08:11:57.559173Z"}, {"uuid": "61969248-3c08-4180-95f0-b6ad01eda3b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0745", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3meuk7cjbye24", "content": "", "creation_timestamp": "2026-02-15T03:00:32.050621Z"}, {"uuid": "cf0d7d7c-0774-4a8f-ac17-766bda7a8e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0745", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116072410591755680", "content": "", "creation_timestamp": "2026-02-15T03:00:45.874942Z"}, {"uuid": "dbc751f3-37d2-4095-a3e7-5aa2ac2b6131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0777", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddvwhury2s", "content": "", "creation_timestamp": "2026-02-21T00:17:50.719881Z"}, {"uuid": "fc01118a-2f11-4923-af67-10de48ce1dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0797", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddw4ydps2c", "content": "", "creation_timestamp": "2026-02-21T00:17:57.549689Z"}, {"uuid": "c91039a7-5134-4336-bdc8-88a46d6a1a5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0777", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfde2ure4k2s", "content": "", "creation_timestamp": "2026-02-21T00:20:36.577898Z"}, {"uuid": "a7be1d64-6c8b-4778-a4b9-069cc4185bb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0797", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfde33wpwt2n", "content": "", "creation_timestamp": "2026-02-21T00:20:44.037160Z"}, {"uuid": "1be0dd04-d088-41ca-912e-cd7749415924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfkkg736ie2h", "content": "", "creation_timestamp": "2026-02-23T21:02:56.766849Z"}, {"uuid": "72149ffd-644b-4d5e-b1a3-eccb1cc4d23b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0752", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfvdm2p7lc2e", "content": "", "creation_timestamp": "2026-02-28T04:00:14.766684Z"}, {"uuid": "261574b7-5ead-4a8a-a89d-eb7ec2b37fbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0777", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfdz6d3fwi2n", "content": "", "creation_timestamp": "2026-02-21T06:38:20.548526Z"}, {"uuid": "6f679d08-cecc-451c-880d-665ba851a9a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0797", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfdz7zhqak2v", "content": "", "creation_timestamp": "2026-02-21T06:39:17.340580Z"}, {"uuid": "d782bc23-e131-4c3f-89d8-fe040f08b255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meyx52yyyq24", "content": "", "creation_timestamp": "2026-02-16T21:02:35.491960Z"}, {"uuid": "b6d33540-0f8e-410f-8186-484693f08b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfbkrolljo2r", "content": "", "creation_timestamp": "2026-02-20T07:15:24.595856Z"}, {"uuid": "323616c8-cc11-4c75-8703-27fd5f331f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0752", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfoqwufv6l2q", "content": "", "creation_timestamp": "2026-02-25T13:10:17.700719Z"}, {"uuid": "2e832dfa-da91-4ec7-8ad2-49ae384d8ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0704", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfosdndpfu27", "content": "", "creation_timestamp": "2026-02-25T13:35:20.065637Z"}, {"uuid": "5f371abc-c5b0-425a-a784-f6a8effba9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0752", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqp5pgxel2d", "content": "", "creation_timestamp": "2026-02-26T07:43:39.584435Z"}, {"uuid": "02f38adc-1243-49bd-889f-9dcc566ddea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/fluxius.bsky.social/post/3mfoxslo43c2y", "content": "", "creation_timestamp": "2026-02-25T15:13:11.631670Z"}, {"uuid": "2023c286-6f53-4156-933d-ff4486201529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0709", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3me2awxv2dy2i", "content": "", "creation_timestamp": "2026-02-04T16:05:35.313030Z"}, {"uuid": "5334c80c-a9cc-434d-8d3b-dab66c094a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mflqixsfex25", "content": "", "creation_timestamp": "2026-02-24T08:24:32.012534Z"}, {"uuid": "76f0b9be-870c-4185-969d-4fa2f0be3387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mf7wooghm522", "content": "", "creation_timestamp": "2026-02-19T15:43:09.378769Z"}, {"uuid": "85ccca39-c3f4-4de5-a2b1-e1e922360656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0700", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbvnopjspn2o", "content": "", "creation_timestamp": "2026-01-08T09:19:54.305550Z"}, {"uuid": "c4bcfada-0d4b-40ec-b0e4-c0a0d28e6087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0701", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbvojkrany2q", "content": "", "creation_timestamp": "2026-01-08T09:34:55.354415Z"}, {"uuid": "984a1d23-cf2e-451c-8f5e-1c4a1aab36d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbw2xedgcz2t", "content": "", "creation_timestamp": "2026-01-08T13:17:23.700946Z"}, {"uuid": "c0ec930a-c106-4b4f-9fb8-b2bec64379ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbw2yekpm52e", "content": "", "creation_timestamp": "2026-01-08T13:17:57.534342Z"}, {"uuid": "24e28c34-0007-4f08-b34c-56c0daad3173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbwbzthdlr2x", "content": "", "creation_timestamp": "2026-01-08T15:24:02.257345Z"}, {"uuid": "0c9a686e-8970-4d1c-a991-256ed5e80434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbww6dcgyj2r", "content": "", "creation_timestamp": "2026-01-08T21:24:27.923640Z"}, {"uuid": "ac398f12-3469-4bcf-99a6-2d68cfe7e425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbwwz6kj3n2g", "content": "", "creation_timestamp": "2026-01-08T21:39:29.010623Z"}, {"uuid": "09c16250-8a44-43a7-beff-3066091d6231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0730", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbxczw5nub2q", "content": "", "creation_timestamp": "2026-01-09T01:14:38.688240Z"}, {"uuid": "6b8daa1c-0c6b-4ab1-8e82-72f2ae74b958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0732", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbxd7c4kqx2c", "content": "", "creation_timestamp": "2026-01-09T01:17:39.177674Z"}, {"uuid": "da465e0b-d421-465c-b7d6-f9b1cb1adc62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0731", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbxdfb734e2e", "content": "", "creation_timestamp": "2026-01-09T01:20:59.329141Z"}, {"uuid": "f49017af-f6b6-42e6-8ecf-6b9cd8dd492a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0729", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbxefoya6v2y", "content": "", "creation_timestamp": "2026-01-09T01:39:08.431202Z"}, {"uuid": "ac70e229-245d-40d8-8f73-568d809164d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0733", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbxeongeyj2o", "content": "", "creation_timestamp": "2026-01-09T01:44:08.729328Z"}, {"uuid": "48dc38ea-6ab1-4c1b-ad23-3bf443fe5cb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0732", "type": "seen", "source": "https://gist.github.com/Darkcrai86/61922318b00f86ac356c88c9d57035e5", "content": "", "creation_timestamp": "2026-01-09T09:12:26.000000Z"}, {"uuid": "4f5a2bf0-51d7-4f47-8724-954859b8a65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0747", "type": "seen", "source": "https://gist.github.com/Darkcrai86/68a1e4235d1b22a604cc96babe17d144", "content": "", "creation_timestamp": "2026-01-09T09:13:32.000000Z"}, {"uuid": "a473931e-ca51-4059-9add-c3ff8f44ce91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0714", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mhogd3sl732h", "content": "", "creation_timestamp": "2026-03-22T20:50:40.944713Z"}, {"uuid": "ff63d307-03d5-48f6-a25a-ca157b17ea9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0732", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115865555268914985", "content": "", "creation_timestamp": "2026-01-09T14:14:28.611975Z"}, {"uuid": "c3b28969-8d16-49ac-9e45-9fa46d5d05f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0731", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115865555268914985", "content": "", "creation_timestamp": "2026-01-09T14:14:28.687847Z"}, {"uuid": "e3aa2baa-4298-4707-a917-26629cdf7fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0796", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-018/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "7f0ed17c-ec2a-49a9-805b-03d1682b77df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0795", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-017/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "b5079dab-887f-47c5-8d7b-7a7f5cfadc52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0794", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-016/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "bc2f9c54-83c0-40ae-b3de-b974ae4fde02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0793", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-015/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "e40f030b-5fe6-45cc-8c73-042b0de55973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0792", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-014/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "15318252-2fdf-41d2-b2ef-e825c0fe19e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0791", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-013/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "17b79451-8a72-4c69-b904-bc1b46d48967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0790", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-012/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "bee34d4b-8809-4f8a-b023-7dc4e0d8b5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0789", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-011/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "7ee5ea4a-9b9e-4a82-9a9d-258809adf1ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0788", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-010/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "3debb807-5744-4825-a5e2-815b762409ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0787", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-009/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "9192392d-9a22-40af-91ad-51d95062f385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0786", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-008/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "e43d5032-8943-45ee-a3fb-57168aaa8dc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0785", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-007/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "7529c7e6-6ede-4e50-9043-2ccd6ff164a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0784", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-006/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "260dd81a-51c9-485a-8969-250b132bd2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0759", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-025/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "299cec1d-b0d9-4634-86a7-4dd0b85fc69f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0783", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-005/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "586ea860-7032-4d4e-8198-45208f2f2e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0782", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-004/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "7d2cf9e6-36a9-4174-947a-920e15a68bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0781", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-003/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "59786c74-75ae-4c31-b04b-d513a165bcd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0780", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-002/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "61e6bd22-789f-4a0c-8236-e770da9d245f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0779", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-001/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "857191ec-bcb3-4969-9c49-5481bf1f5b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0758", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-024/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "9805f316-4d58-4213-b64a-6c6232f49c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0757", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-023/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "61cbb0f4-fdb0-48d7-9274-e8b358161ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-022/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "bdca9990-9488-4397-ad0d-dfeafafa7282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-021/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "cbd965c3-e5fa-4427-baad-5acbacc445f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0793", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115866267395234635", "content": "", "creation_timestamp": "2026-01-09T17:15:35.198325Z"}, {"uuid": "51fabe9e-9d86-4f0c-bf22-dda4901f13b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0794", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115866320540413211", "content": "", "creation_timestamp": "2026-01-09T17:29:05.028953Z"}, {"uuid": "68c42e31-60e7-4560-a52f-5e2fa98a7c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0773", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-042/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "a9a0f18f-bc06-447a-b7a8-ae42c4883d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0778", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-041/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "4bacac59-635f-4d97-813a-b80a8ab80a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-040/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "47aaafb4-6137-440b-8477-e5179f094059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0774", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-039/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "029de5fc-b655-45d9-9098-36a88e4b6ac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0772", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-038/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "9f6b1989-d625-4a41-9f3d-0f206f9ec613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0771", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-037/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "2d780887-47f2-4db7-9fdf-7ad343ad1eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-036/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "ba8225e1-879d-4f43-9557-c928042ad39d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0769", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-035/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "69f1a826-cec8-44fe-8faa-38e17e147369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-034/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "9de5cacf-b5a1-4d3b-882e-e009c34f2a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0767", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-033/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "4860e8c8-3e6e-4d3a-9b53-21a3c5905a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0766", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-032/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "f53482d9-c7c5-4d30-9fc8-26448aef1619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0765", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-031/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "c17c6a20-59dc-4919-b53c-17503c84fa77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0764", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-030/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "32305b40-ffd3-4ab1-adef-5a97ee73ee65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0763", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-029/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "15672c39-be03-4b34-a848-663aae00a596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0762", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-028/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "372982a9-34c5-41a6-a65d-8dbaffe97e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0761", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-027/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "72b06cb1-ab4e-4f66-8891-f9dd509dc494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0760", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-026/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "0105ee19-f81f-4f58-9cde-4d73cb21e577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-0708", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-0708", "content": "", "creation_timestamp": "2026-03-17T03:16:07.000000Z"}, {"uuid": "290be516-ea44-4a3a-ab5e-43f7e17ffd29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0775", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-043/", "content": "", "creation_timestamp": "2026-01-12T05:00:00.000000Z"}, {"uuid": "759ba93d-ac74-4c29-bb3c-754cde32458d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0775", "type": "seen", "source": "https://gist.github.com/Darkcrai86/5f300d37409ffdb7bb232443d40d988b", "content": "", "creation_timestamp": "2026-01-13T08:29:07.000000Z"}, {"uuid": "a396901d-62d7-4f3a-ad82-74849032df5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0716", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcdwsxcmpm2r", "content": "", "creation_timestamp": "2026-01-14T01:40:36.571160Z"}, {"uuid": "ee3efa4b-59b2-4315-81d0-c7d2cae17c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0717", "type": "seen", "source": "https://gist.github.com/Darkcrai86/4de4c18716b589fedbfb6c5486ce1960", "content": "", "creation_timestamp": "2026-01-14T07:39:08.000000Z"}, {"uuid": "cba80d2b-eafa-4e9e-a011-fbdd5a4e8437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0717", "type": "seen", "source": "https://gist.github.com/Darkcrai86/da77b9805574fad193daa3baf4695176", "content": "", "creation_timestamp": "2026-01-14T08:11:33.000000Z"}, {"uuid": "a721914d-dc5f-443a-8071-e2e66e22be02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0741", "type": "seen", "source": "https://gist.github.com/Darkcrai86/67e8682ea1a2bd86b7dfe3375857d64b", "content": "", "creation_timestamp": "2026-01-14T09:14:26.000000Z"}, {"uuid": "1a125b57-178f-4d90-9763-64ba3323d087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0734", "type": "seen", "source": "https://gist.github.com/Darkcrai86/cf69eb2c3eb9eabde959d2f2528bf657", "content": "", "creation_timestamp": "2026-01-14T09:15:31.000000Z"}, {"uuid": "503311fc-1436-4ada-9693-6be9f81100aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0739", "type": "seen", "source": "https://gist.github.com/Darkcrai86/79aa845980fddaa7e74a4d5790dce89e", "content": "", "creation_timestamp": "2026-01-14T09:16:43.000000Z"}, {"uuid": "b381ab32-1af7-48c2-b31e-63c15d680719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0734", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcetfpebkk2m", "content": "", "creation_timestamp": "2026-01-14T10:12:10.637347Z"}, {"uuid": "1a4aee3d-a137-43d5-862e-7376682259da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcetx6cf5e2c", "content": "", "creation_timestamp": "2026-01-14T10:21:56.856196Z"}, {"uuid": "1f39e9e2-b366-4496-83c0-2ede9a277147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcevcnpx3u2q", "content": "", "creation_timestamp": "2026-01-14T10:46:15.619707Z"}, {"uuid": "4f8305a9-3e18-4d0a-8bef-bfb58596be8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0717", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcevlm6zon2c", "content": "", "creation_timestamp": "2026-01-14T10:51:16.144922Z"}, {"uuid": "fe865b66-a8c2-4b11-8f30-18431b341f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0716", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcfpzw3wvk2w", "content": "", "creation_timestamp": "2026-01-14T18:44:41.534098Z"}, {"uuid": "2784de4a-b4ac-4272-9899-58b4b1a54b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcfpzw3wvk2w", "content": "", "creation_timestamp": "2026-01-14T18:44:41.627630Z"}, {"uuid": "5c69c201-1060-4be8-92ba-bd6eb4e24d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-0752", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-community-edition-ce-e-enterprise-edition-ee-1", "content": "", "creation_timestamp": "2026-02-25T09:53:32.000000Z"}, {"uuid": "f22c9081-372d-4734-98b1-3766d44c82af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0713", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mchpeamcva2c", "content": "", "creation_timestamp": "2026-01-15T13:37:46.460100Z"}, {"uuid": "a98f77ed-afb4-4edc-8eb0-6a953fdf2ce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0712", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq5onbx22e", "content": "", "creation_timestamp": "2026-01-15T13:51:59.760226Z"}, {"uuid": "797ff4c4-2a14-4a8e-839a-29a27e9f0be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0713", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq5wfeph2u", "content": "", "creation_timestamp": "2026-01-15T13:52:08.141757Z"}, {"uuid": "7e8043c4-d4e1-4991-a8dd-7d27c4688742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0712", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq6hbhlo2a", "content": "", "creation_timestamp": "2026-01-15T13:52:25.862654Z"}, {"uuid": "36295e94-aaeb-4974-a70e-676b418a70be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0713", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mchq6ozawy2p", "content": "", "creation_timestamp": "2026-01-15T13:52:33.931840Z"}, {"uuid": "d8c2683f-c8ca-490f-834d-ada3342e7e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0712", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115899757567671679", "content": "", "creation_timestamp": "2026-01-15T15:12:33.782336Z"}, {"uuid": "5d186f9b-12a8-4573-9f3f-2b20a2929b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0713", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115899757567671679", "content": "", "creation_timestamp": "2026-01-15T15:12:33.875993Z"}, {"uuid": "6a1bc8ef-e940-4b23-b80d-43e7c2ffb479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0725", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcmffn5miz2v", "content": "", "creation_timestamp": "2026-01-17T10:22:53.963999Z"}, {"uuid": "b68435c0-7296-4518-84ae-b151428a98a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mctur5m43223", "content": "", "creation_timestamp": "2026-01-20T09:46:33.252891Z"}, {"uuid": "5bc0a763-b44d-46e7-9dd1-c2c7f327ca52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0708", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhehkudtez2u", "content": "", "creation_timestamp": "2026-03-18T21:46:17.819956Z"}, {"uuid": "9754a900-42b2-4515-b26d-3cf23c31d4c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0726", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcujajn3762n", "content": "", "creation_timestamp": "2026-01-20T15:52:55.215734Z"}, {"uuid": "65a96ccf-676f-4478-aa1c-b552b08e2d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0726", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcujnvxk7s24", "content": "", "creation_timestamp": "2026-01-20T16:00:25.192546Z"}, {"uuid": "42064d66-8e37-427c-8cef-d152caf03092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0726", "type": "seen", "source": "https://gist.github.com/Darkcrai86/f5895b04d3011e097f1c8a445c4d5e72", "content": "", "creation_timestamp": "2026-01-20T16:20:31.000000Z"}, {"uuid": "155700fd-077e-4eb8-811b-5e51f82eebcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0723", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcx3ixs35a2l", "content": "", "creation_timestamp": "2026-01-21T16:25:05.795879Z"}, {"uuid": "c1b59f69-d184-48ed-b55d-85d6698691b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0723", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mcxvzk5s552d", "content": "", "creation_timestamp": "2026-01-22T00:19:39.164825Z"}, {"uuid": "87bcc262-254f-46d2-aa18-0a7cebef6308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0723", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mcyaj2vkuu2b", "content": "", "creation_timestamp": "2026-01-22T03:27:17.072670Z"}, {"uuid": "a19db5b0-8ead-4ba2-8c41-e69ae998476b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0723", "type": "seen", "source": "https://gist.github.com/Darkcrai86/9cec3d3a1e04f0a00e265532c2f717fc", "content": "", "creation_timestamp": "2026-01-22T09:19:24.000000Z"}, {"uuid": "3782e7a0-0d0d-478b-b8c8-98052e50b43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0723", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mczhq2frii2m", "content": "", "creation_timestamp": "2026-01-22T15:09:07.678186Z"}, {"uuid": "e3eac1c8-494b-46f2-b8b6-6a3a7fda2eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0798", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2ckgl4tc2c", "content": "", "creation_timestamp": "2026-01-22T23:09:09.822389Z"}, {"uuid": "67ec6af1-9549-409e-95e0-e8b023cfa266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0787", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2rnlvhnq2r", "content": "", "creation_timestamp": "2026-01-23T03:39:22.264032Z"}, {"uuid": "6ec6a2b0-5716-435a-b5dc-6dc87c28730f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0794", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2rwkchjs2n", "content": "", "creation_timestamp": "2026-01-23T03:44:22.465210Z"}, {"uuid": "6ff6812f-ee82-45fa-b7a1-d038527c87b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0793", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2sih5fsg2h", "content": "", "creation_timestamp": "2026-01-23T03:54:23.277332Z"}, {"uuid": "ae42b765-962a-4664-8edd-1a11e0965fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0792", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2srfknfg2n", "content": "", "creation_timestamp": "2026-01-23T03:59:23.667395Z"}, {"uuid": "499a46f3-c2ed-4641-a7a8-72482575cdb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0791", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2t2dxqlx2n", "content": "", "creation_timestamp": "2026-01-23T04:04:24.037609Z"}, {"uuid": "b5da4766-08d2-450f-abce-20302560597b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0793", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2wbnuqov2x", "content": "", "creation_timestamp": "2026-01-23T05:02:11.347786Z"}, {"uuid": "751c808a-c072-47ed-9dfd-a24fc7163131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0794", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2wbvkdsk24", "content": "", "creation_timestamp": "2026-01-23T05:02:18.997981Z"}, {"uuid": "2170eafc-2b12-46e0-976d-f10b73714462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0785", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2wc4cwi623", "content": "", "creation_timestamp": "2026-01-23T05:02:26.704396Z"}, {"uuid": "cd64eb35-6b77-4f74-b579-757d62401bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0793", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2wcphpbe22", "content": "", "creation_timestamp": "2026-01-23T05:02:46.439875Z"}, {"uuid": "54dc1c9c-28d5-4ff3-b919-bb10d57cb151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0794", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2wcxhyy62m", "content": "", "creation_timestamp": "2026-01-23T05:02:55.219729Z"}, {"uuid": "f535e8c3-8d57-43d6-a3eb-af44d661cade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0785", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2wd7dyhg2m", "content": "", "creation_timestamp": "2026-01-23T05:03:02.934539Z"}, {"uuid": "cb62e56b-dd32-49d8-9758-027b5e2232c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0785", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2weq5ene23", "content": "", "creation_timestamp": "2026-01-23T05:03:54.558274Z"}, {"uuid": "d5fd0f68-b643-46e1-8d95-57c43d167682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0786", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2xlzbg7w23", "content": "", "creation_timestamp": "2026-01-23T05:25:52.414427Z"}, {"uuid": "ff4083f1-665b-4346-9c31-23666f4b8d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0787", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2xu4smnq2h", "content": "", "creation_timestamp": "2026-01-23T05:30:24.360307Z"}, {"uuid": "a38b884f-6717-4055-a44e-68a1768ca427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0791", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2xudxaka23", "content": "", "creation_timestamp": "2026-01-23T05:30:31.818777Z"}, {"uuid": "e248c766-6596-4144-8e18-ff8804d2a3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0792", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2xulcsiy2a", "content": "", "creation_timestamp": "2026-01-23T05:30:39.458288Z"}, {"uuid": "b82f59b3-3cda-4dd0-8309-0be4a8dd8204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0778", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2xvokdng2x", "content": "", "creation_timestamp": "2026-01-23T05:31:16.321760Z"}, {"uuid": "fa2ce237-16c2-4e7e-bbd2-d12f2a4f1fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zecuky22h", "content": "", "creation_timestamp": "2026-01-23T05:57:21.406560Z"}, {"uuid": "feb1e745-8d24-4644-98e8-253486579d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0772", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zejlbhd2a", "content": "", "creation_timestamp": "2026-01-23T05:57:28.408598Z"}, {"uuid": "7112d172-c1ce-481f-a91e-6a58efb97aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0773", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zerlyet2r", "content": "", "creation_timestamp": "2026-01-23T05:57:36.718088Z"}, {"uuid": "cfd22bed-9a81-4f66-b610-3136c9d16772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0774", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zetkhj622", "content": "", "creation_timestamp": "2026-01-23T05:57:39.496329Z"}, {"uuid": "7c42b5fe-058b-4600-aeea-de734ebbdb67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0763", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zf3dab32a", "content": "", "creation_timestamp": "2026-01-23T05:57:46.942245Z"}, {"uuid": "06bbc842-d4f0-405f-a788-b2fa1a9109fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0764", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zfcnild2v", "content": "", "creation_timestamp": "2026-01-23T05:57:54.828643Z"}, {"uuid": "e3054031-57bf-4b59-9c6e-2045a3edb5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0772", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zghmimk24", "content": "", "creation_timestamp": "2026-01-23T05:58:33.272200Z"}, {"uuid": "90f0ee68-3930-4d0c-8bd0-4bed6751b2f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0773", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zgp6ucc2h", "content": "", "creation_timestamp": "2026-01-23T05:58:41.602454Z"}, {"uuid": "f06731ea-4238-48ea-9f1f-6c18ace8ab76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0774", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zgwxfud2r", "content": "", "creation_timestamp": "2026-01-23T05:58:49.665077Z"}, {"uuid": "6d37962a-07c0-4b47-96a8-274657574865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0763", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zntbxbo27", "content": "", "creation_timestamp": "2026-01-23T06:02:41.291539Z"}, {"uuid": "e74f673a-ed91-44ce-901a-2a343703e3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0764", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zo2yqnu2v", "content": "", "creation_timestamp": "2026-01-23T06:02:48.639084Z"}, {"uuid": "ff7cc578-b3d3-4372-b9f5-d8c1228b0fae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0765", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md2zoc5eqm2g", "content": "", "creation_timestamp": "2026-01-23T06:02:55.854679Z"}, {"uuid": "fd34de62-6578-40f3-a913-2845e94e881a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0766", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md33r42wu32h", "content": "", "creation_timestamp": "2026-01-23T06:40:18.848038Z"}, {"uuid": "41ca6ac8-4b9d-4364-98cc-8daedf9a4c60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md33rdfo322r", "content": "", "creation_timestamp": "2026-01-23T06:40:25.831771Z"}, {"uuid": "defb3f8a-327a-4c3a-a8d5-768c5ea28bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0769", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md33rkq35w22", "content": "", "creation_timestamp": "2026-01-23T06:40:32.950158Z"}, {"uuid": "8ddf6e8a-cc20-4ea2-b859-6a44c2f200fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md33vwks3v2m", "content": "", "creation_timestamp": "2026-01-23T06:42:59.842981Z"}, {"uuid": "3c7e2073-8a05-4402-ad93-1e426db0d5f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0795", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md363zrluo2m", "content": "", "creation_timestamp": "2026-01-23T07:22:11.490505Z"}, {"uuid": "8a58c05d-8b19-4fa6-aef0-b405646e88bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0796", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md36sy64xk2g", "content": "", "creation_timestamp": "2026-01-23T07:35:01.665231Z"}, {"uuid": "9678d3df-473e-4338-914a-a48a9e717e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0775", "type": "seen", "source": "https://gist.github.com/Darkcrai86/89e65cf2a5ab0a0c1f6f196182bbb6e6", "content": "", "creation_timestamp": "2026-01-23T07:46:03.000000Z"}, {"uuid": "1b612d98-151c-4921-a388-a71157bf4fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0762", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3aj7nin22n", "content": "", "creation_timestamp": "2026-01-23T08:05:21.607493Z"}, {"uuid": "3e14fa43-26a9-430d-83f6-e181b5fe72f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0763", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3am7dtug26", "content": "", "creation_timestamp": "2026-01-23T08:07:01.642233Z"}, {"uuid": "702cdebd-2bce-4e79-8ced-6a2ec294e367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0761", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3apeno7c2g", "content": "", "creation_timestamp": "2026-01-23T08:08:47.862960Z"}, {"uuid": "d6529980-f9f8-4743-8be4-c1fc089b79b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0759", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3asqasrt2n", "content": "", "creation_timestamp": "2026-01-23T08:10:40.538910Z"}, {"uuid": "a7a5f6cf-fddf-4d50-90fa-d95f1d1f0519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3awczrff2h", "content": "", "creation_timestamp": "2026-01-23T08:12:40.918505Z"}, {"uuid": "940fbd61-864d-42be-af57-8be48c5b9444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0773", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3b25x7d42c", "content": "", "creation_timestamp": "2026-01-23T08:14:49.785513Z"}, {"uuid": "b121b01a-bb12-44f1-9d0c-89f036cfc5c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0769", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3b6cerxr2m", "content": "", "creation_timestamp": "2026-01-23T08:17:08.665646Z"}, {"uuid": "a7327b7c-3a0a-42be-875b-539dbaea0f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3bcrstqg2c", "content": "", "creation_timestamp": "2026-01-23T08:19:39.092219Z"}, {"uuid": "0da4b1bf-5bbc-44bc-978f-9fd8a23234ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3bhob4nt26", "content": "", "creation_timestamp": "2026-01-23T08:22:23.302652Z"}, {"uuid": "be2fed5a-a71c-41df-85c0-627d3d20bd38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0765", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3bn2basu2m", "content": "", "creation_timestamp": "2026-01-23T08:25:23.730043Z"}, {"uuid": "7aadcfd5-638c-448f-aea0-110071a61bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3bszcr7a2n", "content": "", "creation_timestamp": "2026-01-23T08:28:44.194843Z"}, {"uuid": "f42da3c0-0df9-4192-88b3-4cd380020dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0774", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3bzq7vnd2i", "content": "", "creation_timestamp": "2026-01-23T08:32:29.391021Z"}, {"uuid": "86e47011-ab1f-4e02-b7af-a3e80f3f2a6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3cbfs3yj2r", "content": "", "creation_timestamp": "2026-01-23T08:36:46.771805Z"}, {"uuid": "11f83e67-23d5-4153-bb99-7b21dae47f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3ctcmjjd23", "content": "", "creation_timestamp": "2026-01-23T08:46:47.325774Z"}, {"uuid": "24477023-d373-47b5-ab68-bc26b5af2602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0766", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3d4b24va2c", "content": "", "creation_timestamp": "2026-01-23T08:51:48.170202Z"}, {"uuid": "5466bb2c-6df9-41c8-8041-14ba92eafc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3df7hmry2c", "content": "", "creation_timestamp": "2026-01-23T08:56:48.046311Z"}, {"uuid": "aaeffeac-685e-41c5-824d-d8e2b2a7533d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0778", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3do5vemn2i", "content": "", "creation_timestamp": "2026-01-23T09:01:49.272753Z"}, {"uuid": "74346707-9b36-4442-a640-40e9082ea310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hmu4eun22", "content": "", "creation_timestamp": "2026-01-23T10:12:39.833740Z"}, {"uuid": "b6e4d0ea-402d-4b09-99f2-619bc18b4514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0757", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hn36zdg25", "content": "", "creation_timestamp": "2026-01-23T10:12:47.242195Z"}, {"uuid": "6841bbf1-ef10-4f3b-a3ee-1ca3ec499659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0758", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hxwvw4r2o", "content": "", "creation_timestamp": "2026-01-23T10:18:52.205852Z"}, {"uuid": "0b033e83-1c5e-47ee-aee4-da87d9e51371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0759", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hy6ggy72h", "content": "", "creation_timestamp": "2026-01-23T10:18:59.930769Z"}, {"uuid": "ab316d62-8c65-4614-8ee0-9cc5b58cf5a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0758", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hyuy3fv22", "content": "", "creation_timestamp": "2026-01-23T10:19:23.831842Z"}, {"uuid": "a70be046-2236-4019-b5b0-19e98217d1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0759", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hz4iaxf22", "content": "", "creation_timestamp": "2026-01-23T10:19:31.409186Z"}, {"uuid": "f7da84a1-8121-4525-a137-9e6c2526e127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0760", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hzdr3vr2o", "content": "", "creation_timestamp": "2026-01-23T10:19:39.109559Z"}, {"uuid": "843747d5-0b9a-4e8c-80cb-75818a9cead5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0761", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3ki3bd472h", "content": "", "creation_timestamp": "2026-01-23T11:03:41.205724Z"}, {"uuid": "74c9f29a-bea1-4b6d-bcbf-8539b3101c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0762", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3kiciwea2m", "content": "", "creation_timestamp": "2026-01-23T11:03:48.644409Z"}, {"uuid": "4a1991f2-f5f0-4af6-910d-c5bbb42a484a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0710", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3uda7j4c2g", "content": "", "creation_timestamp": "2026-01-23T13:59:55.918160Z"}, {"uuid": "7c9be1a1-cfe7-4a3a-b5e9-14473d440117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0710", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3vi4a5g42h", "content": "", "creation_timestamp": "2026-01-23T14:20:33.133026Z"}, {"uuid": "fd36c469-dd6f-4f69-9621-fbf55b888ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3md4j4wtslc2d", "content": "", "creation_timestamp": "2026-01-23T20:12:22.714269Z"}, {"uuid": "98d07978-c628-42a4-becb-2674e9864b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0798", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3md6ob76m5572", "content": "", "creation_timestamp": "2026-01-24T16:52:26.839637Z"}, {"uuid": "68c5f3d8-0ac4-46b7-9b3f-9a09a8a814cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0798", "type": "seen", "source": "https://gist.github.com/alon710/047e9957f2ab58798d9b9678f4c3043a", "content": "", "creation_timestamp": "2026-01-24T21:22:06.000000Z"}, {"uuid": "d2321cf3-b9bb-4370-9e9c-bab69a3539f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0723", "type": "seen", "source": "https://bsky.app/profile/saphire.dragon.style.ap.brid.gy/post/3mhcytgwa74f2", "content": "", "creation_timestamp": "2026-03-18T07:50:06.306931Z"}, {"uuid": "fc4ef805-7265-4758-b18c-fef239f3e339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-0723", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ac721c04-53d7-44d1-a34a-8ed31bea83c8", "content": "", "creation_timestamp": "2026-01-23T10:50:02.454163Z"}, {"uuid": "715d2f8f-a090-40fd-a7f2-065b4dc9b0c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0761", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115958933626281155", "content": "", "creation_timestamp": "2026-01-26T02:01:48.830592Z"}, {"uuid": "88fb0f4a-4659-45fe-913e-42a39d05278a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0761", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mdc5mqppnc2l", "content": "", "creation_timestamp": "2026-01-26T02:02:16.811590Z"}, {"uuid": "7245cea1-9892-41cb-af7f-8eb09882f26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0705", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdgktidct62j", "content": "", "creation_timestamp": "2026-01-27T20:09:20.646373Z"}, {"uuid": "c7eaa4e0-1e32-41e0-ab89-aa99a5619908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0702", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdhzdz7l662h", "content": "", "creation_timestamp": "2026-01-28T10:01:47.458375Z"}, {"uuid": "80db929e-f606-44bb-8210-728c26770171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0702", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdiariz3wn26", "content": "", "creation_timestamp": "2026-01-28T12:14:36.150123Z"}, {"uuid": "20867050-1f95-42aa-b63a-50f9030deebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/wordfenceofficial.bsky.social/post/3mitrjp4tp22q", "content": "", "creation_timestamp": "2026-04-06T17:19:46.940705Z"}, {"uuid": "ae1a9a05-a406-4ea8-a151-8d67894c7171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/81668", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0740\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-25 23:14:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-0740\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-26T00:00:04.000000Z"}, {"uuid": "32b390c9-6d8b-4ee2-ae90-196492fab415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miuzmkuxzz2r", "content": "", "creation_timestamp": "2026-04-07T05:17:09.572568Z"}, {"uuid": "148ccfad-bd38-4570-9a66-7436ee2a407b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0740", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116361778335158064", "content": "", "creation_timestamp": "2026-04-07T05:30:31.359765Z"}, {"uuid": "5c6572ee-1b8e-480c-80e8-12555f61fc79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0740", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3miv2ejndkt27", "content": "", "creation_timestamp": "2026-04-07T05:30:33.352433Z"}, {"uuid": "997e14dd-d6d2-4e41-8ff9-c7382fe9414d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miv5y6suex27", "content": "", "creation_timestamp": "2026-04-07T06:35:26.134484Z"}, {"uuid": "28e7dc84-6a5d-497e-98b2-d0f63f5900a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mivpheuhrn2q", "content": "", "creation_timestamp": "2026-04-07T11:47:57.506463Z"}, {"uuid": "ff105b58-3ab2-499d-83f8-8e7081d3151b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mix22tsqq327", "content": "", "creation_timestamp": "2026-04-08T00:30:31.411297Z"}, {"uuid": "e5f6f39b-271b-4fb1-a1bd-d46697934c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/9988", "content": "\u041e\u0434\u0438\u043d POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043b\u0435\u0436\u0438\u0442 PHP-\u0448\u0435\u043b\u043b\n\n\u0411\u0435\u0437 \u043b\u043e\u0433\u0438\u043d\u0430. \u0411\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f. CVE-2026-0740 \u0432 Ninja Forms \u2014 File Uploads: CVSS 9.8, PR:N, UI:N.\n\n\ud83d\udd0d \u0427\u0442\u043e \u0441\u043b\u043e\u043c\u0430\u043d\u043e: \u0444\u0443\u043d\u043a\u0446\u0438\u044f handle_upload \u043d\u0435 \u0432\u0430\u043b\u0438\u0434\u0438\u0440\u0443\u0435\u0442 \u0442\u0438\u043f \u0444\u0430\u0439\u043b\u0430. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0448\u043b\u0451\u0442 POST \u043d\u0430 admin-ajax.php \u2014 \u0438 .php-\u0444\u0430\u0439\u043b \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 wp-content/uploads/. \u041a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 CWE-434.\n\n\u26a0\ufe0f \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0438\u0441\u043a \u2014 \u043f\u0440\u0435\u043c\u0438\u0443\u043c-\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435: \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0438\u0434\u0443\u0442 \u0447\u0435\u0440\u0435\u0437 WordPress.org, \u043d\u0443\u0436\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e. \u041f\u0430\u0442\u0447 (\u0432\u0435\u0440\u0441\u0438\u044f 3.3.27) \u0432\u044b\u0448\u0435\u043b 19 \u043c\u0430\u0440\u0442\u0430 2026-\u0433\u043e, CVE \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 7 \u0430\u043f\u0440\u0435\u043b\u044f \u2014 \u0442\u0440\u0438 \u043d\u0435\u0434\u0435\u043b\u0438 \u0444\u043e\u0440\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445.\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u2014 \u0440\u0430\u0437\u0431\u043e\u0440 kill chain \u043f\u043e MITRE ATT\\&CK: \u043e\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 WPScan \u0434\u043e \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f DB-credentials \u0438\u0437 wp-config.php, \u043f\u043b\u044e\u0441 detection-\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u043f\u0430\u0442\u0447-\u0434\u0438\u0444\u0444.\n\nhttps://codeby.net/threads/uyazvimost-ninja-forms-rce-cve-2026-0740-polnyi-razbor-ekspluatatsii-i-zashchity-wordpress.92676/", "creation_timestamp": "2026-04-17T05:02:09.000000Z"}, {"uuid": "b8c9108a-c7f2-4ea2-b0ce-93d659d181f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/8/nodejs-trust-falls-dangerous-module-resolution-on-windows", "content": "", "creation_timestamp": "2026-04-08T14:18:48.000000Z"}, {"uuid": "69949ad9-6ee8-428a-839f-dafc46b77e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0775", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/8/nodejs-trust-falls-dangerous-module-resolution-on-windows", "content": "", "creation_timestamp": "2026-04-08T14:18:48.000000Z"}, {"uuid": "3b3a6462-8518-4259-a7fd-ce5e2a2a83b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miz6wtzjyj2y", "content": "", "creation_timestamp": "2026-04-08T21:03:04.653208Z"}, {"uuid": "5fa6b707-30da-46ba-9ddd-8d34a90e8a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mj2xzbopvh26", "content": "", "creation_timestamp": "2026-04-09T14:04:26.524289Z"}, {"uuid": "f25509da-133d-46db-97ba-955f5a3cda71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj3zd2biqt27", "content": "", "creation_timestamp": "2026-04-10T00:00:27.945554Z"}, {"uuid": "e899b99f-3623-464e-a05d-41cbd3f4111f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mj5ig6fwrv2x", "content": "", "creation_timestamp": "2026-04-10T14:03:18.680306Z"}, {"uuid": "f3d49416-ec28-4dfc-969d-d7ca3391c6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0737", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mj5jw4mexm2o", "content": "", "creation_timestamp": "2026-04-10T14:30:07.278941Z"}, {"uuid": "d2372bcc-9a99-4774-9e20-2ab35bdc75b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mj5r3c3eym2x", "content": "", "creation_timestamp": "2026-04-10T16:38:16.919063Z"}, {"uuid": "31214689-9f9f-4e76-bd30-c77571fd5015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0738", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mj6bf4mzmm2c", "content": "", "creation_timestamp": "2026-04-10T21:30:07.203949Z"}, {"uuid": "bd872da4-5cae-40c2-bad0-a0fe9073d0b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wordpress-rilevato-sfruttamento-della-cve-2026-0740-nel-plugin-ninja-forms", "content": "", "creation_timestamp": "2026-04-13T05:34:04.000000Z"}, {"uuid": "eb4383bf-933f-4095-8d05-b3a7fcf2fb51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mjhkafkddp2f", "content": "", "creation_timestamp": "2026-04-14T14:02:29.628010Z"}, {"uuid": "0959ca05-f356-4171-81c2-9758145a88c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mjhkbytrsl2q", "content": "", "creation_timestamp": "2026-04-14T14:03:23.248050Z"}, {"uuid": "3eb651b0-c3ba-4998-9394-b6e8b7f51259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0718", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjm5t6k5am2f", "content": "", "creation_timestamp": "2026-04-16T10:03:41.178723Z"}, {"uuid": "142fe34e-70ba-4b09-bcda-8577199dce49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/wordfenceofficial.bsky.social/post/3mjndlief222t", "content": "", "creation_timestamp": "2026-04-16T21:19:35.151242Z"}, {"uuid": "46d40753-08f4-48e0-b91a-09faf93e1628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "exploited", "source": "https://t.me/true_secator/8079", "content": "Defiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u043d\u043e\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 Ninja Forms File Uploads \u0434\u043b\u044f WordPress, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0435\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d Wordfence \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u043e\u043b\u0435\u0435 3600\u00a0\u0430\u0442\u0430\u043a \u043d\u0430 CVE-2026-0740 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 24 \u0447\u0430\u0441\u0430.\n\nNinja Forms - \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440 \u0444\u043e\u0440\u043c \u0434\u043b\u044f WordPress \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 600 \u0442\u044b\u0441. \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0444\u043e\u0440\u043c\u044b \u0431\u0435\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0435\u0440\u0435\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u043d\u0438\u044f. \u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u0442\u043e\u043c \u0436\u0435 \u043f\u0430\u043a\u0435\u0442\u0435, \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 90 \u0442\u044b\u0441. \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nCVE-2026-0740 \u0438\u043c\u0435\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,8 \u0438\u0437 10 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Ninja Forms File Upload \u0434\u043e 3.3.26 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Wordfence, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u043e\u0432/\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0438\u043c\u0435\u043d\u0438 \u0444\u0430\u0439\u043b\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f PHP-\u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043c\u0435\u043d\u0430\u043c\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438.\n\n\u0412 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0442\u0438\u043f\u0430 \u0444\u0430\u0439\u043b\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0438\u043c\u0435\u043d\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043f\u0435\u0440\u0435\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043d\u043e \u0438 \u0444\u0430\u0439\u043b\u044b \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c .php.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0438\u043c\u0435\u043d \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043b\u0435\u0433\u0447\u0430\u0435\u0442 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0444\u0430\u0439\u043b \u0434\u0430\u0436\u0435 \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0412\u0441\u0435 \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 PHP-\u043a\u043e\u0434, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0443 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0438 \u043f\u043e\u043b\u043d\u044b\u0439 \u0437\u0430\u0445\u0432\u0430\u0442 \u0441\u0430\u0439\u0442\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0421\u0435\u043b\u0438\u043c\u043e\u043c \u041b\u0430\u043d\u0443\u0430\u0440\u043e\u043c (whattheslime), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 8 \u044f\u043d\u0432\u0430\u0440\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b \u043f\u043e \u043d\u0435\u0439 \u043e\u0442\u0447\u0435\u0442 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a Wordfence.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 Wordfence \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443 \u043f\u043e\u043b\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0430\u0432\u0438\u043b \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 10 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u043e\u043b\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 3.3.27, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 19 \u043c\u0430\u0440\u0442\u0430.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e Wordfence \u0442\u0435\u043f\u0435\u0440\u044c \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Ninja Forms File Upload \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.", "creation_timestamp": "2026-04-08T15:49:34.000000Z"}, {"uuid": "80035ceb-b18b-473e-99cf-92fa1e0a81e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/kFmk3IZ3Z2qzEI0aWgGpXK0TflqqE9Sd4_8Q2OIAfUn3vfM", "content": "", "creation_timestamp": "2026-04-17T07:00:12.000000Z"}, {"uuid": "16a78d17-dc00-42b2-851e-522a5bcd54a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/PccILqNbDdjDYDrDdIeHFnNV8hFt7Dml8Dmmd7IXINWTSDI", "content": "", "creation_timestamp": "2026-04-07T07:15:32.000000Z"}, {"uuid": "e91a5f73-dc4b-44a5-8e98-e842a69c2f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/-3DL24OhrtcIgo9QG72TD8xQtaEdTWVMF9bFoz5wsaSPnZU", "content": "", "creation_timestamp": "2026-04-08T19:00:26.000000Z"}, {"uuid": "0dbaea5b-e9b9-445e-9ae5-4bb073dec9f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/jQQxeN2mPQPtfMYo_To2hQ-_smSd26JApgUtHwY05JTWW84", "content": "", "creation_timestamp": "2026-04-08T21:00:04.000000Z"}, {"uuid": "0a4744a8-4524-49f8-8a35-f22804afcca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0766", "type": "published-proof-of-concept", "source": "Telegram/6KoHZjMq_SrRer1qOlNvHvxjVQOdHuGlAhA7BVnle1PXd2U", "content": "", "creation_timestamp": "2026-03-28T21:00:05.000000Z"}, {"uuid": "666e1605-344b-495a-8495-eef7fb778343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "Telegram/PYoXNzyZrYaKFbj-BEEJp3q5SxJy9E0IbGus7zdCQfw4dWs", "content": "", "creation_timestamp": "2026-04-03T15:00:07.000000Z"}, {"uuid": "41ba7ccb-e29e-41bc-9637-11940c1c44ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0766", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/77681", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0766\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a bitt0n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-28 15:22:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEducational security research: OpenWebUI RCE via tool code injection (CVE-2026-0766  - ZDI-26-032)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-28T16:00:04.000000Z"}, {"uuid": "5fa60534-ea04-493a-a171-ac521b1e51a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0723", "type": "seen", "source": "https://t.me/tech_b0lt_Genona/6069", "content": "\u041d\u0430\u0448\u0430 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u0430\u044f, \u043d\u043e \u043f\u043e\u0434\u0437\u0430\u0431\u044b\u0442\u0430\u044f \u0440\u0443\u0431\u0440\u0438\u043a\u0430\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c \u0433\u0438\u0442\u043b\u0430\u0431\u0447\u0438\u043a\u0438 \ud83d\udc85\ud83d\udc85\ud83d\udc85\n\n\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 GitLab - 18.8.2, 18.7.2, 18.6.4, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-0723), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u0440\u0438 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u043d\u0430\u0442\u044c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0436\u0435\u0440\u0442\u0432\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0435\u0449\u0451 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043c\u0435\u0447\u0435\u043d\u044b \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438. \u0414\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u0440\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0443 \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0441 Jira Connect (CVE-2025-13927), API \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043b\u0438\u0437\u0430\u043c\u0438 (CVE-2025-13928) \u0438 SSH (CVE-2026-1102), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a \u0437\u0430\u0446\u0438\u043a\u043b\u0438\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e Wiki-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430 (CVE-2025-13335).\n\n\u041f\u043e\u0441\u0442\nGitLab Patch Release: 18.8.2, 18.7.2, 18.6.4\nhttps://about.gitlab.com/releases/2026/01/21/patch-release-gitlab-18-8-2-released/", "creation_timestamp": "2026-01-22T12:33:56.000000Z"}, {"uuid": "628d886c-12eb-444f-a1ae-7d5fe651b088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "Telegram/84jLrkYB2Bhn830vsx09wwfQyGg4M1cfAS8c54i7HqKv2UY", "content": "", "creation_timestamp": "2026-01-08T14:01:27.000000Z"}, {"uuid": "3f67087b-cf26-4c9e-821c-34277af01dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0719", "type": "seen", "source": "Telegram/MF5Mb_KH9Dl27A-oSLc1JrD-xlLt5sgTckbUHyznbnX30sc", "content": "", "creation_timestamp": "2026-01-08T14:01:19.000000Z"}, {"uuid": "5738c3b3-93a4-4bbb-8abd-3cf30b803b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0733", "type": "published-proof-of-concept", "source": "Telegram/wQ8nxOjr8ZBRpibxV-QJ35MQDOhHo2ZciZBVn_Tr7zQXstw", "content": "", "creation_timestamp": "2026-01-09T01:01:40.000000Z"}, {"uuid": "a725211d-ac31-4887-adbb-707fe4d14324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0732", "type": "published-proof-of-concept", "source": "Telegram/wQ8nxOjr8ZBRpibxV-QJ35MQDOhHo2ZciZBVn_Tr7zQXstw", "content": "", "creation_timestamp": "2026-01-09T01:01:40.000000Z"}, {"uuid": "5d147aed-c7a9-4111-8edb-9072973c2f48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0700", "type": "published-proof-of-concept", "source": "Telegram/3WmXcEIh6YLKsNJRmTR903VEKa2b76oT7RtiZ7nG17tBr4s", "content": "", "creation_timestamp": "2026-01-08T08:00:39.000000Z"}, {"uuid": "8881c87d-79f9-4cd7-9ba5-8c65b7200213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/bj8doEkkdNqHpfVQfl8gvA4415dyF2kRdOr9jMxstG-0IPA", "content": "", "creation_timestamp": "2026-04-17T15:00:06.000000Z"}, {"uuid": "1c2ccf48-55a5-4a32-a356-befe76f6fe95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/kld9yLBbS6fzFNytGTSDXwsTRi8Qoep-LDw8M-oA9J472Qs", "content": "", "creation_timestamp": "2026-04-26T03:00:05.000000Z"}, {"uuid": "f2a80cea-bb0b-46e2-b57c-324922ae589a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/69e38700-6900-4c8c-bbaa-c7081f92cc22", "content": "", "creation_timestamp": "2026-08-30T22:00:23.741408Z"}, {"uuid": "03586743-874d-4fb3-83fa-bc3b35652514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0703", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mkxvlbfdni2h", "content": "CVE-2026-0703: XSS en NextMove Lite WooCommerce\n\nCVE-2026-0703 es un Stored XSS en NextMove Lite para WooCommerce (hasta v2.23.0). Conoc\u00e9 el impacto, c\u00f3mo verificar tu tienda y qu\u00e9 hacer ahora.\n\n#nextmovelite #storedxss #woocommerceseguridad #cve20260703 #wordpressvulnerabilidades", "creation_timestamp": "2026-05-03T19:33:13.514542Z"}, {"uuid": "599b04df-198e-4f10-9bae-564f285210ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/GithubRedTeam/83819", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0740\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zycoder0day\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-11 14:49:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-11T15:00:05.000000Z"}, {"uuid": "0e4a7b73-c4a6-4287-a408-741e63922fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/APNnc0rGq8Mw668T50hT40wcIodfx4a7aX3kwnmD3UBVDH4", "content": "", "creation_timestamp": "2026-05-11T15:00:15.000000Z"}, {"uuid": "0bc03720-bbca-4f25-90bc-b9e7e9697d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0708", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mllw6dznpc2v", "content": "\ud83d\udccc CVE-2026-0708 - A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that co... https://www.cyberhub.blog/cves/CVE-2026-0708", "creation_timestamp": "2026-05-11T18:37:08.338492Z"}, {"uuid": "9d0917e5-9f8d-4436-b682-9768f93edda0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0708", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mllw6dznpc2v", "content": "\ud83d\udccc CVE-2026-0708 - A flaw was found in libucl. A remote attacker could exploit this by providing a specially crafted Universal Configuration Language (UCL) input that co... https://www.cyberhub.blog/cves/CVE-2026-0708", "creation_timestamp": "2026-05-11T18:37:08.336014Z"}, {"uuid": "7d771b01-bb47-41cb-b5f9-1d6465f8403a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "Telegram/tjgrzpu_dxl6dwKI7zyqcFMKKJNj87hWK2Sc-mpFVOelTAw", "content": "", "creation_timestamp": "2026-05-15T09:00:04.000000Z"}, {"uuid": "b5ce21e1-7cec-414b-8c56-241a303d9039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0745", "type": "published-proof-of-concept", "source": "Telegram/q3bZ7dzwt6XdRM-jyUWUHYQhep0OmyjD4PHNSw542P5jdgA", "content": "", "creation_timestamp": "2026-05-15T15:00:07.000000Z"}, {"uuid": "f5115db6-06de-45b0-8bc8-f97afbe04ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/85607", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0770\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a diamorphine666\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-23 21:28:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLangflow remote code execution exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-23T22:00:06.000000Z"}, {"uuid": "f363a062-3b27-48de-96bb-c812b7398eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "Telegram/aIPIWoZyEYzzX9nHUVKB1aA0s_e1mj3mQ8Eug10fFDw9pT4", "content": "", "creation_timestamp": "2026-05-24T03:00:05.000000Z"}, {"uuid": "e0fabdea-c008-4207-aadf-e0b39c2ae705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/breachdetect/1244242", "content": "{\n  \"Source\": \"https://niflheim.top/\",\n  \"Content\": \"[Python/Bash + Apex AI] \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ninja Forms Uploads \u0434\u043b\u044f WordPress (CVE-2026-0740)\", \n  \"author\": \" (DarkholdRT)\",\n  \"Detection Date\": \"29 Jul 2026\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetect  \ud83d\udd39", "creation_timestamp": "2026-08-22T14:00:15.232069Z"}, {"uuid": "30ed8696-17bf-420b-b0fa-112fb7842e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/breachdetect/1265360", "content": "{\n  \"Source\": \"https://niflheim.top/\",\n  \"Content\": \"[Python/Bash + Apex AI] \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ninja Forms Uploads \u0434\u043b\u044f WordPress (CVE-2026-0740)\", \n  \"author\": \" (DarkholdRT)\",\n  \"Detection Date\": \"21 Aug 2026\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetect  \ud83d\udd39", "creation_timestamp": "2026-08-22T14:00:15.273790Z"}, {"uuid": "b15d21d4-0052-4a45-9f35-299f11665583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "exploited", "source": "Telegram/nUaiijtVFTACEIUA4SH3a_WR0ickjjV4xXaXYKjYGchi0g", "content": "", "creation_timestamp": "2026-09-01T14:00:05.676655Z"}, {"uuid": "4bc43e3e-b67a-454a-9471-da7a122f9602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2244", "content": "\ud83d\udd34 CISA orders urgent action on actively exploited Langflow RCE flaw\n\nThe Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents.\n\nTracked as CVE-2026-0770, this critical security flaw allows unauthenticated threat actors to gain remote code execution as root in low-complexity attacks.\n\n\"The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint,\" Trend Micro researchers who found and reported the flaw explain. \"The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root.\"", "creation_timestamp": "2026-08-21T23:00:07.996251Z"}, {"uuid": "996b5c52-8c1f-45dd-821b-5ed6a62b55ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/STxGsrhQP6hZxkehr2eSvviXIon440Ogfxey7gY5WpdfDHc", "content": "", "creation_timestamp": "2026-08-22T08:00:04.030039Z"}, {"uuid": "b0a1a6e7-a4c5-4673-8d16-f137fac08ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3moltc4mywi2s", "content": "\ud83d\udea8 EUVD-2026-4492\n\ud83d\udcca 9.8/10\n\ud83c\udfe2 Gemini MCP Tool\n\n\ud83d\udcdd gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-4492\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-06-18T22:01:08.108189Z"}, {"uuid": "b31eae4a-80aa-4557-86dd-ab5f68b367df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "https://gist.github.com/alon710/a6e390ebf7b85888620ebeca6c5058aa", "content": "# CVE-2026-0755: CVE-2026-0755: Remote Code Execution and Arbitrary File Exfiltration in gemini-mcp-tool\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-06-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-0755\n\n## Summary\nCVE-2026-0755 is a critical vulnerability in gemini-mcp-tool (<= 1.1.5) that allows unauthenticated remote code execution on Windows installations and arbitrary local file exfiltration across all supported operating systems. The flaws exist within the execAsync command runner and the input handling logic of the Model Context Protocol (MCP) server, which fails to securely escape arguments passed to Node.js child processes and does not validate local file references in user-supplied prompt strings.\n\n## TL;DR\nAn unauthenticated remote code execution vulnerability on Windows and a cross-platform file exfiltration flaw in gemini-mcp-tool <= 1.1.5 allow attackers to execute arbitrary system commands or read sensitive local files via manipulated prompt inputs.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-78\n- **Attack Vector**: Network\n- **CVSS v3.0 Score**: 9.8\n- **EPSS Score**: 0.03336\n- **Impact**: Remote Code Execution / Local File Exfiltration\n- **Exploit Status**: PoC Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- gemini-mcp-tool\n- **gemini-mcp-tool**: <= 1.1.5 (Fixed in: `1.1.6`)\n\n## Mitigation\n\n- Upgrade gemini-mcp-tool to version 1.1.6 or higher immediately.\n- Deploy the MCP server within unprivileged sandboxed environments on Windows systems.\n- Filter prompt inputs at the gateway to strip system file indicators prior to processing.\n\n**Remediation Steps:**\n1. Identify all running instances of gemini-mcp-tool within your environment.\n2. Execute 'npm install -g gemini-mcp-tool@latest' to download and install the security patch.\n3. Restart any host integrations, such as Claude Desktop or custom Node.js wrappers, to load the patched files.\n4. Confirm the installed version is 1.1.6 using the package manager check options.\n\n## References\n\n- [ZDI-26-021 Advisory](https://www.zerodayinitiative.com/advisories/ZDI-26-021/)\n- [CVE-2026-0755 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-0755)\n- [gemini-mcp-tool Repository](https://github.com/jamubc/gemini-mcp-tool)\n- [gemini-mcp-tool Documentation](https://jamubc.github.io/gemini-mcp-tool/)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-0755) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-19T03:41:46.000000Z"}, {"uuid": "4f9ad46c-fcb7-418e-935d-c80a7ce94649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "published-proof-of-concept", "source": "Telegram/s-lekd_CMiFUG7sttPbwaSIszWWV6asQx86IxAh3lgAbVW0", "content": "", "creation_timestamp": "2026-06-10T19:00:12.000000Z"}, {"uuid": "f7203a2a-9fa9-4cf0-8fa3-f29aa8ec7c48", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3b683f9a-e340-4410-9a0d-21b3ac5568dd", "content": "", "creation_timestamp": "2026-06-19T12:45:35.912029Z"}, {"uuid": "edb57ddc-0288-4f25-af7c-3c8113d36b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2244", "content": "\ud83d\udd34 CISA orders urgent action on actively exploited Langflow RCE flaw\n\nThe Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents.\n\nTracked as CVE-2026-0770, this critical security flaw allows unauthenticated threat actors to gain remote code execution as root in low-complexity attacks.\n\n\"The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint,\" Trend Micro researchers who found and reported the flaw explain. \"The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root.\"", "creation_timestamp": "2026-08-22T00:00:11.585985Z"}, {"uuid": "e33665bb-c881-42a0-9324-b4180227371e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0714", "type": "seen", "source": "https://gist.github.com/DI0IK/b694629c8010b25b9bae5259ace9dcfa", "content": "# The Ultimate 0.01% NixOS Security & Isolation Guide\n### A Declarative Blueprint for Ephemeral Host Architectures (tmpfs + impermanence)\nThis master guide consolidates every advanced security, cryptographic, and network isolation strategy discussed. It is designed specifically for an ephemeral NixOS stack, shifting your posture from user-space configuration patching to hardware-enforced and virtualized-boundary isolation.\n## Table of Contents\n 1. **Hardware & Physical Security** (USBGuard, DMA Guarding)\n 2. **Platform Integrity & Boot Security** (Lanzaboote, Multi-LUKS, TPM2 + FIDO2 Cryptenroll)\n 3. **Kernel Hardening & Memory Defenses** (NixOS Hardened Profile, LKRG, Shadow Stacks, Namespaces)\n 4. **Strict Network Isolation** (netns VPN namespaces)\n 5. **Privilege & Input Isolation** (SUID Eradication, XWayland Disabling, Service Sandboxing)\n 6. **Hardware-Virtualized Application Isolation** (microvm.nix sandbox)\n## 1. Hardware & Physical Security\n### Physical Port Guarding (USBGuard)\nUSBGuard protects your laptop from rogue hardware inputs (such as USB Rubber Duckies or malicious charging ports) by locking down newly connected USB devices.\n```nix\n# usb-security.nix\n{ config, pkgs, ... }: {\n  services.usbguard = {\n    enable = true;\n    implicitPolicyTarget = \"block\"; # Reject everything not explicitly whitelisted\n    \n    # Generate this using `usbguard list-devices` on your host.\n    # Be sure to include your laptop's built-in keyboard, touchpad, and trusted keys.\n    allowedDevices = [\n      \"046d:c52b\" # Example: Internal Input Controller\n      \"1050:0407\" # Example: Trusted YubiKey 5\n    ];\n  };\n}\n\n```\n### Direct Memory Access (DMA) & IOMMU Hardening\nBlock physical DMA attacks (via Thunderbolt/USB4 ports using tools like PCILeech) from dumping your system RAM to steal keys while your lock screen is active.\n```nix\n# hardware-hardening.nix\n{ config, pkgs, ... }: {\n  boot.kernelParams = [\n    \"iommu=force\"               # Enforce hardware IOMMU page tables\n    \"intel_iommu=on\"             # (Set to \"amd_iommu=on\" for AMD CPUs)\n    \"iommu.passthrough=0\"       # Prevent bypass of IOMMU translation layers\n    \"efi=disable_early_pci_dma\"  # Block early boot DMA attacks during transition to kernel\n    \"ibt=on\"                    # Hardware-enforced Indirect Branch Tracking\n  ];\n}\n\n```\n## 2. Platform Integrity & Boot Security\n### Lanzaboote (Secure Boot Integration)\nAn immutable rootkit defense. Lanzaboote signs your NixOS generation kernels and initrd files, ensuring your boot stages haven't been modified on your unencrypted EFI partition.\n```nix\n# secure-boot.nix\n{ config, pkgs, lib, inputs, ... }: {\n  # Import Lanzaboote NixOS module from your Flake inputs\n  imports = [ inputs.lanzaboote.nixosModules.lanzaboote ];\n\n  # Lanzaboote replaces standard systemd-boot\n  boot.loader.systemd-boot.enable = lib.mkForce false;\n\n  boot.lanzaboote = {\n    enable = true;\n    pkiBundle = \"/etc/secureboot\"; # Storage path for generated signing keys\n  };\n}\n\n```\n*Note: You must generate keys in /etc/secureboot once using the sbctl tool before booting with this active.*\n### Multi-LUKS Cold Storage Strategy\nDecouple system boots from private data. LUKS_SYSTEM boots automatically via TPM2 + FIDO2 keys. Your actual sensitive data (LUKS_DATA) contains your /persist Btrfs subvolume and **never** decrypts automatically\u2014requiring a separate manual, high-entropy password when you log in.\n```nix\n# multi-luks-boot.nix\n{ config, pkgs, ... }: {\n  boot.initrd.luks.devices = {\n    # System Partition (Automated via Hardware TPM2 + FIDO2 Interlocking)\n    \"LUKS_SYSTEM\" = {\n      device = \"/dev/nvme0n1p2\"; \n      crypttabExtraOpts = [ \n        \"tpm2-device=auto\" \n        \"fido2-device=auto\" \n      ];\n    };\n    \n    # High-Value Data Partition (Pure Cold Storage - Always prompts for passphrase)\n    \"LUKS_DATA\" = {\n      device = \"/dev/nvme0n1p3\";\n      # Intentionally blank crypttabExtraOpts to prevent TPM binding\n    };\n  };\n}\n\n```\n*To bind your System LUKS container to your TPM2 PCR states and FIDO2 token:*\n```bash\nsudo systemd-cryptenroll /dev/nvme0n1p2 --tpm2-device=auto --tpm2-pcrs=0+7 --fido2-device=auto\n\n```\n## 3. Kernel Hardening & Memory Defenses\n### Native NixOS Hardened Profile & Allocators\nImporting the upstream hardening module enables robust default sysctl variables and swaps standard Glibc memory allocation strategies for **Scudo** (the security-focused memory allocator), safely preventing heap corruption without breaking the Nix compiler toolchain.\n```nix\n# hardened-profile.nix\n{ config, pkgs, modulesPath, ... }: {\n  imports = [\n    # Pull in the system-wide hardened profile from Nixpkgs\n    \"${modulesPath}/profiles/hardened.nix\"\n  ];\n\n  # Allow the Nix compiler to continue building cleanly\n  nix.settings.sandbox = true;\n}\n\n```\n### LKRG (Linux Kernel Runtime Guard) & Shadow Stacks\nDetect post-exploitation attempts inside memory. LKRG validates the integrity of the active kernel compiled in memory and halts running processes that attempt unprivileged root-escalation.\n```nix\n# lkrg-cet.nix\n{ config, pkgs, lib, ... }: {\n  boot.kernelPackages = pkgs.linuxPackages_latest.extend (self: super: {\n    kernel = super.kernel.override {\n      structuredExtraConfig = with lib.kernel; {\n        X86_USER_SHADOW_STACK = yes; # Hardware-level Shadow Stacks\n      };\n    };\n  });\n\n  # Load the LKRG module\n  boot.extraModulePackages = [ config.boot.kernelPackages.lkrg ];\n}\n\n```\n### Eliminating Unprivileged User Namespaces\nOnce your apps are moved into virtualized MicroVM spaces (Section 6), you can safely close the most common exploit vector for local kernel privilege escalations:\n```nix\n# namespace-lock.nix\n{ config, ... }: {\n  boot.kernel.sysctl = {\n    \"kernel.unprivileged_userns_clone\" = 0;\n  };\n}\n\n```\n## 4. Strict Network Isolation (netns Namespaces)\nTraditional firewalls can fail during network state changes. By isolating your physical network interface or VPN client into a strictly isolated Linux Network Namespace (netns), applications outside that namespace have **no logical routing paths to the internet**. Communication is only possible if explicitly spawned inside the VPN namespace.\n```nix\n# netns-vpn.nix\n{ config, pkgs, ... }: {\n  # 1. Create a systemd service that initializes the isolated network namespace at boot\n  systemd.services.netns-vpn = {\n    description = \"Isolated Secure VPN Network Namespace\";\n    wantedBy = [ \"multi-user.target\" ];\n    after = [ \"network.target\" ];\n    serviceConfig = {\n      Type = \"oneshot\";\n      RemainAfterExit = true;\n      ExecStart = pkgs.writeShellScript \"netns-vpn-start\" ''\n        # Create namespace\n        ${pkgs.iproute2}/bin/ip netns add vpn\n        \n        # Bring up loopback interface inside namespace\n        ${pkgs.iproute2}/bin/ip netns exec vpn ${pkgs.iproute2}/bin/ip link set lo up\n        \n        # NOTE: At this stage, configure your Wireguard configuration, routing tables, \n        # or physical interface pass-through exclusively within the 'vpn' namespace context.\n      '';\n      ExecStop = pkgs.writeShellScript \"netns-vpn-stop\" ''\n        ${pkgs.iproute2}/bin/ip netns del vpn\n      '';\n    };\n  };\n\n  # 2. Add an unprivileged user helper script to spawn apps in the namespace securely\n  environment.systemPackages = [\n    (pkgs.writeShellScriptBin \"vpn-run\" ''\n      if [ -z \"$1\" ]; then\n        echo \"Usage: vpn-run \"\n        exit 1\n      fi\n      # Spawns target command inside the network namespace\n      exec sudo ${pkgs.iproute2}/bin/ip netns exec vpn sudo -u \"$USER\" \"$@\"\n    '')\n  ];\n  \n  # Allow your user to run the ip netns command with sudo without a password prompt\n  security.sudo.extraRules = [\n    {\n      users = [ \"youruser\" ]; # Replace with your local user name\n      commands = [\n        {\n          command = \"${pkgs.iproute2}/bin/ip netns exec vpn *\";\n          options = [ \"NOPASSWD\" ];\n        }\n      ];\n    }\n  ];\n}\n\n```\n## 5. Privilege & Input Isolation\n### SUID/SGID Wrapper Eradication\nTraditional SUID binaries allow arbitrary tools to run temporarily as root. This strips all default NixOS wrappers down to only sudo and passwd.\n```nix\n# wrapper-reduction.nix\n{ config, pkgs, lib, ... }: {\n  security.wrappers = lib.mkForce {\n    sudo = {\n      owner = \"root\";\n      group = \"root\";\n      setuid = true;\n      source = \"${pkgs.sudo}/bin/sudo\";\n    };\n    passwd = {\n      owner = \"root\";\n      group = \"root\";\n      setuid = true;\n      source = \"${pkgs.shadow}/bin/passwd\";\n    };\n  };\n}\n\n```\n### Sandboxing System Backups (BorgBackup Cgroups)\nPrevent a compromised user app from stealing backup keys or manipulating historical records.\n```nix\n# backup-sandbox.nix\n{ config, pkgs, ... }: {\n  systemd.services.borgbackup-job = {\n    serviceConfig = {\n      ProtectHome = \"read-only\"; \n      PrivateTmp = true;\n      ProtectSystem = \"strict\";\n      CapabilityBoundingSet = \"\"; # Nullify system capabilities\n      DevicePolicy = \"closed\";    # Disable direct hardware device access\n      ReadWritePaths = [ \"/persist/cache/borg\" ];\n    };\n  };\n}\n\n```\n### Complete XWayland Deletion\nStrip legacy X11 compatibility out of modern Wayland compositors to prevent cross-application keylogging and screen sniffing.\n```nix\n# wayland-pure.nix\n{ config, pkgs, ... }: {\n  # Example for Hyprland. Adapt as needed for your specific compositor module.\n  programs.hyprland = {\n    enable = true;\n    xwayland.enable = false; # Complete X11 execution bridge removal\n  };\n}\n\n```\n## 6. Hardware-Virtualized Application Isolation (MicroVMs)\nInstead of sharing the host kernel via namespaces (nixpak / bubblewrap), run your web browser and chat apps on their own separate kernels using the KVM-backed microvm.nix framework.\nYour VM shares your host's Nix store as a read-only filesystem, boots in milliseconds, and routes Wayland and audio back to your host desktop via virtio-gpu and Pipewire.\n```nix\n# microvm-browser.nix\n{ config, pkgs, lib, inputs, ... }: {\n  imports = [ inputs.microvm.nixosModules.host ];\n\n  microvm.vms.untrusted-browser = {\n    autostart = false; # Launched manually via user terminal or shortcut\n    \n    config = {\n      imports = [ inputs.microvm.nixosModules.microvm ];\n      \n      microvm = {\n        hypervisor = \"cloud-hypervisor\"; \n        vcpu = 2;                        \n        mem = 4096;                      \n        graphics.enable = true; # Autoproxy guest graphics to host Wayland socket\n        \n        shares = [ {\n          proto = \"virtiofs\";\n          tag = \"ro-store\";\n          source = \"/nix/store\";\n          mountPoint = \"/nix/store\";\n        } ];\n      };\n\n      environment.systemPackages = [ \n        pkgs.firefox \n        pkgs.pipewire # Audio passthrough\n      ];\n\n      networking.microvm.enable = true;\n      \n      users.users.guestuser = {\n        isNormalUser = true;\n        extraGroups = [ \"video\" \"audio\" ];\n      };\n    };\n  };\n}\n\n```\nTo run your hardware-isolated web browser:\n```bash\nmicrovm -r untrusted-browser\n\n```\n# NixOS Apex Paranoia: The 0.0001% Tier\n### Defending Against Silicon, Supply Chains, and State-Level Interdiction\nIf your machine utilizes hardware-virtualized MicroVMs, tmpfs, multi-LUKS, LKRG, and strict network namespaces, the Operating System is virtually impenetrable to software attacks.\nAn attacker with a multi-million dollar budget will therefore bypass your OS entirely. They will target your **Hardware Firmware**, your **CPU Architecture**, and your **Software Supply Chain**. Here is how you seal the final cracks in reality.\n## 1. The Silicon & Firmware Layer\nRight now, you use Lanzaboote (Secure Boot) to ensure the firmware hasn't loaded a malicious kernel. But **who is checking the firmware itself?** If an intelligence agency intercepts your laptop in transit and flashes a persistence implant directly to your motherboard's SPI flash chip, Secure Boot will lie to you, telling you everything is fine.\n### The \"Reverse Evil Maid\" Defense: Coreboot + Heads\nYou must replace your proprietary UEFI firmware with an open-source, auditable boot ROM.\n * **The Move:** Flash your motherboard with **Coreboot**, paired with the **Heads** payload.\n * **How it Works:** Heads uses your TPM to measure the firmware and /boot files, but instead of just booting silently, it cryptographically signs a Time-Based One-Time Password (TOTP).\n * **The Defensive Leap:** When you turn on your laptop, the screen displays a 6-digit code. You check this against an Authenticator app on your smartphone. If the code matches, **the laptop is proving to YOU** that its physical motherboard firmware has not been tampered with since you last turned it off.\n### Intel ME / AMD PSP Neutralization\nModern Intel and AMD processors have a separate, hidden \"Ring -3\" coprocessor (Intel Management Engine or AMD Platform Security Processor). It runs its own proprietary OS, has full access to your RAM, and its own network stack\u2014completely invisible to NixOS.\n * **The Move:** You must physically neutralize it. Run me_cleaner to overwrite the Intel ME partitions on the SPI flash, or purchase hardware specifically manufactured with disabled management engines (e.g., NovaCustom, System76, or older ThinkPads).\n## 2. Annihilating Hardware Side-Channels\nCPU vulnerabilities like Spectre, Meltdown, and their newer variants (Downfall, Zenbleed) rely on exploiting CPU instruction prediction and Hyper-Threading (SMT). Malicious code running in one CPU thread can measure the timing of cache access to steal encryption keys from a completely separate thread (even breaking out of your MicroVMs).\n### Disabling Hyper-Threading (SMT)\nWhile the NixOS hardened profile enables software mitigations, the only mathematically guaranteed way to prevent cross-thread side-channel leaks is to physically disable SMT in the kernel.\n * **The Trade-off:** You will lose roughly 20-30% of your CPU's multi-tasking performance.\n```nix\n# cpu-paranoia.nix\n{ config, ... }: {\n  boot.kernelParams = [\n    # Force all CPU mitigations on, and physically disable SMT/Hyperthreading\n    \"mitigations=auto,nosmt\"\n    \n    # Disable kernel crash dumps (prevents dumping RAM via kexec)\n    \"crashkernel=0\" \n    \n    # Randomize kernel stack offset on every system call\n    \"randomize_kstack_offset=on\" \n  ];\n}\n\n```\n## 3. The Supply Chain: Absolute Build Sovereignty\nNixOS relies on binary caches (cache.nixos.org). When you run nixos-rebuild switch, your computer downloads pre-compiled binaries built by NixOS infrastructure.\nIf a hostile state actor compromises the Nix cache servers, they could serve your specific IP address a backdoored version of ssh or firefox. Because it matches the Nix hash derivation on their end, your system would accept it.\n### The Source-Only Purist Model\nTo achieve absolute supply-chain sovereignty, you must instruct Nix to **never trust the internet for pre-compiled binaries**.\n * **The Move:** Disable substituters. Your laptop will download the raw, auditable source code for every single package on your system, and compile your entire operating system locally from scratch.\n * **The Trade-off:** Rebuilding your system after an update will take days, depending on your CPU. Compiling WebKit/Chromium from source is notoriously brutal.\n```nix\n# absolute-sovereignty.nix\n{ config, lib, ... }: {\n  nix.settings = {\n    # Hard-disable all binary caches. Do not trust pre-compiled code.\n    substituters = lib.mkForce [ \"\" ];\n    \n    # Require cryptographic signatures for any flake inputs\n    require-sigs = true;\n  };\n}\n\n```\n## 4. Hardware-Backed PIV / Smartcard Exclusivity\nEven with your data LUKS partition guarded, you likely have SSH keys, GPG keys, and age keys sitting in your /persist folder as files. If your data partition is decrypted and an advanced exploit somehow gets into your filesystem, they can copy those files.\n### The Air-Gapped Key Generation\n 1. Boot a separate, air-gapped laptop with a live NixOS USB (no hard drive, networking physically disabled).\n 2. Generate your master GPG, SSH, and Age decryption keys.\n 3. Load them onto two hardware tokens (e.g., YubiKey 5) into the **PIV (Personal Identity Verification) Smartcard** slots.\n 4. Destroy the live USB. The master keys literally do not exist anywhere on Earth except inside the secure element of those two YubiKeys.\n * **The Defensive Leap:** Configure NixOS pcscd and ssh-agent to only interact with the smartcard. Whenever you SSH into a server, sign a git commit, or decrypt a secret, **the computation happens inside the YubiKey's processor**. The private key never enters your laptop's RAM. Even if your machine is fully compromised by root malware, they cannot steal a key that is physically unexportable from the smartcard.\n```nix\n# smartcard-enforcement.nix\n{ config, pkgs, ... }: {\n  services.pcscd.enable = true;\n  \n  # Force SSH to use the GPG agent mapped to your Smartcard\n  programs.ssh.startAgent = false;\n  programs.gnupg.agent = {\n    enable = true;\n    enableSSHSupport = true;\n  };\n}\n\n```\n## 5. Defense-in-Depth for the Host (AppArmor over systemd)\nYou have isolated your user apps with MicroVMs, but what about the background host services? (e.g., NetworkManager, Bluetooth daemon, chrony NTP daemon). A vulnerability parsing a maliciously crafted Wi-Fi packet or NTP timestamp could compromise a background daemon.\n### Host-Level AppArmor Strict Confinement\nEnable AppArmor and explicitly apply confining profiles to every system service, so even if the network manager is exploited, it is kernel-blocked from reading /persist or running a shell.\n```nix\n# host-mac.nix\n{ config, pkgs, ... }: {\n  security.apparmor = {\n    enable = true;\n    killUnconfined = false; # Set to true for absolute restriction (breaks many things)\n  };\n\n  # Enforce AppArmor profiles on all core network services\n  systemd.services.NetworkManager.serviceConfig.AppArmorProfile = \"default\";\n  systemd.services.wpa_supplicant.serviceConfig.AppArmorProfile = \"default\";\n}\n\n```\n\n\n# Architektur und Implementierung eines maximal geh\u00e4rteten NixOS-Systems zur Abwehr von Nation-State-Bedrohungen\n## 1. Architektonische Grundlagen und Paradigmenwechsel der Systemsicherheit\nDie Absicherung eines Endger\u00e4ts gegen hochgradig ressourcenstarke Angreifer, wie beispielsweise staatliche Akteure (Advanced Persistent Threats, APTs), erfordert einen fundamentalen Paradigmenwechsel in der Systemarchitektur. Ein klassisches, zustandsbehaftetes Betriebssystem akkumuliert \u00fcber die Zeit unweigerlich Konfigurationsdrifts, verwaiste Abh\u00e4ngigkeiten und nicht auditierte Systemzust\u00e4nde. Diese kontinuierlich wachsende digitale Entropie bietet fortgeschrittenen Angreifern eine ideale und kaum zu \u00fcberwachende Angriffsfl\u00e4che f\u00fcr die Etablierung von Persistenz, Privilege Escalation und lateraler Netzwerkausbreitung. Klassische Abwehrma\u00dfnahmen, die auf der nachtr\u00e4glichen Erkennung von Signaturen basieren, versagen bei Zero-Day-Exploits und hochgradig polymorpher Schadsoftware routinem\u00e4\u00dfig.\nNixOS bietet durch sein deklaratives, funktionales und mathematisch reproduzierbares Design eine einzigartige Grundlage zur Abwehr derartiger Bedrohungen. Die Konfiguration des gesamten Systems wird durch eine zentrale, versionskontrollierte Spezifikation definiert, welche deterministisch in read-only Verzeichnisse kompiliert wird. Dies eliminiert schleichende Konfigurationsdrifts und erm\u00f6glicht ein Systemdesign, das auf den Prinzipien der totalen Zustandslosigkeit (Impermanence), der kryptographischen Verifikation der gesamten Boot-Kette und der strikten Isolation von Laufzeitumgebungen basiert.\nDas Bedrohungsmodell f\u00fcr die in diesem Dokument beschriebene Architektur geht von extrem ressourcenstarken Angriffsvektoren aus. Dazu z\u00e4hlen physische Angriffe (sogenannte Evil-Maid-Szenarien), bei denen Angreifer unverschl\u00fcsselte Boot-Partitionen modifizieren, kryptographische Schl\u00fcssel aus TPM-Chips durch Bus-Sniffing extrahieren oder kompromittierte Hardware-Komponenten wie b\u00f6sartige USB-Peripherie einbringen. Ebenso ber\u00fccksichtigt das Modell ausgefeilte Supply-Chain-Angriffe, bei denen Software-Abh\u00e4ngigkeiten auf den Distributionsservern manipuliert werden, sowie die Ausnutzung unbekannter Schwachstellen (Zero-Day-Exploits) in Kernel-Modulen, Netzwerktreibern oder Display-Protokollen. Die nachfolgende, ersch\u00f6pfende Architekturspezifikation definiert ein kompromissloses Zero-Trust-Endger\u00e4t, das auf jeder Ebene der Abstraktion \u2013 von der System-Firmware bis zur grafischen Applikationsschicht \u2013 mit maximalen Verteidigungsmechanismen ausgestattet ist.\n## 2. Hardware-Vertrauensanker und kryptographische Firmware-Sicherheit\nDie softwareseitige Sicherheit des gesamten Systems ist fundamental wertlos, wenn der anf\u00e4ngliche Boot-Prozess auf der Hardwareebene kompromittiert werden kann. Die Etablierung einer l\u00fcckenlosen \"Chain of Trust\" vom Initialisieren der Hardware durch den Prozessor bis zum vollst\u00e4ndigen Einh\u00e4ngen des verschl\u00fcsselten Root-Dateisystems ist zwingend erforderlich.\n### 2.1 Modifikation der UEFI-Firmware und Schl\u00fcsselverwaltung\nDer erste Angriffspunkt eines physischen Angreifers ist die UEFI-Firmware (Unified Extensible Firmware Interface). Ein grundlegender Schutzmechanismus ist die Vergabe eines extrem starken, kryptographisch entropischen BIOS-Administratorkennworts. Dieses Kennwort verhindert, dass ein Angreifer mit kurzzeitigem physischen Zugang die Boot-Reihenfolge \u00e4ndert, Secure Boot deaktiviert oder schadhafte OptionROM-Module in die Startsequenz integriert.\nStandardm\u00e4\u00dfig unterst\u00fctzt NixOS keinen Out-of-the-Box Secure Boot. Die Implementierung erfolgt stattdessen \u00fcber das Projekt Lanzaboote, welches Secure Boot f\u00fcr das funktionale Paradigma von NixOS nutzbar macht. Secure Boot stellt als essenzielles UEFI-Feature sicher, dass die Firmware ausschlie\u00dflich Betriebssystem-Komponenten ausf\u00fchrt, die mit vertrauensw\u00fcrdigen, vorab in der Hardware hinterlegten kryptographischen Schl\u00fcsseln signiert wurden. Lanzaboote nutzt hierf\u00fcr zwei interagierende Hauptkomponenten: lzbt und einen dedizierten stub. Das Kommandozeilenwerkzeug lzbt ist daf\u00fcr verantwortlich, die Boot-Dateien auf der EFI System Partition (ESP) zu signieren und zu installieren. Der stub fungiert als kleine UEFI-Anwendung, welche den eigentlichen NixOS-Kernel sowie die initiale Ramdisk (initrd) von der ESP in den Arbeitsspeicher l\u00e4dt. Im Gegensatz zu alternativen L\u00f6sungen wie dem systemd-stub, bei dem f\u00fcr jede einzelne NixOS-Generation der Kernel und die initrd physisch dupliziert werden m\u00fcssen, erlaubt der Lanzaboote-Stub eine effiziente Deduplizierung dieser Dateien. Dies geschieht ohne jeglichen Kompromiss bei der Sicherheit und verhindert das Volllaufen der ohnehin oft knapp bemessenen EFI-Partition.\n### 2.2 Der Setup Mode und die Behandlung von Microsoft-Zertifikaten\nUm Secure Boot gegen staatliche Akteure abzusichern, m\u00fcssen die werkseitig installierten Schl\u00fcssel (die sogenannten OEM-Schl\u00fcssel von Microsoft) kritisch bewertet und durch eine Custom Public Key Infrastructure (PKI) ersetzt werden. Die UEFI-Firmware des Laptops muss hierf\u00fcr zun\u00e4chst in den sogenannten \"Setup Mode\" versetzt werden, was die Hardware f\u00fcr die Einschreibung eigener Schl\u00fcssel \u00f6ffnet. Es werden eigene Platform Keys (PK), Key Exchange Keys (KEK) und Signature Database Keys (db) generiert.\nEin spezifisches Risiko besteht bei bestimmten Hardware-Architekturen, insbesondere bei modernen modularen Ger\u00e4ten wie den Laptops des Herstellers Framework. Die Firmware dieser Ger\u00e4te weist oftmals Bugs auf, bei denen die Funktion \"Erase all Secure Boot Settings\" f\u00e4lschlicherweise nicht nur die erlaubten Schl\u00fcssel, sondern auch die Forbidden Signature Database (dbx) unwiderruflich l\u00f6scht. Eine gel\u00f6schte oder veraltete dbx ist ein katastrophales Sicherheitsrisiko, da sie es einem Angreifer erm\u00f6glicht, kryptographisch signierte, aber veraltete und mittlerweile bekannte Schwachstellen aufweisende Bootloader (wie verwundbare GRUB-Versionen) zu starten. Um dieses Risiko zu umgehen, muss der manuelle Prozess zum L\u00f6schen einzelner PK-, KEK- und DB-Eintr\u00e4ge iterativ durchlaufen werden.\nW\u00e4hrend der Einschreibung der eigenen Schl\u00fcssel mittels sbctl enroll-keys muss zudem eine feingranulare Entscheidung bez\u00fcglich der Kompatibilit\u00e4t getroffen werden. W\u00e4hrend des Boot-Vorgangs laden moderne Grafikkarten und Netzwerkcontroller eigene Firmware-Module, die sogenannten OptionROMs. Diese sind fast ausschlie\u00dflich mit Microsoft-Schl\u00fcsseln signiert. Werden die Microsoft-Zertifikate bei der Schl\u00fcsseleinschreibung vollst\u00e4ndig verbannt, verweigert die Hardware die Ausf\u00fchrung dieser Module, was in einem nicht bootf\u00e4higen System (\"Bricking\") resultieren kann. Es wird daher empfohlen, den Parameter --microsoft tempor\u00e4r beizubehalten, um OEM-OptionROMs zuzulassen, oder alternativ den Schalter --firmware-builtin zu verwenden, der die werkseitig in der Firmware fest verdrahteten Schl\u00fcssel beibeh\u00e4lt, was insbesondere f\u00fcr zuk\u00fcnftige Firmware-Updates durch den Hardware-Vendor essenziell ist.\nZuk\u00fcnftige Iterationen von Lanzaboote zielen darauf ab, das hochkomplexe Schl\u00fcsselmanagement auszubauen. W\u00e4hrend aktuell die Schl\u00fcsselpaare zwingend lokal auf dem Dateisystem unter /etc/secureboot abgelegt werden m\u00fcssen, sind Hardware-Security-Module (HSM) wie YubiKeys \u00fcber PKCS#11-Schnittstellen sowie Remote-Signing-Server in der Entwicklung. Bis dahin m\u00fcssen die lokalen Schl\u00fcsselverzeichnisse durch extrem restriktive Berechtigungen und dedizierte Backup-Strategien gesch\u00fctzt werden.\n## 3. Festplattenverschl\u00fcsselung und die Schwachstellen von TPM 2.0\nDie Verschl\u00fcsselung des physischen Datentr\u00e4gers via LUKS2 (Linux Unified Key Setup) bietet in Kombination mit dem TPM 2.0-Chip (Trusted Platform Module) eine robuste Verteidigungslinie gegen Datendiebstahl. Jedoch sind standardm\u00e4\u00dfige TPM-Implementierungen, wie sie h\u00e4ufig \u00fcber systemd-cryptenroll oder Clevis eingerichtet werden, eklatant verwundbar.\n### 3.1 Anatomie des Root-Volume-Konfusionsangriffs\nDie intendierte Funktion des TPMs besteht darin, ein kryptographisches Geheimnis (den Entschl\u00fcsselungs-Key des LUKS2-Volumes) nur dann freizugeben, wenn das System in einem bekannten, unver\u00e4nderten Zustand bootet. Dieser Zustand wird in den Platform Configuration Registers (PCRs) gemessen. Standard-Tutorials binden das Geheimnis meist an PCR 7, welches den Status der Secure Boot-Autorit\u00e4ten (welche Schl\u00fcssel sind g\u00fcltig) misst.\nDiese singul\u00e4re Bindung an PCR 7 erm\u00f6glicht den sogenannten \"Root Volume Confusion Attack\". Bei der Architektur moderner Linux-Systeme muss die initiale Ramdisk (initrd) zwangsl\u00e4ufig auf einer unverschl\u00fcsselten Boot-Partition (ESP) liegen, damit die UEFI-Firmware diese laden kann. Ein Angreifer mit physischem Zugriff (Evil Maid) ben\u00f6tigt nur etwa zehn Minuten, um die ESP auszulesen und zu analysieren, wie die initrd das System entschl\u00fcsselt. Der Angreifer kann anschlie\u00dfend die eigentliche verschl\u00fcsselte Festplatte klonen, ausbauen und durch eine eigene Festplatte ersetzen. Auf dieser pr\u00e4parierten Festplatte erstellt der Angreifer eine gef\u00e4lschte LUKS-Partition, deren Kennwort er selbst generiert hat. Wichtig hierbei ist, dass die UUIDs, Labels und Partlabel der gef\u00e4lschten Partition exakt mit denen des Originals \u00fcbereinstimmen.\nWenn der Angreifer nun den Computer startet, bootet die UEFI-Firmware den vollkommen legitimen, originalen Kernel und die originale initrd von der unverschl\u00fcsselten ESP. Da der Bootloader nicht manipuliert wurde und Secure Boot aktiviert bleibt, ist der Wert in PCR 7 v\u00f6llig korrekt. Das TPM gibt daraufhin gutgl\u00e4ubig den geheimen Entschl\u00fcsselungs-Key f\u00fcr das originale System in den Arbeitsspeicher frei. Die initrd sucht nun nach der verschl\u00fcsselten Partition, findet die gef\u00e4lschte Partition des Angreifers (die die gleichen UUIDs tr\u00e4gt) und bootet diese. Der Angreifer hat nun ein von ihm kontrolliertes Betriebssystem hochgefahren, besitzt Root-Rechte und kann den vom TPM freigegebenen originalen Masterkey, der sich noch im RAM befindet, auslesen, um damit die zuvor gestohlene originale Festplatte zu entschl\u00fcsseln.\n### 3.2 Kryptographische Mitigation durch PCR 15\nUm diese fundamentale Schwachstelle zu schlie\u00dfen, muss die Architektur so umgestaltet werden, dass die Identit\u00e4t des zu entschl\u00fcsselnden Volumes kryptographisch verifiziert wird, noch bevor irgendein Code aus diesem Volume ausgef\u00fchrt wird. Dies wird in NixOS durch die gezielte Manipulation von PCR 15 erreicht.\nDer LUKS2-Schl\u00fcssel wird \u00fcber systemd-cryptenroll nicht nur an PCR 0 (Firmware), PCR 2 (OptionROMs) und PCR 7 gebunden, sondern zus\u00e4tzlich an PCR 15. Der spezifische Bindungswert lautet 15:sha256=0000000000000000000000000000000000000000000000000000000000000000. Dies bedeutet, dass das TPM den Entschl\u00fcsselungs-Key nur dann herausgibt, wenn in PCR 15 noch absolut keine Messungen durchgef\u00fchrt wurden (der Hash also aus reinen Nullen besteht).\nBegleitend wird in der NixOS-Konfiguration f\u00fcr das entsprechende Laufwerk unter boot.initrd.luks.devices..crypttabExtraOpts der Parameter tpm2-measure-pcr=yes gesetzt. Diese Konstellation erzwingt folgenden Ablauf:\n 1. Das System bootet in die initrd, PCR 15 ist null.\n 2. Das TPM gibt den Entschl\u00fcsselungsschl\u00fcssel frei.\n 3. Die initrd nutzt den Schl\u00fcssel, entschl\u00fcsselt das Volume und \u2013 durch den Parameter tpm2-measure-pcr=yes \u2013 misst den Volume Key, den Namen und die UUID des entschl\u00fcsselten Volumes sofort unwiderruflich in PCR 15 hinein.\n 4. PCR 15 ver\u00e4ndert seinen Zustand permanent.\nSollte der zuvor beschriebene Angreifer nun versuchen, das System in eine von ihm kontrollierte Laufzeitumgebung umzuleiten, ist dies nutzlos. Selbst wenn der Angreifer Root-Rechte erlangt, kann er das TPM nicht mehr dazu bewegen, den Schl\u00fcssel ein zweites Mal freizugeben, da PCR 15 nicht mehr den Null-Status aufweist.\n| Plattform-Konfigurations-Register (PCR) | Prim\u00e4re Messgr\u00f6\u00dfe | Funktionale Bedeutung f\u00fcr die H\u00e4rtung |\n|---|---|---|\n| **PCR 0** | Core System Firmware Code | Erkennt feindliche BIOS/UEFI-Updates oder Manipulationen der Firmware. |\n| **PCR 2** | Extended oder Pluggable Executable Code | Sichert das System gegen kompromittierte OptionROMs (z. B. auf Netzwerkkarten). |\n| **PCR 4** | Bootloader (Code) | Sichert die Integrit\u00e4t des Lanzaboote-Stubs und des NixOS-Kernels. |\n| **PCR 7** | Secure Boot Policy | Kernkomponente, die verifiziert, dass die System-PKI nicht kompromittiert wurde. |\n| **PCR 15** | System Identity / Volume Keys | Essenzielle Abwehrma\u00dfnahme gegen Root-Volume-Konfusionsangriffe. |\n### 3.3 Hardwarenahe Abwehr von Bus-Sniffing (CVE-2026-0714)\nEine weitere gravierende Schwachstelle vieler automatischer Entschl\u00fcsselungsmechanismen (wie z. B. der Standardimplementierung von Clevis) ist die unverschl\u00fcsselte Kommunikation \u00fcber physische Schnittstellen. Viele TPM-Chips kommunizieren mit der CPU \u00fcber ungesch\u00fctzte SPI- oder I2C-Busse. Ein physischer Angreifer kann das Geh\u00e4use des Laptops \u00f6ffnen, einen Logikanalysator an die Bus-Pins anl\u00f6ten und die Klartextkommunikation mitschneiden (CVE-2026-0714). Wenn das TPM den entschl\u00fcsselten LUKS-Key an die CPU sendet, liest der Angreifer diesen aus und hat vollen Zugriff auf die Festplatte.\nDie Gegenma\u00dfnahme in der NixOS-Konfiguration ist die strikte Nutzung von systemd-cryptenroll unter expliziter Verwendung von TPM-verschl\u00fcsselten Sitzungen (Encrypted Sessions). Die TPM 2.0-Spezifikation erlaubt es, mittels Diffie-Hellman-Schl\u00fcsselaustausch einen tempor\u00e4ren symmetrischen Schl\u00fcssel zwischen CPU und TPM auszuhandeln. Das TPM verschl\u00fcsselt das freigegebene Geheimnis, bevor es \u00fcber den SPI-Bus gesendet wird, und die CPU entschl\u00fcsselt es im sicheren Cache. Physisches Bus-Sniffing wird dadurch mathematisch ineffektiv.\n## 4. Pr\u00e4diktiver Boot-Schutz mittels Measured Boot und systemd-pcrlock\nEine statische Bindung an PCR-Werte birgt im Kontext von Continuous Deployment und atomaren Updates, wie sie bei NixOS \u00fcblich sind, fundamentale operative Risiken. Wenn das TPM angewiesen wird, nur dann zu entsperren, wenn PCR 4 (Bootloader und Kernel) einen spezifischen Hash aufweist, f\u00fchrt jedes NixOS-Update (nixos-rebuild), das einen neuen Kernel installiert, unweigerlich dazu, dass das System nach dem Neustart die Festplatte nicht mehr entschl\u00fcsselt, da sich die Hash-Werte ver\u00e4ndert haben. Der Anwender m\u00fcsste manuell in die initrd eingreifen oder Recovery-Keys nutzen, was die Verf\u00fcgbarkeit des Systems stark kompromittiert.\nDas Konzept des \"Measured Boot\" in Kombination mit dem Werkzeug systemd-pcrlock l\u00f6st dieses Problem durch pr\u00e4diktive Berechnungen. Anstatt einen statischen Hash-Wert aus der Vergangenheit im TPM zu versiegeln, analysiert systemd-pcrlock die anstehenden Ver\u00e4nderungen am System und generiert dynamische Richtlinien-Dateien (.pcrlock Dateien unter /var/lib/pcrlock.d).\nLanzaboote integriert dieses System nativ (boot.lanzaboote.measuredBoot.enable = true sowie boot.la[span_38](start_span)[span_38](end_span)nzaboote.measuredBoot.pcrs = [ 4 7 ]). Bei jedem Ausf\u00fchren von nixos-rebuild werden die neu kompilierten Boot-Komponenten analysiert. Der Systemprozess errechnet vorher, welche Hashes beim n\u00e4chsten Start generiert werden, und schreibt eine entsprechend signierte Richtlinie in das TPM. Das TPM pr\u00fcft beim Neustart, ob die tats\u00e4chlichen Messungen mit der vorberechneten Richtlinie \u00fcbereinstimmen. Dies sch\u00fctzt das System effektiv vor feindlichen Downgrade-Angriffen, erlaubt jedoch vollautomatische, legitime Systemupdates ohne h\u00e4ndische Intervention. Es muss darauf geachtet werden, dass bei virtuellen Maschinen (z. B. via QEMU/KVM) in den Boot-Optionen exakt ein Boot-Datentr\u00e4ger markiert ist, da andernfalls PCR 4 mehrfache, unvorhersehbare Messungen der Boot-Eintr\u00e4ge vornimmt, was die Generierung g\u00fcltiger Richtlinien sabotiert.\n## 5. Multi-Faktor-Authentifizierung durch FIDO2-Hardware-Token\nAuch die st\u00e4rksten TPM-Konfigurationen sind verwundbar gegen\u00fcber dem sogenannten \"Wrench-Attack\" \u2013 dem physischen Diebstahl des Laptops im laufenden, aber gesperrten Zustand, oder dem sofortigen Diebstahl nach dem Einschalten, bevor der Benutzer reagieren kann. Da das TPM die Festplatte beim Start vollautomatisch entschl\u00fcsselt (Auto-Unlock), kann ein Dieb das System hochfahren und auf einen laufenden Anmeldebildschirm zugreifen, welcher als Angriffsvektor f\u00fcr DMA-Attacken (Direct Memory Access) \u00fcber Thunderbolt-Ports dienen kann.\nUm diese Kette zu durchbrechen, wird die Auto-Unlock-Funktion durch eine Multi-Faktor-Authentifizierung (MFA) auf Basis von FIDO2-Hardware-Sicherheitstoken (z. B. YubiKey) erg\u00e4nzt. Der FIDO2-Standard erm\u00f6glicht es, kryptographische Authentifizierungsprozesse auf einen physisch isolierten Co-Prozessor auszulagern.\nDie Einschreibung erfolgt \u00fcber systemd-cryptenroll --fido2-device=auto --fido2-with-client-pin=true /dev/nvme0n1pX. Dieser Befehl zwingt das System, beim Bootvorgang nicht nur auf die Pr\u00e4senz der physischen Hardware (des YubiKeys) zu pr\u00fcfen, sondern erfordert zwingend die Eingabe eines dem Benutzer bekannten PIN-Codes, bevor das Hardware-Token die kryptographische Antwort berechnet.\nEin technisches Detail bei der Implementierung unter NixOS betrifft eine Eigenheit von systemd: Wenn ein FIDO2-Token mit aktiviertem PIN-Schutz registriert wurde, fordert systemd beim Boot-Vorgang den Benutzer sofort zur Eingabe des PINs auf, vollkommen unabh\u00e4ngig davon, ob das physische Token \u00fcberhaupt in den USB-Port eingesteckt wurde. Um zu verhindern, dass ein Angreifer durch wiederholte Fehleingaben des PINs einen \"Dictionary Attack Lockout\" provoziert, der den YubiKey tempor\u00e4r oder permanent sperrt, ist ein komplexeres Setup angeraten. Es empfiehlt sich, eine extrem kleine (wenige Megabyte gro\u00dfe) LUKS-Partition zu erstellen, die ausschlie\u00dflich eine Schl\u00fcsseldatei (keyFile) enth\u00e4lt und via FIDO2 gesichert ist. Die prim\u00e4ren Partitionen (Root, Swap) werden dann nicht direkt an den YubiKey, sondern an diese Schl\u00fcsseldatei gebunden.\n## 6. Physische Schnittstellenkontrolle und DMA-Schutz mittels USBGuard\nPhysischer Zugang zu einem System bietet Angreifern die M\u00f6glichkeit, b\u00f6sartige Peripherieger\u00e4te anzuschlie\u00dfen. Ger\u00e4te wie der Rubber Ducky emulieren Tastaturen und injizieren Schadcode im Millisekundentakt, w\u00e4hrend komplexe BadUSB-Ger\u00e4te manipulierte Firmware laden. Ebenso k\u00f6nnen \u00fcber PCIe-verkn\u00fcpfte Schnittstellen wie Thunderbolt DMA-Angriffe (Direct Memory Access) durchgef\u00fchrt werden, die den RAM direkt auslesen, ohne dass die CPU oder das Betriebssystem intervenieren k\u00f6nnen.\nUm diese massiven Sicherheitsrisiken zu eliminieren, wird USBGuard tief in die systemd-Prozesshierarchie des NixOS-Systems integriert (services.usbguard.enable = true). USBGuard fungiert als Kernel-basierte Firewall f\u00fcr den USB-Bus. Die Sicherheitsarchitektur basiert auf einer kompromisslosen \"Default Deny\"-Richtlinie, definiert durch die Option implicitPolicyTarget = \"block\". S\u00e4mtliche USB-Ger\u00e4te, die nicht explizit in der Konfiguration durch eindeutige Hash-Attribute oder Ger\u00e4te-IDs zugelassen wurden, werden vom Kernel bereits auf Treiberebene ignoriert und abgewiesen.\nEin kritisches Element der Konfiguration betrifft die Option presentControllerPolicy. Wenn diese nicht korrekt justiert ist, kann USBGuard beim Starten alle intern \u00fcber USB angebundenen Komponenten blockieren. Bei Laptops betrifft dies in der Regel die integrierte Tastatur, das Touchpad, Bluetooth-Module und Webcams, wodurch der Nutzer aus dem System ausgesperrt wird (\"Lockout\"). Um dies zu verhindern, m\u00fcssen die IDs der vertrauensw\u00fcrdigen internen Ger\u00e4te vor der Aktivierung von USBGuard mittels des Tools lsusb identifiziert und in das Regelwerk /etc/nixos/settings/usbguard/rules.conf eingetragen werden.\nZus\u00e4tzlich muss die Inter-Process Communication (IPC) des USBGuard-Daemons restriktiv gesch\u00fctzt werden, um zu verhindern, dass Schadsoftware die Berechtigungen im laufenden Betrieb manipuliert. Die Optionen IPCAllowedUsers und IPCAllowedGroups definieren, dass ausschlie\u00dflich Benutzergruppen mit extrem hohen Privilegien (z. B. wheel) \u00fcber D-Bus mit dem Daemon kommunizieren d\u00fcrfen.\n## 7. Impermanence: Zustandslosigkeit als radikaler Abwehrmechanismus\nDie \u00fcberw\u00e4ltigende Mehrheit moderner Exploits st\u00fctzt sich darauf, nach einer anf\u00e4nglichen Kompromittierung Persistenz auf dem System zu etablieren. Malware modifiziert Systembibliotheken in /lib, hinterlegt Autostart-Skripte in /etc oder verankert sich in Konfigurationsverzeichnissen der Benutzer unter ~/.config. Die klassische UNIX-Dateisystemhierarchie ist extrem speichernd (\"stateful\") und bietet Schadsoftware eine F\u00fclle an undurchsichtigen Verstecken.\nDas geh\u00e4rtete NixOS begegnet diesem Paradigma mit der radikalen Architektur der \"Impermanence\" (Zustandslosigkeit) und dem sogenannten \"Erase Your Darlings\"-Konzept. Anstatt das Root-Dateisystem (/) als persistentes ext4- oder btrfs-Laufwerk zu formatieren, wird / beim Boot-Vorgang als vollst\u00e4ndig fl\u00fcchtiges tmpfs (Temporary File System) im Arbeitsspeicher (RAM) der Maschine angelegt.\nDie Deklaration innerhalb der NixOS-Konfiguration erzwingt dieses Verhalten unmissverst\u00e4ndlich:\n```nix\nfileSystems.\"/\" = {\n  device = \"none\";\n  fsType = \"tmpfs\";\n  options = [ \"defaults\" \"size=2G\" \"mode=755\" ];\n};\n\n```\nDer Effekt ist gravierend: S\u00e4mtliche Modifikationen, die ein Angreifer oder fehlerhafte Software au\u00dferhalb der dedizierten persistierten Verzeichnisse vornimmt, existieren ausschlie\u00dflich im fl\u00fcchtigen RAM. Beim Ausschalten der Stromzufuhr oder einem regul\u00e4ren Neustart verfl\u00fcchtigen sich diese Modifikationen restlos.\nUm ein benutzbares Betriebssystem zu erhalten, m\u00fcssen unabdingbare Systembestandteile physisch auf der Festplatte verankert sein. Dies umfasst:\n 1. /boot: Die FAT32 formatierte EFI System Partition, die den Kernel und die initrd vorh\u00e4lt.\n 2. /nix/store: Das zentrale Repository von NixOS. Es wird schreibgesch\u00fctzt (read-only) in das Dateisystem eingebunden. Da der Nix-Store kryptographisch anhand von Hashes aufgebaut ist, macht er unautorisierte Modifikationen an Systembinaries sofort erkennbar und de facto unm\u00f6glich.\n 3. /persist: Ein dezidiertes, LUKS-verschl\u00fcsseltes Volume f\u00fcr jene wenigen Laufzeitdaten, die zwingend einen Reboot \u00fcberdauern m\u00fcssen.\nMittels des Nix-Community-Projekts impermanence wird eine strikte Whitelist implementiert. Ausschlie\u00dflich vordefinierte Dateien und Verzeichnisse, wie etwa NetworkManager-Verbindungsprofile (WLAN-Passw\u00f6rter), SSH-Hostkeys und bestimmte System-Logs, werden \u00fcber \"Bind-Mounts\" vom fl\u00fcchtigen Root-Verzeichnis in den persistenten Speicherpfad /persist umgeleitet. Alles, was nicht auf dieser strengen Whitelist deklariert ist, wird unwiderruflich ausgel\u00f6scht. Dieses Design zwingt das gesamte System in einen deterministischen, stets sauberen Ausgangszustand zur\u00fcck. Der persistierte Zustand wird dadurch auf wenige Megabyte komprimiert, was eine forensische Analyse nach einem potenziellen Sicherheitsvorfall signifikant beschleunigt.\n## 8. Kryptographisches Geheimnismanagement in deklarativen Systemen\nDie deklarative Natur von NixOS fordert, dass der gesamte Zustand des Systems in textbasierten .nix-Dateien beschrieben wird. Ein fundamentaler Designkonflikt entsteht bei der Handhabung von Geheimnissen (WLAN-Passw\u00f6rter, Datenbank-Zug\u00e4nge, API-Token). Werden diese Klartext-Geheimnisse direkt in die NixOS-Konfiguration geschrieben, landen sie unweigerlich im zentralen /nix/store. Da der /nix/store architektonisch bedingt weltweit lesbar (world-readable) sein muss, stellt dies eine fatale Schwachstelle f\u00fcr die Privilege Escalation dar, da jeder unprivilegierte Nutzer oder Dienst die Klartextgeheimnisse auslesen k\u00f6nnte.\nZur L\u00f6sung dieses Dilemmas wird das Tool sops-nix in das System integriert. sops-nix basiert auf SOPS (Secrets OPerationS) und erlaubt es, Geheimnisse tief verschl\u00fcsselt direkt in der NixOS-Konfiguration (und damit in Git-Repositories) abzulegen. Anstatt veralteter PGP-Verfahren wird hierf\u00fcr das moderne, ressourcenschonende Verschl\u00fcsselungsprotokoll Age (Actually Good Encryption) eingesetzt.\n\nDas kryptographische Protokoll l\u00e4uft in mehreren exakt definierten Schritten ab:\n 1. **Schl\u00fcsselableitung:** Anstatt eine neue, zu sichernde Identit\u00e4t zu generieren, leitet das Werkzeug ssh-to-age einen g\u00fcltigen Age-Public-Key (Recipient) direkt aus dem ohnehin existierenden, starken ed25519-SSH-Host-Key der Maschine ab. Dies eliminiert den Vektor f\u00fcr schlechtes Schl\u00fcsselmanagement.\n 2. **Verschl\u00fcsselung At Rest:** Der Entwickler deklariert eine .sops.yaml-Regeldatei, die festlegt, dass alle Dateien, die auf den regul\u00e4ren Ausdruck secrets.yaml$ passen, mit dem zuvor abgeleiteten Age-Key verschl\u00fcsselt werden m\u00fcssen. Die eigentlichen Geheimnisse liegen fortan nur als verschl\u00fcsselte Chiffrate vor.\n 3. **Just-in-Time Entschl\u00fcsselung:** W\u00e4hrend des Boot-Prozesses \u2013 genauer in der Aktivierungsphase von NixOS \u2013 greift sops-nix auf den SSH-Host-Key zu und entschl\u00fcsselt die Dateien.\n 4. **Isolierte Injektion:** Die entschl\u00fcsselten Daten werden nicht auf die physische Festplatte geschrieben. Stattdessen nutzt sops-nix das fl\u00fcchtige tmpfs und erstellt die Klartextdateien ausschlie\u00dflich im Arbeitsspeicher unter /run/secrets/.\nZus\u00e4tzlich implementiert die Architektur eine strikte Mandatory Access Control auf Dateiebene. In der Nix-Konfiguration wird pr\u00e4zise deklariert, welcher Dienst auf welches Geheimnis zugreifen darf. Beispielsweise wird definiert, dass das Geheimnis my_secret_auth dem Besitzer nginx zugeordnet wird (owner = \"nginx\"). Ein kompromittierter Prozess unter einem anderen Benutzerkontext wird durch die Kernel-Level Dateisystemberechtigungen am Auslesen der Geheimnisse gehindert.\n## 9. Monolithische Kernel-H\u00e4rtung und deterministischer Speicherschutz\nDer Linux-Kernel bildet das Fundament des Betriebssystems. Trotz st\u00e4ndiger Audits enth\u00e4lt die gewaltige Codebasis regelm\u00e4\u00dfig Memory-Corruption-Bugs (wie Use-After-Free oder Heap-Overflows), die von Angreifern zur lokalen Privilege Escalation auf Ring-0-Level genutzt werden. Eine absolute H\u00e4rtung des Kernels ist f\u00fcr das Nation-State-Bedrohungsmodell nicht verhandelbar.\n### 9.1 Austausch des Kernels und der Speicherallokatoren\nIn der vorliegenden Architektur wird der Vanilla-Kernel durch das geh\u00e4rtete Profil pkgs.linuxPackages_hardened ersetzt. Dieser Kernel integriert spezialisierte Patches, die viele Legacy-Subsysteme entfernen und aggressive Mitigationen gegen ROP (Return-Oriented Programming) aktivieren.\nEine der wirkungsvollsten Verteidigungslinien gegen Ausnutzungstechniken ist der Austausch des Standard-Speicherallokators (Memory Allocator) der Glibc. Das System wird so konfiguriert, dass alternative Allokatoren wie scudo oder das noch striktere graphene-hardened (environment.memoryAllocator.provider = \"graphene-hardened\") erzwungen werden. Diese Allokatoren implementieren hochkomplexe Techniken der zuf\u00e4lligen Speicheranordnung (Randomization) und f\u00fcgen Guard-Pages zwischen Speicherbl\u00f6cken ein. Versucht ein Angreifer einen Buffer Overflow auszunutzen, l\u00e4uft der Schreibvorgang unweigerlich in eine dieser unzug\u00e4nglichen Guard-Pages, woraufhin der Kernel den kompromittierten Prozess sofort terminiert (Segmentation Fault), bevor der Schadcode ausgef\u00fchrt werden kann. Diese Restriktionen k\u00f6nnen zu gelegentlichen Instabilit\u00e4ten in sehr komplexen Programmen f\u00fchren (z.B. ben\u00f6tigt Firefox oftmals mehrere Anl\u00e4ufe, bevor es stabil im Scudo-Speichermodell allokiert ist). Im Sinne maximaler Sicherheit werden diese Unbequemlichkeiten jedoch akzeptiert.\n### 9.2 Sysctl-Manipulationen und Modul-Sperren\nDas Verhalten des Kernels zur Laufzeit wird \u00fcber eine drakonische Anpassung der sysctl-Parameter gesteuert. Projekte wie nix-mineral (ein dediziertes NixOS-Modul zur Systemh\u00e4rtung) automatisieren Teile dieses Prozesses, jedoch m\u00fcssen spezifische Einstellungen manuell validiert werden.\n| Sysctl Parameter | Wert | Verteidigungsspezifische Funktion |\n|---|---|---|\n| kernel.yama.ptrace_scope | 2 | Blockiert den ptrace-Systemaufruf vollst\u00e4ndig f\u00fcr unprivilegierte Benutzer. Verhindert Memory-Scraping und das Auslesen fremder Prozesse. |\n| kernel.kptr_restrict | 2 | Verbirgt physische Kernel-Adresszeiger vor dem Userspace, was Angreifern die Umgehung von KASLR (Kernel Address Space Layout Randomization) erschwert. |\n| kernel.unprivileged_bpf_disabled | 1 | eBPF ist ein m\u00e4chtiges, aber hochgef\u00e4hrliches Subsystem. Die Deaktivierung f\u00fcr unprivilegierte Nutzer blockiert einen der h\u00e4ufigsten Vektoren f\u00fcr Privilege Escalation. |\n| fs.suid_dumpable | 0 | Verhindert, dass SetUID-Programme im Falle eines Absturzes Core-Dumps auf die Festplatte schreiben, was das Ausleiten von Root-Geheimnissen blockiert. |\n| net.ipv4.conf.all.accept_redirects | 0 | Blockiert b\u00f6sartige ICMP-Redirects, welche zur Manipulation von Routing-Tabellen im lokalen Netzwerk verwendet werden. |\nEine der einschneidendsten \u00c4nderungen betrifft das Laden von Kernel-Modulen. Durch das Setzen von security.lockKernelModules = true verbietet der Kernel nach dem erfolgreichen Boot-Vorgang das dynamische Nachladen jeglicher weiterer Module (modprobe). Dies bricht zwar Hot-Plug-Funktionalit\u00e4ten f\u00fcr nachtr\u00e4glich eingesteckte Hardware, verhindert jedoch eine kritische Post-Exploitation-Technik: Selbst wenn ein Angreifer eine Schwachstelle findet und Root-Rechte erlangt, kann er keine b\u00f6sartigen Ring-0-Rootkits (LKM-Rootkits) mehr in den Kernel injizieren.\n## 10. Netzwerkarchitektur: Strikte Firewalls und Kryptographisches Routing\nIm Zeitalter von Zero-Trust-Architekturen ist die Verteidigung auf Netzwerkebene von immenser Bedeutung. Die Standard-Firewalls vieler Betriebssysteme sind zu permissiv und reagieren schlecht auf moderne Overlay-Netzwerke.\n### 10.1 Nftables, RPF und die L\u00f6sung von Overlay-Konflikten\nNixOS nutzt im Hintergrund das moderne nftables-Framework, das \u00fcber networking.nftables.enable = true aktiviert wird. Die Konfiguration folgt dem absoluten \"Default Drop\"-Prinzip: Jeglicher eingehender Netzwerkverkehr wird standardm\u00e4\u00dfig verworfen, w\u00e4hrend nur explizit angeforderter ausgehender Traffic sowie dessen zugeh\u00f6rige Antworten (Stateful Inspection) erlaubt werden.\nEin signifikantes Problem bei geh\u00e4rteten Linux-Systemen ist das \"Reverse Path Filtering\" (RPF). NixOS setzt den Kernel-Parameter f\u00fcr RPF standardm\u00e4\u00dfig extrem restriktiv. Der Kernel pr\u00fcft f\u00fcr jedes eingehende Paket mittels eines FIB-Lookups (Forwarding Information Base), ob eine theoretische Antwort auf dieses Paket exakt dasselbe physische Interface nutzen w\u00fcrde, \u00fcber das das Paket hereinkam. Stimmt das Interface nicht \u00fcberein, klassifiziert der Kernel das Paket als \"gespooft\" und verwirft es.\nDiese harte Gangart kollidiert dramatisch mit modernen, kryptographischen Overlay-Netzwerken wie Tailscale oder WireGuard. Wenn ein Dienst Pakete \u00fcber das virtuelle Tailscale-Interface (tailscale0) versendet, markiert der Tailscale-Daemon diese internen Pakete mit einem spezifischen Marker (z. B. dem Hex-Wert 0x80000). Dieser Marker weist den Kernel an, das Routing so durchzuf\u00fchren, als g\u00e4be es Tailscale nicht (Policy Routing), um Endlosschleifen zu vermeiden. Wenn die RPF-Logik nun das eintreffende Paket untersucht, scheitert der Abgleich der Interfaces, da das Paket k\u00fcnstlich manipuliert wurde, woraufhin s\u00e4mtliche eingehenden Overlay-Pakete gedroppt werden.\nUm die Sicherheit des RPF nicht komplett durch die Aufweichung auf networking.firewall.checkReversePath = \"loose\" kompromittieren zu m\u00fcssen, verlangt das Architekturdesign eine Pr\u00e4zisionsintervention auf Ebene der nftables. Pakete, die den RPF-Check durchlaufen, werden durch dedizierte prerouting und postrouting Chains manipuliert. Der ausgehende Markierungswert (0x80000) wird in einen connmark (Connection Mark) im Conntrack-Subsystem \u00fcberf\u00fchrt. Kehrt ein Antwortpaket zur\u00fcck, stellt eine premangle-Regel die Markierung aus dem connmark wieder her, sodass die FIB-Lookup-Logik des Kernels die RPF-Validierung kryptographisch korrekt abschlie\u00dfen kann.\n### 10.2 Anonymisierung der physikalischen Netzwerkschicht\nZur Abwehr von physischem Tracking in Funknetzwerken (Wi-Fi), bei denen Angreifer Bewegungsprofile anhand einzigartiger Hardware-Kennungen erstellen, ist die Verschleierung der MAC-Adresse unerl\u00e4sslich. Der in NixOS verwendete NetworkManager bietet native F\u00e4higkeiten zur Randomisierung, die aktiviert werden m\u00fcssen.\nZun\u00e4chst wird wifi.scan-rand-mac-address = true konfiguriert, wodurch der Netzwerkchip w\u00e4hrend des aktiven Scannens nach Netzwerken permanent gef\u00e4lschte MAC-Adressen abstrahlt. F\u00fcr aktive Verbindungen werden die Eigenschaften ethernet.cloned-mac-address = \"random\" sowie wifi.cloned-mac-address = \"random\" in der Konfigurationsdatei verankert. Der Modus \"random\" zwingt den Controller, bei jedem einzelnen Verbindungsaufbau eine vollkommen neue, entropische MAC-Adresse zu generieren.\nEs muss jedoch anerkannt werden, dass diese Randomisierung kein Allheilmittel ist. Hochkomplexe Netzwerk\u00fcberwachungs-Infrastrukturen nutzen passive Fingerprinting-Methoden, bei denen Abweichungen im TCP/IP-Stack, Antwortzeiten der Chips\u00e4tze oder das fehlerhafte Setzen der OUI (Organizationally Unique Identifier) analysiert werden, um das Ger\u00e4t dennoch eindeutig zu identifizieren. Die MAC-Randomisierung fungiert daher lediglich als Teil einer geschichteten Abwehr, nicht als absolute Anonymisierung.\n## 11. Grafische Isolation: Das Ende von X11 und die Evolution des Sandboxings\nDie Sicherheit des grafischen User-Interfaces wurde in UNIX-Derivaten jahrzehntelang stiefm\u00fctterlich behandelt. Das alte X11-Protokoll operiert nach einem Shared-Memory-Prinzip ohne jegliche Zugriffsbeschr\u00e4nkungen zwischen Applikationen. Im X11-Server kann jede Anwendung globale Keylogger-Hooks installieren, die Fensterinhalte aller anderen laufenden Programme abgreifen (Screenscraping) und Eingabeevents f\u00e4lschen. Ein kompromittierter Mediaplayer kann somit problemlos Passw\u00f6rter mitlesen, die der Nutzer im Browserfenster eintippt.\n### 11.1 Die Transition zu puristischem Wayland\nUm diesen massiven Angriffsvektor zu schlie\u00dfen, setzt das geh\u00e4rtete NixOS exklusiv auf Wayland. Das Wayland-Protokoll erzwingt eine strikte Client-Compositor-Isolation: Der Compositor (beispielsweise Sway oder Hyprland) ist die absolute Instanz, die jedem Client seinen eigenen, isolierten Puffer zuweist. Kein Client hat Zugriff auf die Puffer anderer Clients.\nViele Linux-Distributionen nutzen Wayland, schalten jedoch im Hintergrund XWayland ein \u2013 eine Kompatibilit\u00e4tsschicht, die einen vollst\u00e4ndigen, virtuellen X11-Server f\u00fcr \u00e4ltere Applikationen bereitstellt. Diese Schicht negiert gro\u00dfe Teile der Wayland-Sicherheitsarchitektur. In der hier spezifizierten Konfiguration wird XWayland komplett und systemweit deaktiviert. Dies erzwingt, dass Legacy-Applikationen schlichtweg nicht mehr starten. Um moderne, auf Electron oder Chromium basierende Software dennoch sicher betreiben zu k\u00f6nnen, m\u00fcssen diese gezwungen werden, ihre nativen Wayland-Ozone-Module zu nutzen. Dies wird global \u00fcber die Umgebungsvariable environment.sessionVariables.NIXOS_OZONE_WL = \"1\" erzwungen.\n### 11.2 AppArmor und strukturelle Limitierungen\nErg\u00e4nzend zur Wayland-Isolation erfordert ein Nation-State-resistentes System den Einsatz von Mandatory Access Control (MAC). Auf NixOS kommt prim\u00e4r AppArmor zum Einsatz, welches Anwendungen auf Basis dedizierter Profile in ihren Berechtigungen (z.B. Dateisystem- und Netzwerkzugriff) extrem restriktiv einkapselt.\nDie Implementierung unter NixOS birgt historische Herausforderungen, da NixOS nicht den FHS-Standards (Filesystem Hierarchy Standard) folgt \u2013 es existieren keine Standardpfade wie /usr/bin/ oder /lib/. Klassische AppArmor-Profile, wie sie unter Ubuntu funktionieren, versagen unter NixOS, da die Pfade in den /nix/store/ zeigen und dynamische Hashes enthalten. Neue Entwicklungen im Nixpkgs-Repository adressieren dieses Problem, indem Profildefinitionen via Symlinks oder direkt \u00fcber Nix-Pfade inkludiert werden (security.apparmor.policies..path). Die Module werden im \"enforce\"-Modus betrieben, was bedeutet, dass ein Browser, der versucht, SSH-Schl\u00fcssel im Home-Verzeichnis zu lesen, sofort vom Kernel durch SIGKILL terminiert wird. Als erg\u00e4nzende Ma\u00dfnahme auf Desktop-Ebene k\u00f6nnen Isolations-Tools wie Firejail eingesetzt werden, um Anwendungen rudiment\u00e4r von systemkritischen Pfaden (z.B. /etc/resolv.conf) abzuschirmen.\n## 12. Extreme Compartmentalization durch hardwaregest\u00fctzte MicroVMs\nBei T\u00e4tigkeiten, die das Ausf\u00fchren von g\u00e4nzlich unvertrautem Code erfordern \u2013 beispielsweise bei der Analyse von Malware, dem Ausf\u00fchren propriet\u00e4rer Bin\u00e4rdateien oder dem Einsatz autonomer KI-Agenten, die Code schreiben und testen \u2013 reichen die softwarebasierten Isolationsgrenzen (Namespaces, Cgroups, AppArmor) oftmals nicht aus, um fortschrittliche Zero-Day-Container-Escapes zu verhindern.\nDas Projekt microvm.nix bietet in diesem Bereich eine \u00fcberlegene Architektur der extremen Compartmentalization. Anstatt Prozesse lediglich logisch im selben Kernel zu separieren, kompiliert microvm.nix spezialisierte NixOS-Konfigurationen in extrem leichtgewichtige Hardware-Virtualisierungsmaschinen (sogenannte Type-2 Hypervisors wie qemu, cloud-hypervisor oder crosvm).\nDer massive Leistungsvorteil gegen\u00fcber traditionellen virtuellen Maschinen liegt in der Wiederverwendung der Nix-Architektur. Der read-only /nix/store des Host-Systems wird mittels hochperformanter Filesystem-Overlays (virtiofs oder 9p) direkt in die MicroVM gemountet. Die MicroVM selbst ben\u00f6tigt daher kaum Festplattenspeicher und startet in Bruchteilen einer Sekunde. Dem Hypervisor wird mittels der Eigenschaft deflateOnOOM = true erlaubt, den zugewiesenen Arbeitsspeicher \u00fcber \"Ballooning\" dynamisch an den Host zur\u00fcckzugeben.\nNetzwerktechnisch agiert die MicroVM in einer perfekten Quarant\u00e4ne. Der Zugriff auf das Host-Netzwerk ist hardwareseitig gekappt, es sei denn, es werden explizite, \u00fcber systemd-networkd verwaltete virtuelle TAP-Interfaces (z.B. mit vhost-net Beschleunigung) deklariert, um den Traffic kontrolliert \u00fcber eine NAT-Br\u00fccke auszuleiten. Wird ein Prozess innerhalb der MicroVM kompromittiert, st\u00f6\u00dft der Angreifer auf die massiven hardwaregest\u00fctzten Isolationsgrenzen (KVM/Hypervisor) des Prozessors. Nach getaner Arbeit oder bei festgestellter Kompromittierung wird die MicroVM schlicht terminiert. Da das Root-Dateisystem der VM fl\u00fcchtig oder als tempor\u00e4res Overlay aufgebaut ist, verschwindet der Schadeinfluss r\u00fcckstandslos.\n## 13. Synthese und system\u00fcbergreifendes Fazit\nDie Erstellung und Aufrechterhaltung des sichersten NixOS-Systems der Welt ist kein statisches Endziel, sondern ein kontinuierlicher, kryptographisch verifizierbarer und deklarativ manifestierter Prozess. Die kompromisslose Verkn\u00fcpfung von NixOS mit Lanzaboote und der pr\u00e4diktiven Technologie des Measured Boots (via systemd-pcrlock) eliminiert feindliche Boot-Manipulationen, ohne die Agilit\u00e4t des Systems einzuschr\u00e4nken.\nDie kryptographische Verifikation der Datentr\u00e4geridentit\u00e4t (Bindung an PCR 15) in Kombination mit der obligatorischen Nutzung von TPM Encrypted Sessions und FIDO2-Hardwaretoken vernichtet Angriffsvektoren wie Root-Volume-Konfusionsangriffe, Bus-Sniffing und Wrench-Attacken. Durch das radikale Paradigma der Zustandslosigkeit (Impermanence) und das Auslagern der Passwortverwaltung auf das zur Laufzeit operierende sops-nix wird Persistenz f\u00fcr Schadsoftware mathematisch unm\u00f6glich gemacht.\nAuf den tiefsten Systemebenen erzwingen extrem restriktive Speicherallokatoren, das totale Modulladeverbot des Kernels und strenge PTrace-Sperren, dass Angreifer selbst nach einem erfolgreichen Exploit im Userspace keine Ring-0-Eskalation durchf\u00fchren k\u00f6nnen. Abgerundet wird die Architektur durch eine Default-Drop nftables-Firewall mit manipulierter RPF-Integrit\u00e4t, das Verbot von X11 zugunsten puristischem Wayland und die extreme Isolation von unvertrautem Code in hardwaregest\u00fctzten MicroVMs.\nDieses Architekturdesign akzeptiert keinerlei Kompromisse bei der Sicherheit. Es verlangt technisches Tiefenverst\u00e4ndnis und opfert teilweise den Nutzerkomfort. Das Endresultat ist jedoch ein System, das gegen\u00fcber den fortschrittlichsten bekannten Bedrohungsvektoren \u2013 selbst solchen von staatlichen Akteuren \u2013 eine nahezu undurchdringliche, deterministische Abwehrfront bietet.\n", "creation_timestamp": "2026-07-01T08:10:40.815783Z"}, {"uuid": "7a23b4cf-e595-4439-b27c-da405be30b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtlvkbh6is2i", "content": "\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001DD-WRT\u3001Langflow\u3001WordPress\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09 \u306f\u3001DD-WRT\u3001Langflow\u3001WordPress\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u4ee5\u4e0b\u306f\u3001KeV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u305f\u4e0d\u5177\u5408\u3067\u3059\u3002\n\nCVE-2021-27137  \uff08CVSS\u30b9\u30b3\u30a28.1\uff09DD-WRT\u30b9\u30bf\u30c3\u30af\u30d9\u30fc\u30b9\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\nCVE-2026-0770  \uff08CVSS\u30b9\u30b3\u30a29.8\uff09...", "creation_timestamp": "2026-08-21T13:47:29.118662Z"}, {"uuid": "9520a122-b851-4b08-ad4e-69261b9d5af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30706", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:04.035025Z"}, {"uuid": "c2607647-a44a-4251-9334-c0f4e206be81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30707", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:04.565213Z"}, {"uuid": "5fc84c8c-eefd-4b8a-ae59-a81348339892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31536", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T14:00:04.168487Z"}, {"uuid": "c1c13203-3262-44ef-af39-7c281880f99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31537", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T14:00:04.480830Z"}, {"uuid": "627693d4-2bc2-4400-859d-bd5932d6d70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mq5v5znyg627", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-0770: Langflow affected by Remote Code Execution via validate_code() exec()\nEPSS 10.4% \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-0770\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-08T19:47:45.153973Z"}, {"uuid": "9c92bedc-3936-4152-8cc6-6af85712bb02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31536", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:24.566472Z"}, {"uuid": "f586dd02-5f62-4c29-864d-cd20b13d8923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31537", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:24.864735Z"}, {"uuid": "3399c286-09f5-4db0-989a-1d9828c231c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-11T10:15:03.035484Z"}, {"uuid": "e4958603-b8ae-4b0b-a4bc-498816e20e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30706", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:37.402975Z"}, {"uuid": "b378b2d3-8d9f-47e7-b844-5c81c0a24ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30707", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:37.637948Z"}, {"uuid": "565b28a9-c3aa-466f-bcfb-fc0c3b82cd68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mti6hy6gdc2k", "content": "CISA Adds Four Known Exploited Vulnerabilities to Catalog\nRelease Date July 21, 2026\n\nCVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability\nCVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability  \nCVE-2026-63030 WordPress Core Interpretation Confli...", "creation_timestamp": "2026-08-20T02:16:35.879143Z"}, {"uuid": "63c87abe-6ab6-47a1-90a3-01a3b88c090b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-12T10:15:03.101561Z"}, {"uuid": "7a84fd9f-fff5-4095-8f18-c360780301bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-13T10:15:02.838324Z"}, {"uuid": "57863ce3-47ab-40e0-b634-c2ec0fa45418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/GithubRedTeam/92982", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0740-mass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ExDev994\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 13:44:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC untuk CVE-2026-0740: Ninja Forms File Uploads <= 3.3.26 \u2014 Unauthenticated Arbitrary File Upload yang dapat mengarah ke RCE.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:04.540333Z"}, {"uuid": "d12a40f4-09c1-4891-9b79-ddb807c781ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92982", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0740-mass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ExDev994\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 13:44:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC untuk CVE-2026-0740: Ninja Forms File Uploads <= 3.3.26 \u2014 Unauthenticated Arbitrary File Upload yang dapat mengarah ke RCE.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:08.352902Z"}, {"uuid": "ab3d7390-4463-4824-9517-2b2801c31513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-14T10:15:02.242274Z"}, {"uuid": "9325a91f-76fd-4e7a-be02-b4432733f944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0716", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mqm2iblpgr2b", "content": "\ud83d\udea8 EUVD-2026-43651\n\ud83d\udcca 4.8/10\n\n\ud83d\udcdd The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) block, leaving unmasked server-to-client frames u...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43651\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-07-14T11:00:14.351346Z"}, {"uuid": "b4fbbfc7-ee6d-4e01-af6f-abd458224d20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0716", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqm77bdq4b2g", "content": "CVE-2026-12478 - Libsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup websocket frame processing (unmasked path)\nCVE ID : CVE-2026-12478\n \n Published : July 14, 2026, 10:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : The fix for CVE-2026-0716 (commit 6ff...", "creation_timestamp": "2026-07-14T12:24:40.722288Z"}, {"uuid": "4bc067a7-4c43-4b7c-95e8-9fa486576b3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-15T10:15:02.069033Z"}, {"uuid": "90120120-22ca-4678-803c-297fbebeefb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/i85Ko9VIVau4rwOxRL9oM3geQpNWom8rCaBlkF_bPD1ezpI", "content": "", "creation_timestamp": "2026-08-26T13:00:03.467150Z"}, {"uuid": "ec7a5609-a2ee-43f8-a300-9046f0339346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/blob/master/templated/templateddetector/plugins/cve/2026/Langflow_CVE_2026_0770.textproto", "content": "", "creation_timestamp": "2026-07-16T10:15:02.672688Z"}, {"uuid": "f2f7a2d2-b709-483c-b34b-f11d6de5e80a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/GithubRedTeam/93399", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ninja-form-exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MadExploits\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 15:45:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-0740\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:06.892388Z"}, {"uuid": "178b29bf-bc4b-4ae2-84d4-11b03f68a676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17138", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:11.397667Z"}, {"uuid": "c7a0a822-e78e-4b0e-92a2-a670d0a03665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17215", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:29.267027Z"}, {"uuid": "1da918e1-ff85-432f-a850-59129ac89cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/340", "content": "CVE-2026-0770\n\nLangflow execglobals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the execglobals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.\n\nGitHub Link:\nhttps://github.com/0xBlackash/CVE-2026-0770", "creation_timestamp": "2026-08-28T00:00:30.252727Z"}, {"uuid": "afcf6252-23ce-480e-acd0-0c264d41c020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/iYHsotoqlE8Z-AEKaQiVsXXSjTyl0MfV01akvHQ1zfYFYEI", "content": "", "creation_timestamp": "2026-07-16T19:00:07.227746Z"}, {"uuid": "063fb937-146b-4335-9749-88fc838ebff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/EX_r4oRVdISPywpjEG1n7FWajVbuxB1s9-HYOhLwZS_cHlg", "content": "", "creation_timestamp": "2026-07-16T19:00:07.675409Z"}, {"uuid": "693aca42-35b3-40ef-aa17-d2afaf065f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/VUu0fqQ7rcdyvOW-H7Wu47NspWJgobhVReaY3yiN0ecBUoE", "content": "", "creation_timestamp": "2026-07-16T19:00:11.656050Z"}, {"uuid": "ee15e36e-d4f2-401a-829e-44b3e1cb863c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/JZce1k3F7Nb0tM63EWv0Z1Rv7rG2qawkrkl2TccfYKUt5Pg", "content": "", "creation_timestamp": "2026-07-16T19:00:11.353666Z"}, {"uuid": "a43a0c5e-5ec3-412b-83bc-59ee1b992337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "seen", "source": "Telegram/Z_LovNj_LGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg", "content": "", "creation_timestamp": "2026-07-16T19:00:20.491315Z"}, {"uuid": "80a50c08-b176-429c-9ea0-c554d0c7f98c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/EX_r4oRVdISPywpjEG1n7FWajVbuxB1s9-HYOhLwZS_cHlg", "content": "", "creation_timestamp": "2026-07-17T00:00:09.875658Z"}, {"uuid": "cbc13e83-41ef-4f32-bd33-e6d0855bb4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/iYHsotoqlE8Z-AEKaQiVsXXSjTyl0MfV01akvHQ1zfYFYEI", "content": "", "creation_timestamp": "2026-07-17T00:00:10.532176Z"}, {"uuid": "732f8d42-1c88-4429-a3d4-b62a05686864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/JZce1k3F7Nb0tM63EWv0Z1Rv7rG2qawkrkl2TccfYKUt5Pg", "content": "", "creation_timestamp": "2026-07-17T00:00:26.910700Z"}, {"uuid": "fd65247b-9cc9-4e9d-be46-14a4b1ccaa47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/VUu0fqQ7rcdyvOW-H7Wu47NspWJgobhVReaY3yiN0ecBUoE", "content": "", "creation_timestamp": "2026-07-17T00:00:27.201600Z"}, {"uuid": "264a48f9-4a84-4a38-b9d8-73aa885b7a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "seen", "source": "Telegram/Z_LovNj_LGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg", "content": "", "creation_timestamp": "2026-07-17T00:00:36.886752Z"}, {"uuid": "a062506b-d93b-4a6f-b3d7-dadd32e1bcf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93399", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ninja-form-exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MadExploits\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 15:45:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-0740\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:49.830004Z"}, {"uuid": "36b5c535-614b-4a31-801d-14f5fcbe8415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "published-proof-of-concept", "source": "Telegram/Z_LovNj_LGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg", "content": "", "creation_timestamp": "2026-07-18T00:00:23.721316Z"}, {"uuid": "3f7b9510-415a-4ca0-8e5d-9daed0008062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/JZce1k3F7Nb0tM63EWv0Z1Rv7rG2qawkrkl2TccfYKUt5Pg", "content": "", "creation_timestamp": "2026-07-18T00:00:45.287889Z"}, {"uuid": "2fa466b3-4eb9-475e-bc8c-6ac7365240cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/VUu0fqQ7rcdyvOW-H7Wu47NspWJgobhVReaY3yiN0ecBUoE", "content": "", "creation_timestamp": "2026-07-18T00:00:45.025030Z"}, {"uuid": "7768b8d6-f20f-400a-b0f4-a0d307478981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/critical_bug/1709", "content": "\ud83d\udc31 *hacker voice* I'M IN \ud83d\udd34\n\n\ud83d\udd25 CVE-2026-0740: Ninja Forms \u0434\u043b\u044f WordPress \u2014 50,000 \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439!\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Ninja Forms! CVSS: 9.8 Critical \ud83d\ude31\n\n\u041e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 \u0443 \u0432\u0430\u0441 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c! \ud83d\udcbb\n\n\ud83d\udc47 \u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u0438\u0436\u0435", "creation_timestamp": "2026-07-19T16:00:10.671068Z"}, {"uuid": "d5bc9c93-4cbf-4a50-bf2b-ff7a2c4d9a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/critical_bug/1710", "content": "\ud83d\udd25 CVE-2026-0740: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Ninja Forms \u0434\u043b\u044f WordPress \ud83d\udd34\n\nCVSS: 9.8 Critical | \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f | 50,000+ \u0441\u0430\u0439\u0442\u043e\u0432\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u041f\u043b\u0430\u0433\u0438\u043d Ninja Forms - File Uploads \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0442\u0438\u043f \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043d\u043e \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0442\u0438\u043f \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043f\u0435\u0440\u0435\u0434 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0444\u0430\u0439\u043b \u0441 \u0431\u0435\u0437\u043e\u0431\u0438\u0434\u043d\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c image.jpg, \u043d\u043e \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 shell.php. \u0421\u0435\u0440\u0432\u0435\u0440 \u043f\u043e\u0441\u043b\u0443\u0448\u043d\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 PHP-\u0448\u0435\u043b\u043b!\n\n\u0411\u043e\u043d\u0443\u0441: \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0443\u0442\u0435\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d Path Traversal \u2014 \u0448\u0435\u043b\u043b \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0432 \u043a\u043e\u0440\u0435\u043d\u044c \u0441\u0430\u0439\u0442\u0430!\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u2014 RCE \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c\n\u2014 \u041a\u0440\u0430\u0436\u0430 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0430 wp-config.php\n\u2014 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432\n\u2014 \u0411\u043e\u043b\u0435\u0435 50,000 \u0441\u0430\u0439\u0442\u043e\u0432 \u0432 \u0437\u043e\u043d\u0435 \u0440\u0438\u0441\u043a\u0430!\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Ninja Forms - File Uploads \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.3.27 (\u0432\u0435\u0440\u0441\u0438\u044f 3.3.25 \u2014 \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u0439 \u043f\u0430\u0442\u0447!)\n2\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d\n3\ufe0f\u20e3 \u0417\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 PHP \u0432 \u043f\u0430\u043f\u043a\u0435 wp-content/uploads/\n4\ufe0f\u20e3 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u0430\u043f\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 .php \u0444\u0430\u0439\u043b\u043e\u0432\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#WordPress #NinjaForms #CVE #ZeroDay #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-19T16:00:10.707995Z"}, {"uuid": "d0cdf254-faa9-4b72-8d06-40ea20b6a59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/critical_bug/1711", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-0740: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Ninja Forms \u0434\u043b\u044f WordPress (CVSS 9.8)", "creation_timestamp": "2026-07-19T16:00:10.758088Z"}, {"uuid": "f920bd6f-5e43-40b4-9210-d59a56492ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1711", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-0740: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Ninja Forms \u0434\u043b\u044f WordPress (CVSS 9.8)", "creation_timestamp": "2026-07-20T00:00:06.692713Z"}, {"uuid": "ec7a153b-866f-4b39-9396-3acd8c1715d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "exploited", "source": "https://t.me/critical_bug/1710", "content": "\ud83d\udd25 CVE-2026-0740: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Ninja Forms \u0434\u043b\u044f WordPress \ud83d\udd34\n\nCVSS: 9.8 Critical | \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f | 50,000+ \u0441\u0430\u0439\u0442\u043e\u0432\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u041f\u043b\u0430\u0433\u0438\u043d Ninja Forms - File Uploads \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0442\u0438\u043f \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043d\u043e \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0442\u0438\u043f \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043f\u0435\u0440\u0435\u0434 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0444\u0430\u0439\u043b \u0441 \u0431\u0435\u0437\u043e\u0431\u0438\u0434\u043d\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c image.jpg, \u043d\u043e \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 shell.php. \u0421\u0435\u0440\u0432\u0435\u0440 \u043f\u043e\u0441\u043b\u0443\u0448\u043d\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 PHP-\u0448\u0435\u043b\u043b!\n\n\u0411\u043e\u043d\u0443\u0441: \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0443\u0442\u0435\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d Path Traversal \u2014 \u0448\u0435\u043b\u043b \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0432 \u043a\u043e\u0440\u0435\u043d\u044c \u0441\u0430\u0439\u0442\u0430!\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u2014 RCE \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c\n\u2014 \u041a\u0440\u0430\u0436\u0430 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0430 wp-config.php\n\u2014 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432\n\u2014 \u0411\u043e\u043b\u0435\u0435 50,000 \u0441\u0430\u0439\u0442\u043e\u0432 \u0432 \u0437\u043e\u043d\u0435 \u0440\u0438\u0441\u043a\u0430!\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Ninja Forms - File Uploads \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.3.27 (\u0432\u0435\u0440\u0441\u0438\u044f 3.3.25 \u2014 \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u0439 \u043f\u0430\u0442\u0447!)\n2\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d\n3\ufe0f\u20e3 \u0417\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 PHP \u0432 \u043f\u0430\u043f\u043a\u0435 wp-content/uploads/\n4\ufe0f\u20e3 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u0430\u043f\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 .php \u0444\u0430\u0439\u043b\u043e\u0432\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#WordPress #NinjaForms #CVE #ZeroDay #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-20T00:00:06.746729Z"}, {"uuid": "620b24bf-d2e7-482f-b164-79c270d61d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "exploited", "source": "https://t.me/critical_bug/1709", "content": "\ud83d\udc31 *hacker voice* I'M IN \ud83d\udd34\n\n\ud83d\udd25 CVE-2026-0740: Ninja Forms \u0434\u043b\u044f WordPress \u2014 50,000 \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439!\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Ninja Forms! CVSS: 9.8 Critical \ud83d\ude31\n\n\u041e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 \u0443 \u0432\u0430\u0441 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c! \ud83d\udcbb\n\n\ud83d\udc47 \u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u0438\u0436\u0435", "creation_timestamp": "2026-07-20T00:00:06.792972Z"}, {"uuid": "f7b480fe-34d8-4865-b8ca-b7caca693cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/STxGsrhQP6hZxkehr2eSvviXIon440Ogfxey7gY5WpdfDHc", "content": "", "creation_timestamp": "2026-08-23T00:00:40.921819Z"}, {"uuid": "1ff73b66-4f7c-401b-8050-39c4cdb7e939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/breachdetect/1244242", "content": "{\n  \"Source\": \"https://niflheim.top/\",\n  \"Content\": \"[Python/Bash + Apex AI] \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ninja Forms Uploads \u0434\u043b\u044f WordPress (CVE-2026-0740)\", \n  \"author\": \" (DarkholdRT)\",\n  \"Detection Date\": \"29 Jul 2026\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetect  \ud83d\udd39", "creation_timestamp": "2026-08-23T00:00:39.036192Z"}, {"uuid": "31bbfc01-45cd-4b95-84c4-a7c1a02f04ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/breachdetect/1265360", "content": "{\n  \"Source\": \"https://niflheim.top/\",\n  \"Content\": \"[Python/Bash + Apex AI] \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ninja Forms Uploads \u0434\u043b\u044f WordPress (CVE-2026-0740)\", \n  \"author\": \" (DarkholdRT)\",\n  \"Detection Date\": \"21 Aug 2026\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetect  \ud83d\udd39", "creation_timestamp": "2026-08-23T00:00:38.198992Z"}, {"uuid": "41a2ef60-0d1d-4e46-aaea-626812b795a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0716", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr42cxog452j", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-12478 \u0432 Libsoup: \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u0439 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 CVE-2026-0716 \u0438 \u0440\u0438\u0441\u043a\u0438 \u0432\u043d\u0435 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/533458B5-29E1-4279-AEF1-15341CBF4AA2", "creation_timestamp": "2026-07-20T19:39:51.618942Z"}, {"uuid": "ea799300-1cee-4f84-b5b5-371fa7b6e47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0776", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94385", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0776\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a whenx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 8  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-20 22:47:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSecurity research and proof-of-concept for CVE-2026-0776 affecting Discord Desktop Client.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T00:00:09.165750Z"}, {"uuid": "beda7939-603c-441c-845f-fdd977224f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2244", "content": "\ud83d\udd34 CISA orders urgent action on actively exploited Langflow RCE flaw\n\nThe Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents.\n\nTracked as CVE-2026-0770, this critical security flaw allows unauthenticated threat actors to gain remote code execution as root in low-complexity attacks.\n\n\"The specific flaw exists within the handling of the exec_globals parameter provided to the validate endpoint,\" Trend Micro researchers who found and reported the flaw explain. \"The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root.\"", "creation_timestamp": "2026-08-23T00:00:45.041969Z"}, {"uuid": "5594f0cb-bbda-409a-9026-3f0c019c1d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/cve0day/340", "content": "CVE-2026-0770\n\nLangflow execglobals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the execglobals parameter provided to the validate endpoint. The issue results from the inclusion of a resource from an untrusted control sphere. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27325.\n\nGitHub Link:\nhttps://github.com/0xBlackash/CVE-2026-0770", "creation_timestamp": "2026-08-27T15:00:10.833836Z"}, {"uuid": "1fa7ffb9-736a-4f4a-b7e7-fb7f50df1a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mr62lublc32n", "content": "\ud83d\uded1 CVE-2026-0770\nLangflow Langflow\nCVSS 9.8 / EPSS 10% / KEV: No\nTL;DR: Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code\u2026\nhttps://cvesentinel.com/report/CVE-2026-0770?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-21T14:50:10.137933Z"}, {"uuid": "5b8be159-3bf5-4e8d-bee3-7f0bc09202a3", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9e5179f7-4d70-4117-8b26-4c5a3c8279d6", "content": "", "creation_timestamp": "2026-07-21T15:00:01.821853Z"}, {"uuid": "8e62f250-0be6-4972-b570-85ccb93b8a91", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bef6a0e7-c26d-47ce-8300-4036ec3b51a2", "content": "", "creation_timestamp": "2026-07-21T15:00:39.030797Z"}, {"uuid": "57883425-5e1e-4c6f-9d63-ac2889c3a80e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog", "content": "", "creation_timestamp": "2026-07-21T16:15:05.038046Z"}, {"uuid": "3abe9e75-b3a6-427a-9821-6b7a47f9c547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr6ac7fvu42w", "content": "CISA added four flaws to its KEV catalog, including WordPress RCE (CVE-2026-63030) and Langflow RCE (CVE-2026-0770). All are exploited in the wild.\n\n#CISA #KEV #WordPress #Langflow #DDWRT #RCE #SQLInjection", "creation_timestamp": "2026-07-21T16:32:08.395527Z"}, {"uuid": "28b3cbfc-80bd-46a0-ae53-eb01bcaf6e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mr7p4tlja52j", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-0770: \u26a0\ufe0f CVE-2026-0770: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 10.4%\nActively exploited\n\nRead the full alert: https://dashboard-webapp-c10t.onrender.com/alerts/2026-0770-langflow-exec_globals-inclusion-of-functionality-from", "creation_timestamp": "2026-07-22T06:30:13.865019Z"}, {"uuid": "df9bee0d-835f-472c-8832-992ad4131927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mra4oigbiu2f", "content": "\u26a0\ufe0f CRITICAL THREAT: CVE-2026-0770 in Langflow enables remote code execution via untrusted control sphere inclusion. Active exploitation is confirmed. Get the forensic detection and input hardening strategies required to secure your AI pipelines today. https://thecybermind.co/aigl\n\n#CyberSecurity\u2026", "creation_timestamp": "2026-07-22T10:32:45.112974Z"}, {"uuid": "800e4943-3188-41fe-95e7-d1510f6a54f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrafl34qzu2r", "content": "Langflow's 'validate' endpoint just produced its SECOND unauthenticated root RCE in 14 months. CVE-2026-0770, CVSS 9.8, now in CISA's KEV list with a 3-day federal deadline. 220+ exploit attempts already logged. Patch, then pull it off the internet.", "creation_timestamp": "2026-07-22T13:11:54.371129Z"}, {"uuid": "7a1c970b-e267-4dfe-ac5a-271f1450c207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrafrem5ec2o", "content": "CISA ordered urgent patching of CVE-2026-0770 in Langflow, a critical flaw enabling unauthenticated root RCE via validate and exec_globals. KEVIntel saw 220+ attacks from 64 IPs. #Langflow #CISA #AWS", "creation_timestamp": "2026-07-22T13:15:25.728087Z"}, {"uuid": "41d2c7dd-51a2-4075-a117-e9bc9d1a1008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116964653150323533", "content": "\ud83d\udcf0 CISA Adds Four Actively Exploited Flaws in DD-WRT, Langflow, WordPress\nCISA adds 4 actively exploited vulnerabilities to its KEV catalog: CVE-2021-27137 (DD-WRT), CVE-2026-0770 (Langflow), and CVE-2026-63030 & CVE-2026-60137 (WordPress). Patching is urgent. #CISA #KEV #Vulnerability #PatchNow #WordPress\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-four-actively-exploited-vulnerabilities-in-dd-wrt-langflow-wordpress-to-kev-catalog/?utm_s\u2026", "creation_timestamp": "2026-07-22T16:49:32.063587Z"}, {"uuid": "7dfe2ac0-1213-4400-9828-a26fe112988a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mrarr25fd22q", "content": "CISA adds 4 actively exploited vulnerabilities to its KEV catalog: CVE-2021-27137 (DD-WRT), CVE-2026-0770 (Langflow), and CVE-2026-63030 & CVE-2026-60137 (WordPress). Patching is urgent. #CISA #KEV #Vulnerability #PatchNow #WordPress\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-22T16:49:59.712005Z"}, {"uuid": "646d2505-5635-4079-b0a7-89b8966eb885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mrbasknvyw2p", "content": "CISA just issued a binding directive: patch the critical Langflow RCE flaw (CVE-2026-0770) by Friday. This isn't a one-off; it's another sign of a deeper design problem in AI platforms handling user code. Are you vulnerable?\n\nhttps://www.tpp.blog/wr6pfey\n\n#cybersecurity #cisa #langflow", "creation_timestamp": "2026-07-22T21:19:17.411497Z"}, {"uuid": "a167540f-2003-447a-94b1-fd41f6f8c160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/GithubRedTeam/94744", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-0770-langflow_rce_reproduction\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a razureink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 03:46:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE Reproduction: cve-2026-0770-langflow_rce_reproduction\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T06:00:03.954772Z"}, {"uuid": "28a52641-db0a-4cd4-9341-88bf8d8ac7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0770", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mrcerxjdwq2z", "content": "\ud83d\udcf0 CISA Perintahkan Patch Mendesak untuk Celah RCE Langflow yang Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/23/cisa-patch-cve-2026-0770-langflow-rce/\n\n#cisa #cve-2026-0770 #cybersecurity #keamananSiber #langflow #rce", "creation_timestamp": "2026-07-23T08:03:10.676617Z"}, {"uuid": "42b7cf1a-096e-4c01-8a9a-3431133b36e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/cyberupdates365.bsky.social/post/3mrchnwoczk2l", "content": "CISA has added the critical Langflow AI framework RCE (CVE-2026-0770) to its Known Exploited Vulnerabilities catalog. Threat actors are weaponizing this flaw to harvest cloud credentials and deploy ENCFORGE ransomware against AI models :\ncyberupdates365.com/cisa-orders-...\n#InfoSec #DevSecOps #AI", "creation_timestamp": "2026-07-23T08:54:41.072640Z"}, {"uuid": "0b03cfed-daa1-4ecc-bde6-eb989170b080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "Telegram/lyQjgrzss-14q92fKQzooVmz9KnQq83SmXqNbV8WBn3n-CQ", "content": "", "creation_timestamp": "2026-07-23T11:00:03.637119Z"}, {"uuid": "1577d990-3c62-4345-a122-7501c96d36f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/i85Ko9VIVau4rwOxRL9oM3geQpNWom8rCaBlkF_bPD1ezpI", "content": "", "creation_timestamp": "2026-08-27T00:00:10.073311Z"}, {"uuid": "1547ab02-4681-4132-b031-9f0b0ad8c13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "Telegram/lyQjgrzss-14q92fKQzooVmz9KnQq83SmXqNbV8WBn3n-CQ", "content": "", "creation_timestamp": "2026-07-24T00:00:08.860254Z"}, {"uuid": "b6ebdb5a-7dfc-4045-a06a-4a4e40e75d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94744", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-0770-langflow_rce_reproduction\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a razureink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 03:46:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE Reproduction: cve-2026-0770-langflow_rce_reproduction\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:09.903704Z"}, {"uuid": "3e1538b6-6b4b-4d5f-ba25-eef90545dd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mrf7jryknu2t", "content": "(CISA TS-SOC) CVE-2026-0770 \u2013 Langflow Inclusion of Functionality from Untrusted Control Sphere\u00a0Vulnerability\n\nSeverity: UNKNOWN Impact Summary: Remote attackers can execute arbitrary code on affected installations. Timestamp: 2026-07-24T01:31:37.336Z ATT&CK Mapping\u2026...", "creation_timestamp": "2026-07-24T11:07:07.474199Z"}, {"uuid": "a0ea4ab1-da12-4318-811f-732acb5f8b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17215", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are latest 2026 CVEs with real, accessible GitHub PoC repositories only.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0770\n\ud83c\udfaf Langflow \u2013 Unauthenticated RCE (AI Pipeline)\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/affix/CVE-2026-0770-PoC\n\n\ud83e\udde0 Overview\nLangflow executes user-controlled Python code via unsafe exec() usage, enabling unauthenticated remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 AI pipeline compromise\n\u2022 Data exfiltration risk\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-22804\n\ud83c\udfaf Termix (Electron App) \u2013 XSS \u2192 LFI \u2192 Session Hijack\n\n\ud83d\udd17 PoC Repository\n\u27a1\ufe0f https://github.com/ThemeHackers/CVE-2026-22804\n\n\ud83e\udde0 Overview\nA stored XSS vulnerability leads to Local File Inclusion and session hijacking in an Electron-based environment.\n\n\u2699\ufe0f Impact\n\u2022 Session hijacking\n\u2022 Local file access\n\u2022 Desktop application compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-41242\n\ud83c\udfaf protobufjs \u2013 Arbitrary Code Execution (Supply Chain)\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/advisories/GHSA-xq3m-2v4x-88gg\n\n\ud83e\udde0 Overview\nImproper protobuf compilation allows injection of malicious logic, leading to arbitrary code execution in JavaScript environments.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Supply chain compromise\n\u2022 Backend system risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21440\n\ud83c\udfaf AdonisJS BodyParser \u2013 Path Traversal \u2192 Arbitrary File Write\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://github.com/topics/cve-2026-21440\n\n\ud83e\udde0 Overview\nA path traversal flaw allows attackers to write arbitrary files, which may lead to further exploitation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file write\n\u2022 Server compromise\n\u2022 Potential RCE chaining\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-5031\n\ud83c\udfaf ISP Billing Software \u2013 IDOR \u2192 Unauthorized Access\n\n\ud83d\udd17 Reference\n\u27a1\ufe0f https://www.tenable.com/cve/CVE-2026-5031\n\n\ud83e\udde0 Overview\nImproper access control allows attackers to access restricted data by manipulating identifiers.\n\n\u2699\ufe0f Impact\n\u2022 Unauthorized access\n\u2022 Data exposure\n\u2022 Privilege abuse\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 AI/LLM exploitation (Langflow)\n\u2022 Electron-based attack chains\n\u2022 Supply chain vulnerabilities\n\u2022 File write \u2192 RCE chaining\n\u2022 Access control bypass techniques\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 Rapid PoC publication after disclosure\n\u2022 AI frameworks emerging as key targets\n\u2022 Supply-chain vulnerabilities increasing\n\u2022 Exploit chains becoming more common\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:04.318045Z"}, {"uuid": "59d77781-acaf-4e71-b23f-0e7927ce2a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/ZerodayAlert/651", "content": "\u0414\u044b\u0440\u0430 \u0432 Ninja Forms \u0434\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u044b\u0441\u044f\u0447\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 WordPress\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ninja Forms \u0434\u043b\u044f WordPress \u043d\u0430\u0448\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2026-0740. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d \u043d\u0438 \u0430\u043a\u043a\u0430\u0443\u043d\u0442, \u043d\u0438 \u043f\u0430\u0440\u043e\u043b\u044c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0432 \u0441\u0430\u043c\u043e\u0439  \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435, \u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u0441\u043b\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c. \u041f\u043b\u0430\u0433\u0438\u043d \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435, \u043d\u043e \u043d\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0438 \u043f\u043e\u0447\u0442\u0438 \u043d\u0435 \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0444\u0430\u0439\u043b \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043a\u0430\u043a PHP-\u0441\u043a\u0440\u0438\u043f\u0442 \u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0438 \u0441\u0440\u0430\u0437\u0443 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430.\n\n\u0414\u0430\u043b\u044c\u0448\u0435 \u0432\u0441\u0451 \u0431\u044b\u0441\u0442\u0440\u043e: \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0440\u0430\u0431\u043e\u0442\u0430 \u0441 \u0431\u0430\u0437\u043e\u0439, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0413\u043b\u0430\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2014 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0438 \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0430 \u0430\u0442\u0430\u043a\u0438. \u041f\u043e\u043a\u0430 \u0441\u0430\u0439\u0442\u044b \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u043a\u0430\u043d\u0435\u0440\u044b \u0431\u0443\u0434\u0443\u0442 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0442\u043e\u0447\u043a\u0438 \u0432\u0445\u043e\u0434\u0430 \u0431\u0435\u0437 \u043e\u0441\u043e\u0431\u044b\u0445 \u0443\u0441\u0438\u043b\u0438\u0439.\n\n#ninjaforms #wordpress #cve #rce\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:08.284776Z"}, {"uuid": "cd129cc4-699e-4698-aa6f-fe42df2782a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/ZerodayAlert/651", "content": "\u0414\u044b\u0440\u0430 \u0432 Ninja Forms \u0434\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u044b\u0441\u044f\u0447\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 WordPress\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ninja Forms \u0434\u043b\u044f WordPress \u043d\u0430\u0448\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2026-0740. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d \u043d\u0438 \u0430\u043a\u043a\u0430\u0443\u043d\u0442, \u043d\u0438 \u043f\u0430\u0440\u043e\u043b\u044c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0432 \u0441\u0430\u043c\u043e\u0439  \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435, \u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u0441\u043b\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c. \u041f\u043b\u0430\u0433\u0438\u043d \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435, \u043d\u043e \u043d\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0438 \u043f\u043e\u0447\u0442\u0438 \u043d\u0435 \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0444\u0430\u0439\u043b \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043a\u0430\u043a PHP-\u0441\u043a\u0440\u0438\u043f\u0442 \u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0438 \u0441\u0440\u0430\u0437\u0443 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430.\n\n\u0414\u0430\u043b\u044c\u0448\u0435 \u0432\u0441\u0451 \u0431\u044b\u0441\u0442\u0440\u043e: \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0440\u0430\u0431\u043e\u0442\u0430 \u0441 \u0431\u0430\u0437\u043e\u0439, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0413\u043b\u0430\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2014 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0438 \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0430 \u0430\u0442\u0430\u043a\u0438. \u041f\u043e\u043a\u0430 \u0441\u0430\u0439\u0442\u044b \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u043a\u0430\u043d\u0435\u0440\u044b \u0431\u0443\u0434\u0443\u0442 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0442\u043e\u0447\u043a\u0438 \u0432\u0445\u043e\u0434\u0430 \u0431\u0435\u0437 \u043e\u0441\u043e\u0431\u044b\u0445 \u0443\u0441\u0438\u043b\u0438\u0439.\n\n#ninjaforms #wordpress #cve #rce\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:36.252460Z"}, {"uuid": "f5aa5bfe-95c5-4dc4-8292-71965598438b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17138", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:05.181197Z"}, {"uuid": "1a071506-0542-4b65-b7b8-302d14601585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mugyu53tti2j", "content": "\ud83e\udd16 CVE-2026-0768 (CVSS 9.8): critical Langflow flaw allows arbitrary Python code execution as root, now exploited in credential-probing and C2 campaigns along with a Ruby on Rails vulnerability (VulnCheck).\nhttps://thehackernews.com/2026/09/attackers-exploit-critical-langflow-and.html", "creation_timestamp": "2026-09-01T08:28:33.143034Z"}, {"uuid": "a542a92e-ecb7-4df2-96de-370adb82be27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://thehackernews.com/2026/09/attackers-exploit-critical-langflow-and.html", "content": "Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck.\n\nThe vulnerabilities in question are listed below -\n\n\n  CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user.\n  CVE-2026-66066 aka", "creation_timestamp": "2026-09-01T10:00:43.709200Z"}, {"uuid": "9a34214c-6add-47bf-8a22-b935f1e531fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3muhfs3avce2x", "content": "\u30cf\u30c3\u30ab\u30fc\u304cLangflow\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u653b\u6483\u3092\u958b\u59cb\n\n\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304c\u3001AI\u30ed\u30fc\u30b3\u30fc\u30c9\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0Langflow\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u5ea6\u300cCritical\u300d\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c(RCE)\u8106\u5f31\u6027\u306e\u60aa\u7528\u3092\u958b\u59cb\u3057\u305f\u3068\u3001\u8106\u5f31\u6027\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u4f01\u696d\u306eVulnCheck\u304c\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 CVE-2026-0768(CVSS\u30b9\u30b3\u30a29.8)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f\u3001", "creation_timestamp": "2026-09-01T12:20:01.937136Z"}, {"uuid": "aaf8440c-660e-4eee-9dc8-a48dcabbd492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3muhfy6767w2w", "content": "Threat actors exploit CVE-2026-0768 in Langflow to execute arbitrary root code without authentication, targeting reconnaissance and credential harvesting.\n", "creation_timestamp": "2026-09-01T12:23:27.031118Z"}, {"uuid": "59b9279f-ebaa-40fe-8cbf-fcd8d1aef922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3muhg42byum25", "content": "Threat actors exploit CVE-2026-0768 in Langflow to execute arbitrary root code without authentication, targeting reconnaissance and credential harvesting.\n", "creation_timestamp": "2026-09-01T12:25:36.740097Z"}, {"uuid": "96d6d677-b5c6-4d75-94e4-3e6c02d0f8f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3muhjuxppqz22", "content": "CVE-2026-0768: Active Exploitation of Langflow, 360+ Attacks in Hours", "creation_timestamp": "2026-09-01T13:33:14.510699Z"}, {"uuid": "359542a1-03a6-4e8a-8427-4a12aaec5885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/C10_CVE/3", "content": "CVE-2026-0770 C10-Team", "creation_timestamp": "2026-09-01T14:00:05.147148Z"}, {"uuid": "4e0c8794-f2c3-44c4-a59d-b588342de245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://t.me/pphm_HackerNews/2946", "content": "\ud83d\udd34 Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity\n\nThreat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck.\n\nThe vulnerabilities in question are listed below:\n\nCVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user.\n\nCVE-2026-66066 aka KindaRails2Shell (CVSS score: 9.5) - A vulnerability that could allow an unauthenticated attacker to read arbitrary files from the server, leak Rails process environment and secrets such as secret_key_base, the Rails master key, database passwords, cloud storage credentials, and API tokens, ultimately leading to remote code execution.", "creation_timestamp": "2026-09-01T14:00:05.804303Z"}, {"uuid": "2b518661-8e08-4a37-8a78-98a675f84d33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "published-proof-of-concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "content": "", "creation_timestamp": "2026-09-02T01:00:05.007284Z"}, {"uuid": "c23dbcc4-22f0-471c-bec7-de7a6cba9645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3muhyihqnx72y", "content": "Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys.", "creation_timestamp": "2026-09-01T17:54:40.785447Z"}, {"uuid": "b0850171-40f8-4a8a-b81e-323feaaf439f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117197080717478227", "content": "\ud83d\udcf0 Critical RCE Flaw in Langflow AI Platform Actively Exploited\nCritical RCE flaw (CVE-2026-0768, 9.8 CVSS) in the Langflow AI platform is actively exploited. Unauthenticated attackers can get root access to steal credentials. Patch to version 1.4.3+ now! #Langflow #AI #CyberSecurity #RCE #CVE\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-rce-flaw-in-langflow-ai-platform-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-01T17:58:54.872843Z"}, {"uuid": "02e36c8a-96f4-4a2b-8ba0-69271c73a38d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3muhyqq3a6j26", "content": "Critical RCE flaw (CVE-2026-0768, 9.8 CVSS) in the Langflow AI platform is actively exploited. Unauthenticated attackers can get root access to steal credentials. Patch to version 1.4.3+ now! #Langflow #AI #CyberSecurity #RCE #CVE\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-01T17:59:18.177901Z"}, {"uuid": "4a4d27f9-a5e7-4acc-be7d-60be538a2214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3muhysnsvoe2v", "content": "Hackers are exploiting CVE-2026-0768, a critical Langflow RCE flaw that can run arbitrary Python as root without auth. VulnCheck reports recon and credential-harvesting activity, mainly from Russia. #Langflow #VulnCheck #Russia", "creation_timestamp": "2026-09-01T18:00:22.755435Z"}, {"uuid": "bdca8c3b-2de2-4e4d-b243-a65b53b34ac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3muhzjtz5e322", "content": "OpenAI\u304a\u3088\u3073AWS\u30ad\u30fc\u306e\u7a83\u53d6\u306b\u60aa\u7528\u3055\u308c\u308b\u6df1\u523b\u306aLangflow\u306e\u6b20\u9665\n\n\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304c\u3001AI\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u69cb\u7bc9\u7528\u306e\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cLangflow\u300d\u306b\u5b58\u5728\u3059\u308b\u672a\u8a8d\u8a3c\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u8106\u5f31\u6027(CVE-2026-0768)\u3092\u60aa\u7528\u3057\u3001\u8a8d\u8a3c\u60c5\u5831\u3084\u30c8\u30fc\u30af\u30f3\u3001\u5404\u7a2e\u30ad\u30fc\u3092\u7a83\u53d6\u3057\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u554f\u984c\u306f\u6df1\u523b\u5ea6\u300cCritical\u300d\u306e\u8a55\u4fa1\u3092\u53d7\u3051\u3066\u304a\u308a\u3001Langflow\u306e\u30ab\u30b9\u30bf\u30e0\u30b3...", "creation_timestamp": "2026-09-01T18:13:20.790243Z"}, {"uuid": "26b7bb35-3dfc-466d-ae94-b75dc6056fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mui25ayemh2q", "content": "Langflow\u306e\u8a8d\u8a3c\u306a\u3057RCE\u8106\u5f31\u6027\uff08CVE-2026-0768\uff09\u304c\u60aa\u7528\u3055\u308c\u3001OpenAI/AWS\u306e\u30ad\u30fc\u306a\u3069\u6a5f\u5bc6\u60c5\u5831\u304c\u7a83\u53d6\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-09-01T18:24:12.142320Z"}, {"uuid": "cf44582d-3b1a-483e-bdca-6914b01efa68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3muibzq7ilx2p", "content": "Attackers are exploiting CVE-2026-0768 in Langflow for unauthenticated RCE, stealing environment variables and secret files to grab OpenAI and AWS keys from vulnerable AI apps. #Langflow #OpenAI #AWS", "creation_timestamp": "2026-09-01T20:45:23.589877Z"}, {"uuid": "aa8633a6-56ec-446a-9816-7a2451ca3158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3muibpjmbfn2k", "content": "\ud83e\udd16 CVE-2026-0768: unauthenticated RCE in Langflow exploited in the wild to steal OpenAI and AWS API keys. Patch immediately.\nhttps://www.bleepingcomputer.com/news/security/critical-langflow-flaw-exploited-to-steal-openai-and-aws-keys/", "creation_timestamp": "2026-09-01T20:39:41.390769Z"}, {"uuid": "d1748f13-1cae-47e4-97c6-7a7d0c84349b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "exploited", "source": "https://t.me/BleepingComputer/25457", "content": "\u200aCritical Langflow flaw exploited to steal OpenAI and AWS keys\n\nThreat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-langflow-flaw-exploited-to-steal-openai-and-aws-keys/", "creation_timestamp": "2026-09-01T22:00:05.122524Z"}, {"uuid": "52e72993-56a7-4df8-94d7-b09d18c3180e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "exploited", "source": "https://t.me/BleepingComputer/25457", "content": "\u200aCritical Langflow flaw exploited to steal OpenAI and AWS keys\n\nThreat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and keys. [...]\n\nhttps://www.bleepingcomputer.com/news/security/critical-langflow-flaw-exploited-to-steal-openai-and-aws-keys/", "creation_timestamp": "2026-09-02T01:00:24.863654Z"}, {"uuid": "eff94f3e-4d7e-4df5-8988-c2d2a01bd673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://thehackernews.com/2026/09/attackers-exploit-critical-langflow-and.html", "content": "Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck.\n\nThe vulnerabilities in question are listed below -\n\n\n  CVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user.\n  CVE-2026-66066 aka", "creation_timestamp": "2026-09-02T01:00:34.051286Z"}, {"uuid": "ddc563c4-1005-44b0-9b76-a992fa5ca9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://www.darkreading.com/vulnerabilities-threats/critical-langflow-flaw-exploited-attacks-rise", "content": "The attacks targeting CVE-2026-0768 are the latest threat against the low-code AI development platform, which is receiving more attention from adversaries this year.", "creation_timestamp": "2026-09-02T01:00:34.725458Z"}, {"uuid": "3f5107f4-556f-47cf-921f-f969a22165dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "Telegram/h0A5rulSzlnPr9EWvI2sYGI43d66_trDcfBexH7mQO8YfZnU", "content": "", "creation_timestamp": "2026-09-02T10:00:06.030064Z"}, {"uuid": "6e6c6621-dbe6-4e44-a00e-4150bea151b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "exploited", "source": "Telegram/nUaiijtVFTACEIUA4SH3a_WR0ickjjV4xXaXYKjYGchi0g", "content": "", "creation_timestamp": "2026-09-02T01:05:08.155822Z"}, {"uuid": "7c9db848-b711-4268-b9e9-ebf515c680e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://t.me/pphm_HackerNews/2946", "content": "\ud83d\udd34 Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity\n\nThreat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck.\n\nThe vulnerabilities in question are listed below:\n\nCVE-2026-0768 (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user.\n\nCVE-2026-66066 aka KindaRails2Shell (CVSS score: 9.5) - A vulnerability that could allow an unauthenticated attacker to read arbitrary files from the server, leak Rails process environment and secrets such as secret_key_base, the Rails master key, database passwords, cloud storage credentials, and API tokens, ultimately leading to remote code execution.", "creation_timestamp": "2026-09-02T01:05:08.313421Z"}, {"uuid": "e2c2825b-8ee4-440a-9b3e-c1919fac4386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/C10_CVE/3", "content": "CVE-2026-0770 C10-Team", "creation_timestamp": "2026-09-02T01:05:06.169810Z"}, {"uuid": "5b82ce24-5321-420b-9f82-9a16d96537ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/ai-ru.at.thenote.app/post/3muiyeczwxk25", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u043a\u0430\u043a CVE-2026-0768, \u0434\u0435\u0444\u0435\u043a\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 Python.\n\nTelegram \u0418\u0418 \u0414\u0430\u0439\u0434\u0436\u0435\u0441\u0442\n#ai #news", "creation_timestamp": "2026-09-02T03:25:08.246336Z"}, {"uuid": "d87e06af-285c-4432-a3e2-1f21313c5994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/ai-news.at.thenote.app/post/3muiyt5cs5c25", "content": "Hackers Start Exploiting Critical Langflow Vulnerability\n\nTracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely.\n\nTelegram AI Digest\n#ai #news", "creation_timestamp": "2026-09-02T03:33:25.926644Z"}, {"uuid": "8e180448-ed1b-4981-96ed-babd0d6a1346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muj5lgdjq22b", "content": "\ud83d\udd34 CVE-2026-0768 \u2014 Langflow under active attack\n\nAttackers are exploiting the critical RCE and hunting for OpenAI API keys, AWS credentials and SSH secrets. VulnCheck observed 360+ exploitation events.\n\nstemshop.top/blog/langflo...\n\n#CVE #CVE20260768 #Langflow #OpenAI #AWS #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T04:58:33.399090Z"}, {"uuid": "e56003ee-19ae-49ce-a43d-6ddec9cf3749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3mujc7xlvl22e", "content": "Exploitation of Langflow CVE-2026-0768: From Unauthenticated Root RCE to Secret Theft and Lateral Movement  dev.to/anoymask/exp...", "creation_timestamp": "2026-09-02T06:21:36.767993Z"}, {"uuid": "9f86f692-0ff9-49a7-bf5d-a524dfb3ae93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mujikwq4ex2o", "content": "Threat actors are exploiting critical vulnerabilities in Langflow and Ruby on Rails, specifically CVE-2026-0768 (CVSS 9.8) and CVE-2026-66066 (CVSS 9.5). The latter allows unauthenticated attackers to read sensitive files and potentially execute arbitrary code.", "creation_timestamp": "2026-09-02T08:15:04.363087Z"}, {"uuid": "9e894488-6ffe-42e1-b14f-77037ceae2f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "exploited", "source": "https://t.me/ctinow/256107", "content": "Hackers Target Langflow in CVE-2026-0768 Attacks\nhttps://ift.tt/lBNV62Z", "creation_timestamp": "2026-09-02T09:00:06.371293Z"}, {"uuid": "f80fedc6-b79e-4be7-9832-9c6032272378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mujmbsbajs2y", "content": "Hackers Target Langflow in CVE-2026-0768 Attacks\n\nsecurityaffairs.com/198270/hacki...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-09-02T09:21:32.231176Z"}, {"uuid": "b0a77540-a10b-46df-82a3-2fe0bf935396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3mujxdal5kl2v", "content": "Langflow RCE now under active\u00a0exploitation\n\nAttackers are actively exploiting CVE-2026-0768, a critical unauthenticated RCE flaw in Langflow's code validator, running credential-harvesting operations that pull OpenAI API keys and AWS access straight out of compromised agentic AI infrastructure,\u2026", "creation_timestamp": "2026-09-02T12:39:11.332670Z"}, {"uuid": "8f1007f8-23d5-4cfb-b4de-58b16555480f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/qubblelabs.com/post/3mujz7wgr5c2f", "content": "Langflow CVE-2026-0768 exploited in the wild (Dark Reading). Attackers chain auth bypass to steal LLM keys and model weights from low-code AI pipelines.", "creation_timestamp": "2026-09-02T13:13:07.530684Z"}, {"uuid": "53e1f607-3333-433f-a4c3-04f17e69bf8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3muk4dsxgd42t", "content": "Anyone running Langflow, an open-source platform for building AI agents, may have exposed AWS and OpenAI credentials right now. Attackers exploit CVE-2026-0768, an unauthenticated RCE flaw, to harvest keys and secrets. Observed attacks rose from 50 over the weekend to 360, per BleepingComputer.", "creation_timestamp": "2026-09-02T14:08:59.671763Z"}, {"uuid": "e7ef1a86-2efb-4bb2-b171-ac1b1acf500c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/thempra.bsky.social/post/3mukfz3xpkk2r", "content": "Ojo con los flujos ag\u00e9nticos de la IA, explotaci\u00f3n activa de CVE-2026-0768 en Langflow: RCE sin autenticaci\u00f3n (CVSS 9.8). Los atacantes acaban robando credenciales OpenAI/AWS y claves SSH.\nsecurityaffairs.com/198270/hacki...", "creation_timestamp": "2026-09-02T17:01:58.929754Z"}, {"uuid": "20a30116-8953-4211-bd4b-2b483748e026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "exploited", "source": "https://t.me/true_secator/8572", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-0768) \u0432 Langflow, \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0418\u0418, \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u043a\u043b\u044e\u0447\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0432\u0430\u043b\u0438\u0434\u0430\u0442\u043e\u0440\u0435 \u043a\u043e\u0434\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Langflow.\n\nVulnCheck \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u0445 \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u0430\u043b\u0438 \u0446\u0435\u043b\u044c\u044e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 50 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430 \u0437\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u0449\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u0434\u043e 360.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0438 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043b\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Langflow, \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 AWS \u0438 \u043a\u043b\u044e\u0447\u0435\u0439 API OpenAI.\n\nLangflow - \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u00a0\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0418\u0418, \u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u0447\u0430\u0442-\u0431\u043e\u0442\u043e\u0432 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e (RAG).\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435, \u0441\u043e\u0435\u0434\u0438\u043d\u044f\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043e\u043a, \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445, API \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\nCVE-2026-0768 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Langflow 1.4.2 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 Zero Day Initiative \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\nCVE-2026-0768 - \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0443\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-33017, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 Python \u0438 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432 .ENV \u0438 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u0430 \u044d\u0442\u0438\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c\u00a0CVE-2026-5027\u00a0\u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 CVE-2026-55255\u00a0\u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c \u0418\u0418 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u043e\u0432 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0CVE-2026-0770\u00a0\u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0438 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0438 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438\u00a0CVE-2026-9198\u00a0\u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Langflow \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, 1.11.6, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u0441\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430.", "creation_timestamp": "2026-09-02T23:00:04.941293Z"}, {"uuid": "6158109d-a6ea-4490-9b0a-7d2f176b3e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://t.me/true_secator/8572", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-0768) \u0432 Langflow, \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0418\u0418, \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u043a\u043b\u044e\u0447\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0432\u0430\u043b\u0438\u0434\u0430\u0442\u043e\u0440\u0435 \u043a\u043e\u0434\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Langflow.\n\nVulnCheck \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u0445 \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u0430\u043b\u0438 \u0446\u0435\u043b\u044c\u044e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 50 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430 \u0437\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u0449\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u0434\u043e 360.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0438 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043b\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Langflow, \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 AWS \u0438 \u043a\u043b\u044e\u0447\u0435\u0439 API OpenAI.\n\nLangflow - \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u00a0\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0418\u0418, \u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u0447\u0430\u0442-\u0431\u043e\u0442\u043e\u0432 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e (RAG).\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435, \u0441\u043e\u0435\u0434\u0438\u043d\u044f\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043e\u043a, \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445, API \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\nCVE-2026-0768 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Langflow 1.4.2 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 Zero Day Initiative \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\nCVE-2026-0768 - \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0443\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-33017, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 Python \u0438 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432 .ENV \u0438 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u0430 \u044d\u0442\u0438\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c\u00a0CVE-2026-5027\u00a0\u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 CVE-2026-55255\u00a0\u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c \u0418\u0418 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u043e\u0432 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0CVE-2026-0770\u00a0\u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0438 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0438 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438\u00a0CVE-2026-9198\u00a0\u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Langflow \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, 1.11.6, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u0441\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430.", "creation_timestamp": "2026-09-02T23:00:05.159655Z"}, {"uuid": "70b99eb4-2e12-4850-8178-f55c348d1d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100844", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-0768\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rmhowe425\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 20:57:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T23:00:05.819906Z"}, {"uuid": "ecd98deb-26c2-4bf6-9de0-dcf155da339f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "exploited", "source": "https://t.me/true_secator/8572", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-0768) \u0432 Langflow, \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0418\u0418, \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u043a\u043b\u044e\u0447\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0432\u0430\u043b\u0438\u0434\u0430\u0442\u043e\u0440\u0435 \u043a\u043e\u0434\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Langflow.\n\nVulnCheck \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u0445 \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u0430\u043b\u0438 \u0446\u0435\u043b\u044c\u044e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 50 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430 \u0437\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u0449\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u0434\u043e 360.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0438 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043b\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Langflow, \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 AWS \u0438 \u043a\u043b\u044e\u0447\u0435\u0439 API OpenAI.\n\nLangflow - \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u00a0\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0418\u0418, \u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u0447\u0430\u0442-\u0431\u043e\u0442\u043e\u0432 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e (RAG).\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435, \u0441\u043e\u0435\u0434\u0438\u043d\u044f\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043e\u043a, \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445, API \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\nCVE-2026-0768 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Langflow 1.4.2 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 Zero Day Initiative \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\nCVE-2026-0768 - \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0443\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-33017, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 Python \u0438 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432 .ENV \u0438 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u0430 \u044d\u0442\u0438\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c\u00a0CVE-2026-5027\u00a0\u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 CVE-2026-55255\u00a0\u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c \u0418\u0418 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u043e\u0432 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0CVE-2026-0770\u00a0\u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0438 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0438 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438\u00a0CVE-2026-9198\u00a0\u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Langflow \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, 1.11.6, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u0441\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430.", "creation_timestamp": "2026-09-03T00:00:35.676271Z"}, {"uuid": "f4c49285-7def-4f84-a705-1f6457539953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "exploited", "source": "https://t.me/true_secator/8572", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-0768) \u0432 Langflow, \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0418\u0418, \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u043a\u043b\u044e\u0447\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0432\u0430\u043b\u0438\u0434\u0430\u0442\u043e\u0440\u0435 \u043a\u043e\u0434\u0430 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Langflow.\n\nVulnCheck \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043b\u043e\u0432\u0443\u0448\u043a\u0430\u0445 \u0434\u043b\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u0430\u043b\u0438 \u0446\u0435\u043b\u044c\u044e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 50 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430 \u0437\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u0449\u0435\u0435 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u043e\u0441\u044c \u0434\u043e 360.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0438 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043b\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Langflow, \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 AWS \u0438 \u043a\u043b\u044e\u0447\u0435\u0439 API OpenAI.\n\nLangflow - \u044d\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u00a0\u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0418\u0418, \u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u0447\u0430\u0442-\u0431\u043e\u0442\u043e\u0432 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e (RAG).\n\n\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435, \u0441\u043e\u0435\u0434\u0438\u043d\u044f\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u044f\u0437\u044b\u043a\u043e\u0432\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043e\u043a, \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445, API \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\nCVE-2026-0768 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Langflow 1.4.2 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u043a\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 Zero Day Initiative \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0438 \u043f\u0435\u0440\u0435\u0434 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 Python.\n\nCVE-2026-0768 - \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0443\u0442\u043a\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-33017, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 Python \u0438 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0444\u0430\u0439\u043b\u043e\u0432 .ENV \u0438 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u0430 \u044d\u0442\u0438\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c\u00a0CVE-2026-5027\u00a0\u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 CVE-2026-55255\u00a0\u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c \u0418\u0418 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u043e\u0432 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0CVE-2026-0770\u00a0\u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0438 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0438 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438\u00a0CVE-2026-9198\u00a0\u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Langflow \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, 1.11.6, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0432\u0441\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430.", "creation_timestamp": "2026-09-03T00:00:35.495320Z"}, {"uuid": "06bbd272-7c55-4b37-8507-eb98ff3641aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100844", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-0768\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rmhowe425\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 20:57:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-03T00:00:36.226156Z"}, {"uuid": "5d688e01-eb20-4d95-91b5-dc4de6e10a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "Telegram/h0A5rulSzlnPr9EWvI2sYGI43d66_trDcfBexH7mQO8YfZnU", "content": "", "creation_timestamp": "2026-09-03T00:00:50.590504Z"}, {"uuid": "e1b3897d-9a97-4b29-a080-b8f15d5a8fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "exploited", "source": "https://t.me/ctinow/256107", "content": "Hackers Target Langflow in CVE-2026-0768 Attacks\nhttps://ift.tt/lBNV62Z", "creation_timestamp": "2026-09-03T00:00:51.429846Z"}, {"uuid": "0983632d-568f-4b38-ba2d-3f04c05759f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "published-proof-of-concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "content": "", "creation_timestamp": "2026-09-03T00:01:00.227194Z"}, {"uuid": "ff7c92e5-46a3-48c0-91d6-5d9437da2eb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0769", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100859", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-0769\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rmhowe425\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 23:46:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-03T03:00:07.165996Z"}, {"uuid": "2e8ea388-924a-4a71-a361-c1dfa1010a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mullkiwuus25", "content": "Hackers Target Langflow in CVE-2026-0768 Attacks\n\nHackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python code on vulnerable systems. Hackers have started exploiting a critical vulnerability, tracked as CVE-2026-0768 (CVSS score \u2026\n#hackernews #news", "creation_timestamp": "2026-09-03T04:13:49.561142Z"}, {"uuid": "09fa0c02-a1ce-4ea7-b2bd-a9527862d310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/exoduscn/12549", "content": "LangFlow RCE Vulnerability", "creation_timestamp": "2026-09-03T05:00:06.560495Z"}, {"uuid": "b1500a0e-2058-4cf5-a550-7610f61545d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mumdzegijt2x", "content": "Attackers exploit Langflow CVE-2026-0768, an unauthenticated root RCE, to harvest OpenAI and AWS keys and admin credentials from exposed AI servers.\n\n#Langflow #CVE20260768 #VulnCheck #OpenAI #AWS", "creation_timestamp": "2026-09-03T11:31:38.294134Z"}, {"uuid": "16ec69b7-202a-4030-94cc-c9dbfeb0b19e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/sipirtu.com/post/3mund4yzj7z2z", "content": "A critical flaw in Langflow is being exploited as attacks on the AI platform rise. The attacks target CVE-2026-0768, representing the latest threat against the low-code AI development platform.\n\nSource: Dark Reading", "creation_timestamp": "2026-09-03T20:48:26.447989Z"}, {"uuid": "461919f1-9710-4cc1-acda-12a2c9bbc44a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/exoduscn/12549", "content": "LangFlow RCE Vulnerability", "creation_timestamp": "2026-09-04T00:01:01.339607Z"}, {"uuid": "45edef27-58b9-41a9-b0b1-699e4f435d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0769", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100859", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-0769\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rmhowe425\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 23:46:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-04T00:01:04.938583Z"}, {"uuid": "9e9c7d50-d12c-42c1-98e8-761386077bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0768", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3munx6gi7fm2c", "content": "Attackers Exploit Langflow to Steal OpenAI, AWS Keys https://0daynews.com/articles/2026-09-02-langflow-cve-2026-0768-rce-credential-theft", "creation_timestamp": "2026-09-04T02:47:08.823996Z"}, {"uuid": "d0e6cd00-4aec-4816-a2d0-cd3eae47afa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/xssf_forum/122", "content": "\ud83d\udcdd \u041d\u0435\u043c\u043d\u043e\u0433\u043e \u043e \u0436\u0438\u0437\u043d\u0438, pivoting \u0438 Langflow CVE-2026-0770.\n\u0421\u0442\u0430\u0442\u044c\u0438\n\n\u041d\u0435 \u0435\u0434\u0438\u043d\u043e\u0436\u0434\u044b \u0434\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043c\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u0440\u0435\u0431\u044f\u0442\u0430\u043c\u0438 \u0438\u0437 \u043e\u0434\u043d\u043e\u0439 \u043e\u0441\u0443\u0436\u0434\u0430\u0435\u043c\u043e\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0441\u0444\u0435\u0440\u044b. \u0417\u0430\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u043e\u043d\u0438 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0434\u0435\u043d\u044c\u0433\u0438. \u0420\u0430\u0431\u043e\u0442\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0441\u0435\u0442\u044f\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u043d\u0435\u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d \u0417\u0430\u043f\u0430\u0434\u0430. \u0427\u0435\u0441\u0442\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044f \u0431\u044b\u043b \u0432 \u0430\u0445\u0443\u0435 \u043e\u0442 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a\u0438\u0435 \u0441\u0443\u043c\u043c\u044b \u0437\u0430\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0442\u043e\u0432\u0430\u0440\u0438\u0449\u0438, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438 \u043a\u0430\u043a \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0410 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u043e\u043d\u0438 \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u2026\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435", "creation_timestamp": "2026-09-04T05:00:07.018955Z"}, {"uuid": "3b147d08-0798-4a38-95c8-47eaf85dcc0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0768", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3muorveklnz2q", "content": "Attackers Exploit Langflow to Steal OpenAI, AWS Keys \u2014 CVE-2026-0768, a critical unauthenticated RCE in Langflow, is being actively exploited to drain AI API keys and cloud credentials from exposed instances. https://0daynews.com/articles/2026-09-02-langflow-cve-2026-0768-rce-credential-theft", "creation_timestamp": "2026-09-04T10:45:15.356565Z"}, {"uuid": "c03366cd-ae5e-4673-97d2-cc462eb5bc31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://t.me/xssf_forum/122", "content": "\ud83d\udcdd \u041d\u0435\u043c\u043d\u043e\u0433\u043e \u043e \u0436\u0438\u0437\u043d\u0438, pivoting \u0438 Langflow CVE-2026-0770.\n\u0421\u0442\u0430\u0442\u044c\u0438\n\n\u041d\u0435 \u0435\u0434\u0438\u043d\u043e\u0436\u0434\u044b \u0434\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043c\u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441 \u0440\u0435\u0431\u044f\u0442\u0430\u043c\u0438 \u0438\u0437 \u043e\u0434\u043d\u043e\u0439 \u043e\u0441\u0443\u0436\u0434\u0430\u0435\u043c\u043e\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0441\u0444\u0435\u0440\u044b. \u0417\u0430\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u043e\u043d\u0438 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0440\u043e\u0448\u0438\u0435 \u0434\u0435\u043d\u044c\u0433\u0438. \u0420\u0430\u0431\u043e\u0442\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0441\u0435\u0442\u044f\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u043d\u0435\u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d \u0417\u0430\u043f\u0430\u0434\u0430. \u0427\u0435\u0441\u0442\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044f \u0431\u044b\u043b \u0432 \u0430\u0445\u0443\u0435 \u043e\u0442 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a\u0438\u0435 \u0441\u0443\u043c\u043c\u044b \u0437\u0430\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0442\u043e\u0432\u0430\u0440\u0438\u0449\u0438, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0438 \u043a\u0430\u043a \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0410 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u043e\u043d\u0438 \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u2026\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435", "creation_timestamp": "2026-09-05T01:00:40.575714Z"}, {"uuid": "c9bc38c3-e07b-4e0d-9b66-2f846b74366c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3muqn3pnbbw2z", "content": "The latest update for #Indusface includes \"CVE-2026-0768: Critical RCE in Langflow #AI Agent Builder\" and \"SharePoint CVE-2026-55040 Actively Exploited: AI-Discovered RCE Chain\".\n \n#cybersecurity #infosec https://opsmtrs.com/3ySs2VF", "creation_timestamp": "2026-09-05T04:24:39.169394Z"}, {"uuid": "fe006f62-014d-4af5-a332-9b80e43aa5a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3muqn3pya2e2t", "content": "The latest update for #Indusface includes \"CVE-2026-0768: Critical RCE in Langflow #AI Agent Builder\" and \"SharePoint CVE-2026-55040 Actively Exploited: AI-Discovered RCE Chain\".\n \n#potatosecurity #infosec https://opsmtrs.com/3ySs2VF", "creation_timestamp": "2026-09-05T04:24:39.796891Z"}, {"uuid": "2ebbcb01-00b0-4d17-b46f-0ae42053534e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0799", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muscbqdawm2c", "content": "libpcap BPF\u30a4\u30f3\u30bf\u30d7\u30ea\u30bf\u306e\u4e0d\u5177\u5408\u306b\u3088\u308a\u3001\u7d30\u5de5\u3055\u308c\u305f\u30d5\u30a3\u30eb\u30bf\u30d7\u30ed\u30b0\u30e9\u30e0\u304cOS\u30d7\u30ed\u30bb\u30b9\u306e\u30e1\u30e2\u30ea\u3092\u8aad\u307f\u66f8\u304d\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u3001\u60c5\u5831\u6f0f\u6d29\u3084\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-0799 CVSS 8.7 | HIGH", "creation_timestamp": "2026-09-05T20:16:30.057373Z"}, {"uuid": "bd9340bb-96f0-4fce-a110-1042c06f3364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0799", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3musetbr3x423", "content": "\ud83d\udfe0 CVE-2026-0799 - High (8.7)\n\nIn BPF instructions that load/store a value from/to a scratch memory register the register index ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-0799/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T21:02:06.479655Z"}, {"uuid": "f26d4514-615b-4d08-81e2-44c6ab6799b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/nik-kale.bsky.social/post/3muxamjcjjm2i", "content": "CVE-2026-0768 is unauthenticated remote code execution in Langflow's custom component editor, fixed in 1.11.6. VulnCheck watched exploitation go from about 50 attempts over a weekend to 360 by September 1, most of it from Russia.", "creation_timestamp": "2026-09-07T19:30:02.461533Z"}, {"uuid": "e0cec573-e1db-4c05-bbd2-3c766da12b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/O8mSpyNy7kB1kY1fK9CD34PkE3MaZvnjKkC8Ugpy2sCZKZY", "content": "", "creation_timestamp": "2026-09-08T00:00:06.931337Z"}, {"uuid": "57a542c8-9bf7-4c35-a25f-8df9491b5880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3muyc43xvd524", "content": "The latest update for #Indusface includes \"Indusface WAS #AI-Assisted Pentest: Comprehensive Vulnerability Assessment Across Web, API and AI Apps\" and \"CVE-2026-0768: Critical RCE in Langflow AI Agent Builder\".\n \n#cybersecurity #infosec https://opsmtrs.com/3ySs2VF", "creation_timestamp": "2026-09-08T05:29:19.274351Z"}, {"uuid": "aa77ffbf-3b51-4a53-9414-653dbf1479a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/theledgr.bsky.social/post/3muzzj2lbvn2t", "content": "CVE-2026-0768: pre-auth RCE in Langflow steals AI API keys. No login needed. Attack hits `/api/v1/run` with zero auth enforcement. Your competitors\u2019 senior engineers read this before standup. Come join them at TheLEDGR.io.\n\ntheledgr.io/join", "creation_timestamp": "2026-09-08T22:00:49.699609Z"}, {"uuid": "4c342c80-8ee8-4297-98a3-8d1d510deb84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/O8mSpyNy7kB1kY1fK9CD34PkE3MaZvnjKkC8Ugpy2sCZKZY", "content": "", "creation_timestamp": "2026-09-09T00:00:48.401118Z"}, {"uuid": "21b75e35-68e9-44b5-b567-d4f71f506d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0702", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0702.yaml", "content": "", "creation_timestamp": "2026-09-09T15:00:06.462020Z"}, {"uuid": "fc0d9243-3dd6-4c4f-b6d7-01896111cd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0702", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0702.yaml", "content": "", "creation_timestamp": "2026-09-10T00:00:03.867407Z"}, {"uuid": "a8293192-e104-4470-8824-53c50cf8be24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0702", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0702.yaml", "content": "", "creation_timestamp": "2026-09-11T00:00:07.484762Z"}, {"uuid": "c66e23d7-e6a1-44bd-8735-cf5be4d85b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0702", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0702.yaml", "content": "", "creation_timestamp": "2026-09-12T00:00:08.197518Z"}, {"uuid": "0c16d07d-a0fe-4d0e-8209-ce500f2b0e60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0702", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0702.yaml", "content": "", "creation_timestamp": "2026-09-13T00:00:05.294542Z"}, {"uuid": "f4ef3acf-3a25-445e-bbb2-4946812355d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/133", "content": "\ud83d\udea8 CVE-2026-0770 | \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 Langflow\n\n\u26a0\ufe0f \u0627\u0644\u062e\u0637\u0648\u0631\u0629: 9.8/10 (\u062d\u0631\u062c\u0629 \u062c\u062f\u0627\u064b)\n\ud83d\udcc5 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641: \u064a\u0648\u0646\u064a\u0648 2026 | CISA \u0623\u0636\u0627\u0641\u062a\u0647\u0627: 21 \u064a\u0648\u0644\u064a\u0648 2026\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u2753 \u0645\u0627 \u0647\u064a Langflow\u061f\n\u0645\u0646\u0635\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0644\u0628\u0646\u0627\u0621 AI Agents \u0648\u062e\u0637\u0648\u0637 \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644 (Workflows) \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 LLMs.\n\n\u2753 \u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0646\u0642\u0637\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0643\u0648\u062f /api/v1/validate/code \u0643\u0627\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 exec() \u0628\u062f\u0644 compile() \u0641\u0642\u0637.\n\n\u0627\u0644\u0647\u0627\u0643\u0631 \u064a\u0631\u0633\u0644 \u0643\u0648\u062f Python \u0628\u0633\u064a\u0637 \u2014 \u0627\u0644\u0645\u0646\u0635\u0629 \"\u062a\u0641\u062d\u0635\u0647\" \u2014 \u0648\u0627\u0644\u0643\u0648\u062f \u064a\u0646\u0641\u0630 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b!\n\n\ud83d\udca1 \u0645\u062b\u0627\u0644 \u0628\u0633\u064a\u0637:\ndef pwn(x=import('os').system('id')):\n    pass\n\n\u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \"\u0645\u0627 \u064a\u062a\u0645 \u0627\u0633\u062a\u062f\u0639\u0627\u0624\u0647\" \u2014 \u0628\u0633 \u062a\u0639\u0631\u064a\u0641\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0645\u0631 id \u0639\u0644\u0649 \u0627\u0644\u0633\u064a\u0631\u0641\u0631!\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd34 \u0644\u0645\u0627\u0630\u0627 \u062e\u0637\u064a\u0631\u0629\u061f\n\u2022 \u0644\u0627 \u062a\u062d\u062a\u0627\u062c \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644 (Unauthenticated)\n\u2022 \u0637\u0644\u0628 POST \u0648\u0627\u062d\u062f \u0643\u0627\u0641\u064a\n\u2022 \u062a\u0646\u0641\u0630 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0641\u064a \u0627\u0644\u063a\u0627\u0644\u0628\n\u2022 \u062a\u0633\u0631\u0642: \u0645\u0641\u0627\u062a\u064a\u062d AWS\u060c \u0628\u064a\u0627\u0646\u0627\u062a Kubernetes\u060c \u0645\u062a\u063a\u064a\u0631\u0627\u062a \u0627\u0644\u0628\u064a\u0626\u0629\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udee1 \u0627\u0644\u062d\u0645\u0627\u064a\u0629:\n1\ufe0f\u20e3 \u062d\u062f\u0651\u062b Langflow \u0644\u0640 1.10.1 \u0641\u0648\u0631\u0627\u064b\n2\ufe0f\u20e3 \u0627\u0641\u062d\u0635 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0644\u0640 /api/v1/validate/code \u0645\u0646\u0630 27 \u064a\u0648\u0646\u064a\u0648\n3\ufe0f\u20e3 \u063a\u064a\u0651\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u0648\u0627\u0644\u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629\n4\ufe0f\u20e3 \u0644\u0627 \u062a\u0639\u0631\u0636 Langflow \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0645\u0641\u062a\u0648\u062d\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udcca \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u0647\u062c\u0648\u0645 (Attack Chain):\n1. \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0633\u064a\u0631\u0641\u0631\u0627\u062a Langflow \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629\n2. \u0625\u0631\u0633\u0627\u0644 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0644\u0644\u062a\u062d\u0642\u0642\n3. \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0646\u0638\u0627\u0645\n4. \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0640 Cloud\n5. \u0646\u0634\u0631 Malware \u0623\u0648 Cryptominer", "creation_timestamp": "2026-09-13T20:00:05.112473Z"}, {"uuid": "31ef10a9-6783-4344-b9e2-704c51029397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/132", "content": "\ud83d\udea8 CVE-2026-0770 | \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 Langflow\n\n\u26a0\ufe0f \u0627\u0644\u062e\u0637\u0648\u0631\u0629: 9.8/10 (\u062d\u0631\u062c\u0629 \u062c\u062f\u0627\u064b)\n\ud83d\udcc5 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641: \u064a\u0648\u0646\u064a\u0648 2026 | CISA \u0623\u0636\u0627\u0641\u062a\u0647\u0627: 21 \u064a\u0648\u0644\u064a\u0648 2026\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u2753 \u0645\u0627 \u0647\u064a Langflow\u061f\n\u0645\u0646\u0635\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0644\u0628\u0646\u0627\u0621 AI Agents \u0648\u062e\u0637\u0648\u0637 \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644 (Workflows) \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 LLMs.\n\n\u2753 \u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0646\u0642\u0637\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0643\u0648\u062f /api/v1/validate/code \u0643\u0627\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 exec() \u0628\u062f\u0644 compile() \u0641\u0642\u0637.\n\n\u0627\u0644\u0647\u0627\u0643\u0631 \u064a\u0631\u0633\u0644 \u0643\u0648\u062f Python \u0628\u0633\u064a\u0637 \u2014 \u0627\u0644\u0645\u0646\u0635\u0629 \"\u062a\u0641\u062d\u0635\u0647\" \u2014 \u0648\u0627\u0644\u0643\u0648\u062f \u064a\u0646\u0641\u0630 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b!\n\n\ud83d\udca1 \u0645\u062b\u0627\u0644 \u0628\u0633\u064a\u0637:\ndef pwn(x=import('os').system('id')):\n    pass\n\n\u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \"\u0645\u0627 \u064a\u062a\u0645 \u0627\u0633\u062a\u062f\u0639\u0627\u0624\u0647\" \u2014 \u0628\u0633 \u062a\u0639\u0631\u064a\u0641\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0645\u0631 id \u0639\u0644\u0649 \u0627\u0644\u0633\u064a\u0631\u0641\u0631!\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd34 \u0644\u0645\u0627\u0630\u0627 \u062e\u0637\u064a\u0631\u0629\u061f\n\u2022 \u0644\u0627 \u062a\u062d\u062a\u0627\u062c \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644 (Unauthenticated)\n\u2022 \u0637\u0644\u0628 POST \u0648\u0627\u062d\u062f \u0643\u0627\u0641\u064a\n\u2022 \u062a\u0646\u0641\u0630 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0641\u064a \u0627\u0644\u063a\u0627\u0644\u0628\n\u2022 \u062a\u0633\u0631\u0642: \u0645\u0641\u0627\u062a\u064a\u062d AWS\u060c \u0628\u064a\u0627\u0646\u0627\u062a Kubernetes\u060c \u0645\u062a\u063a\u064a\u0631\u0627\u062a \u0627\u0644\u0628\u064a\u0626\u0629\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udee1 \u0627\u0644\u062d\u0645\u0627\u064a\u0629:\n1\ufe0f\u20e3 \u062d\u062f\u0651\u062b Langflow \u0644\u0640 1.10.1 \u0641\u0648\u0631\u0627\u064b\n2\ufe0f\u20e3 \u0627\u0641\u062d\u0635 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0644\u0640 /api/v1/validate/code \u0645\u0646\u0630 27 \u064a\u0648\u0646\u064a\u0648\n3\ufe0f\u20e3 \u063a\u064a\u0651\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u0648\u0627\u0644\u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629\n4\ufe0f\u20e3 \u0644\u0627 \u062a\u0639\u0631\u0636 Langflow \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0645\u0641\u062a\u0648\u062d\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udcca \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u0647\u062c\u0648\u0645 (Attack Chain):\n1. \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0633\u064a\u0631\u0641\u0631\u0627\u062a Langflow \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629\n2. \u0625\u0631\u0633\u0627\u0644 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0644\u0644\u062a\u062d\u0642\u0642\n3. \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0646\u0638\u0627\u0645\n4. \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0640 Cloud\n5. \u0646\u0634\u0631 Malware \u0623\u0648 Cryptominer\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd17 \u0627\u0644\u0645\u0635\u062f\u0631: resecurity.com\n\ud83d\udce4 \u0634\u0627\u0631\u0643 \u0645\u0639 \u0641\u0631\u064a\u0642 DevOps/Security \u0639\u0646\u062f\u0643\n\ud83d\udcac \u0647\u0644 \u062a\u0633\u062a\u062e\u062f\u0645 Langflow\u061f \u0627\u0643\u062a\u0628 \u0644\u0646\u0627 \ud83d\udc47\n\n#CVE2026_0770 #Langflow #RCE #Cybersecurity t.me/CYPERMRED", "creation_timestamp": "2026-09-13T20:00:05.151414Z"}, {"uuid": "e7f1da9c-4722-4911-afd4-9634f1fdde2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/133", "content": "\ud83d\udea8 CVE-2026-0770 | \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 Langflow\n\n\u26a0\ufe0f \u0627\u0644\u062e\u0637\u0648\u0631\u0629: 9.8/10 (\u062d\u0631\u062c\u0629 \u062c\u062f\u0627\u064b)\n\ud83d\udcc5 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641: \u064a\u0648\u0646\u064a\u0648 2026 | CISA \u0623\u0636\u0627\u0641\u062a\u0647\u0627: 21 \u064a\u0648\u0644\u064a\u0648 2026\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u2753 \u0645\u0627 \u0647\u064a Langflow\u061f\n\u0645\u0646\u0635\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0644\u0628\u0646\u0627\u0621 AI Agents \u0648\u062e\u0637\u0648\u0637 \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644 (Workflows) \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 LLMs.\n\n\u2753 \u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0646\u0642\u0637\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0643\u0648\u062f /api/v1/validate/code \u0643\u0627\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 exec() \u0628\u062f\u0644 compile() \u0641\u0642\u0637.\n\n\u0627\u0644\u0647\u0627\u0643\u0631 \u064a\u0631\u0633\u0644 \u0643\u0648\u062f Python \u0628\u0633\u064a\u0637 \u2014 \u0627\u0644\u0645\u0646\u0635\u0629 \"\u062a\u0641\u062d\u0635\u0647\" \u2014 \u0648\u0627\u0644\u0643\u0648\u062f \u064a\u0646\u0641\u0630 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b!\n\n\ud83d\udca1 \u0645\u062b\u0627\u0644 \u0628\u0633\u064a\u0637:\ndef pwn(x=import('os').system('id')):\n    pass\n\n\u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \"\u0645\u0627 \u064a\u062a\u0645 \u0627\u0633\u062a\u062f\u0639\u0627\u0624\u0647\" \u2014 \u0628\u0633 \u062a\u0639\u0631\u064a\u0641\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0645\u0631 id \u0639\u0644\u0649 \u0627\u0644\u0633\u064a\u0631\u0641\u0631!\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd34 \u0644\u0645\u0627\u0630\u0627 \u062e\u0637\u064a\u0631\u0629\u061f\n\u2022 \u0644\u0627 \u062a\u062d\u062a\u0627\u062c \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644 (Unauthenticated)\n\u2022 \u0637\u0644\u0628 POST \u0648\u0627\u062d\u062f \u0643\u0627\u0641\u064a\n\u2022 \u062a\u0646\u0641\u0630 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0641\u064a \u0627\u0644\u063a\u0627\u0644\u0628\n\u2022 \u062a\u0633\u0631\u0642: \u0645\u0641\u0627\u062a\u064a\u062d AWS\u060c \u0628\u064a\u0627\u0646\u0627\u062a Kubernetes\u060c \u0645\u062a\u063a\u064a\u0631\u0627\u062a \u0627\u0644\u0628\u064a\u0626\u0629\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udee1 \u0627\u0644\u062d\u0645\u0627\u064a\u0629:\n1\ufe0f\u20e3 \u062d\u062f\u0651\u062b Langflow \u0644\u0640 1.10.1 \u0641\u0648\u0631\u0627\u064b\n2\ufe0f\u20e3 \u0627\u0641\u062d\u0635 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0644\u0640 /api/v1/validate/code \u0645\u0646\u0630 27 \u064a\u0648\u0646\u064a\u0648\n3\ufe0f\u20e3 \u063a\u064a\u0651\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u0648\u0627\u0644\u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629\n4\ufe0f\u20e3 \u0644\u0627 \u062a\u0639\u0631\u0636 Langflow \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0645\u0641\u062a\u0648\u062d\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udcca \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u0647\u062c\u0648\u0645 (Attack Chain):\n1. \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0633\u064a\u0631\u0641\u0631\u0627\u062a Langflow \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629\n2. \u0625\u0631\u0633\u0627\u0644 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0644\u0644\u062a\u062d\u0642\u0642\n3. \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0646\u0638\u0627\u0645\n4. \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0640 Cloud\n5. \u0646\u0634\u0631 Malware \u0623\u0648 Cryptominer", "creation_timestamp": "2026-09-14T00:00:11.166321Z"}, {"uuid": "6e3a158b-e662-45b2-aff3-6ba47266d041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/132", "content": "\ud83d\udea8 CVE-2026-0770 | \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a \u0645\u0646\u0635\u0629 Langflow\n\n\u26a0\ufe0f \u0627\u0644\u062e\u0637\u0648\u0631\u0629: 9.8/10 (\u062d\u0631\u062c\u0629 \u062c\u062f\u0627\u064b)\n\ud83d\udcc5 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641: \u064a\u0648\u0646\u064a\u0648 2026 | CISA \u0623\u0636\u0627\u0641\u062a\u0647\u0627: 21 \u064a\u0648\u0644\u064a\u0648 2026\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u2753 \u0645\u0627 \u0647\u064a Langflow\u061f\n\u0645\u0646\u0635\u0629 \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0644\u0628\u0646\u0627\u0621 AI Agents \u0648\u062e\u0637\u0648\u0637 \u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644 (Workflows) \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 LLMs.\n\n\u2753 \u0645\u0627 \u0647\u064a \u0627\u0644\u062b\u063a\u0631\u0629\u061f\n\u0646\u0642\u0637\u0629 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0643\u0648\u062f /api/v1/validate/code \u0643\u0627\u0646\u062a \u062a\u0633\u062a\u062e\u062f\u0645 exec() \u0628\u062f\u0644 compile() \u0641\u0642\u0637.\n\n\u0627\u0644\u0647\u0627\u0643\u0631 \u064a\u0631\u0633\u0644 \u0643\u0648\u062f Python \u0628\u0633\u064a\u0637 \u2014 \u0627\u0644\u0645\u0646\u0635\u0629 \"\u062a\u0641\u062d\u0635\u0647\" \u2014 \u0648\u0627\u0644\u0643\u0648\u062f \u064a\u0646\u0641\u0630 \u062a\u0644\u0642\u0627\u0626\u064a\u0627\u064b!\n\n\ud83d\udca1 \u0645\u062b\u0627\u0644 \u0628\u0633\u064a\u0637:\ndef pwn(x=import('os').system('id')):\n    pass\n\n\u0647\u0630\u0627 \u0627\u0644\u0643\u0648\u062f \"\u0645\u0627 \u064a\u062a\u0645 \u0627\u0633\u062a\u062f\u0639\u0627\u0624\u0647\" \u2014 \u0628\u0633 \u062a\u0639\u0631\u064a\u0641\u0647 \u064a\u0646\u0641\u0630 \u0627\u0644\u0623\u0645\u0631 id \u0639\u0644\u0649 \u0627\u0644\u0633\u064a\u0631\u0641\u0631!\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd34 \u0644\u0645\u0627\u0630\u0627 \u062e\u0637\u064a\u0631\u0629\u061f\n\u2022 \u0644\u0627 \u062a\u062d\u062a\u0627\u062c \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644 (Unauthenticated)\n\u2022 \u0637\u0644\u0628 POST \u0648\u0627\u062d\u062f \u0643\u0627\u0641\u064a\n\u2022 \u062a\u0646\u0641\u0630 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0641\u064a \u0627\u0644\u063a\u0627\u0644\u0628\n\u2022 \u062a\u0633\u0631\u0642: \u0645\u0641\u0627\u062a\u064a\u062d AWS\u060c \u0628\u064a\u0627\u0646\u0627\u062a Kubernetes\u060c \u0645\u062a\u063a\u064a\u0631\u0627\u062a \u0627\u0644\u0628\u064a\u0626\u0629\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udee1 \u0627\u0644\u062d\u0645\u0627\u064a\u0629:\n1\ufe0f\u20e3 \u062d\u062f\u0651\u062b Langflow \u0644\u0640 1.10.1 \u0641\u0648\u0631\u0627\u064b\n2\ufe0f\u20e3 \u0627\u0641\u062d\u0635 \u0627\u0644\u0633\u062c\u0644\u0627\u062a \u0644\u0640 /api/v1/validate/code \u0645\u0646\u0630 27 \u064a\u0648\u0646\u064a\u0648\n3\ufe0f\u20e3 \u063a\u064a\u0651\u0631 \u062c\u0645\u064a\u0639 \u0627\u0644\u0645\u0641\u0627\u062a\u064a\u062d \u0648\u0627\u0644\u0643\u0644\u0645\u0627\u062a \u0627\u0644\u0633\u0631\u064a\u0629\n4\ufe0f\u20e3 \u0644\u0627 \u062a\u0639\u0631\u0636 Langflow \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u0627\u0644\u0645\u0641\u062a\u0648\u062d\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udcca \u0633\u0644\u0633\u0644\u0629 \u0627\u0644\u0647\u062c\u0648\u0645 (Attack Chain):\n1. \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0633\u064a\u0631\u0641\u0631\u0627\u062a Langflow \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629\n2. \u0625\u0631\u0633\u0627\u0644 \u0643\u0648\u062f \u062e\u0628\u064a\u062b \u0644\u0644\u062a\u062d\u0642\u0642\n3. \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0627\u0644\u0646\u0638\u0627\u0645\n4. \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0640 Cloud\n5. \u0646\u0634\u0631 Malware \u0623\u0648 Cryptominer\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\ud83d\udd17 \u0627\u0644\u0645\u0635\u062f\u0631: resecurity.com\n\ud83d\udce4 \u0634\u0627\u0631\u0643 \u0645\u0639 \u0641\u0631\u064a\u0642 DevOps/Security \u0639\u0646\u062f\u0643\n\ud83d\udcac \u0647\u0644 \u062a\u0633\u062a\u062e\u062f\u0645 Langflow\u061f \u0627\u0643\u062a\u0628 \u0644\u0646\u0627 \ud83d\udc47\n\n#CVE2026_0770 #Langflow #RCE #Cybersecurity t.me/CYPERMRED", "creation_timestamp": "2026-09-14T00:00:11.216318Z"}, {"uuid": "bdd98d6f-037e-42d2-986e-8aadad363631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-15T09:00:06.996010Z"}, {"uuid": "49500abf-2ca7-421b-8ab3-ec4b88d86530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-16T00:00:05.348809Z"}, {"uuid": "276f51cc-f9d6-4576-b827-b0f26d25aefb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3mvniypzuabu2", "content": "Two remote code execution flaws that CISA lists as known exploited turned up this week inside ordinary commodity crawling.\n\nAdversaries attempted CVE-2025-3248 and CVE-2026-0770 in Langflow, the AI application platform, at 3,968 and 4,770 connection attempts [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-09-16T15:58:51.469307Z"}, {"uuid": "e1d2bb68-40a0-4af6-a4ce-23854dcb113d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0770", "type": "seen", "source": "https://infosec.exchange/users/greynoise/statuses/117281541720935473", "content": "Two remote code execution flaws that CISA lists as known exploited turned up this week inside ordinary commodity crawling.\nAdversaries attempted CVE-2025-3248 and CVE-2026-0770 in Langflow, the AI application platform, at 3,968 and 4,770 connection attempts, both new to this brief series. The addresses behind them are the interesting part. Every one of them also carries a generic web crawling tag, roughly nine in ten collected environment files and enumerated WordPress installations, and about four in five requested repository configuration in the same window. Two hosting providers supply roughly 95% of those addresses, which means the source count measures how that traffic leaves those networks. A sweep of that shape reaches any exposed Langflow instance a general crawler touches.\nThe rest of the week concentrated the same way. Five of the ten highest-volume sources ran SSH enumeration and credential attacks from consumer broadband and mobile carrier networks, and four of them carried 36% of all alternative-port SSH crawling we observed. Two shared client fingerprints group those four across four separate networks, marking a common tool class. One address supplied more than half of all Remote Desktop crawling observed and three fifths of the credential attempts inside it.\nGreyNoise customers get the full weekly brief. Our public At The Edge one-page: https://www.greynoise.io/resources/at-the-edge-clear-091426", "creation_timestamp": "2026-09-16T15:58:27.086571Z"}, {"uuid": "74449144-b3f6-4553-a52a-70fba9a607ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-17T00:00:05.337471Z"}]}