{"vulnerability": "CVE-2026-24002", "sightings": [{"uuid": "44d8c7ee-7673-4b39-a541-f756059bd9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mdjyum2vxf2w", "content": "", "creation_timestamp": "2026-01-29T04:58:29.924157Z"}, {"uuid": "e2cb26ca-c88b-4612-b05e-2dc770ec3e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mdkounutbo2n", "content": "", "creation_timestamp": "2026-01-29T11:32:14.590402Z"}, {"uuid": "99ff07a9-3913-451d-85a8-93cd584c7e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mdl633jd5s2w", "content": "", "creation_timestamp": "2026-01-29T16:04:21.163992Z"}, {"uuid": "b8bce353-daa7-4939-a3e4-5126b048a338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcycnlt2qk2r", "content": "", "creation_timestamp": "2026-01-22T04:05:37.134595Z"}, {"uuid": "fcddca53-f0cc-48c9-80f6-f8ea7ec4308b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcycu5qkai2t", "content": "", "creation_timestamp": "2026-01-22T04:09:16.524775Z"}, {"uuid": "4458e65c-2282-4b1d-a716-5ae42763fca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mdfnoipjjj2l", "content": "", "creation_timestamp": "2026-01-27T11:27:34.529034Z"}, {"uuid": "9097c540-fdaa-4afd-bee5-5ad5b951ad42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://thehackernews.com/2026/01/critical-grist-core-vulnerability.html", "content": "", "creation_timestamp": "2026-01-27T09:36:00.000000Z"}, {"uuid": "eeeb66f3-7e25-4d14-a9e3-38f2a2a08ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mdhylaam4c2k", "content": "", "creation_timestamp": "2026-01-28T09:47:57.094697Z"}, {"uuid": "40d62d72-3989-4164-9e5f-e33c0133671c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/CyberDispatch/597", "content": "A single spreadsheet formula can now lead to full server takeover in Grist-Core.\n\nThe flaw, CVE-2026-24002 (CVSS 9.1), breaks out of the Pyodide sandbox, letting attackers run OS commands and access files and secrets.", "creation_timestamp": "2026-08-30T00:00:48.612100Z"}, {"uuid": "919f7a0a-7666-49cc-b842-c1a7b3581773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/CyberDispatch/597", "content": "A single spreadsheet formula can now lead to full server takeover in Grist-Core.\n\nThe flaw, CVE-2026-24002 (CVSS 9.1), breaks out of the Pyodide sandbox, letting attackers run OS commands and access files and secrets.", "creation_timestamp": "2026-08-29T20:00:23.052374Z"}, {"uuid": "7b54bda9-4346-4197-8271-8abb2c418eb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/wh_lab/575", "content": "\ud83d\udcf0 \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u0437\u0430 \u044d\u0442\u0443 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udd8e AdaptixC2 v1.1\n\n\ud83d\udcbb Advancing Windows security: Disabling NTLM by default\n\n\ud83d\udcf0 \u0416\u0443\u0440\u043d\u0430\u043b Backconnect\n\n\ud83d\udcbb Stratus Red Team v2.32.2\n\n\ud83d\udcbb ADACLScanner v9.4\n\n\ud83d\udcbb GhostKatz - \u0434\u0430\u043c\u043f LSASS \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\n\n\u2699 CVE-2026-24002 - RCE sandbox escape in Grist\u2011Core\n\n\ud83c\udf83 Awesome Hacker Search Engines\n\n\ud83d\udd78 Top 10 web hacking techniques of 2025\n\n\ud83d\udcbb LEHACK 2025 (Active Directory Lab)\n\n\ud83d\udc15 BloodHound CE v8.5.2\n\n#digest #useful #posts\n\n\u2708\ufe0f Telegram \ud83d\udcac MAX", "creation_timestamp": "2026-08-15T08:00:03.969763Z"}, {"uuid": "a2c28cb5-921f-4fa6-bbc8-e92d2bddcee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/wh_lab/575", "content": "\ud83d\udcf0 \u041f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u0437\u0430 \u044d\u0442\u0443 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udd8e AdaptixC2 v1.1\n\n\ud83d\udcbb Advancing Windows security: Disabling NTLM by default\n\n\ud83d\udcf0 \u0416\u0443\u0440\u043d\u0430\u043b Backconnect\n\n\ud83d\udcbb Stratus Red Team v2.32.2\n\n\ud83d\udcbb ADACLScanner v9.4\n\n\ud83d\udcbb GhostKatz - \u0434\u0430\u043c\u043f LSASS \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\n\n\u2699 CVE-2026-24002 - RCE sandbox escape in Grist\u2011Core\n\n\ud83c\udf83 Awesome Hacker Search Engines\n\n\ud83d\udd78 Top 10 web hacking techniques of 2025\n\n\ud83d\udcbb LEHACK 2025 (Active Directory Lab)\n\n\ud83d\udc15 BloodHound CE v8.5.2\n\n#digest #useful #posts\n\n\u2708\ufe0f Telegram \ud83d\udcac MAX", "creation_timestamp": "2026-08-16T00:00:48.488593Z"}, {"uuid": "5df54901-c3b8-4e69-9732-416e9b11faf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/cyberwarehouse/1065", "content": "#exploit\n#AppSec\n1\u20e3  CVE-2025-67813:\nRCE via Quest Desktop Authority Named Pipe\n// A vulnerability in Quest Desktop Authority allows authenticated users to remotely execute code and perform malicious operations via a named pipe, which can be mitigated by patches, firewalls, or disabling the service\n2\u20e3  CVE-2026-24002:\nRCE sandbox escape in Grist\u2011Core\n// One malicious formula can turn a spreadsheet into a\u00a0RCE beachhead...\n3\u20e3  CVE-2025-49825:\nTeleport remote authentication bypass\n// CVE-2025-49825 is a critical Teleport vulnerability allowing attackers to bypass authentication and potentially gain root access via nested SSH certificates if unpatched", "creation_timestamp": "2026-07-26T02:00:06.871319Z"}, {"uuid": "bdc14689-5fed-472f-b3b3-87c9c84f1533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24002", "type": "seen", "source": "https://t.me/cyberwarehouse/1065", "content": "#exploit\n#AppSec\n1\u20e3  CVE-2025-67813:\nRCE via Quest Desktop Authority Named Pipe\n// A vulnerability in Quest Desktop Authority allows authenticated users to remotely execute code and perform malicious operations via a named pipe, which can be mitigated by patches, firewalls, or disabling the service\n2\u20e3  CVE-2026-24002:\nRCE sandbox escape in Grist\u2011Core\n// One malicious formula can turn a spreadsheet into a\u00a0RCE beachhead...\n3\u20e3  CVE-2025-49825:\nTeleport remote authentication bypass\n// CVE-2025-49825 is a critical Teleport vulnerability allowing attackers to bypass authentication and potentially gain root access via nested SSH certificates if unpatched", "creation_timestamp": "2026-07-27T00:00:34.136193Z"}]}