{"vulnerability": "CVE-2026-3419", "sightings": [{"uuid": "5146ff70-cb1a-4bf1-83df-ecac80573533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3419", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mgftwl2fd22u", "content": "", "creation_timestamp": "2026-03-06T17:35:06.199974Z"}, {"uuid": "912a60cf-19c9-45ec-af7e-47ddea16bffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3419", "type": "seen", "source": "https://gist.github.com/alon710/19702ece4abcb34c736232a7be14a18b", "content": "", "creation_timestamp": "2026-03-06T18:10:05.000000Z"}, {"uuid": "d3139246-3534-48d2-9534-655de93cb2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3419", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgg3d3fnvg2e", "content": "", "creation_timestamp": "2026-03-06T19:47:19.063005Z"}, {"uuid": "41d493df-df4f-483b-adcd-acc2073dfd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/39757", "content": "6,000+ Publicly Exposed Apache ActiveMQ Instances Found Vulnerable to CVE-2026-34197 \u2013 gbhackers.com\n\nTue, 21 Apr 2026 14:58:24", "creation_timestamp": "2026-04-21T12:03:43.000000Z"}, {"uuid": "f714ae29-265d-4062-9e13-a725f64f82c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3miurcefjib2u", "content": "", "creation_timestamp": "2026-04-07T02:48:16.618323Z"}, {"uuid": "c63508a3-eeb1-44e9-9692-fe46f058c4d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mivkbvm6jg2i", "content": "", "creation_timestamp": "2026-04-07T10:15:24.978378Z"}, {"uuid": "c8dd157f-31f9-47d9-988b-82297b0fd8aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mivzr6lbw32r", "content": "", "creation_timestamp": "2026-04-07T14:52:24.351649Z"}, {"uuid": "f045b7c5-3bc8-488a-a4dc-e2b62c8d4767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3miwnegg72f2b", "content": "", "creation_timestamp": "2026-04-07T20:43:11.175599Z"}, {"uuid": "89e3782d-612c-4d25-960d-85c47952fb70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3miwotlja5u2s", "content": "", "creation_timestamp": "2026-04-07T21:09:32.579769Z"}, {"uuid": "7b65e1ed-29be-4062-ac0d-1f18857ebdea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34197", "type": "seen", "source": "https://swecyb.com/ap/users/116080658609901341/statuses/116366248806466359", "content": "", "creation_timestamp": "2026-04-08T01:19:08.933542Z"}, {"uuid": "4c7ba946-de93-413f-b68c-22971aa7a39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/true_secator/8118", "content": "\u041d\u0435\u0434\u0430\u0432\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Apache ActiveMQ \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-34197 \u0438 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 10 \u0434\u043d\u0435\u0439 \u043d\u0430\u0437\u0430\u0434, \u0441\u043a\u0440\u044b\u0432\u0430\u044f\u0441\u044c \u0432 \u043a\u043e\u0434\u0435 \u041f\u041e \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 13 \u043b\u0435\u0442. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 5.19.5 \u0438 6.2.3.\n\nApache ActiveMQ - \u044d\u0442\u043e \u0431\u0440\u043e\u043a\u0435\u0440 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043d\u0430\u0434\u0435\u0436\u043d\u0443\u044e \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u0443\u044e \u0441\u0432\u044f\u0437\u044c \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438.\u00a0\n\nCVE-2026-34197 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 API Jolokia \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\nHorizon3, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 7 \u0430\u043f\u0440\u0435\u043b\u044f, \u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-34197 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Apache ActiveMQ \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, CVE-2026-34197 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2024-32114, \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 CISA\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2026-34197\u00a0\u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u0442\u0435\u043c, \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u043d\u0435\u0434\u0435\u043b\u044e Fortinet \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-04-17T18:30:06.000000Z"}, {"uuid": "1fc9642d-1574-4edb-9df5-4f1f103475e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-34197.yaml", "content": "", "creation_timestamp": "2026-04-08T05:10:24.000000Z"}, {"uuid": "556c9f0b-eb58-455c-808b-dbb1e82b9cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/9853", "content": "6,000+ Publicly Exposed Apache ActiveMQ Instances Found Vulnerable to CVE-2026-34197 \u2013 gbhackers.com\n\nTue, 21 Apr 2026 14:58:24", "creation_timestamp": "2026-04-21T12:03:43.000000Z"}, {"uuid": "9cfba56d-a023-462c-9541-96324cc10f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3miy372s5nh2f", "content": "", "creation_timestamp": "2026-04-08T10:23:22.824986Z"}, {"uuid": "a6f938d4-0275-427e-8c85-9fc59b7fe93a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/GithubRedTeam/81019", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ActiveMQ-EXPtools\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Catherines77\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-20 03:28:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u652f\u6301\u68c0\u6d4b\u548c\u5229\u7528ActiveMQ\u6f0f\u6d1e\uff0cCVE-2015-5254\uff0cCVE-2016-3088\uff0cCVE-2022-41678\uff0cCVE-2023-46604\uff0cCVE-2024-32114\uff0cCVE-2026-34197\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-20T04:00:04.000000Z"}, {"uuid": "632cdb1b-7881-45ff-9a1c-f38f964896b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116368744139205098", "content": "", "creation_timestamp": "2026-04-08T11:02:01.098390Z"}, {"uuid": "e1bee8b9-f3fd-4857-8575-ba9332c1848d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miyy3kksfs2m", "content": "", "creation_timestamp": "2026-04-08T19:00:23.177392Z"}, {"uuid": "806bbef7-acd9-4d1b-b6cc-ac2fc522945c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34197", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116370628597850274", "content": "", "creation_timestamp": "2026-04-08T19:01:15.318677Z"}, {"uuid": "232c83ca-50f2-46b7-938d-b8166ee9aba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34197", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3miyy5achwnh2", "content": "", "creation_timestamp": "2026-04-08T19:01:30.497398Z"}, {"uuid": "8cf72ae6-a890-445b-ae57-17fe9364a758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miz6wubr2p2d", "content": "", "creation_timestamp": "2026-04-08T21:03:06.352744Z"}, {"uuid": "7f344abe-3da7-40b3-b58e-3490bc71033f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/apache-activemq-security-advisory-av26-330", "content": "", "creation_timestamp": "2026-04-08T12:19:17.000000Z"}, {"uuid": "6f189e0c-cd55-4d62-be2d-5c08b06a9130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mizahvixlo2y", "content": "", "creation_timestamp": "2026-04-08T21:30:28.030345Z"}, {"uuid": "f1d7945d-1c1d-4dcf-ad8f-7752742526af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/ctinow/248923", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation\nhttps://ift.tt/2kiB7eo", "creation_timestamp": "2026-04-17T03:44:39.000000Z"}, {"uuid": "4dc002db-a2ca-48f0-9bd7-f68b05e56528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116374255844845554", "content": "", "creation_timestamp": "2026-04-09T10:23:42.680057Z"}, {"uuid": "70816b05-64ba-47af-aae6-34583614f8e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mj2loo6wm522", "content": "", "creation_timestamp": "2026-04-09T10:23:51.715138Z"}, {"uuid": "5c18c5e3-baf3-4fa3-910c-76cc3cf74620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mj34pgs3jj2v", "content": "", "creation_timestamp": "2026-04-09T15:28:25.654202Z"}, {"uuid": "195b33b6-b0c3-4cbf-815f-38396821fd44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://www.acn.gov.it/portale/w/apache-disponibile-poc-per-lo-sfruttamento-di-vulnerabilita-in-apache-activemq", "content": "", "creation_timestamp": "2026-04-09T11:27:44.000000Z"}, {"uuid": "537e4385-0493-4638-8223-1e98f016af3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mj3lxneruz2m", "content": "", "creation_timestamp": "2026-04-09T20:01:26.134120Z"}, {"uuid": "ed6b92e3-158a-4adb-95d0-b3883cb11ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj3thb5ifc26", "content": "", "creation_timestamp": "2026-04-09T22:15:27.021309Z"}, {"uuid": "3b43a11f-fb35-4a82-9b59-d435565ed9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mj4xhf7aa22q", "content": "", "creation_timestamp": "2026-04-10T08:59:45.980432Z"}, {"uuid": "2bac727d-0ede-4908-aa77-50b05bed8ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mj5bum7gmx22", "content": "", "creation_timestamp": "2026-04-10T12:06:07.126217Z"}, {"uuid": "cabae843-35cd-47d6-8949-1995dbe47d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116380441044123386", "content": "", "creation_timestamp": "2026-04-10T12:36:41.279794Z"}, {"uuid": "a2482440-926e-45d1-82cc-8d07f2eec187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mj5dlwfd5c2q", "content": "", "creation_timestamp": "2026-04-10T12:37:03.198927Z"}, {"uuid": "9933034c-d4d8-4934-8df3-ec04e10672cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://threatintel.cc/2026/04/10/claude-uncovers-a-yearold-activemq.html", "content": "", "creation_timestamp": "2026-04-10T10:36:47.000000Z"}, {"uuid": "70f3cd1f-cfe9-4472-9930-53f4a1be1d06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mjbrvsqpes2h", "content": "", "creation_timestamp": "2026-04-12T07:03:49.336874Z"}, {"uuid": "6c15c877-9859-4d1c-b998-1c5f9f4cf98a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/g0rosato.bsky.social/post/3mjcva4sx3w2l", "content": "", "creation_timestamp": "2026-04-12T17:35:53.238226Z"}, {"uuid": "7cf079b8-47b3-4b98-b66a-09214544cc3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/cibsecurity/89032", "content": "\ud83d\udd8b\ufe0f Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation \ud83d\udd8b\ufe0f\n\nA recently disclosed highseverity security flaw in Apache ActiveMQ\u00a0Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and Infrastructure Security Agency\u00a0CISA. To that end, the agency\u00a0has added the vulnerability, tracked\u00a0as CVE202634197 CVSS score 8.8, to its Known Exploited Vulnerabilities\u00a0KEV catalog, requiring Federal Civilian.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-04-17T14:20:28.000000Z"}, {"uuid": "756cdd3c-2524-41a5-bdf5-e6a35eb0e2e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/39689", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation \u2013 thehackernews.com\n\nFri, 17 Apr 2026 11:22:00", "creation_timestamp": "2026-04-17T08:03:03.000000Z"}, {"uuid": "ba775794-77ed-4872-81ab-d2d1e938be42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/9785", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation \u2013 thehackernews.com\n\nFri, 17 Apr 2026 11:22:00", "creation_timestamp": "2026-04-17T08:03:03.000000Z"}, {"uuid": "c7e92f61-6748-4097-bf80-b348e9230548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/thehackernews/8820", "content": "\ud83d\udea8 CISA flags active exploitation of an Apache ActiveMQ flaw enabling remote code execution.\n\nAttackers abuse the Jolokia API to run OS commands. Default creds\u2014and in some versions no auth\u2014make it easier to exploit.\n\n\ud83d\udd17 Read \u2192 https://thehackernews.com/2026/04/apache-activemq-cve-2026-34197-added-to.html", "creation_timestamp": "2026-04-17T03:24:03.000000Z"}, {"uuid": "c4bf4496-aa54-4991-9c1d-df0149738c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-high-severity-vulnerability-apache-activemq-patch-immediately", "content": "", "creation_timestamp": "2026-04-13T02:21:59.000000Z"}, {"uuid": "4aa73397-afd0-4f2f-94c6-8a74344a6a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mkbymlltlg2v", "content": "", "creation_timestamp": "2026-04-25T02:29:06.641818Z"}, {"uuid": "c7b2897b-0d4a-4675-80ac-fa701bd0a0eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/80319", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a keraattin\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-14 20:59:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-34197: Apache ActiveMQ Classic RCE via Jolokia API (CVSS 8.8). Python & Nmap NSE detection scripts. A 13-year-old vulnerability allows remote code execution through the addNetworkConnector MBean operation. Unauthenticated on versions 6.0.0 to 6.1.1. Fixed in 5.19.4 and 6.2.3.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-14T21:00:05.000000Z"}, {"uuid": "d8530d2b-3b6f-44e0-a01b-703895c41aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116415528739254723", "content": "", "creation_timestamp": "2026-04-16T17:19:57.223065Z"}, {"uuid": "eabcdfbc-8794-41eb-afa6-510a1c2e281e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6271140", "content": "", "creation_timestamp": "2026-04-16T17:32:10.176392Z"}, {"uuid": "71f331ea-ce7e-4409-b554-1a54899f2da1", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b05c8195-f268-47e2-922f-824f89fc55cc", "content": "", "creation_timestamp": "2026-04-16T18:00:02.227302Z"}, {"uuid": "ffc765ff-c7db-48d3-9f9c-74daea7f1b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/zettawire.com/post/3mjnaron7kq27", "content": "", "creation_timestamp": "2026-04-16T20:32:54.492984Z"}, {"uuid": "70f468a8-4e4f-4d05-9de1-dbf3030cdf2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mjnerlamon2u", "content": "", "creation_timestamp": "2026-04-16T21:40:47.785421Z"}, {"uuid": "9246b18b-5f51-499f-96ed-75ac63565820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34197", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mjntbz7twu2v", "content": "", "creation_timestamp": "2026-04-17T02:00:26.071049Z"}, {"uuid": "9bdf37c4-b8ef-4c27-8fdf-8edfb0e45874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mjnvg2x63y2v", "content": "", "creation_timestamp": "2026-04-17T02:38:30.046698Z"}, {"uuid": "2d8ff72d-b803-43c5-9dbc-30ae83a0517d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mjo22fk5qj24", "content": "", "creation_timestamp": "2026-04-17T04:01:27.082332Z"}, {"uuid": "0563a84a-a3a6-445b-a975-40167432b43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mjo24agudx2t", "content": "", "creation_timestamp": "2026-04-17T04:02:29.110864Z"}, {"uuid": "ea936d19-1df2-4042-a691-78a1ec51a9cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjo2fsopr72r", "content": "", "creation_timestamp": "2026-04-17T04:07:49.646921Z"}, {"uuid": "6bffec88-38d4-45f3-b4db-95496952a605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mjo44x7vps3f", "content": "", "creation_timestamp": "2026-04-17T04:38:52.391335Z"}, {"uuid": "4f98b30d-5611-4aeb-a180-34c1c62f7b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mjo56a6r6r2o", "content": "", "creation_timestamp": "2026-04-17T04:57:17.225000Z"}, {"uuid": "7ae31a90-fadc-4556-9443-8e854b062118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34197", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mjo5nawlf23f", "content": "", "creation_timestamp": "2026-04-17T05:05:55.305399Z"}, {"uuid": "d6eb18c7-1c1a-4655-aeb1-caa97a1a24e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjo5o2sebay2", "content": "", "creation_timestamp": "2026-04-17T05:06:11.625302Z"}, {"uuid": "97eebc27-6fb9-4249-b29c-d15e280d39c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3mjo5usi35222", "content": "", "creation_timestamp": "2026-04-17T05:09:59.903943Z"}, {"uuid": "99101ff3-2fd3-46c4-b076-9624c53241bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjo62y6ke5h2", "content": "", "creation_timestamp": "2026-04-17T05:13:25.877330Z"}, {"uuid": "7210c224-f169-4203-ba5d-97688d01afc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mjo6ljox762h", "content": "", "creation_timestamp": "2026-04-17T05:22:36.879612Z"}, {"uuid": "8b9009d2-8002-4825-8bc9-e21197632e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://thehackernews.com/2026/04/apache-activemq-cve-2026-34197-added-to.html", "content": "", "creation_timestamp": "2026-04-17T01:22:00.000000Z"}, {"uuid": "e6493955-833b-45df-81f5-e7239db7d94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://gist.github.com/stone776/f6e73c25123acc0ce8b96fe52096f752", "content": "", "creation_timestamp": "2026-04-17T08:27:18.000000Z"}, {"uuid": "cafb0016-596f-4a57-8de8-5114f1fa8947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjojmkqgqlq2", "content": "", "creation_timestamp": "2026-04-17T08:40:05.448242Z"}, {"uuid": "33cc8441-e294-4632-afc6-b579b692a409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mjooyvrdpc2a", "content": "", "creation_timestamp": "2026-04-17T10:16:26.135064Z"}, {"uuid": "3c0f2ff3-05f7-490a-ad3c-dee221fa6a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116419580880658780", "content": "", "creation_timestamp": "2026-04-17T10:30:29.027701Z"}, {"uuid": "839e2a4d-f684-4eda-8db9-70aefe8af4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjops37ox42o", "content": "", "creation_timestamp": "2026-04-17T10:30:30.155628Z"}, {"uuid": "7e837b2b-e032-418f-8772-3230500ae48f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjoqsxkfhfg2", "content": "", "creation_timestamp": "2026-04-17T10:48:56.751140Z"}, {"uuid": "eb124d41-b4c4-4ebf-b9b5-a1e06784ade6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/116419666430889956", "content": "", "creation_timestamp": "2026-04-17T10:52:13.665044Z"}, {"uuid": "7769915f-7f91-4728-b636-1832e550d3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3mjor2esezs2u", "content": "", "creation_timestamp": "2026-04-17T10:53:11.640999Z"}, {"uuid": "b0b3d570-04ef-4052-9db1-ce570bcaca85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mjotbmgct52r", "content": "", "creation_timestamp": "2026-04-17T11:32:53.766549Z"}, {"uuid": "fada19bd-3b60-414a-a8e9-975f17f1f9d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34197", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mjouiipvbo2q", "content": "", "creation_timestamp": "2026-04-17T11:54:37.124148Z"}, {"uuid": "fcdb7596-7ce2-4d16-8002-2957ca038d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mjox6mfsi52o", "content": "", "creation_timestamp": "2026-04-17T12:42:46.650258Z"}, {"uuid": "637c2270-8787-40ff-af54-0e78ca9e9dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34197", "type": "seen", "source": "https://bsky.app/profile/clankussy.abu.guru/post/3mjp34jvx5l2u", "content": "", "creation_timestamp": "2026-04-17T13:53:11.578026Z"}, {"uuid": "60dbf5e6-d105-48c7-b013-e4e92567c3e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjp3jormoy25", "content": "", "creation_timestamp": "2026-04-17T14:00:33.663211Z"}, {"uuid": "58af1331-ab99-4d9c-ad93-871c6a9d01c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116420406860273742", "content": "", "creation_timestamp": "2026-04-17T14:00:33.889772Z"}, {"uuid": "106b81c0-c8ca-4ca6-ad37-bd2be5dc2c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mjphgbmf3s2e", "content": "", "creation_timestamp": "2026-04-17T17:33:27.376905Z"}, {"uuid": "fed0d657-4f72-4d4d-8e04-4e2d2e0b8c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mjphonwaci2g", "content": "", "creation_timestamp": "2026-04-17T17:38:08.085942Z"}, {"uuid": "f14025b0-7eb9-4102-b6e4-1d650430fca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjpt4c2nmu2f", "content": "", "creation_timestamp": "2026-04-17T21:02:36.193955Z"}, {"uuid": "cd3555ad-6873-4e02-8521-ff9ad2038240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mjpzuf67qs2d", "content": "", "creation_timestamp": "2026-04-17T23:03:24.139534Z"}, {"uuid": "caa598c3-13ff-4127-83a5-b9ff069358ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjqfe77gah2r", "content": "", "creation_timestamp": "2026-04-18T02:29:07.374543Z"}, {"uuid": "d9596af7-9ce0-42fc-ad9e-29d1a5b4585c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mjqxbxkdks2d", "content": "", "creation_timestamp": "2026-04-18T07:49:59.335594Z"}, {"uuid": "1d05c38c-ad63-4d58-a679-fc9c38979e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mjtkzzkaq32g", "content": "", "creation_timestamp": "2026-04-19T08:48:46.394786Z"}, {"uuid": "26164118-246c-4c53-924c-119b1d6c2950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjtryxpzowd2", "content": "", "creation_timestamp": "2026-04-19T10:53:32.415104Z"}, {"uuid": "ae224972-27be-4b5f-b012-af80cbd68bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mjucswmxmc2l", "content": "", "creation_timestamp": "2026-04-19T15:54:20.955667Z"}, {"uuid": "62bb1b6b-fb83-42ba-8f07-ade08b7faaa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mjv4aegtaa2i", "content": "", "creation_timestamp": "2026-04-19T23:29:13.457910Z"}, {"uuid": "542ed02b-83bb-4e3a-99af-76b74b759377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mjvp4vumq22b", "content": "", "creation_timestamp": "2026-04-20T05:07:17.913661Z"}, {"uuid": "93716949-3876-42fe-b8f6-480356682491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mjwdel5xbs2r", "content": "", "creation_timestamp": "2026-04-20T11:09:29.528159Z"}, {"uuid": "c29117a2-c4ab-4751-8498-0c47be59ad7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5akt22l", "content": "", "creation_timestamp": "2026-04-20T14:24:59.924732Z"}, {"uuid": "04d0ab18-a831-430e-a6e2-d0ab2456e70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5awk22l", "content": "", "creation_timestamp": "2026-04-20T14:25:00.954808Z"}, {"uuid": "d2e8dedc-6d7c-4f87-9008-f917280a99ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5axjc2l", "content": "", "creation_timestamp": "2026-04-20T14:25:02.065608Z"}, {"uuid": "36be928d-f24a-4b57-9a0f-76e3ca7d91f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5ayik2l", "content": "", "creation_timestamp": "2026-04-20T14:25:03.176103Z"}, {"uuid": "92f408c5-4228-4403-9516-35dd9cbccf7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5azhs2l", "content": "", "creation_timestamp": "2026-04-20T14:25:04.183216Z"}, {"uuid": "a684a092-7901-44a3-8246-72c4d45edf06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5b3gc2l", "content": "", "creation_timestamp": "2026-04-20T14:25:05.148180Z"}, {"uuid": "aaf02931-8d26-4eb2-a7e6-b0398ee79e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5b4fk2l", "content": "", "creation_timestamp": "2026-04-20T14:25:06.169708Z"}, {"uuid": "cdcce4c1-85ad-4549-ac67-70b912ff21af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5b6e22l", "content": "", "creation_timestamp": "2026-04-20T14:25:08.348491Z"}, {"uuid": "49c2f7a8-3bc0-4954-91b7-2a28586a43bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5b6e32l", "content": "", "creation_timestamp": "2026-04-20T14:25:09.308339Z"}, {"uuid": "ba012159-d6b1-47dd-8ecf-c549fd9c098f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mjwvocp24y2e", "content": "", "creation_timestamp": "2026-04-20T16:37:03.858713Z"}, {"uuid": "4e5d111e-080e-4b06-b903-6e16fe10f0f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mjwzte2qts2k", "content": "", "creation_timestamp": "2026-04-20T17:51:32.470811Z"}, {"uuid": "57e9942b-4f24-4269-b1ee-6325bdfd75aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mjwzthsczc2k", "content": "", "creation_timestamp": "2026-04-20T17:51:33.492802Z"}, {"uuid": "41b07c81-477b-42f1-b119-7e9141fd7230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mjwzthsdyk2k", "content": "", "creation_timestamp": "2026-04-20T17:51:34.919664Z"}, {"uuid": "6323e9f7-b9b4-4bcc-8c28-390cd291d4c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjxl4zcgx22s", "content": "", "creation_timestamp": "2026-04-20T23:01:07.421642Z"}, {"uuid": "8e2de0af-f0cf-408b-8ca4-85eb25369a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjxljtlwis2s", "content": "", "creation_timestamp": "2026-04-20T23:08:18.611738Z"}, {"uuid": "8376633a-889e-46ed-a443-40f05a543970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjxm2hw2cc2s", "content": "", "creation_timestamp": "2026-04-20T23:17:38.829242Z"}, {"uuid": "2785eeb3-fabf-4d36-b207-59815d9052fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjxwrhgkau2x", "content": "", "creation_timestamp": "2026-04-21T02:29:22.939461Z"}, {"uuid": "b23d861c-7866-4cbb-a602-8abf794da58d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mk27t3wudj2s", "content": "", "creation_timestamp": "2026-04-22T00:16:41.620431Z"}, {"uuid": "86ee411f-8700-40f2-8d24-b9895aac81c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116446621464053706", "content": "", "creation_timestamp": "2026-04-22T05:07:14.306428Z"}, {"uuid": "fa80b4ae-ce61-4fec-a575-0dc72ec9299c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mk2q3ftucc2o", "content": "", "creation_timestamp": "2026-04-22T05:07:43.406759Z"}, {"uuid": "95ad0a20-a5f3-40d4-88a1-a0c40d02e134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/keesnk.bsky.social/post/3mk2qztek2222", "content": "", "creation_timestamp": "2026-04-22T05:24:42.060702Z"}, {"uuid": "2e76b983-f016-4fdc-aa88-d5d259d03640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://threatintel.cc/2026/04/22/thousands-of-apache-activemq-instances.html", "content": "", "creation_timestamp": "2026-04-22T03:07:22.000000Z"}, {"uuid": "8f2955f4-676d-43e3-b6c1-9ed734ef2114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-34197", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mk2y2gvipz2u", "content": "", "creation_timestamp": "2026-04-22T07:30:17.282618Z"}, {"uuid": "9bb58ed4-7ee8-4cf2-a5d8-f6e3ee30960b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mk3r6dppxq2t", "content": "", "creation_timestamp": "2026-04-22T14:59:51.724493Z"}, {"uuid": "8260d322-7110-445f-9102-a3414073fc1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/idenhaus.bsky.social/post/3mk4esboccv2y", "content": "", "creation_timestamp": "2026-04-22T20:51:01.681456Z"}, {"uuid": "4ecd46eb-14da-4618-9a78-600378a7bdac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mk4fpxfzas2t", "content": "", "creation_timestamp": "2026-04-22T21:07:39.443697Z"}, {"uuid": "98d00e94-c5f8-4ba8-8686-5f10a5bcae56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mk4garovk22t", "content": "", "creation_timestamp": "2026-04-22T21:17:09.829760Z"}, {"uuid": "36377900-7f34-4ca2-b988-1a9e783257d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mk4xpkgxex2u", "content": "", "creation_timestamp": "2026-04-23T02:29:31.441651Z"}, {"uuid": "6412131a-6fac-46b2-907b-f792a7253051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk6mte66qo2s", "content": "", "creation_timestamp": "2026-04-23T18:20:07.791807Z"}, {"uuid": "29c2632f-68a3-4aad-a111-77e9d7ab53b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mk7i6drwho2g", "content": "", "creation_timestamp": "2026-04-24T02:29:28.063074Z"}, {"uuid": "9bab25a8-d3b8-496a-a8ac-fe4e59ad7fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/thehackernews/8777", "content": "A 13-year-old flaw in Apache ActiveMQ can lead to RCE.\n\nCVE-2026-34197 lets attackers run OS commands via the Jolokia API. Chained with CVE-2024-32114, it becomes unauthenticated RCE on some versions.\n\nPatched in 5.19.4 and 6.2.3.\n\n\ud83d\udd17 Learn more \u2192 https://thehackernews.com/2026/04/threatsday-bulletin-hybrid-p2p-botnet.html#chained-flaws-enable-stealth-rce", "creation_timestamp": "2026-04-10T09:05:55.000000Z"}, {"uuid": "7ba7408f-8ab6-478a-a8d9-ce0720320dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/79475", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DEVSECURITYSPRO\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-08 20:07:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-34197 - Apache ActiveMQ RCE via Jolokia Endpoint PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-08T21:00:04.000000Z"}, {"uuid": "f49f41ad-7b14-4859-897b-4831b6f02a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3069", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 Jolokia \u0431\u0440\u043e\u043a\u0435\u0440\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Apache ActiveMQ \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e XML-\u0444\u0430\u0439\u043b\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e URL-\u0430\u0434\u0440\u0435\u0441\u0430\n\nBDU:2026-04928\nCVE-2026-34197\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (WAF) \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0445\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e \u00ab\u0431\u0435\u043b\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u0430\u043c\u00bb;\n- \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f admin;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt", "creation_timestamp": "2026-04-10T13:35:03.000000Z"}, {"uuid": "6dee0ad2-47fd-4a3d-8c6a-9f25b3000503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/79669", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hg0434hongzh0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-10 01:45:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-10T02:00:04.000000Z"}, {"uuid": "5b228b60-76c4-4dc4-a786-be958745c61f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/79629", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KONDORDEVSECURITYCORP\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-09 19:42:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-34197 \u2014 Apache ActiveMQ RCE via Jolokia API | PoC Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-09T20:00:05.000000Z"}, {"uuid": "3df942ed-d512-4f0e-b80b-6afb7e30ab59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/true_secator/8085", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache ActiveMQ Classic, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 13 \u043b\u0435\u0442 \u0438 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418-\u043f\u043e\u043c\u043e\u0449\u043d\u0438\u043a\u0430 Claude, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b \u043f\u0443\u0442\u044c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0432 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-34197 (CVSS 8,8) \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Apache ActiveMQ/Broker \u0434\u043e 5.19.4, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 6.0.0 \u0434\u043e 6.2.3.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e ActiveMQ \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0442\u043a\u0443 \u00abArtemis\u00bb \u0441 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e, \u0432\u0435\u0440\u0441\u0438\u044f \u00abClassic\u00bb, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0430\u044f CVE-2026-34197, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0432\u0435\u0431-\u0431\u044d\u043a\u0435\u043d\u0434\u0430\u0445, \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043d\u0430 Java.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Horizon3 \u041d\u0430\u0432\u0438\u043d \u0421\u0443\u043d\u043a\u0430\u0432\u0430\u043b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u00ab\u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0441\u0442\u044b\u0445 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043e\u043a\u00bb \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Claude. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c 80% \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b Claude, \u0430 20% - \u0447\u0435\u043b\u043e\u0432\u0435\u043a.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u0421\u0443\u043d\u043a\u0430\u0432\u0430\u043b\u043b\u0438, \u0447\u0442\u043e Claude \u0443\u043a\u0430\u0437\u0430\u043b \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 (Jolokia, JMX, \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043a\u043e\u043d\u043d\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d).\n\n\u041a\u0430\u0436\u0434\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0441\u0432\u043e\u044e \u0437\u0430\u0434\u0430\u0447\u0443, \u043d\u043e \u0432\u043c\u0435\u0441\u0442\u0435 \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c. \u0418\u043c\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c Claude \u043f\u0440\u043e\u044f\u0432\u0438\u043b \u0441\u0435\u0431\u044f \u0432\u043e \u0432\u0441\u0435\u0439 \u043a\u0440\u0430\u0441\u0435 - \u0443\u043c\u0435\u043b\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0432 \u0432\u0441\u0435 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0432\u043e\u0435\u0434\u0438\u043d\u043e.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c Apache 22 \u043c\u0430\u0440\u0442\u0430, \u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u00a0\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0435\u0435 30 \u043c\u0430\u0440\u0442\u0430\u00a0\u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 ActiveMQ Classic 6.2.3 \u0438 5.19.4.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435\u00a0Horizon3 \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e API \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Jolokia \u0432 ActiveMQ \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0431\u0440\u043e\u043a\u0435\u0440\u0430 (addNetworkConnector), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439.\n\n\u041e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u0440\u043e\u043a\u0435\u0440\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 Spring XML-\u0444\u0430\u0439\u043b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0435\u0433\u043e \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0414\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0447\u0435\u0440\u0435\u0437 Jolokia, \u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0441 6.0.0 \u043f\u043e 6.1.1 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0439 CVE-2024-32114, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a API \u0431\u0435\u0437 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0438 \u0440\u0438\u0441\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0443\u043a\u0430\u0437\u0430\u0432 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ActiveMQ CVE, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c ActiveMQ, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043a\u0430\u043a \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u0434\u0430\u0447\u0443, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 ActiveMQ \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0430 \u043c\u0435\u0442\u043e\u0434\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 ActiveMQ \u0445\u043e\u0440\u043e\u0448\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b.\n\nCVE-2026-34197 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0431\u0440\u043e\u043a\u0435\u0440\u0430 ActiveMQ.\n\n\u041e\u043d\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0438\u0441\u043a\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0431\u0440\u043e\u043a\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 VM \u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 brokerConfig=xbean:http://.\n\n\u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f. \u0415\u0441\u043b\u0438 \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0443\u0436\u0435 \u0431\u044b\u043b\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430.", "creation_timestamp": "2026-04-09T17:20:06.000000Z"}, {"uuid": "c55a6d55-cf24-469e-8b2b-9d9eda6c83fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/8Wzt61lw_MeVylmiwywo88EC4T0HsJR8LsB9p_rph-fcq8A", "content": "", "creation_timestamp": "2026-04-14T23:00:13.000000Z"}, {"uuid": "93266cbc-fd75-42ed-8d09-45f9eb7054d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/0xXBXStjB2cDasBqndo5um3GC4cHR3-GcxAV3NhM3TQi8uM", "content": "", "creation_timestamp": "2026-04-15T03:00:06.000000Z"}, {"uuid": "8f56d63f-ac04-4de6-8eec-5ba4cf88e761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/AHrniHWK2cY63D2zECoLlBw6NcBOYDEItPZcGgSioYBLUaE", "content": "", "creation_timestamp": "2026-04-09T11:00:10.000000Z"}, {"uuid": "88cf9afb-e52a-4fc7-a975-99c85bc1a120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/UD4f2fAiHC8hrDsfHLnzkdfzuqQpRp_S5NbwfSwmP7L4Z6U", "content": "", "creation_timestamp": "2026-04-10T03:00:06.000000Z"}, {"uuid": "4331bd8a-3896-4775-bce4-cfe90821663e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/NQOCep9JXuunt-IAyUJYpZHdpB1OmZjsgFCnwZQxWJWW2jY", "content": "", "creation_timestamp": "2026-04-10T09:00:05.000000Z"}, {"uuid": "68b4fa51-5a56-45a3-a911-69f542a6dbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/fUtnhOurQy6oT66Ts5dMq-O2k-_KovXZfTJ_RrnaQVRnVWc", "content": "", "creation_timestamp": "2026-04-10T03:00:13.000000Z"}, {"uuid": "75385d17-3c3c-4aa8-8180-ac22a9ba69b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/FvMidWB1RlAkOdzaN192pTFGGTmdpPivkw7a_MNWrEItiyc", "content": "", "creation_timestamp": "2026-04-09T03:00:05.000000Z"}, {"uuid": "11c18482-f54f-410a-8288-b168d5470196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "Telegram/ubthoF1g8rbiNT2f93TzwsoAmJLY2ZrVE2ygc3thq3uaBv8", "content": "", "creation_timestamp": "2026-04-07T15:20:46.000000Z"}, {"uuid": "891e6711-39bd-402b-9f97-2f510050b280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/yptGG6BWRGF8C8nLXpapkKDt2gflziHugEfgDfGoIkGr4N4", "content": "", "creation_timestamp": "2026-04-08T11:00:12.000000Z"}, {"uuid": "b4349693-855e-46d5-aeb9-70fb8bb7f5bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/G_lDZt1AVaR75SGUo21F44mZVa217xtyO_DWnPW787yUq6A", "content": "", "creation_timestamp": "2026-04-08T23:00:15.000000Z"}, {"uuid": "76820aaa-5059-4707-bce2-0d7dd621a2da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/jQQxeN2mPQPtfMYo_To2hQ-_smSd26JApgUtHwY05JTWW84", "content": "", "creation_timestamp": "2026-04-08T21:00:04.000000Z"}, {"uuid": "03a55e98-ed78-46b7-a6b9-5576856284d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3mkcypddfu42j", "content": "", "creation_timestamp": "2026-04-25T12:03:19.319086Z"}, {"uuid": "eca3f2b9-3dae-40d7-88fa-bedcbb9cc2ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mkej4m65mr2x", "content": "", "creation_timestamp": "2026-04-26T02:29:41.230997Z"}, {"uuid": "36456c10-bc6f-4afd-a7a5-eef9d5c14555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mkgchu3tot2e", "content": "", "creation_timestamp": "2026-04-26T19:36:01.691903Z"}, {"uuid": "1a1a5fc0-864d-4655-9cd0-418cd9b29b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mkgzljmjvd2z", "content": "", "creation_timestamp": "2026-04-27T02:29:40.886409Z"}, {"uuid": "9b79d4f3-5e75-4508-8a36-33740b642779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "Telegram/j_9mXT5eE4GHseWv3vUIM6qN7vJBZdG9bSZVjJejr3TQog", "content": "", "creation_timestamp": "2026-04-17T09:02:26.000000Z"}, {"uuid": "287c47f5-5035-4337-a495-38830c639ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:15:07.719568Z"}, {"uuid": "7a14bbf9-2993-4cec-8622-0af1957b2d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-02)", "content": "", "creation_timestamp": "2026-05-02T00:00:00.000000Z"}, {"uuid": "a82b8481-2232-455f-9193-26fa570063ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/cesnet-certs.mastodonczech.cz.ap.brid.gy/post/3mkqjxoulnhd2", "content": "[[TLP:CLEAR] Apache ActiveMQ opravuje 4 zranitelnosti]\n\nApache Software Foundation verzemi 5.19.5 a 6.2.4 opravuje 4 zranitelnosti v produktech Apache ActiveMQ (Classic, All, Broker, Client, MQTT) \u2b07\ufe0f. Nejz\u00e1va\u017en\u011bj\u0161\u00ed z nich jsou pops\u00e1ny n\u00ed\u017ee, p\u0159i\u010dem\u017e zranitelnost CVE-2026-34197 je ji\u017e aktivn\u011b [\u2026]", "creation_timestamp": "2026-04-30T21:16:52.035083Z"}, {"uuid": "9669a9b3-ba9d-490e-a48a-47df7c9376d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://bsky.app/profile/canartuc.com/post/3mkqop7wvun2g", "content": "Apache ActiveMQ's Jolokia bug (CVE-2026-34197) hits the federal patch deadline today. Horizon3.ai traced the root cause back thirteen years. Shadowserver scanned 6,364 exposed instances April 19. The management API is always exposed wider than the threat model says.\n\n#InfoSec #OpenSource", "creation_timestamp": "2026-04-30T22:41:31.050023Z"}, {"uuid": "cc220784-dd5d-4efb-b1b8-d81e946e9dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://gist.github.com/schonbrennervertex/91ff31dfc9d8329e67faf7b023039fd4", "content": "", "creation_timestamp": "2026-05-05T01:45:35.000000Z"}, {"uuid": "edd1c22c-25f0-4fd5-891a-7dab1a99bc26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/true_secator/8465", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Solar 4RAYS \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n\u0412\u043e \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 681 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 PoC. \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u043e 571. \u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 2026 \u0433\u043e\u0434\u0430, \u043d\u043e \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 2025, \u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u044b 89 \u00ab\u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 Solar 4RAYS \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0432\u0441\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u043d\u0438\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.\n\n\u0421\u0440\u0435\u0434\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0432\u044b\u0432\u043e\u0434\u043e\u0432:\n\n- \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043d\u0430 59,8%: \u0441 426 \u0434\u043e 681. \u0422\u0430\u043a\u043e\u0439 \u0440\u043e\u0441\u0442 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u043a\u0430\u043a \u0441\u0435\u0437\u043e\u043d\u043d\u044b\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c, \u0442\u0430\u043a \u0438 \u0442\u0435\u043c, \u0447\u0442\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b \u043f\u0440\u0438\u043d\u0435\u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Linux \u0438 Windows.\n\n- \u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0438\u043c\u0435\u043b\u0438 83,84% \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u0430\u043a \u0438 \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n- \u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b 7,9 \u0431\u0430\u043b\u043b\u0430. \u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 - 8,1.\n\n- 90,2% \u0432\u0441\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 HTTP. \u0411\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0439 \u00ab\u043f\u0440\u0435\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00bb - TCP (1,23%).\n\n- \u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0440\u043e\u0432\u043d\u044f Critical \u0438 High \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0442 73,5% \u043e\u0442 \u043e\u0431\u0449\u0435\u0439 \u043c\u0430\u0441\u0441\u044b \u0432\u0441\u0435\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u044d\u0442\u043e\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b 72,06%.\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438 \u0442\u0435\u043c \u0434\u043b\u044f CMS WordPress \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 17,9%. \u0414\u043e\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u044a\u0435\u043c\u0435 \u0443\u043f\u0430\u043b\u0430 \u043d\u0430 \u0434\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u043d\u0442\u043d\u044b\u0445 \u043f\u0443\u043d\u043a\u0442\u0430 \u0432 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c.\n\n- \u041d\u0430 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c 4,83% \u0432\u0441\u0435\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0440\u0435\u0434\u043d\u044f\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c 8.\n\n- \u0432 \u0422\u043e\u043f-5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u0432\u044b\u0448\u0435\u0434\u0448\u0438\u0445 PoC \u0432\u043e\u0448\u043b\u0438: CVE-2026-41940 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 cPanel), CVE-2026-42945 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438\u00bb \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ngx_http_rewrite_module \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX), CVE-2026-48907 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Joomla Content Editor (JCE) \u0434\u043b\u044f CMS Joomla), CVE-2026-34197 (RCE \u0432 \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Apache ActiveMQ Classic), CVE-2026-8181 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Burst Statistics \u0434\u043b\u044f WordPress).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Solar 4RAYS, \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0430 \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0441\u043e\u0444\u0442\u0435 \u043e\u0442 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u043a \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0443 \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043c\u0430\u043b\u043e. \u0421\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0433\u043e\u0434\u0430 \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f, \u0438\u0445 \u0441\u0442\u0430\u043b\u043e \u043f\u043e\u0447\u0442\u0438 \u0432\u0434\u0432\u043e\u0435 \u0431\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c \u0440\u0430\u043d\u0435\u0435.\n\nWordpress, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u0438 \u0440\u0430\u0437\u0432\u0438\u0442\u043e\u0441\u0442\u044c\u044e \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u00ab\u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c\u00bb \u043f\u043e \u0447\u0438\u0441\u043b\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u041f\u041e.\n\n\u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u0441\u0442\u0430\u043b\u043e \u044f\u0441\u043d\u043e, \u0447\u0442\u043e \u00ab\u0432\u043e\u0432\u0440\u0435\u043c\u044f\u00bb \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0443\u0436\u043d\u043e \u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e. \n\n\u0427\u0430\u0441\u0442\u043e \u0433\u043b\u0430\u0432\u043d\u043e\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435. \u0414\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0430\u0441\u043f\u0435\u043a\u0442\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0432 99% \u0441\u043b\u0443\u0447\u0430\u0435\u0432. \u041d\u043e \u0431\u044b\u0432\u0430\u0435\u0442 \u0442\u043e\u0442 \u0441\u0430\u043c\u044b\u0439 \u043e\u0434\u0438\u043d \u043f\u0440\u043e\u0446\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0435\u0447\u043d\u043e \u0432\u0441\u0435 \u043f\u043e\u0440\u0442\u0438\u0442.\n\n\u0412 \u044d\u0442\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 supply-chain-\u0430\u0442\u0430\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 Axios \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0439 \u0432\u0435\u0441\u043d\u043e\u0439. \u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 \u0440\u0443\u0431\u0435\u0436\u0435 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0438 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0438 \u0441\u0442\u0430\u0442\u044c\u0438, \u0433\u043e\u0432\u043e\u0440\u044f\u0449\u0438\u0435 \u043e\u0431 Axios Supply Chain Attack.\n\n\u0410\u0442\u0430\u043a\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e \u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0448\u0435\u0441\u0442\u044c \u0441\u0442\u0430\u0434\u0438\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0441\u043e\u0432\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0447\u0430\u0441\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0442\u0438\u0442\u044c \u0432 \u0418\u0411-\u0441\u0444\u0435\u0440\u0435, \u043a\u043e\u0433\u0434\u0430 \u0440\u0435\u0447\u044c \u0437\u0430\u0445\u043e\u0434\u0438\u0442 \u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438) \u0441\u0442\u0430\u043b\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u043c \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435 \u043d\u0443\u0436\u043d\u043e, - \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u043d\u0430\u043a\u0430\u043f\u043b\u0438\u0432\u0430\u044e\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 CVE \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u0432\u044b\u0432\u043e\u0434: \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 (\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b, \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b), \u043d\u043e \u043d\u0435 \u0434\u043b\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 production-\u0441\u0440\u0435\u0434\u0435.\n\n\u0414\u043b\u044f \u043d\u0438\u0445 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043e\u0442\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0440\u0443\u0447\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c: \u0438\u0437\u0443\u0447\u0430\u0442\u044c changelog, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 staging-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043a\u0430\u0442\u043a\u043e\u0439 \u0432 \u043f\u0440\u043e\u0434.", "creation_timestamp": "2026-07-31T14:00:04.295628Z"}, {"uuid": "c74810d4-deca-4ff4-8eb8-a3eac9ff821c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-29T23:00:08.335578Z"}, {"uuid": "4bc94d5a-106c-4165-ae53-81ed607f718e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-30T00:00:11.839495Z"}, {"uuid": "6d5eb89e-2d36-4682-ba86-76c3d6fad7ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-01)", "content": "", "creation_timestamp": "2026-08-02T10:44:57.117656Z"}, {"uuid": "d85d8773-1425-4fbd-93f7-bbe3407381ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/true_secator/8465", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Solar 4RAYS \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n\u0412\u043e \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 681 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 PoC. \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u043e 571. \u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 2026 \u0433\u043e\u0434\u0430, \u043d\u043e \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 2025, \u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u044b 89 \u00ab\u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 Solar 4RAYS \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0432\u0441\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u043d\u0438\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.\n\n\u0421\u0440\u0435\u0434\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0432\u044b\u0432\u043e\u0434\u043e\u0432:\n\n- \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043d\u0430 59,8%: \u0441 426 \u0434\u043e 681. \u0422\u0430\u043a\u043e\u0439 \u0440\u043e\u0441\u0442 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u043a\u0430\u043a \u0441\u0435\u0437\u043e\u043d\u043d\u044b\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c, \u0442\u0430\u043a \u0438 \u0442\u0435\u043c, \u0447\u0442\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b \u043f\u0440\u0438\u043d\u0435\u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Linux \u0438 Windows.\n\n- \u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0438\u043c\u0435\u043b\u0438 83,84% \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u0430\u043a \u0438 \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n- \u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b 7,9 \u0431\u0430\u043b\u043b\u0430. \u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 - 8,1.\n\n- 90,2% \u0432\u0441\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 HTTP. \u0411\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0439 \u00ab\u043f\u0440\u0435\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00bb - TCP (1,23%).\n\n- \u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0440\u043e\u0432\u043d\u044f Critical \u0438 High \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0442 73,5% \u043e\u0442 \u043e\u0431\u0449\u0435\u0439 \u043c\u0430\u0441\u0441\u044b \u0432\u0441\u0435\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u044d\u0442\u043e\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b 72,06%.\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438 \u0442\u0435\u043c \u0434\u043b\u044f CMS WordPress \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 17,9%. \u0414\u043e\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u044a\u0435\u043c\u0435 \u0443\u043f\u0430\u043b\u0430 \u043d\u0430 \u0434\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u043d\u0442\u043d\u044b\u0445 \u043f\u0443\u043d\u043a\u0442\u0430 \u0432 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c.\n\n- \u041d\u0430 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c 4,83% \u0432\u0441\u0435\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0440\u0435\u0434\u043d\u044f\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c 8.\n\n- \u0432 \u0422\u043e\u043f-5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u0432\u044b\u0448\u0435\u0434\u0448\u0438\u0445 PoC \u0432\u043e\u0448\u043b\u0438: CVE-2026-41940 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 cPanel), CVE-2026-42945 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438\u00bb \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ngx_http_rewrite_module \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX), CVE-2026-48907 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Joomla Content Editor (JCE) \u0434\u043b\u044f CMS Joomla), CVE-2026-34197 (RCE \u0432 \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Apache ActiveMQ Classic), CVE-2026-8181 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Burst Statistics \u0434\u043b\u044f WordPress).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Solar 4RAYS, \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0430 \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0441\u043e\u0444\u0442\u0435 \u043e\u0442 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u043a \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0443 \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043c\u0430\u043b\u043e. \u0421\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0433\u043e\u0434\u0430 \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f, \u0438\u0445 \u0441\u0442\u0430\u043b\u043e \u043f\u043e\u0447\u0442\u0438 \u0432\u0434\u0432\u043e\u0435 \u0431\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c \u0440\u0430\u043d\u0435\u0435.\n\nWordpress, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u0438 \u0440\u0430\u0437\u0432\u0438\u0442\u043e\u0441\u0442\u044c\u044e \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u00ab\u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c\u00bb \u043f\u043e \u0447\u0438\u0441\u043b\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u041f\u041e.\n\n\u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u0441\u0442\u0430\u043b\u043e \u044f\u0441\u043d\u043e, \u0447\u0442\u043e \u00ab\u0432\u043e\u0432\u0440\u0435\u043c\u044f\u00bb \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0443\u0436\u043d\u043e \u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e. \n\n\u0427\u0430\u0441\u0442\u043e \u0433\u043b\u0430\u0432\u043d\u043e\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435. \u0414\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0430\u0441\u043f\u0435\u043a\u0442\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0432 99% \u0441\u043b\u0443\u0447\u0430\u0435\u0432. \u041d\u043e \u0431\u044b\u0432\u0430\u0435\u0442 \u0442\u043e\u0442 \u0441\u0430\u043c\u044b\u0439 \u043e\u0434\u0438\u043d \u043f\u0440\u043e\u0446\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0435\u0447\u043d\u043e \u0432\u0441\u0435 \u043f\u043e\u0440\u0442\u0438\u0442.\n\n\u0412 \u044d\u0442\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 supply-chain-\u0430\u0442\u0430\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 Axios \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0439 \u0432\u0435\u0441\u043d\u043e\u0439. \u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 \u0440\u0443\u0431\u0435\u0436\u0435 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0438 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0438 \u0441\u0442\u0430\u0442\u044c\u0438, \u0433\u043e\u0432\u043e\u0440\u044f\u0449\u0438\u0435 \u043e\u0431 Axios Supply Chain Attack.\n\n\u0410\u0442\u0430\u043a\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e \u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0448\u0435\u0441\u0442\u044c \u0441\u0442\u0430\u0434\u0438\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0441\u043e\u0432\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0447\u0430\u0441\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0442\u0438\u0442\u044c \u0432 \u0418\u0411-\u0441\u0444\u0435\u0440\u0435, \u043a\u043e\u0433\u0434\u0430 \u0440\u0435\u0447\u044c \u0437\u0430\u0445\u043e\u0434\u0438\u0442 \u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438) \u0441\u0442\u0430\u043b\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u043c \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435 \u043d\u0443\u0436\u043d\u043e, - \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u043d\u0430\u043a\u0430\u043f\u043b\u0438\u0432\u0430\u044e\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 CVE \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u0432\u044b\u0432\u043e\u0434: \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 (\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b, \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b), \u043d\u043e \u043d\u0435 \u0434\u043b\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 production-\u0441\u0440\u0435\u0434\u0435.\n\n\u0414\u043b\u044f \u043d\u0438\u0445 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043e\u0442\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0440\u0443\u0447\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c: \u0438\u0437\u0443\u0447\u0430\u0442\u044c changelog, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 staging-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043a\u0430\u0442\u043a\u043e\u0439 \u0432 \u043f\u0440\u043e\u0434.", "creation_timestamp": "2026-08-01T00:00:30.054632Z"}, {"uuid": "b9d2abd6-75f4-4cef-a37c-6b7b7a06fa6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-17)", "content": "", "creation_timestamp": "2026-05-17T00:00:00.000000Z"}, {"uuid": "af2c7c71-630b-4b0f-bb23-1d902a7d9017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-18)", "content": "", "creation_timestamp": "2026-05-18T00:00:00.000000Z"}, {"uuid": "dbdd35b9-934f-404c-8322-016a6611a027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/kasperskyb2b/2293", "content": "\ud83d\ude1e \u0418\u0418 \u043f\u043b\u043e\u0445\u043e \u0447\u0438\u043d\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0425\u043e\u0442\u044f \u0418\u0418 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u043a\u043e\u0440\u0438\u043b \u043f\u043e\u0438\u0441\u043a \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c LLM \u0434\u043b\u044f \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435 \u0432\u0441\u0451 \u0442\u0430\u043a \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043a\u043e\u0440\u043c\u0438\u043b\u0438 \u0434\u0432\u0443\u043c \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0448\u0435\u0441\u0442\u044c \u0441\u0432\u0435\u0436\u0438\u0445 \u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044f \u0438 CVE  \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b \u043f\u043e\u0447\u0442\u0438 \u043d\u0430\u0432\u0435\u0440\u043d\u044f\u043a\u0430 \u0437\u043d\u0430\u0435\u0442\u0435: CVE-2026-31431 (CopyFail), CVE-2026-34197 (RCE \u0432 ActiveMQ), CVE-2026-45185 (DeadLetter, RCE \u0432 EXIM) \u0438 \u0434\u0440. \u0417\u0430\u0442\u0435\u043c \u0434\u043b\u044f \u043d\u0438\u0445 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0442\u0447\u0438 \u2014 6080 (!) \u0440\u0430\u0437.\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b:\n\ud83e\udd73 26% \u2014 \u043f\u0430\u0442\u0447 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435 \u043c\u0435\u043d\u044f\u044f \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f;\n\ud83e\udd28 20% \u2014 \u043f\u0430\u0442\u0447 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442, \u043d\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u043c\u0435\u043d\u044f\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u0441 allow by default \u043d\u0430 deny);\n\ud83d\uddff \u0432 \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f ~53% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u043f\u0430\u0442\u0447 \u043b\u0438\u0431\u043e \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043b\u0438\u0431\u043e \u0432\u043d\u043e\u0441\u0438\u043b \u043d\u043e\u0432\u0443\u044e, \u043b\u0438\u0431\u043e \u0438 \u0442\u043e, \u0438 \u0434\u0440\u0443\u0433\u043e\u0435 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u043d\u0430 GPT 5.5 \u0438 Opus 4.8 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 2-3 \u0434\u043e\u043b\u043b\u0430\u0440\u0430, \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u0430 \u0442\u043e\u0433\u043e \u043d\u044e\u0430\u043d\u0441\u0430, \u0447\u0442\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u043d\u0430\u0434\u043e \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0442\u044c \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e, \u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440.\n\n\u0412 \u043e\u0442\u0447\u0451\u0442\u0435 \u0435\u0441\u0442\u044c \u0437\u0430\u0431\u0430\u0432\u043d\u044b\u0439 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0410\u043d\u0442\u0440\u043e\u043f\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u0430\u0442\u0447\u0438 \u043d\u0443\u0436\u043d\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435. \u0412\u0440\u043e\u0434\u0435 \u0438 \u043d\u0435 \u043f\u043e\u0441\u043f\u043e\u0440\u0438\u0448\u044c, \u043d\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u0442\u043e\u0433\u043e \u0433\u043b\u0443\u0431\u043e\u043a\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u0445\u043e\u0440\u043e\u0448\u043e \u0432\u0438\u0434\u043d\u044b \u043a\u0430\u0436\u0434\u044b\u0439 \u0432\u0442\u043e\u0440\u043e\u0439 \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043c\u0435\u0441\u044f\u0446\u0430, \u0430 \u0432\u0435\u0440\u043d\u0435\u0435 \u0441\u043f\u0443\u0441\u0442\u044f 2-3 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0433\u043e. \u041d\u0443 \u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0432 \u0434\u043d\u0438, \u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 GitHub. \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2026-08-20T10:00:04.111032Z"}, {"uuid": "acf5fdee-19d3-46f5-b03c-c1a180cd058d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}, {"uuid": "6532deea-823a-4048-b46a-21000572c508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "content": "", "creation_timestamp": "2026-05-29T00:00:00.000000Z"}, {"uuid": "8ebd5ace-feca-4899-be14-df89f1ce2f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_activemq_jolokia_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"dinosn\", \"h00die\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Apache ActiveMQ exposes a Jolokia JMX-over-HTTP API at /api/jolokia/.\\n          An authenticated attacker can invoke the addNetworkConnector() MBean\\n          operation with a crafted URI that causes the broker to fetch a remote\\n          Spring XML configuration over HTTP. The Spring XML instantiates a\\n          ProcessBuilder bean that executes attacker-supplied OS commands.\\n\\n          Default credentials (admin:admin) are accepted by many installations.\\n\\n          Verified on docker image\", \"disclosure_date\": \"2026-04-29\", \"fullname\": \"exploit/multi/http/apache_activemq_jolokia_rce\", \"is_install_path\": true, \"mod_time\": \"2026-05-28 12:56:10 +0000\", \"name\": \"Apache ActiveMQ RCE via Jolokia addNetworkConnector\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/apache_activemq_jolokia_rce.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/apache_activemq_jolokia_rce\", \"references\": [\"CVE-2026-34197\", \"URL-https://github.com/dinosn/CVE-2026-34197\", \"URL-https://horizon3.ai/attack-research/disclosures/cve-2026-34197-activemq-rce-jolokia/\"], \"rport\": 8161, \"session_types\": false, \"targets\": [\"Windows\", \"Linux\", \"Unix\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-05-29T08:03:47.000000Z"}, {"uuid": "5787bfbe-edad-4aef-8a2b-3313299fa97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/CyberDispatch/1254", "content": "A 13-year-old flaw in Apache ActiveMQ can lead to RCE.\n\nCVE-2026-34197 lets attackers run OS commands via the Jolokia API. Chained with CVE-2024-32114, it becomes unauthenticated RCE on some versions.\n\nPatched in 5.19.4 and 6.2.3.", "creation_timestamp": "2026-08-29T20:00:17.751598Z"}, {"uuid": "e6ec10d9-bdb5-42f0-b803-91ce208e553c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-01)", "content": "", "creation_timestamp": "2026-06-01T00:00:00.000000Z"}, {"uuid": "d1581ae6-1346-43d3-97ab-0ddf3bf9136f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34191", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mskwjlokuz2d", "content": "\ud83d\udccc CVE-2026-34191 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_orac... https://www.cyberhub.blog/cves/CVE-2026-34191", "creation_timestamp": "2026-08-08T11:07:07.195874Z"}, {"uuid": "8db53736-f3e6-4944-a105-bcbc574843b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/true_secator/8277", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Acer \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0434\u0432\u0443\u0445 0-day \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0435\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0441 mesh-\u0441\u0435\u0442\u044c\u044e Wave 7, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 T7c_GBL_1.01.000055 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0413\u0435\u0440\u0433\u043e \u041f\u0430\u043f. \u041f\u0435\u0440\u0432\u0430\u044f CVE-2026-49200 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0445 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-49201 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043a\u043b\u044e\u0447\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0443 \u0447\u0435\u0440\u0435\u0437 \u0431\u044d\u043a\u0434\u043e\u0440.\n\n2. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (CVE-2026-8206) \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Kirki - Freeform Page Builder, Website Builder & Customizer \u0434\u043b\u044f WordPress \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u0410\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Defiant, \u0447\u0435\u0439 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d Wordfence \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u043e\u043b\u0435\u0435 222 \u043f\u043e\u043f\u044b\u0442\u043e\u043a\u00a0\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 24 \u0447\u0430\u0441\u0430. CVE-2026-8206 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0438 REST API \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e 'handle_forgot_password()'.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 500 000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432, \u043e\u0431\u044a\u0435\u043c\u044b \u0440\u0430\u0431\u043e\u0442\u044b \u0443 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f \u0438\u043c\u0435\u044e\u0442\u0441\u044f. \n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Wordfence, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u043c \u043a\u0440\u0443\u043f\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435, \u0432\u0435\u0440\u0441\u0438\u0438 6.0.0, \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0434\u043e 6.0.6 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a\u00a0\u0441 WordPress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u043e\u0447\u0442\u0438 40% \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n3. \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f 0-day \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0410\u043c\u043c\u0430\u0440 \u0410\u0441\u043a\u0430\u0440 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 (GitHub), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0434\u043d\u0438\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c \u043c\u044b\u0448\u0438 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b GitHub \u0447\u0435\u0440\u0435\u0437 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440 Visual Studio Code.\n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft \u0431\u044b\u043b\u0438 \u043f\u0440\u043e\u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0438\u044f.\n\n4. BishopFox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0438\u00a0\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f CVE-2026-22557, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u043f\u0440\u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ubiquiti UniFi.\n\n5. HP \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 VoIP-\u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u0441\u0435\u0440\u0438\u0438 VVX, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-0826, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Rapid7, \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0433\u0434\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f.\n\n6. Positive Technologies \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043c\u0430\u0439\u0441\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM, \u0443\u043a\u0430\u0437\u0430\u0432 \u0433\u0440\u043e\u043c\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux (CVE-2026-31431), ActiveMQ (CVE-2026-34197), SharePoint (CVE-2026-32201) \u0438 Acrobat Reader (CVE-2026-34621).\n\n7. CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux CVE-2022-0492 (CVSS 7,8) \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432. \u041e\u043d\u0430 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0438\u043c\u0435\u043d.\n\n8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 HTTP/2 Bomb \u0432\u044b\u0432\u043e\u0434\u0438\u0442 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0437\u0430 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u043a\u0443\u043d\u0434\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Calif \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b DoS-\u0430\u0442\u0430\u043a \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0432 \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\nHTTP/2 Bomb \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Codex \u043e\u0442 OpenAI \u0438 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 \u0431\u043e\u043c\u0431\u0443 \u0441\u0436\u0430\u0442\u0438\u044f, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0441\u0445\u0435\u043c\u0443 \u0441\u0436\u0430\u0442\u0438\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 HTTP/2 (HPACK), \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0432 \u0441\u0442\u0438\u043b\u0435 Slowloris, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 880 000 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 HTTP/2 \u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 NGINX, Apache HTTPD, Microsoft IIS, Envoy \u0438\u043b\u0438 Cloudflare Pingora.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u0441 \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0433\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u043f\u0440\u0438 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f 100 \u041c\u0431\u0438\u0442/\u0441 \u0438 \u0432 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u043a\u0443\u043d\u0434\u044b \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u043b\u044e\u0431\u043e\u0439 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.", "creation_timestamp": "2026-06-03T18:30:06.000000Z"}, {"uuid": "1e1b0398-5857-4278-97c3-c6d8845448ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/VulnerabilityNews/42028", "content": "CVE-2026-34197: 13-Year-Old Apache ActiveMQ RCE via Jolokia API Surfaces for In-the-Wild Attacks\n\nCVE-2026-34197: 13-Year-Old Apache ActiveMQ RCE via Jolokia API Surfaces for In-the-Wild Attacks\nhttps://darkwebinformer.com/cve-2026-34197-13-year-old-apache-activemq-rce-via-jolokia-api-surfaces-for-in-the-wild-attacks/", "creation_timestamp": "2026-08-18T19:00:04.282455Z"}, {"uuid": "27aadcdb-87d5-4e42-ba92-b40a939a92d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/VulnerabilityNews/42011", "content": "Recent Apache ActiveMQ Vulnerability Exploited in the Wild\n\nThe remote code execution vulnerability tracked as CVE-2026-34197 came to light in early April.\nThe post Recent Apache ActiveMQ Vulnerability Exploited in the Wild appeared first on SecurityWeek.\nhttps://www.securityweek.com/recent-apache-activemq-vulnerability-exploited-in-the-wild/", "creation_timestamp": "2026-08-18T19:00:05.232019Z"}, {"uuid": "857a811a-105f-461c-901d-fca6ab049c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/VulnerabilityNews/42021", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation\n\nA recently disclosed high-severity security flaw in Apache ActiveMQ\u00a0Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and Infrastructure Security Agency\u00a0(CISA).\nTo that end, the agency\u00a0has added the vulnerability, tracked\u00a0as CVE-2026-34197 (CVSS score: 8.8), to its Known Exploited Vulnerabilities\u00a0(KEV) catalog, requiring Federal Civilian\nhttps://thehackernews.com/2026/04/apache-activemq-cve-2026-34197-added-to.html", "creation_timestamp": "2026-08-18T19:00:05.282838Z"}, {"uuid": "c8ae8c3d-73b0-45b4-8bab-1eb6c3bb5c8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/VulnerabilityNews/41985", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-34197 Apache ActiveMQ Improper Input Validation Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/16/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-08-18T19:00:05.150546Z"}, {"uuid": "5626c91c-ac33-4552-b212-ab60a8b2941a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/JHG8zP7qXaf1JIIuvE9VKZ77ce8tH_i-fBPcLNZTDpaUFkw", "content": "", "creation_timestamp": "2026-06-06T15:00:07.000000Z"}, {"uuid": "aeccfc6d-9b58-42ac-bcf6-e72782fa203f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34192", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3monda6o4cb2g", "content": "CVE-2026-34192 - GPU DDK - _MMU_AllocLevel error recovery paths leave dangling page table entries\nCVE ID : CVE-2026-34192\n \n Published : June 19, 2026, 9:23 a.m. | 2\u00a0hours, 13\u00a0minutes ago\n \n Description : Software installed and run as a non-privileged user may conduct improper...", "creation_timestamp": "2026-06-19T12:19:05.494350Z"}, {"uuid": "de6627c1-e4bb-4b99-b58d-ed51dd112e57", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1303908d-46a3-4a2b-a385-ecced7b416ac", "content": "", "creation_timestamp": "2026-06-19T12:45:31.832767Z"}, {"uuid": "6f491cdd-0cf0-42fe-a450-7a581659c9d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34191", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msplkiaicm2n", "content": "CVE-2026-34191 - apr-util\nApache HTTP Server versions 2.4.52 and earlier may experience a denial of service when handling specific HTTP requests. This could cause servers to become unresponsive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aprutil #bellsoft #Alpaquita25 #CVE #infosec", "creation_timestamp": "2026-08-10T07:34:04.395984Z"}, {"uuid": "705a97b5-d0fa-4a0e-9417-57c21340851d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6d2ecaa6-b817-472f-964b-0d7b867c2d2b", "content": "", "creation_timestamp": "2026-06-23T14:03:39.870603Z"}, {"uuid": "bcbd3756-4d60-48db-be43-7d6836b2e330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-28)", "content": "", "creation_timestamp": "2026-06-29T10:00:06.981989Z"}, {"uuid": "e87c1535-8f5e-4973-8bf9-b387f802fd43", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9f813fc5-06ca-40bc-bb53-6576a0d65770", "content": "", "creation_timestamp": "2026-06-30T09:23:51.450881Z"}, {"uuid": "426c8ecb-e603-454b-81a1-3a5a09e9589d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42021", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation\n\nA recently disclosed high-severity security flaw in Apache ActiveMQ\u00a0Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and Infrastructure Security Agency\u00a0(CISA).\nTo that end, the agency\u00a0has added the vulnerability, tracked\u00a0as CVE-2026-34197 (CVSS score: 8.8), to its Known Exploited Vulnerabilities\u00a0(KEV) catalog, requiring Federal Civilian\nhttps://thehackernews.com/2026/04/apache-activemq-cve-2026-34197-added-to.html", "creation_timestamp": "2026-08-19T00:00:08.593876Z"}, {"uuid": "a4447045-21f8-4123-97c0-b4468948988c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42011", "content": "Recent Apache ActiveMQ Vulnerability Exploited in the Wild\n\nThe remote code execution vulnerability tracked as CVE-2026-34197 came to light in early April.\nThe post Recent Apache ActiveMQ Vulnerability Exploited in the Wild appeared first on SecurityWeek.\nhttps://www.securityweek.com/recent-apache-activemq-vulnerability-exploited-in-the-wild/", "creation_timestamp": "2026-08-19T00:00:08.639129Z"}, {"uuid": "f8b1c3f3-d59b-45de-8b15-dbed47cec746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42028", "content": "CVE-2026-34197: 13-Year-Old Apache ActiveMQ RCE via Jolokia API Surfaces for In-the-Wild Attacks\n\nCVE-2026-34197: 13-Year-Old Apache ActiveMQ RCE via Jolokia API Surfaces for In-the-Wild Attacks\nhttps://darkwebinformer.com/cve-2026-34197-13-year-old-apache-activemq-rce-via-jolokia-api-surfaces-for-in-the-wild-attacks/", "creation_timestamp": "2026-08-19T00:00:09.702621Z"}, {"uuid": "5cf6c7a5-c1d3-450e-8b1a-3752c9375b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/VulnerabilityNews/41985", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-34197 Apache ActiveMQ Improper Input Validation Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/16/cisa-adds-one-known-exploited-vulnerability-catalog", "creation_timestamp": "2026-08-19T00:00:08.746259Z"}, {"uuid": "d0a4bb75-493b-425f-80a7-f284c9240694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-01)", "content": "", "creation_timestamp": "2026-07-02T10:00:10.580931Z"}, {"uuid": "f7359c84-6b73-46c5-9f8c-d4fa4d997b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-01)", "content": "", "creation_timestamp": "2026-07-02T10:15:07.628361Z"}, {"uuid": "280c1233-ec3a-4624-b163-cfaf2dac51f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34191", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/d3ttaojqxirma", "content": "CVE-2026-34191: Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle", "creation_timestamp": "2026-08-06T20:11:57.196259Z"}, {"uuid": "7f3ab6f0-580e-45e4-bac3-8f71e80ac903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34198", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpzr7cexwq2y", "content": "CVE-2026-34198 - Coolify: Password reset link poisoning via X-Forwarded-Host header spoofing\nCVE ID : CVE-2026-34198\n \n Published : July 7, 2026, 3:01 a.m. | 47\u00a0minutes ago\n \n Description : Coolify is an open-source and self-hostable tool for managing servers, applications, an...", "creation_timestamp": "2026-07-07T04:26:13.851510Z"}, {"uuid": "8382c5c0-81a3-4a88-8785-e46a275d5413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34191", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mshvdwr5qb2m", "content": "CVE-2026-34191 - apr-util\nAn issue with Debian's OpenSSL package can allow attackers to intercept sensitive information. This affects Debian-based systems using OpenSSL for encryption. To fix this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aprutil #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-07T06:10:14.388257Z"}, {"uuid": "d7ef9b7f-89ea-40d4-b3d8-60ae57bf4dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87566", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a asdasddqwdq29-a11y\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 12:41:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nApache ActiveMQ RCE via Jolokia vulnerability analysis and reproduction notes\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T13:00:03.614040Z"}, {"uuid": "5977b45e-c2ef-4e88-862b-47e49399c74b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87566", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a asdasddqwdq29-a11y\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 12:41:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nApache ActiveMQ RCE via Jolokia vulnerability analysis and reproduction notes\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:43.683575Z"}, {"uuid": "578932c1-ffcc-4d68-a1e3-7d05eb0ccdbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/GithubRedTeam/92499", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pssec-io\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Dockerfile\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 11:37:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoc for CVE-2026-34197\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:07.404310Z"}, {"uuid": "c8c87916-c5b8-40a2-968f-76ecd69b2e2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/GithubRedTeam/91853", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a apache-activemq-rce-research\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 06:48:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nApache ActiveMQ Classic RCE research: CVE-2026-34197 / CVE-2026-42588 bypass chain + hardened-6.2.6 audit findings + Crowdfense comparison (authorized lab research)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:13.292729Z"}, {"uuid": "eeda381e-6340-4383-a784-26caa7f92f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/GithubRedTeam/92499", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pssec-io\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Dockerfile\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 11:37:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoc for CVE-2026-34197\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:10.711059Z"}, {"uuid": "194ce0ad-eabe-4357-8820-11e8cb1d5d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/GithubRedTeam/91853", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a apache-activemq-rce-research\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 06:48:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nApache ActiveMQ Classic RCE research: CVE-2026-34197 / CVE-2026-42588 bypass chain + hardened-6.2.6 audit findings + Crowdfense comparison (authorized lab research)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:21.245916Z"}, {"uuid": "e69cf913-3953-4790-98a7-95138e3a4cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/kasperskyb2b/2293", "content": "\ud83d\ude1e \u0418\u0418 \u043f\u043b\u043e\u0445\u043e \u0447\u0438\u043d\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0425\u043e\u0442\u044f \u0418\u0418 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u043a\u043e\u0440\u0438\u043b \u043f\u043e\u0438\u0441\u043a \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c LLM \u0434\u043b\u044f \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435 \u0432\u0441\u0451 \u0442\u0430\u043a \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043a\u043e\u0440\u043c\u0438\u043b\u0438 \u0434\u0432\u0443\u043c \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0448\u0435\u0441\u0442\u044c \u0441\u0432\u0435\u0436\u0438\u0445 \u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044f \u0438 CVE  \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b \u043f\u043e\u0447\u0442\u0438 \u043d\u0430\u0432\u0435\u0440\u043d\u044f\u043a\u0430 \u0437\u043d\u0430\u0435\u0442\u0435: CVE-2026-31431 (CopyFail), CVE-2026-34197 (RCE \u0432 ActiveMQ), CVE-2026-45185 (DeadLetter, RCE \u0432 EXIM) \u0438 \u0434\u0440. \u0417\u0430\u0442\u0435\u043c \u0434\u043b\u044f \u043d\u0438\u0445 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0442\u0447\u0438 \u2014 6080 (!) \u0440\u0430\u0437.\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b:\n\ud83e\udd73 26% \u2014 \u043f\u0430\u0442\u0447 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435 \u043c\u0435\u043d\u044f\u044f \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f;\n\ud83e\udd28 20% \u2014 \u043f\u0430\u0442\u0447 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442, \u043d\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u043c\u0435\u043d\u044f\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u0441 allow by default \u043d\u0430 deny);\n\ud83d\uddff \u0432 \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f ~53% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u043f\u0430\u0442\u0447 \u043b\u0438\u0431\u043e \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043b\u0438\u0431\u043e \u0432\u043d\u043e\u0441\u0438\u043b \u043d\u043e\u0432\u0443\u044e, \u043b\u0438\u0431\u043e \u0438 \u0442\u043e, \u0438 \u0434\u0440\u0443\u0433\u043e\u0435 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u043d\u0430 GPT 5.5 \u0438 Opus 4.8 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 2-3 \u0434\u043e\u043b\u043b\u0430\u0440\u0430, \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u0430 \u0442\u043e\u0433\u043e \u043d\u044e\u0430\u043d\u0441\u0430, \u0447\u0442\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u043d\u0430\u0434\u043e \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0442\u044c \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e, \u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440.\n\n\u0412 \u043e\u0442\u0447\u0451\u0442\u0435 \u0435\u0441\u0442\u044c \u0437\u0430\u0431\u0430\u0432\u043d\u044b\u0439 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0410\u043d\u0442\u0440\u043e\u043f\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u0430\u0442\u0447\u0438 \u043d\u0443\u0436\u043d\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435. \u0412\u0440\u043e\u0434\u0435 \u0438 \u043d\u0435 \u043f\u043e\u0441\u043f\u043e\u0440\u0438\u0448\u044c, \u043d\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u0442\u043e\u0433\u043e \u0433\u043b\u0443\u0431\u043e\u043a\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u0445\u043e\u0440\u043e\u0448\u043e \u0432\u0438\u0434\u043d\u044b \u043a\u0430\u0436\u0434\u044b\u0439 \u0432\u0442\u043e\u0440\u043e\u0439 \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043c\u0435\u0441\u044f\u0446\u0430, \u0430 \u0432\u0435\u0440\u043d\u0435\u0435 \u0441\u043f\u0443\u0441\u0442\u044f 2-3 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0433\u043e. \u041d\u0443 \u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0432 \u0434\u043d\u0438, \u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 GitHub. \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2026-08-21T00:00:09.893505Z"}, {"uuid": "551caf3e-99d5-4e60-be50-706584b524e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-18)", "content": "", "creation_timestamp": "2026-08-19T10:15:19.104358Z"}, {"uuid": "8c4f7c7b-0dd1-4bd8-b464-50040b81d5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34191", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msismvzghg2v", "content": "CVE-2026-34191 - apr-util\nApache Portable Runtime Utility users who connect to Oracle databases are at risk of SQL injection attacks. This can happen when malicious data is inserted into database queries,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aprutil #Alpinev321 #CVE #infosec", "creation_timestamp": "2026-08-07T14:54:14.163595Z"}, {"uuid": "a277c38c-715b-4c58-a6a8-fbc1fb958928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91853", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a apache-activemq-rce-research\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 06:48:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nApache ActiveMQ Classic RCE research: CVE-2026-34197 / CVE-2026-42588 bypass chain + hardened-6.2.6 audit findings + Crowdfense comparison (authorized lab research)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:28.979695Z"}, {"uuid": "05ec79b8-67b9-4fa0-b186-4b9a032678aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92499", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pssec-io\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Dockerfile\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 11:37:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoc for CVE-2026-34197\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:32.931075Z"}, {"uuid": "bf328eac-f95f-4e95-80fb-14820d02a7d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/GithubRedTeam/93709", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 14:50:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-34197 - Apache ActiveMQ Jolokia Remote Code Execution (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T16:00:03.372088Z"}, {"uuid": "a12e87e9-953f-4be8-b25f-3f817237d3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "Telegram/_qFyWwPBG5YYrYVJCuvS8pNkDyhJdlaykHNtl_KVjYImn64", "content": "", "creation_timestamp": "2026-07-16T19:00:16.747970Z"}, {"uuid": "0a77f126-6b54-4e5a-8f8b-dd8d6c669d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U", "content": "", "creation_timestamp": "2026-07-16T19:00:22.590415Z"}, {"uuid": "df54c0a0-559a-4adc-9109-20bbe4c66037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "Telegram/_qFyWwPBG5YYrYVJCuvS8pNkDyhJdlaykHNtl_KVjYImn64", "content": "", "creation_timestamp": "2026-07-17T00:00:32.166031Z"}, {"uuid": "adce0acd-5a6a-4c15-9544-59932a1ef038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U", "content": "", "creation_timestamp": "2026-07-17T00:00:39.117202Z"}, {"uuid": "9bc5449f-130c-437e-b378-7edf61b70c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93709", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 14:50:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-34197 - Apache ActiveMQ Jolokia Remote Code Execution (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:49.925244Z"}, {"uuid": "538be100-2810-485e-9524-3798228f85bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U", "content": "", "creation_timestamp": "2026-07-18T00:00:11.541306Z"}, {"uuid": "f7899f2d-deaf-4260-99a7-ff57c57c0492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/_qFyWwPBG5YYrYVJCuvS8pNkDyhJdlaykHNtl_KVjYImn64", "content": "", "creation_timestamp": "2026-07-18T00:00:33.850408Z"}, {"uuid": "22474cef-d419-4121-a0e4-3b5fb5f8da98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-18)", "content": "", "creation_timestamp": "2026-07-19T10:00:06.142045Z"}, {"uuid": "a9ee8501-ed1d-41e0-9fff-c5536e57c549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/20949", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation \u2013 thehackernews.com\n\nFri, 17 Apr 2026 11:22:00", "creation_timestamp": "2026-07-19T16:00:05.485848Z"}, {"uuid": "40c250d7-464d-496a-b5a7-1fc26f3efc5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/21023", "content": "6,000+ Publicly Exposed Apache ActiveMQ Instances Found Vulnerable to CVE-2026-34197 \u2013 gbhackers.com\n\nTue, 21 Apr 2026 14:58:24", "creation_timestamp": "2026-07-19T16:00:05.676781Z"}, {"uuid": "865a133e-83d0-4cb3-9d7c-097d876cf492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/critical_bug/1735", "content": "\ud83d\udc31 hacker voice: WHO LEFT JOLOKIA OPEN?\n\n\ud83d\udd25 CVE-2026-34197: \u0441\u0432\u0435\u0436\u0430\u044f RCE \u0432 Apache ActiveMQ Classic\n\n\u26a0\ufe0f \u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u043e?  \n\u0427\u0435\u0440\u0435\u0437 Jolokia API \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0442\u044f\u043d\u0443\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0415\u0441\u043b\u0438 \u0433\u0434\u0435-\u0442\u043e \u0436\u0438\u0432\u0443\u0442 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u0435 admin:admin, \u0430 \u043d\u0430 6.0.0\u20136.1.1 \u0435\u0449\u0451 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u043a\u0430 \u0441 CVE-2024-32114, \u0432\u0441\u0451 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e.\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:  \n\u0427\u0435\u0440\u0435\u0437 addNetworkConnector(String) \u0432 /api/jolokia/ \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c URI \u0441 brokerConfig=xbean:http://.../payload.xml, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e ActiveMQ \u0442\u044f\u043d\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 Spring XML \u0438 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0439\u0442\u0438 \u0434\u043e Runtime.exec().\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:  \n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 5.19.4 \u0438\u043b\u0438 6.2.3  \n2. \u0417\u0430\u043a\u0440\u044b\u0442\u044c /api/jolokia/ \u0438 web console \u0438\u0437\u0432\u043d\u0435  \n3. \u0423\u0431\u0440\u0430\u0442\u044c \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438  \n4. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 Jolokia \u0438 \u0432\u044b\u0437\u043e\u0432\u044b addNetworkConnector\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435.\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n#ActiveMQ #Apache #CVE #RCE #Jolokia #CyberSecurity #Infosec #criticalbug", "creation_timestamp": "2026-07-19T16:00:09.919178Z"}, {"uuid": "de9212ee-7098-4ad2-8624-e2734f451ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/critical_bug/1736", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-34197 \u0432 PDF", "creation_timestamp": "2026-07-19T16:00:09.994990Z"}, {"uuid": "bcdcf039-ae93-4c9a-b0ba-24d80b05e434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/critical_bug/1706", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-34197: RCE \u0432 Apache ActiveMQ \u0447\u0435\u0440\u0435\u0437 Jolokia API (13 \u043b\u0435\u0442 \u0432 \u0442\u0435\u043d\u0438!)", "creation_timestamp": "2026-07-19T16:00:10.531336Z"}, {"uuid": "e7be208f-5dae-465d-a24b-3784bf116c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/critical_bug/1707", "content": "\ud83d\udd25 13 \u043b\u0435\u0442 \u0432 \u0442\u0435\u043d\u0438: RCE \u0432 Apache ActiveMQ (CVE-2026-34197) \ud83d\udd34\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u044b\u0445 13 \u043b\u0435\u0442! \ud83d\ude31\n\n\ud83d\udca5 \u041e\u0434\u0438\u043d POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u0447\u0435\u0440\u0435\u0437 Jolokia API \u2014 \u0438 \u0443 \u0432\u0430\u0441 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c! \ud83d\udcbb\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \ud83d\udc47\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u2014 \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u043f\u0435\u0440\u0432\u044b\u043c! \ud83d\ude80", "creation_timestamp": "2026-07-19T16:00:10.560699Z"}, {"uuid": "a28c85cd-b7b5-460c-b45b-bcba5a8ed43b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/critical_bug/1708", "content": "\ud83d\udd25 13 \u043b\u0435\u0442 \u0432 \u0442\u0435\u043d\u0438: RCE \u0432 Apache ActiveMQ \u0447\u0435\u0440\u0435\u0437 Jolokia API (CVE-2026-34197) \ud83d\udd34\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u0430 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Apache ActiveMQ \u0446\u0435\u043b\u044b\u0445 13 \u043b\u0435\u0442! \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 Jolokia API, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a JMX MBeans \u0447\u0435\u0440\u0435\u0437 HTTP. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043c\u0435\u0442\u043e\u0434 addNetworkConnector \u0432 \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e. \u042d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 URL \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0415\u0441\u043b\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0442\u0443\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 URL, \u0431\u0440\u043e\u043a\u0435\u0440 \u043f\u043e\u0441\u043b\u0443\u0448\u043d\u043e \u0441\u043a\u0430\u0447\u0430\u0435\u0442 XML-\u0444\u0430\u0439\u043b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0432 \u043d\u0451\u043c \u043a\u043e\u0434 (\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f Spring).\n\n\u041e\u0434\u0438\u043d POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 \u0443 \u0432\u0430\u0441 RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435! \ud83d\udcbb\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0443\u0436\u043d\u044b \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Jolokia, \u043d\u043e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u044d\u0442\u043e admin:admin. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 6.0.0\u20136.1.1 \u0438\u0437-\u0437\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 (CVE-2024-32114) \u0434\u043e\u0441\u0442\u0443\u043f \u043a Jolokia \u043e\u0442\u043a\u0440\u044b\u0442 \u0432\u043e\u043e\u0431\u0449\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438! \u042d\u0442\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0431\u0430\u0433 \u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 Unauthenticated RCE.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Apache ActiveMQ Classic \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.19.4 \u0438\u043b\u0438 6.2.3\n2\ufe0f\u20e3 \u0421\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Jolokia (\u043d\u0435 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c admin:admin!)\n3\ufe0f\u20e3 \u0417\u0430\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0440\u0442 8161 \u043e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u2014 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 VPN\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 PoC \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#Apache #ActiveMQ #CVE #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-19T16:00:10.597260Z"}, {"uuid": "9c1bd9d0-c6ed-4178-a99e-60c7adec84e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1708", "content": "\ud83d\udd25 13 \u043b\u0435\u0442 \u0432 \u0442\u0435\u043d\u0438: RCE \u0432 Apache ActiveMQ \u0447\u0435\u0440\u0435\u0437 Jolokia API (CVE-2026-34197) \ud83d\udd34\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u0430 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Apache ActiveMQ \u0446\u0435\u043b\u044b\u0445 13 \u043b\u0435\u0442! \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 Jolokia API, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a JMX MBeans \u0447\u0435\u0440\u0435\u0437 HTTP. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043c\u0435\u0442\u043e\u0434 addNetworkConnector \u0432 \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e. \u042d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 URL \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0415\u0441\u043b\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0442\u0443\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 URL, \u0431\u0440\u043e\u043a\u0435\u0440 \u043f\u043e\u0441\u043b\u0443\u0448\u043d\u043e \u0441\u043a\u0430\u0447\u0430\u0435\u0442 XML-\u0444\u0430\u0439\u043b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0432 \u043d\u0451\u043c \u043a\u043e\u0434 (\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f Spring).\n\n\u041e\u0434\u0438\u043d POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 \u0443 \u0432\u0430\u0441 RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435! \ud83d\udcbb\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0443\u0436\u043d\u044b \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Jolokia, \u043d\u043e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u044d\u0442\u043e admin:admin. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 6.0.0\u20136.1.1 \u0438\u0437-\u0437\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 (CVE-2024-32114) \u0434\u043e\u0441\u0442\u0443\u043f \u043a Jolokia \u043e\u0442\u043a\u0440\u044b\u0442 \u0432\u043e\u043e\u0431\u0449\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438! \u042d\u0442\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0431\u0430\u0433 \u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 Unauthenticated RCE.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Apache ActiveMQ Classic \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.19.4 \u0438\u043b\u0438 6.2.3\n2\ufe0f\u20e3 \u0421\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Jolokia (\u043d\u0435 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c admin:admin!)\n3\ufe0f\u20e3 \u0417\u0430\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0440\u0442 8161 \u043e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u2014 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 VPN\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 PoC \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#Apache #ActiveMQ #CVE #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-20T00:00:06.832475Z"}, {"uuid": "3bcf2e14-a92b-4f45-97b4-54b0fff31248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1707", "content": "\ud83d\udd25 13 \u043b\u0435\u0442 \u0432 \u0442\u0435\u043d\u0438: RCE \u0432 Apache ActiveMQ (CVE-2026-34197) \ud83d\udd34\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u044b\u0445 13 \u043b\u0435\u0442! \ud83d\ude31\n\n\ud83d\udca5 \u041e\u0434\u0438\u043d POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u0447\u0435\u0440\u0435\u0437 Jolokia API \u2014 \u0438 \u0443 \u0432\u0430\u0441 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c! \ud83d\udcbb\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \ud83d\udc47\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u2014 \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u043f\u0435\u0440\u0432\u044b\u043c! \ud83d\ude80", "creation_timestamp": "2026-07-20T00:00:06.918696Z"}, {"uuid": "6f579c42-6683-4704-96f1-1c93987aad4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1706", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-34197: RCE \u0432 Apache ActiveMQ \u0447\u0435\u0440\u0435\u0437 Jolokia API (13 \u043b\u0435\u0442 \u0432 \u0442\u0435\u043d\u0438!)", "creation_timestamp": "2026-07-20T00:00:06.965980Z"}, {"uuid": "83bd128b-490d-4bcf-a8eb-b3a2711f7817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1736", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-34197 \u0432 PDF", "creation_timestamp": "2026-07-20T00:00:07.585219Z"}, {"uuid": "c5b31a38-8542-4965-ae37-806fd9681beb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1735", "content": "\ud83d\udc31 hacker voice: WHO LEFT JOLOKIA OPEN?\n\n\ud83d\udd25 CVE-2026-34197: \u0441\u0432\u0435\u0436\u0430\u044f RCE \u0432 Apache ActiveMQ Classic\n\n\u26a0\ufe0f \u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u043e?  \n\u0427\u0435\u0440\u0435\u0437 Jolokia API \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0442\u044f\u043d\u0443\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0415\u0441\u043b\u0438 \u0433\u0434\u0435-\u0442\u043e \u0436\u0438\u0432\u0443\u0442 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u0435 admin:admin, \u0430 \u043d\u0430 6.0.0\u20136.1.1 \u0435\u0449\u0451 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u043a\u0430 \u0441 CVE-2024-32114, \u0432\u0441\u0451 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e.\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:  \n\u0427\u0435\u0440\u0435\u0437 addNetworkConnector(String) \u0432 /api/jolokia/ \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c URI \u0441 brokerConfig=xbean:http://.../payload.xml, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e ActiveMQ \u0442\u044f\u043d\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 Spring XML \u0438 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0439\u0442\u0438 \u0434\u043e Runtime.exec().\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:  \n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 5.19.4 \u0438\u043b\u0438 6.2.3  \n2. \u0417\u0430\u043a\u0440\u044b\u0442\u044c /api/jolokia/ \u0438 web console \u0438\u0437\u0432\u043d\u0435  \n3. \u0423\u0431\u0440\u0430\u0442\u044c \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438  \n4. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 Jolokia \u0438 \u0432\u044b\u0437\u043e\u0432\u044b addNetworkConnector\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435.\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n#ActiveMQ #Apache #CVE #RCE #Jolokia #CyberSecurity #Infosec #criticalbug", "creation_timestamp": "2026-07-20T00:00:07.622486Z"}, {"uuid": "441b7a6c-140d-4471-96ab-12d407661035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/21023", "content": "6,000+ Publicly Exposed Apache ActiveMQ Instances Found Vulnerable to CVE-2026-34197 \u2013 gbhackers.com\n\nTue, 21 Apr 2026 14:58:24", "creation_timestamp": "2026-07-20T00:00:21.644125Z"}, {"uuid": "c046c9ee-fa2b-4147-b049-fff5bca85442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/20949", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation \u2013 thehackernews.com\n\nFri, 17 Apr 2026 11:22:00", "creation_timestamp": "2026-07-20T00:00:21.808909Z"}, {"uuid": "8b9b3c02-3f17-4466-a4ed-d93edb077bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-19)", "content": "", "creation_timestamp": "2026-07-20T10:15:08.008549Z"}, {"uuid": "04e9a160-2466-4336-8ebc-11a304cf51dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "Telegram/QkQGfXHJmhlUJ4Ok72ZW64yVSosDBVIcN9uDsRFq_Gn2BWo", "content": "", "creation_timestamp": "2026-07-20T18:00:12.924109Z"}, {"uuid": "c5780910-f156-44b5-9180-3c6876563947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "Telegram/QkQGfXHJmhlUJ4Ok72ZW64yVSosDBVIcN9uDsRFq_Gn2BWo", "content": "", "creation_timestamp": "2026-07-21T00:00:35.557842Z"}, {"uuid": "e74e8bb6-0fe8-49ab-9524-e21fc95864c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/2624", "content": "\ud83d\uddde\ufe0f Apache ActiveMQ Classic CVE-2026-34197: 13-Year-Old Vulnerability Now Under Active Exploitation, CISA Issues Federal Patch Mandate\n\n\ud83c\udfe1 via securebulletin.com \ud83d\udd17 https://ift.tt/Zcu7I6l", "creation_timestamp": "2026-07-21T04:00:07.749581Z"}, {"uuid": "428e6104-55ff-4322-9301-745489857439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/2584", "content": "\ud83d\uddde\ufe0f CISA Adds Apache ActiveMQ CVE-2026-34197 to KEV Catalog as Active Exploitation Surges\n\n\ud83c\udfe1 via securebulletin.com \ud83d\udd17 https://ift.tt/JPVZCpu", "creation_timestamp": "2026-07-21T04:00:07.882169Z"}, {"uuid": "05c4e1a6-4215-4864-8d8a-7748ce3632c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/QkQGfXHJmhlUJ4Ok72ZW64yVSosDBVIcN9uDsRFq_Gn2BWo", "content": "", "creation_timestamp": "2026-07-22T00:00:03.948763Z"}, {"uuid": "48dfeefd-2def-43f5-ac4c-c9e77c5f2253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/2584", "content": "\ud83d\uddde\ufe0f CISA Adds Apache ActiveMQ CVE-2026-34197 to KEV Catalog as Active Exploitation Surges\n\n\ud83c\udfe1 via securebulletin.com \ud83d\udd17 https://ift.tt/JPVZCpu", "creation_timestamp": "2026-07-22T00:00:31.703965Z"}, {"uuid": "310f383c-3beb-429c-9185-5f7b8d0121f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/2624", "content": "\ud83d\uddde\ufe0f Apache ActiveMQ Classic CVE-2026-34197: 13-Year-Old Vulnerability Now Under Active Exploitation, CISA Issues Federal Patch Mandate\n\n\ud83c\udfe1 via securebulletin.com \ud83d\udd17 https://ift.tt/Zcu7I6l", "creation_timestamp": "2026-07-22T00:00:31.620271Z"}, {"uuid": "f43ccc9a-da8f-470b-afd1-2b45c4abfc2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1295", "content": "Hidden Weaknesses Fuel a New Wave of Server Compromises\n\nA critical security flaw in Apache ActiveMQ has moved from obscurity to active exploitation, placing thousands of internet-facing servers at risk. The vulnerability, tracked as CVE-2026-34197, remained undetected for more than a decade before being uncovered by security researchers.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:03.849655Z"}, {"uuid": "2093a521-5b2b-4ff5-a5f3-6f08052c2d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1295", "content": "Hidden Weaknesses Fuel a New Wave of Server Compromises\n\nA critical security flaw in Apache ActiveMQ has moved from obscurity to active exploitation, placing thousands of internet-facing servers at risk. The vulnerability, tracked as CVE-2026-34197, remained undetected for more than a decade before being uncovered by security researchers.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:26.027778Z"}, {"uuid": "53776b55-c24e-4301-9a04-1f5df1b1f8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-23)", "content": "", "creation_timestamp": "2026-08-24T10:00:06.329305Z"}, {"uuid": "e08300b1-e859-4b71-b656-05185b7a5f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "content": "", "creation_timestamp": "2026-08-28T10:00:09.401437Z"}, {"uuid": "0939a2b1-5beb-4d6b-9852-57a0b2fe1bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/CyberDispatch/1254", "content": "A 13-year-old flaw in Apache ActiveMQ can lead to RCE.\n\nCVE-2026-34197 lets attackers run OS commands via the Jolokia API. Chained with CVE-2024-32114, it becomes unauthenticated RCE on some versions.\n\nPatched in 5.19.4 and 6.2.3.", "creation_timestamp": "2026-08-30T00:00:43.481302Z"}, {"uuid": "c5e054c2-199c-4344-8b96-7ba9cc4a90e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://t.me/CyberDispatch/1254", "content": "A 13-year-old flaw in Apache ActiveMQ can lead to RCE.\n\nCVE-2026-34197 lets attackers run OS commands via the Jolokia API. Chained with CVE-2024-32114, it becomes unauthenticated RCE on some versions.\n\nPatched in 5.19.4 and 6.2.3.", "creation_timestamp": "2026-08-31T00:00:26.799197Z"}, {"uuid": "31fa3d90-afaa-4860-88e0-7f38deb0e63b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-31T00:00:47.825685Z"}, {"uuid": "f3b008a5-5319-4c85-ba90-bad366b3649a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-02)", "content": "", "creation_timestamp": "2026-09-03T10:15:15.280507Z"}, {"uuid": "af60c580-9e45-4c4e-85cf-75fdf86c93e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101111", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a nirvanasec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-04 15:46:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-04T17:00:06.341581Z"}, {"uuid": "63e53da0-f073-4115-b4bb-245177c888d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101111", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a nirvanasec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-04 15:46:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T01:00:22.475643Z"}, {"uuid": "18962d6b-f3db-4de6-8f75-1d7990ecac0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-04)", "content": "", "creation_timestamp": "2026-09-05T10:15:25.617530Z"}, {"uuid": "e9065115-b4b8-49c6-a5b1-e1ca47430375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_activemq_jolokia_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"dinosn\", \"h00die\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Apache ActiveMQ exposes a Jolokia JMX-over-HTTP API at /api/jolokia/.\\n          An authenticated attacker can invoke the addNetworkConnector() MBean\\n          operation with a crafted URI that causes the broker to fetch a remote\\n          Spring XML configuration over HTTP. The Spring XML instantiates a\\n          ProcessBuilder bean that executes attacker-supplied OS commands.\\n\\n          Default credentials (admin:admin) are accepted by many installations.\\n\\n          Verified on docker image\", \"disclosure_date\": \"2026-04-29\", \"fullname\": \"exploit/multi/http/apache_activemq_jolokia_rce\", \"is_install_path\": true, \"mod_time\": \"2026-05-28 12:56:10 +0000\", \"name\": \"Apache ActiveMQ RCE via Jolokia addNetworkConnector\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/apache_activemq_jolokia_rce.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/apache_activemq_jolokia_rce\", \"references\": [\"CVE-2026-34197\", \"URL-https://github.com/dinosn/CVE-2026-34197\", \"URL-https://horizon3.ai/attack-research/disclosures/cve-2026-34197-activemq-rce-jolokia/\"], \"rport\": 8161, \"session_types\": false, \"targets\": [\"Windows\", \"Linux\", \"Unix\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:40.021102Z"}, {"uuid": "401d7731-6e4d-4b2e-91a6-24c1b529ebf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34197", "type": "seen", "source": "https://gist.github.com/Nayeraneru/bd66a0b4d4667e41feb2d2b5b73ec431", "content": "# GSoC 2026 Final Report \u2014 Automated Vulnerable Environment Provisioning for Metasploit\n\n**Student:** Nayera Ahmed Shafik Mostafa  \n**Organization:** Metasploit  \n**Mentors:** Spencer McIntyre, h00die  \n**Project:** `test_env` \u2014 A Metasploit Plugin for Automated Vulnerable Environment Provisioning  \n**Final Pull Request:** https://github.com/rapid7/metasploit-framework/pull/21895 \n\n---\n\n## 1. Project Goals\n\nMetasploit is the de-facto standard for exploit development and security validation, yet setting up a vulnerable target environment remains a manual, out-of-band process. Users must read module documentation, hunt for Docker images, guess port mappings, and manually configure datastore options (`RHOSTS`, `RPORT`, credentials) before they can fire an exploit. This friction hurts reproducibility, slows down module development, and makes automated CI verification nearly impossible.\n\nThe goal of this project was to build a **first-class, native Metasploit workflow** that collapses this entire pipeline into a single command:\n\n```\nmsf > use exploit/multi/http/apache_activemq_jolokia_rce\nmsf exploit(...) > test_env build\n[+] Environment ready.\n```\n\nSpecifically, the project aimed to:\n\n1. **Automate provisioning** \u2014 Pull OCI images, allocate free host ports, launch containers, and health-check the service.\n2. **Preserve exploit context** \u2014 Automatically bind `RHOSTS`, `RPORT`, credentials, and other datastore options to the module.\n3. **Support lifecycle management** \u2014 Track, stop, start, and clean up environments across `msfconsole` restarts.\n4. **Enable CI validation** \u2014 Share the same environment definitions between local development and headless CI runners.\n5. **Require zero framework core changes** \u2014 Deliver everything as a self-contained plugin with opt-in module metadata.\n\n---\n\n## 2. What I Did\n\n### 2.1 Core Plugin (`plugins/test_env.rb`)\n\nA ~2,000-line Ruby plugin that adds the `test_env` command family to `msfconsole`. Key subsystems:\n\n| Subsystem | Responsibility |\n|-----------|----------------|\n| **Runtime Adapter** (`DockerRuntime`, `PodmanRuntime`) | Unified container abstraction with auto-detection. Podman includes rootless networking validation (`pasta` / `slirp4netns`). |\n| **Port Allocator** | Finds free ephemeral host ports, scanning both the local registry and actively bound runtime ports to avoid collisions with orphaned containers from previous sessions. |\n| **Health Manager** | Configurable readiness checks (`http`, `tcp`, `command`) with retry logic, timeouts, and Basic Auth support. |\n| **Provisioner** | One-time setup actions (e.g., driving the WordPress install wizard via HTTP POST) that run after health checks pass but before the environment is registered as ready. |\n| **Registry** (`BuiltEnvironmentRegistry`) | ActiveModel-backed YAML persistence in `~/.msf4/test_env_registry.yml` with POSIX file locking for safe multi-process access. Reconstructs state from OCI container labels on startup. |\n| **Command Dispatcher** | Routes `test_env build`, `list`, `modules`, `stop`, `start`, `remove`, `remove-all`, `exec`, `validate`, `status`, and `help`. |\n\n### 2.2 Environment Definition Schema (`data/vuln_envs/*.yml`)\n\nA YAML schema that serves as the **single source of truth** for a vulnerable service:\n\n- **`variants`** \u2014 Software versions / images (e.g., ActiveMQ `5.18.6` vs `5.18.2`).\n- **`shared`** \u2014 Base ports, credentials, health checks, datastore defaults, provisioning steps, and CI metadata.\n- **`profiles`** \u2014 Runtime configurations (e.g., `default` vs `broker-only`) via deep-merge overrides.\n- **`ci.exploit`** \u2014 Recommends payloads known to work against the image (e.g., avoiding a broken default).\n- **`ci.validation`** \u2014 Defines what \"success\" means (session type, expected command output).\n\nDefinitions shipped in this PR:\n\n- **`activemq.yml`** \u2014 Apache ActiveMQ Classic with Jolokia API (CVE-2026-34197).\n- **`wordpress.yml`** \u2014 Vulnerable WordPress with one-time install wizard provisioning + verification.\n- **`httpd.yml`** \u2014 Apache HTTP Server for auxiliary scanner testing.\n- **`openssh.yml`** \u2014 OpenSSH server for SSH scanner testing.\n\n### 2.3 Module Integration\n\nIntroduced `VulnerableEnvironment`, a new metadata key inside `update_info()` that follows the exact same framework pattern as `Name`, `Description`, `Notes`, etc.:\n\n```ruby\n'VulnerableEnvironment' => {\n  'definition'      => 'activemq',\n  'default_variant' => '5.18.6',\n  'profile'         => 'default',\n  'port_mapping'    => { 8161 => 'RPORT' }\n}\n```\n\nThe reference integration is on **`modules/exploits/multi/http/apache_activemq_jolokia_rce.rb`**.\n\n### 2.4 CI Integration\n\nReplaced static container definitions with environment-driven provisioning in GitHub Actions:\n\n- **`.github/workflows/test_env.yml`** \u2014 A matrix job that consumes the same YAML definitions as local users, validating shared definitions, health checks, datastore automation, and exploit execution across exploit and auxiliary modules.\n- **`scripts/ci_runner.sh`** \u2014 A headless msfconsole runner that bridges `PASS`/`FAIL` output to standard Unix exit codes for CI.\n\n### 2.5 Documentation\n\n- **`DEVELOPER_Doc.md`** \u2014 Complete schema reference, three-level merge hierarchy (`shared` \u2192 `profile` \u2192 `module overrides`), validation rules, and a step-by-step guide for authoring new definitions.\n- **`USER_Doc.md`** \u2014 Interactive usage guide, command reference with real console transcripts, typical workflows (interactive dev, multi-version testing, auxiliary scanning, resume-after-restart), and troubleshooting.\n\n---\n\n## 3. Current State\n\nThe project is **feature-complete** and **under final review** by the Rapid7 engineering team.\n\n### What was accomplished\n\n- \u2705 **Architecture design** (documented in Markdown): command dispatcher, module metadata, database schema, environment schema, runtime adapter\n- \u2705 **`test_env build`** \u2014 19-step pipeline: validate \u2192 resolve definition \u2192 pull image \u2192 allocate ports \u2192 launch \u2192 health check \u2192 provision \u2192 register \u2192 apply datastore\n- \u2705 **`test_env exec `** \u2014 Auto-loads module, applies stored datastore + recommended payload, allocates fresh `SRVPORT`/`FETCH_SRVPORT`\n- \u2705 **`test_env validate `** \u2014 Verifies sessions against `ci.validation` (session type, command output); works for exploit + auxiliary modules\n- \u2705 **`test_env modules`** \u2014 Discovers all modules with `VulnerableEnvironment` support\n- \u2705 **Lifecycle commands** \u2014 `list`, `stop`, `start`, `remove`, `remove-all` with range parsing (`1-3,5`)\n- \u2705 **Cross-session persistence** \u2014 YAML registry + container label reconstruction\n- \u2705 **Docker & Podman support** \u2014 including rootless Podman networking checks\n- \u2705 **CI matrix** \u2014 validating 8 module/definition combinations (exploit + auxiliary)\n- \u2705 **Full documentation** \u2014 user + developer guides\n---\n\n## 4. Future Work\n\nWhile the core plugin is complete, the following are natural extensions for the community:\n\n1. **More environment definitions** \u2014 The schema is designed for scale. Adding new services only requires a YAML file + module metadata.\n2. **Multi-request provisioning** \u2014 Extend the provisioner to support cookie/session carryover for multi-step install wizards.\n3. **Non-HTTP provisioning** \u2014 Add `type: command` provisioning for images that need a shell command rather than an HTTP POST.\n\n---\n\n## 5. Code & Pull Requests\n\n### Weekly Development (Mentor-Reviewed)\n\nDevelopment was done in 12 incremental pull requests in my forked repository, each reviewed weekly by my mentors:\n\n- Week 1: [`vulnenv-week1`](https://github.com/Nayeraneru/metasploit-framework/pull/1)\n- Week 2: [`vulnenv-week2`](https://github.com/Nayeraneru/metasploit-framework/pull/3)\n- Week 3: [`vulnenv-week3`](https://github.com/Nayeraneru/metasploit-framework/pull/4)\n- Week 4: [`vulnenv-week4`](https://github.com/Nayeraneru/metasploit-framework/pull/5)\n- Week 5: [`vulnenv-week5`](https://github.com/Nayeraneru/metasploit-framework/pull/6)\n- Week 6: [`vulnenv-week6`](https://github.com/Nayeraneru/metasploit-framework/pull/7)\n- Week 7: [`vulnenv-week7`](https://github.com/Nayeraneru/metasploit-framework/pull/8)\n- Week 8: [`vulnenv-week8`](https://github.com/Nayeraneru/metasploit-framework/pull/9)\n- Week 9: [`vulnenv-week9`](https://github.com/Nayeraneru/metasploit-framework/pull/10)\n- Week 10: [`vulnenv-week10`](https://github.com/Nayeraneru/metasploit-framework/pull/11)\n- Week 11: [`vulnenv-week11`](https://github.com/Nayeraneru/metasploit-framework/pull/12)\n- Week 12: [`vulnenv-week12`](https://github.com/Nayeraneru/metasploit-framework/pull/15)\n\nAll 12 branches were merged into the **`vulnenv`** integration branch.\n\n### Final Upstream Pull Request\n\n**[\u2192 Link to PR: `vulnenv` \u2192 `master` on `rapid7/metasploit-framework`](https://github.com/rapid7/metasploit-framework/pull/21895)**\n\nThis is the single PR currently under review by the Rapid7 engineering team. Each weekly PR linked above contains a detailed description of its respective changes.\n\n---\n\n## 6. Challenges & Lessons Learned\n\n1. **Cross-session state loss** \u2014 Solved with a YAML registry (`File.flock` for safety) + container-label reconstruction. *Lesson: container runtime is ground truth; registry is a cache.*\n\n2. **Port collisions with orphaned containers** \u2014 A port can test free yet be bound by a stale container. *Lesson: check the OS **and** the runtime.*\n\n3. **Broken default payloads** \u2014 ActiveMQ's auto-payload uses FTP, which Metasploit's fetch server doesn't support; added `ci.exploit.payload` overrides. *Lesson: environment definitions know the image better than modules.*\n\n4. **Process-local sessions** \u2014 Sessions die with their `msfconsole`; `exec`/`validate` must share one instance. *Lesson: document constraints honestly, don't hide them.*\n\n5. **WordPress not truly ready** \u2014 Apache ran, but no schema/admin existed; added `provision` + `verify` (install wizard POST + login-page health check). *Lesson: \"process running\" \u2260 \"application ready\" \u2014 verify the exploitable state.*\n\n---\n\n## 7. Acknowledgments\n\nHuge thanks to my mentors **Spencer McIntyre** and **h00die** for their weekly reviews, architectural guidance, and patience through 12 iterations. This project would not have been possible without the Metasploit community's excellent codebase and documentation.\n", "creation_timestamp": "2026-09-12T15:22:56.555476Z"}]}