{"vulnerability": "CVE-2026-5326", "sightings": [{"uuid": "0184d3c3-83f9-4f7c-8a36-c2a0f316116f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msb34zqoqi2s", "content": "A Linux kernel vulnerability, CVE-2026-53264, lets a local user run arbitrary code via a net/sched use-after-free. A public PoC is now available.\n\n#CVE202653264 #LinuxKernel #UseAfterFree #PrivilegeEscalation #InfoSec", "creation_timestamp": "2026-08-04T13:02:57.527541Z"}, {"uuid": "8ea73ee0-be06-41c6-828b-0e360f400ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3msck3volp22b", "content": "Linux\u30ab\u30fc\u30cd\u30eb\u306e\u8106\u5f31\u6027CVE-2026-53264\u306b\u3088\u308a\u3001\u30ed\u30fc\u30ab\u30eb\u30e6\u30fc\u30b6\u30fc\u304c\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u53ef\u80fd\u306b\u306a\u308b\u3053\u3068\u304c\u5224\u660e\u3001\u6982\u5ff5\u5b9f\u8a3c\uff08PoC\uff09\u304c\u516c\u958b\u3055\u308c\u305f \n\nLinux Kernel Flaw CVE-2026-53264 Lets Local Users Execute Arbitrary Code, PoC Published  #DailyCyberSecurity (Aug 4)\n\nsecurityonline.info/linux-kernel...", "creation_timestamp": "2026-08-05T03:03:24.684985Z"}, {"uuid": "b52778ef-9e6f-45b0-81e8-3ad28b3516c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53268", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp45pf3yzn2z", "content": "CVE-2026-53268 - netfilter: conntrack_irc: fix possible out-of-bounds read\nCVE ID : CVE-2026-53268\n \n Published : June 25, 2026, 8:39 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: conntrack_irc: fi...", "creation_timestamp": "2026-06-25T09:50:06.492819Z"}, {"uuid": "4858515d-cd63-459b-9947-8c10e114c5f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53267", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp45sl4b4l2o", "content": "CVE-2026-53267 - netfilter: nft_ct: bail out on template ct in get eval\nCVE ID : CVE-2026-53267\n \n Published : June 25, 2026, 8:39 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_ct: bail out on ...", "creation_timestamp": "2026-06-25T09:51:53.306169Z"}, {"uuid": "abe80c16-bfd2-475b-8467-2cd49a82e9d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53261", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp45vwr3iz2a", "content": "CVE-2026-53261 - devlink: Release nested relation on devlink free\nCVE ID : CVE-2026-53261\n \n Published : June 25, 2026, 8:39 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\ndevlink: Release nested relation on d...", "creation_timestamp": "2026-06-25T09:53:46.176562Z"}, {"uuid": "b396b3ec-6808-4112-a5c1-b8c6ddc06665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53263", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp45zk6ixl2a", "content": "CVE-2026-53263 - 6lowpan: fix off-by-one in multicast context address compression\nCVE ID : CVE-2026-53263\n \n Published : June 25, 2026, 8:39 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\n6lowpan: fix off-by-o...", "creation_timestamp": "2026-06-25T09:55:47.437846Z"}, {"uuid": "54706d5b-f19b-4314-a2bb-b143bcd62296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp465f6xqu2f", "content": "CVE-2026-53266 - netfilter: bridge: make ebt_snat ARP rewrite writable\nCVE ID : CVE-2026-53266\n \n Published : June 25, 2026, 8:39 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: bridge: make ebt_snat...", "creation_timestamp": "2026-06-25T09:57:56.070106Z"}, {"uuid": "7e586ea3-1ac3-44cf-8ead-89dc596b0eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53262", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp46bjq5hv2c", "content": "CVE-2026-53262 - l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()\nCVE ID : CVE-2026-53262\n \n Published : June 25, 2026, 8:39 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nl2tp: pppol2tp: hold ref...", "creation_timestamp": "2026-06-25T10:00:15.155107Z"}, {"uuid": "e6dd68a2-cd4f-4405-86c9-94431deb37ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53260", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp46fz7lco2f", "content": "CVE-2026-53260 - tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().\nCVE ID : CVE-2026-53260\n \n Published : June 25, 2026, 8:39 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Add preempt...", "creation_timestamp": "2026-06-25T10:02:46.108328Z"}, {"uuid": "468d5e74-496c-4add-baff-5e9f881c6cca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp46kvokwz2f", "content": "CVE-2026-53264 - net/sched: act_api: use RCU with deferred freeing for action lifecycle\nCVE ID : CVE-2026-53264\n \n Published : June 25, 2026, 8:39 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_...", "creation_timestamp": "2026-06-25T10:05:29.741009Z"}, {"uuid": "77b4c23f-4acb-4bd8-bb21-31e0650194de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53265", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp47epvpc32t", "content": "CVE-2026-53265 - dm cache policy smq: check allocation under invalidate lock\nCVE ID : CVE-2026-53265\n \n Published : June 25, 2026, 8:39 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache policy smq: check...", "creation_timestamp": "2026-06-25T10:19:55.826327Z"}, {"uuid": "617f82f6-e44b-4f18-a444-f99c66a5983a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53269", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp47wn22bc27", "content": "CVE-2026-53269 - netfilter: synproxy: add mutex to guard hook reference counting\nCVE ID : CVE-2026-53269\n \n Published : June 25, 2026, 8:39 a.m. | 1\u00a0hour, 4\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: synproxy: a...", "creation_timestamp": "2026-06-25T10:29:57.112005Z"}, {"uuid": "04c8c7b9-38b1-4032-8a94-25b022263f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53267", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116812518218343282", "content": "A severe vulnerability was disclosed for Linux Kernel (CVE-2026-53267) https://vuldb.com/vuln/373823", "creation_timestamp": "2026-06-25T19:59:38.878373Z"}, {"uuid": "507d02f1-de92-4305-b8fa-4f09469aebc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:44:16.730791Z"}, {"uuid": "cf38787b-ddca-4523-9ef0-2be6f6a5daf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53263", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:44:14.486381Z"}, {"uuid": "a538d20c-2354-453e-9bf5-79a747776f3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53265", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:44:19.363332Z"}, {"uuid": "9ecaf659-0ff0-4490-974e-2db84148ce38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:44:21.672399Z"}, {"uuid": "129480eb-8fab-42a3-949a-224087c4abd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53267", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:44:23.986343Z"}, {"uuid": "9e3b9a52-a920-4be0-ad10-0eee11065f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53268", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812", "content": "", "creation_timestamp": "2026-07-01T02:44:26.251489Z"}, {"uuid": "96b18752-4e15-411a-9504-9b17589d3e31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53263", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:51:55.946183Z"}, {"uuid": "155179d8-6c29-41f0-93a9-807181a12a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:51:58.231370Z"}, {"uuid": "f027c50a-e89a-4698-a52b-bae8c1697418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:52:00.533368Z"}, {"uuid": "3b3ea2af-e4f8-4c8c-bced-385fd7c05afc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53268", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:52:02.788086Z"}, {"uuid": "8b26c534-4f17-4bd3-bc49-c73399cbd5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53269", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:52:05.291002Z"}, {"uuid": "70fc45b1-136c-4f65-a2b9-39efbee5b373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53269", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq75bs6v272d", "content": "CVE-2026-53269: Netfilter's Mutex Addition Doesn't Ensure Your Safety #CVE2026 #Netfilter #CyberSecurity", "creation_timestamp": "2026-07-09T07:45:41.502451Z"}, {"uuid": "c62eaac5-5874-4a58-87e1-25aee65c0694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53269", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq75bwo44t2c", "content": "CVE-2026-53269: Mutex Addition in Synproxy Won't Secure Netfilter from Attackers #CVE2026 #CyberSecurity #Netfilter", "creation_timestamp": "2026-07-09T07:45:46.106759Z"}, {"uuid": "67dc50f5-a9df-46bb-b082-b0dcb65a9bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53269", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq75c2ar5y27", "content": "CVE-2026-53269: Synproxy Mutex Addition Fails to Clear Surveillance Fog #Cybersecurity #Vulnerability #Privacy", "creation_timestamp": "2026-07-09T07:45:50.066286Z"}, {"uuid": "f733ad15-12d8-433d-b64f-0db98023fe4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53269", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq75c5gxld2c", "content": "CVE-2026-53269: Mutex Addition in Netfilter Signals Underlying Process Failures #CVE2026 #Netfilter #CyberSecurity", "creation_timestamp": "2026-07-09T07:45:53.456334Z"}, {"uuid": "64fb98c7-5e1a-4263-a794-06dfe493eb7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53269", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq75gddyya22", "content": "CVE-2026-53269 netfilter: synproxy: add mutex to guard hook reference counting - Noa Keller #CVE2026 #Cybersecurity #Netfilter", "creation_timestamp": "2026-07-09T07:48:13.753492Z"}, {"uuid": "057c7b01-6d7b-43fc-978b-0dfdbf98aeb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53269", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq75gjennc2h", "content": "CVE-2026-53269: Is Mutex Addition Enough to Mitigate Synproxy Risks? #CVE202653269 #synproxy #netfilter", "creation_timestamp": "2026-07-09T07:48:20.082861Z"}, {"uuid": "a257b8fa-3d87-411e-9924-5b9fa1d2c39d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://t.me/thehackernews/9630", "content": "\ud83d\uded1 A researcher says AI helped turn a #Linux traffic-control race into a root exploit.\n\nCVE-2026-53264 lets a local user gain root on the tested CentOS Stream 9 build, but needs user namespaces, specific kernel options, and build-specific ROP offsets.\n\nRead how the exploit works: https://thehackernews.com/2026/07/researcher-says-ai-helped-develop-linux.html", "creation_timestamp": "2026-07-28T09:00:06.920254Z"}, {"uuid": "b8d4d5f6-2773-4313-86d6-ff9d439c4833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mrp33rika62w", "content": "A use-after-free race in Linux network traffic-control (CVE-2026-53264) can grant local root on CentOS Stream 9 if specific kernel options and namespaces are enabled.\n", "creation_timestamp": "2026-07-28T09:14:19.892815Z"}, {"uuid": "c54d1e00-eb72-4a6d-a65b-838c1b7402c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://thehackernews.com/2026/07/researcher-says-ai-helped-develop-linux.html", "content": "STAR Labs has published a Linux kernel exploit that turns an ordinary local user into root on the CentOS Stream 9 build it targeted. The flaw, tracked as CVE-2026-53264 (CVSS score: 7.8), is a use-after-free race in the kernel's network traffic-control subsystem.Researcher Lee Jia Jie said artificial intelligence (AI) helped him find the bug and speed up exploit development. This is local", "creation_timestamp": "2026-07-28T10:00:53.619719Z"}, {"uuid": "f0884d2f-2122-4ccf-b0bd-5ec998f9bdb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mrp7waplic2n", "content": "AI Uncovers Dangerous Linux Kernel Zero-Day: How CVE-2026-53264 Brings Root Access Within\u00a0Seconds\n\nIntroduction: Artificial Intelligence Is Transforming Cybersecurity Faster Than Ever Artificial intelligence is rapidly reshaping the cybersecurity landscape. While security researchers are embracing\u2026", "creation_timestamp": "2026-07-28T10:40:43.728304Z"}, {"uuid": "dc6fbedd-cc5e-422e-9839-0c28b60ed002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrpcqcsija2r", "content": "AI discovers CVE-2026-53264, a Linux kernel zero-day enabling local privilege escalation to root. #LinuxKernel #ZeroDay #CyberSecurity #AI #PrivilegeEscalation #CVE202653264 thedailytechfeed.com/ai-uncovers-...", "creation_timestamp": "2026-07-28T11:31:05.449544Z"}, {"uuid": "fa5e0904-8808-482f-ad20-6231614df885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5326", "type": "seen", "source": "https://gist.github.com/alon710/7412d8adaff2427de50f99e5817de762", "content": "# CVE-2026-5326: CVE-2026-5326: Insecure Direct Object Reference (IDOR) in SourceCodester Leave Application System\n\n> **CVSS Score:** 5.3\n> **Published:** 2026-04-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-5326\n\n## Summary\nAn Insecure Direct Object Reference (IDOR) vulnerability exists in SourceCodester Leave Application System 1.0 within the User Information Handler component. The application processes client-supplied database identifiers via URL parameters without executing proper authorization checks or session validation. This allows remote, unauthenticated attackers to view sensitive administrative and employee records by altering the 'id' parameter.\n\n## TL;DR\nUnauthenticated remote attackers can bypass administrative access boundaries to read sensitive employee records and administrative data by manipulating the numeric ID parameter inside '/index.php?page=manage_user'.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-639 / CWE-285\n- **Attack Vector**: Network (Remote)\n- **Required Privileges**: None (Unauthenticated)\n- **CVSS v4.0 Base Score**: 6.9 (Medium)\n- **EPSS Score**: 0.00404\n- **CISA KEV Status**: Not Listed\n- **Exploit Status**: Proof-of-Concept Publicly Available\n\n## Affected Systems\n\n- SourceCodester Leave Application System 1.0\n- **Leave Application System**: 1.0 (Fixed in: `None`)\n\n## Mitigation\n\n- Implement role-based access control (RBAC) to ensure only administrators can access user administration pages.\n- Enforce session-to-parameter matching inside 'index.php?page=manage_user' to restrict non-administrative users to their own profile.\n- Utilize non-sequential random identifiers such as UUIDs to prevent sequential numeric index enumeration.\n\n**Remediation Steps:**\n1. Locate the PHP template responsible for processing user details within the SourceCodester deployment.\n2. Insert session control instructions (using 'session_start()') if they are not already globally implemented.\n3. Compare the user-supplied 'id' parameter with the validated session 'user_id' parameter.\n4. Verify if the active session holds administrator privileges when non-matching records are requested.\n5. Return an HTTP 403 response if the authorization validation checks fail.\n\n## References\n\n- [Insecure Direct Object Reference (IDOR) in Leave Application System PHP SQLite3](https://medium.com/@hemantrajbhati5555/insecure-direct-object-reference-idor-in-leave-application-system-php-sqlite3-66af35b8b6ea)\n- [VulDB Advisory Entry](https://vuldb.com/vuln/354657)\n- [VulDB CTI Indicators Feed](https://vuldb.com/vuln/354657/cti)\n- [VulDB Submission Record](https://vuldb.com/submit/780773)\n- [Product Source Portal](https://www.sourcecodester.com/)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-5326)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-5326) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-28T11:02:01.055442Z"}, {"uuid": "bd00a688-c0aa-4ed2-8767-602d3c14a7f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrpcagxf6g27", "content": "Unfortunate users across major Linux OS versions now face CVE-2026-53264 privilege escalation exploits in the traffic-control subsystem, delightfully accelerated by AI finding race conditions for us. While upstream patches landed back in June 2026, Linux distribution vendors stil...\n\nRead full story", "creation_timestamp": "2026-07-28T11:22:11.791958Z"}, {"uuid": "46e1cea4-9efc-4f8c-ab57-1101009dfb68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "Telegram/h1j6Jl6m2npLlEniyRpMllHKNmi9d2U9i1x7gM3I-76diKo", "content": "", "creation_timestamp": "2026-07-28T20:00:07.560532Z"}, {"uuid": "cd23e399-ba50-4697-bd2a-8a6da385accd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://t.me/true_secator/8452", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438, \u043a\u043e\u0438\u0445 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043c\u043d\u043e\u0433\u043e. \u041f\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0443:\n\n1. STAR Labs \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0435 CentOS Stream 9.\n\nCVE-2026-53264 (CVSS: 7.8), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0438\u0437-\u0437\u0430 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u044f\u0434\u0440\u0430. \u041d\u0430\u0439\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0443 \u0438 \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u043e\u043c\u043e\u0433 \u0418\u0418.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u0431\u044b\u043b\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u043e 1 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 Linux 4.14. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u043b\u0438\u0437\u044b: 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36 \u0438 7.0.13, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u0432\u043e\u0448\u043b\u043e \u0432 7.1-rc7.\n\n2. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Lava, \u0411\u043e\u043b\u0435\u0435 24 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0442\u0435\u0440\u044f\u044e\u0442 \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0437-\u0437\u0430 CVE-2013-4786 (\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 IPMI 2.0, \u043a\u043e\u0440\u0435\u043d\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435, \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u043e\u043c \u0432 2004 \u0433\u043e\u0434\u0443) \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u043e\u0439 (BMC).\n\n3. Arista \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 CVE-2026-16812 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 VeloCloud Orchestrator, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n4. Apple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 87 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 iOS \u0438 155 \u0432 macOS Tahoe. \u0412 macOS Sequoia 15.7.8 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b 138 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u0432 macOS Sonoma 14.8.8 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 127 \u043f\u0440\u043e\u0431\u043b\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 CVE-2026-43810, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Apple \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u044f\u0434\u0440\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044f\u0435\u0442 \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u043a\u0443 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a\n\n5. GitHub \u0438 PyPI \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 Dependabot \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.\n\n6. \u0412 n8n\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (GHSA-gv7g-jm28-cr3m), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0443 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nSecurity Joes \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0437\u0443\u0447\u0430\u044f \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 n8n \u043d\u0430\u00a0\u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 CVE-2026-27577.\n\n7. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 macOS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0437\u0430\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0440\u0445\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f. Apple \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0435 \u0441\u043e\u0447\u043b\u0430 \u0435\u0451 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n8. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c ERPNext, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u042d\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435.\n\n9. CVE-2026-9039 \u0432 \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u044f\u0445 XCharge EV \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sailflow, \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f \u043a \u0440\u0430\u0437\u044a\u0435\u043c\u0443 \u043d\u0430 \u0437\u0430\u0440\u044f\u0434\u043d\u043e\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 SSH-\u0441\u0435\u0440\u0432\u0438\u0441.\n\nSSH-\u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e root/root. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u043f\u043e\u0434\u0437\u0430\u0440\u044f\u0434\u043e\u043a, \u043d\u0430\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0449\u0435\u0440\u0431\u0430 \u0438\u043b\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u044c \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430.\n\n10. CSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0430\u0433\u0435\u043d\u0442\u0430\u0445 Workspace \u043e\u0442 OpenAI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0446\u0435\u043b\u044b\u0439 (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439) \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0439 \u0430\u0433\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0436\u0438\u0442\u044c \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.", "creation_timestamp": "2026-07-28T21:00:05.208036Z"}, {"uuid": "12621633-d92e-4e8e-8c40-4ee8ac5cfa54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrqlqyevek2a", "content": "Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit\n\nSTAR Labs has published a Linux kernel exploit that turns an ordinary local user into root on the CentOS Stream 9 build it targeted. The flaw, tracked as CVE-2026-53264 (CVSS score: 7.8), is a use-afte\u2026\n#hackernews #news", "creation_timestamp": "2026-07-28T23:45:10.833606Z"}, {"uuid": "24edce3a-a55b-48df-8bff-b6af15701e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "published-proof-of-concept", "source": "Telegram/h1j6Jl6m2npLlEniyRpMllHKNmi9d2U9i1x7gM3I-76diKo", "content": "", "creation_timestamp": "2026-07-29T00:00:26.745631Z"}, {"uuid": "caf454c2-a12b-40cc-9322-20c6b36335da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9630", "content": "\ud83d\uded1 A researcher says AI helped turn a #Linux traffic-control race into a root exploit.\n\nCVE-2026-53264 lets a local user gain root on the tested CentOS Stream 9 build, but needs user namespaces, specific kernel options, and build-specific ROP offsets.\n\nRead how the exploit works: https://thehackernews.com/2026/07/researcher-says-ai-helped-develop-linux.html", "creation_timestamp": "2026-07-29T00:00:41.083001Z"}, {"uuid": "0a803aae-a77b-4eba-b2ec-7ce2d54b940c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://bsky.app/profile/eulinuxevolutionde.eurosky.social/post/3mrrg7fham225", "content": "Linux-L\u00fccke CVE-2026-53264: KI verk\u00fcrzt Exploit-Zeit auf 5 Sekunden\nborncity.com/news/linux-l...\n\n#Linux #LinuxNews #LinuxDE #LinuxNewsDE #LinuxEU #LinuxNewsEU #EULE #EULEde", "creation_timestamp": "2026-07-29T07:38:49.179800Z"}, {"uuid": "acc933ef-c92f-42b9-b8f5-4a2a785f0056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://t.me/S_E_Reborn/6502", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438, \u043a\u043e\u0438\u0445 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043c\u043d\u043e\u0433\u043e. \u041f\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0443:\n\n1. STAR Labs \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0435 CentOS Stream 9.\n\nCVE-2026-53264 (CVSS: 7.8), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0438\u0437-\u0437\u0430 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u044f\u0434\u0440\u0430. \u041d\u0430\u0439\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0443 \u0438 \u0443\u0441\u043a\u043e\u0440\u0438\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u043e\u043c\u043e\u0433 \u0418\u0418.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u0431\u044b\u043b\u043e \u0432\u043d\u0435\u0441\u0435\u043d\u043e 1 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 Linux 4.14. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u043b\u0438\u0437\u044b: 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36 \u0438 7.0.13, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 \u0432\u043e\u0448\u043b\u043e \u0432 7.1-rc7.\n\n2. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Lava, \u0411\u043e\u043b\u0435\u0435 24 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0442\u0435\u0440\u044f\u044e\u0442 \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0437-\u0437\u0430 CVE-2013-4786 (\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 IPMI 2.0, \u043a\u043e\u0440\u0435\u043d\u044f\u0449\u0438\u0439\u0441\u044f \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435, \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u043e\u043c \u0432 2004 \u0433\u043e\u0434\u0443) \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u043e\u0439 \u043f\u043b\u0430\u0442\u043e\u0439 (BMC).\n\n3. Arista \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 CVE-2026-16812 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 VeloCloud Orchestrator, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n4. Apple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 87 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 iOS \u0438 155 \u0432 macOS Tahoe. \u0412 macOS Sequoia 15.7.8 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b 138 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u0432 macOS Sonoma 14.8.8 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 127 \u043f\u0440\u043e\u0431\u043b\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 CVE-2026-43810, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Apple \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u044f\u0434\u0440\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044f\u0435\u0442 \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u043a\u0443 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a\n\n5. GitHub \u0438 PyPI \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 Dependabot \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0438\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.\n\n6. \u0412 n8n\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (GHSA-gv7g-jm28-cr3m), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0443 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0443 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nSecurity Joes \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0437\u0443\u0447\u0430\u044f \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 n8n \u043d\u0430\u00a0\u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 CVE-2026-27577.\n\n7. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 macOS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0437\u0430\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0440\u0445\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f. Apple \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0435 \u0441\u043e\u0447\u043b\u0430 \u0435\u0451 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n8. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c ERPNext, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u042d\u0442\u043e \u043e\u0434\u043d\u0430 \u0438\u0437 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435.\n\n9. CVE-2026-9039 \u0432 \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u044f\u0445 XCharge EV \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sailflow, \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044f \u043a \u0440\u0430\u0437\u044a\u0435\u043c\u0443 \u043d\u0430 \u0437\u0430\u0440\u044f\u0434\u043d\u043e\u0439 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 SSH-\u0441\u0435\u0440\u0432\u0438\u0441.\n\nSSH-\u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e root/root. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u043f\u043e\u0434\u0437\u0430\u0440\u044f\u0434\u043e\u043a, \u043d\u0430\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0449\u0435\u0440\u0431\u0430 \u0438\u043b\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u044c \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430.\n\n10. CSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0430\u0433\u0435\u043d\u0442\u0430\u0445 Workspace \u043e\u0442 OpenAI \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0446\u0435\u043b\u044b\u0439 (\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439) \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0439 \u0430\u0433\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0436\u0438\u0442\u044c \u0432 \u0432\u0430\u0448\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435.", "creation_timestamp": "2026-07-29T01:00:04.086395Z"}, {"uuid": "f2352a4b-1e02-430d-b738-823e891e170d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "Telegram/aWJ4ven4SzVEHW8V7M8N0ULh6E2DpyKfiOjKnoonZXfpUQ", "content": "", "creation_timestamp": "2026-07-29T10:00:08.178880Z"}, {"uuid": "17c94d37-46be-48a6-9ba1-21843723e9a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "published-proof-of-concept", "source": "Telegram/aWJ4ven4SzVEHW8V7M8N0ULh6E2DpyKfiOjKnoonZXfpUQ", "content": "", "creation_timestamp": "2026-07-30T00:02:06.036932Z"}, {"uuid": "71234662-e8f7-42bf-8293-c95901e1585f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-08T20:45:54.976148Z"}, {"uuid": "5aac7084-84e1-4569-b301-c0e8eb8faa99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-53269", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "f4f58b0a-343e-4fc7-81a7-16a9e3b85412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "b063bb34-46ca-4c68-b275-4d85f8e9a3fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-53265", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "36225453-cb3e-4954-b3e4-06084e5a5147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-53268", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "2bb2db1f-f8b6-4d5d-b707-5ae91f32b8c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-53267", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "f978c6a5-e414-4e1a-847d-1c1cfd314394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "49fca46d-943b-46c7-84c6-451907cf22db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-53263", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "480f299c-74db-45b2-a454-7230c50a60ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-53261", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "a9c90371-631d-419c-94cb-d2e0de237ed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-53262", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc", "content": "", "creation_timestamp": "2026-09-15T12:46:43.200012Z"}, {"uuid": "98fd656e-cdbb-4e20-9bea-25781479f0ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvseurywqm2m", "content": "\ud83d\uded1 CVE-2026-53266\nLinux Kernel\nCVSS 8.8 / EPSS 0% / KEV: No\nTL;DR: In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make eb\u2026\nhttps://cvesentinel.com/report/CVE-2026-53266?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-18T14:28:07.938270Z"}, {"uuid": "b307d7a7-3b1f-4361-83dc-20f0b13278a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvsezluznp2w", "content": "\ud83d\uded1 CVE-2026-53266\nLinux Kernel\nCVSS 8.8 / EPSS 0% / KEV: No\nTL;DR: In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make eb\u2026\nhttps://cvesentinel.com/report/CVE-2026-53266?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-18T14:30:50.160030Z"}, {"uuid": "1076fdc7-9d60-4da2-a62a-44f8dfbc871b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mvsgo652ym2w", "content": "\ud83d\udea8 CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0918)\n\n\u26a0\ufe0f CVE-2025-39964 - Linux Kernel Race Condition Vulnerability\n\n\u26a0\ufe0f CVE-2026-53266 - Linux Kernel Out-of-Bounds Write Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-09-18T15:00:13.182238Z"}, {"uuid": "3aeeb69f-9e8d-431c-99e6-2d4202c6d4dc", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/323eae8b-d8c8-4723-811e-da582a5127d8", "content": "", "creation_timestamp": "2026-09-18T15:00:02.012079Z"}, {"uuid": "e037ba3f-c01b-43ee-8eb7-ddaa922997ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117292823592128030", "content": "New.\nCISA Adds Two Known Exploited Vulnerabilities to Catalog.\nCVE-2025-39964 Linux Kernel Race Condition Vulnerability https://www.cve.org/CVERecord?id=CVE-2025-39964\nCVE-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-53266 #CISA #Linux #infosec #vulnerability", "creation_timestamp": "2026-09-18T15:47:34.387122Z"}, {"uuid": "e2c7a12c-084c-46da-a5c8-03957b3ccfe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvskcqrfkd2r", "content": "~Cisa~\nCISA reports active exploitation and urges rapid remediation.\n-\nIOCs: CVE-2025-39964, CVE-2026-53266\n-\n#CVE-2025-39964 #CVE-2026-53266 #ThreatIntel", "creation_timestamp": "2026-09-18T16:05:25.491737Z"}, {"uuid": "00aa6293-e13d-4d54-99b4-6dcb088cd8d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/09/18/cisa-adds-two-known-exploited-vulnerabilities-catalog", "content": "", "creation_timestamp": "2026-09-18T16:15:05.300025Z"}, {"uuid": "0a12af31-395a-49a7-bf3e-b3700c370659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mvsnut7dck2t", "content": "\u3010\u7dca\u6025\u3011Linux\u30ab\u30fc\u30cd\u30eb\u306b\u60aa\u7528\u78ba\u8a8d\u6e08\u307f\u306e\u8106\u5f31\u60272\u4ef6\uff08CVE-2025-39964 / CVE-2026-53266\uff09\n\nCISA\u304c9/18\u306bKEV\u8ffd\u52a0\u3001\u671f\u9650\u306f9/21\u3002\n\u5bfe\u51e6: \u30c7\u30a3\u30b9\u30c8\u30ea\u306e\u30c8\u30e9\u30c3\u30ab\u30fc\u3067\u81ea\u5206\u306e\u7248\u304c\u4fee\u6b63\u6e08\u307f\u304b\u3092\u78ba\u8a8d\u3057\u3001\u66f4\u65b0\u3057\u3066\u518d\u8d77\u52d5\u3002\n\nforsmile.jp/articles/lin...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-18T17:09:19.407621Z"}, {"uuid": "d21f6103-6402-48c1-9d4e-0ba89830120b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvspx72oq42w", "content": "\ud83d\uded1 CVE-2026-53266\nLinux Kernel\nCVSS 8.8 / EPSS 0% / KEV \u2705\nTL;DR: In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_\u2026\nhttps://cvesentinel.com/report/CVE-2026-53266?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-18T17:46:20.334850Z"}, {"uuid": "0eb43336-295d-493b-bf5c-7cdfc39bfc8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvsq47tfle23", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-53266: Linux Kernel Out-of-Bounds Write Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-53266", "creation_timestamp": "2026-09-18T17:49:08.698468Z"}, {"uuid": "1bd4afd8-1b10-45fa-8c0d-04c0c17bbcb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44491", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog    \n\nCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2025-39964 Linux Kernel Race Condition Vulnerability\nCVE-2026-53266 Linux Kernel Out-of-Bounds Write Vulnerability\nThese types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\u00a0\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\u00a0\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/09/18/cisa-adds-two-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-19T04:00:03.798164Z"}, {"uuid": "3f78a9cb-2a56-40d4-a195-73526f00013d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvtvp3tf732g", "content": "Daily IT Security Digest \u2014 2026-09-19\n[CTI_FYI](https://cti.fyi/groups/akira.html), [beyondmachines1](https://infosec.exchange/@beyondmachines1/117292169557140096)\n\n10. **CISA Adds Two Linux Kernel Vulnerabilities to KEV Catalog**\n    CISA added CVE-2025-39964 (race condition) and CVE-2026-53266", "creation_timestamp": "2026-09-19T05:01:50.080959Z"}, {"uuid": "aa2af06f-6298-4c32-8949-4d53d1c96b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mvu2o3m44f2g", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-53266: \u26a0\ufe0f CVE-2026-53266: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.1%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-53266-in-the-linux-kernel-the-following", "creation_timestamp": "2026-09-19T06:30:44.894242Z"}, {"uuid": "df8fcc65-ce78-4179-bf2f-38b3adf04824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvu2roi4lx2y", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 38 interactions\nCVE-2026-58704: 21 interactions\nCVE-2026-76460: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2025-39964: 12 interactions\nCVE-2026-53266: 9 interactions\nCVE-2026-58704: 7 interactions\n", "creation_timestamp": "2026-09-19T06:32:45.805485Z"}, {"uuid": "cfee0696-f298-4d8c-b912-b432f84aa848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mvu3y6iksf2s", "content": "CISA confirms three Linux kernel flaws are being actively exploited\u2014patch CVE-2025-39682, CVE-2026-53266, CVE-2025-39964 now. #SecurityNews #Linux #Kernel #CVE #CISA #PrivEsc #Vulnerabilities https://thedailytechfeed.com/cisa-adds-three-critical-linux-kernel-bugs-to-exploited-list/", "creation_timestamp": "2026-09-19T06:54:17.973422Z"}, {"uuid": "f128ad0f-3622-4a98-8bd5-95d2294650ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvu6c3nem32z", "content": "\ud83e\udd16 CISA added 3 Linux kernel flaws to KEV for active exploitation: CVE-2025-39682 (CVSS 9.8, TLS memory disclosure/DoS), CVE-2026-53266 (CVSS 8.8, ebtables OOB write), CVE-2025-39964 (CVSS 7.8, AF_ALG race). Patch now.\nhttps://thehackernews.com/2026/09/cisa-flags-three-linux-kernel.html", "creation_timestamp": "2026-09-19T07:35:37.866316Z"}, {"uuid": "8069eac7-6294-4dbb-811a-b90e73c8e1ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvukau6av42s", "content": "CVE-2026-53266 is trending. Hype score 12, currently #3 on cvemon.\n\nIn the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-53266", "creation_timestamp": "2026-09-19T11:09:41.006066Z"}, {"uuid": "bfd3cb10-8ee0-4050-9a42-e52064b9c9aa", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0cacc1cf-7d26-4edc-b7b2-9e6b38395142", "content": "", "creation_timestamp": "2026-09-19T15:00:33.612216Z"}, {"uuid": "ea424adc-9077-47db-8e26-f35dc09dde10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvv2ijldrr2x", "content": "CISA KEV update: three actively exploited Linux kernel flaws added Sept. 18 \u2014 CVE-2025-39682 (CVSS 9.8), CVE-2026-53266\u2026 https://0daynews.com/articles/2026-09-19-cisa-kev-three-linux-kernel-exploited/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2601", "creation_timestamp": "2026-09-19T16:00:20.872527Z"}, {"uuid": "d1f9bb00-52e5-48e6-9045-3680ebae8fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvvabgfdfi2u", "content": "\ud83e\udd16 CISA added 3 Linux kernel flaws to KEV: CVE-2025-39682 (9.8, TLS DoS/mem disclosure), CVE-2026-53266 (8.8, ebtables OOB write \u2192 LPE), CVE-2025-39964 (7.8, AF_ALG race). Exploited in the wild.\nhttps://thehackernews.com/2026/09/cisa-flags-three-linux-kernel.html", "creation_timestamp": "2026-09-19T17:43:43.027480Z"}, {"uuid": "5be5570a-1e49-48f4-a864-6c5a169960f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvwcrps2gj22", "content": "BREAKING: CISA added 3 Linux kernel flaws to KEV \u2014 CVE-2025-39682 (CVSS 9.8), CVE-2026-53266 (8.8), CVE-2025-39964 (7.8). Active exploitation confirmed; BOD 26-04 fix deadline Sept 21. Patch now. Src: The Hacker News / CISA", "creation_timestamp": "2026-09-20T04:01:16.806499Z"}, {"uuid": "71fd8956-ce65-4b0f-b815-4d75fce2a0e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117304485211527957", "content": "\ud83d\udcf0 CISA: Three Linux Kernel Flaws Actively Exploited in the Wild\nCISA adds 3 actively exploited Linux kernel vulnerabilities to its KEV catalog. The flaws (CVE-2025-39682, CVE-2026-53266, CVE-2025-39964) can lead to privilege escalation or DoS. Federal agencies must patch by Sept 21. #Linux #Cybersecurity #KEV\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-warns-of-three-actively-exploited-linux-kernel-vulnerabilities/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-20T17:13:17.617836Z"}, {"uuid": "99620f8c-768d-47b2-a30e-1e89e9726d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvxp2vkswe2q", "content": "CISA adds 3 actively exploited Linux kernel vulnerabilities to its KEV catalog. The flaws (CVE-2025-39682, CVE-2026-53266, CVE-2025-39964) can lead to privilege escalation or DoS. Federal agencies must patch by Sept 21. #Linux #Cybersecurity #KEV\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-20T17:13:49.508312Z"}, {"uuid": "6feb423d-07d5-42f2-b543-1a0bc1d55d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvytbzlxgi23", "content": "BREAKING: CISA KEV \u2014 3 Linux kernel CVEs (CVE-2025-39682 CVSS 9.8, CVE-2026-53266 8.8, CVE-2025-39964 7.8) actively exploited; BOD 26-04 patch deadline IS TODAY Sept 21. Red Hat confirms exploits in wild. Patch now. Src: The Hacker News / CISA", "creation_timestamp": "2026-09-21T04:02:04.914074Z"}, {"uuid": "5c0cc077-1fe8-4923-9f7a-5c38046e5df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvywnyxipv2h", "content": "Daily IT Security Digest \u2014 2026-09-21\nThree Linux Kernel Vulnerabilities to Known Exploited Catalog**\n   CISA added CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964 to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation in the wild. Federal agencies and critical", "creation_timestamp": "2026-09-21T05:04:37.858910Z"}, {"uuid": "48fed5d9-34c8-40a3-819a-353cbfe95db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvzko6y2yu2x", "content": "CISA added 3 exploited Linux kernel flaws to its KEV catalog: CVE-2025-39682, CVE-2025-39964, and CVE-2026-53266. Risks include DoS, memory disclosure, crashes, and corruption. #LinuxKernel #CISA #CVEs", "creation_timestamp": "2026-09-21T11:00:27.497950Z"}, {"uuid": "59d22976-1c07-412a-9243-bf08de24d5b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mw2esrzr3r2v", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-53266 \u2013 Linux Kernel Out-of-Bounds Write\u00a0Vulnerability\n\nAnalyze the executive impact of CVE-2026-53266 with our strategic Linux CSUITE brief, covering kernel out-of-bounds write risks, compliance assurance, and\u2026\n\nhttps://thecybermind.co/n7ln", "creation_timestamp": "2026-09-21T18:48:19.772595Z"}, {"uuid": "d12cb010-bb2e-467f-a1e4-cbbce9ce466b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw2kr74vra27", "content": "\ud83e\udd16 CISA adds 3 kernel flaws to KEV, active exploitation. Critical CVE-2025-39964 (14-yo AF_ALG race): LPE + container escape. Exploits public for CVE-2025-39682 & CVE-2026-53266.\nhttps://www.bleepingcomputer.com/news/security/cisa-alerts-of-active-exploitation-of-three-linux-kernel-flaws/", "creation_timestamp": "2026-09-21T20:34:47.806028Z"}, {"uuid": "c315853e-6124-488d-9bb9-ebe7fb01dba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mw2vlokenq2l", "content": "CISA has added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog due to active exploitation. The vulnerabilities are: CVE-2025-39682 (CVSS 9.8) allowing memory disclosure or DoS; CVE-2026-53266 (CVSS 8.", "creation_timestamp": "2026-09-21T23:48:34.636367Z"}, {"uuid": "f88e088c-828b-4e43-9f03-74c23d85f612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mw2znwkp222i", "content": "CISA\u3001Linux Kernel\u306e\u8106\u5f31\u6027\u3000CVE-2025-39964\u30fbCVE-2026-53266\u30fbCVE-2025-39682\u306e\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u3067\u306e\u60aa\u7528\u3092\u78ba\u8a8d\u3001KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9 #\u8106\u5f31\u6027", "creation_timestamp": "2026-09-22T01:01:27.396283Z"}, {"uuid": "4a131a75-753f-4aa5-aa5e-469410a768ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw3fzlhgw42g", "content": "\ud83e\udd16 CISA: 3 Linux kernel flaws actively exploited (1 critical), added to KEV. CVE-2025-39682 (kTLS, public exploits), CVE-2025-39964 (AF_ALG race), CVE-2026-53266 (ebtables OOB\u2026", "creation_timestamp": "2026-09-22T04:42:40.144015Z"}, {"uuid": "2f578bab-7b2f-42b1-8398-115313c1d01c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mw3hrhqfac2g", "content": "CVE-2026-53266 \u2014 Linux ebtables SNAT ARP-rewrite page-cache write #patchmanagement", "creation_timestamp": "2026-09-22T05:13:55.383584Z"}, {"uuid": "678c430d-3a54-472c-ac14-305c15982c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "Telegram/aXxe_qHse2s4bQy4bWXPLVKQ-AY2Vd1ncqQI_7ykH2wi-Vk", "content": "", "creation_timestamp": "2026-09-22T06:00:04.708852Z"}, {"uuid": "6294ad89-a426-4a00-8f6f-72eb0af8723a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://t.me/cyberbannews_ir/23645", "content": "\u2666\ufe0f \u0647\u0634\u062f\u0627\u0631 \u062f\u0631\u0628\u0627\u0631\u0647 \u0633\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633\n\n\ud83d\udd3a \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 (CISA) \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u0647\u06a9\u0631\u0647\u0627 \u062f\u0631 \u062d\u0627\u0644 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0647\u0633\u062a\u0646\u062f. \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0646\u06cc\u0632 \u062f\u0631 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u062f.\n\n\ud83d\udd3a \u0627\u06cc\u0646 \u0646\u0642\u0635\u200c\u0647\u0627 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc CVE-2025-39964\u060c CVE-2026-53266 \u0648 CVE-2025-39682 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f. \u06cc\u06a9\u06cc \u0627\u0632 \u0622\u0646\u200c\u0647\u0627 \u0628\u06cc\u0634 \u0627\u0632 \u06f1\u06f4 \u0633\u0627\u0644 \u062f\u0631 \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0627\u0633\u062a.\n\n\ud83d\udd3b \u0686\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc\u06cc \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u0647\u0633\u062a\u0646\u062f\u061f\n\u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u0632 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u061b \u0627\u0632 \u062c\u0645\u0644\u0647 \u0633\u0631\u0648\u0631\u0647\u0627\u060c \u0631\u0627\u06cc\u0627\u0646\u0647\u200c\u0647\u0627 \u0648 \u0628\u0631\u062e\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0634\u0628\u06a9\u0647. \u0627\u0644\u0628\u062a\u0647 \u0645\u06cc\u0632\u0627\u0646 \u062e\u0637\u0631 \u0628\u0647 \u0646\u0633\u062e\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0648 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0647\u0631 \u062f\u0633\u062a\u06af\u0627\u0647 \u0628\u0633\u062a\u06af\u06cc \u062f\u0627\u0631\u062f.\n\n\ud83d\udd3b \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0686\u0647 \u06a9\u0627\u0631\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u0646\u062f\u061f\n\u0627\u06af\u0631 \u0627\u0632 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f\u060c \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644 \u0648 \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0631\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0631\u0633\u0645\u06cc \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f. \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u0631\u0648\u0631\u0647\u0627 \u0646\u06cc\u0632 \u0628\u0627\u06cc\u062f \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0646\u0635\u0628 \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u060c \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u0627\u062d\u062a\u0645\u0627\u0644 \u0646\u0641\u0648\u0630 \u0642\u0628\u0644\u06cc \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd39 \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 CISA \u062c\u0632\u0626\u06cc\u0627\u062a\u06cc \u062f\u0631\u0628\u0627\u0631\u0647 \u0647\u06a9\u0631\u0647\u0627 \u06cc\u0627 \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646 \u0645\u0646\u062a\u0634\u0631 \u0646\u06a9\u0631\u062f\u0647\u060c \u0627\u0645\u0627 \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u0627\u06cc\u0646 \u0633\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f.\n\n#\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u0644\u06cc\u0646\u0648\u06a9\u0633\n\n\ud83d\udcc4\ud83d\udd0d @cyberbannews_ir", "creation_timestamp": "2026-09-22T07:00:03.342267Z"}, {"uuid": "8b6e4dcf-4cbd-499d-95f2-df4a9b10746c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/vtsecurity.bsky.social/post/3mw436mpyfg2y", "content": "cisa meti\u00f3 tres fallas del kernel de linux en el cat\u00e1logo kev: tls (CVE-2025-39682), af_alg (CVE-2025-39964) y ebtables (CVE-2026-53266). las tres son locales y la de ebtables puede terminar en root. a las agencias federales les dio tres d\u00edas para parchear", "creation_timestamp": "2026-09-22T11:01:18.189903Z"}, {"uuid": "1003b949-9626-4606-8ce3-fb51238d4314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mw46hsowrh2r", "content": "\ud83d\udce2 [VULN] La CISA confirme l\u2019exploitation active d\u2019une faille Linux vieille de 15 ans  CVE-2025-39964  CVE-2026-53266 CVE-2025-39682\n\nTrois vuln\u00e9rabilit\u00e9s du noyau Linux sont d\u00e9sormais exploit\u00e9es dans des attaques r\u00e9elles.\n\n#Vuln\u00e9rabilit\u00e9 #CVE #Cyberveille", "creation_timestamp": "2026-09-22T12:00:07.449419Z"}, {"uuid": "93604f81-354c-432f-9d62-835c4ae57682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "published-proof-of-concept", "source": "Telegram/aXxe_qHse2s4bQy4bWXPLVKQ-AY2Vd1ncqQI_7ykH2wi-Vk", "content": "", "creation_timestamp": "2026-09-23T00:00:09.734700Z"}, {"uuid": "65f8a9e9-741a-4698-8e62-bd4878611a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "exploited", "source": "https://t.me/cyberbannews_ir/23645", "content": "\u2666\ufe0f \u0647\u0634\u062f\u0627\u0631 \u062f\u0631\u0628\u0627\u0631\u0647 \u0633\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633\n\n\ud83d\udd3a \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 (CISA) \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u0647\u06a9\u0631\u0647\u0627 \u062f\u0631 \u062d\u0627\u0644 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0647\u0633\u062a\u0646\u062f. \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0646\u06cc\u0632 \u062f\u0631 \u0633\u0637\u062d \u0628\u062d\u0631\u0627\u0646\u06cc \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u062f.\n\n\ud83d\udd3a \u0627\u06cc\u0646 \u0646\u0642\u0635\u200c\u0647\u0627 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc CVE-2025-39964\u060c CVE-2026-53266 \u0648 CVE-2025-39682 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f. \u06cc\u06a9\u06cc \u0627\u0632 \u0622\u0646\u200c\u0647\u0627 \u0628\u06cc\u0634 \u0627\u0632 \u06f1\u06f4 \u0633\u0627\u0644 \u062f\u0631 \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0627\u0633\u062a.\n\n\ud83d\udd3b \u0686\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc\u06cc \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u0647\u0633\u062a\u0646\u062f\u061f\n\u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u0632 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u061b \u0627\u0632 \u062c\u0645\u0644\u0647 \u0633\u0631\u0648\u0631\u0647\u0627\u060c \u0631\u0627\u06cc\u0627\u0646\u0647\u200c\u0647\u0627 \u0648 \u0628\u0631\u062e\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0634\u0628\u06a9\u0647. \u0627\u0644\u0628\u062a\u0647 \u0645\u06cc\u0632\u0627\u0646 \u062e\u0637\u0631 \u0628\u0647 \u0646\u0633\u062e\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0648 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0647\u0631 \u062f\u0633\u062a\u06af\u0627\u0647 \u0628\u0633\u062a\u06af\u06cc \u062f\u0627\u0631\u062f.\n\n\ud83d\udd3b \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0686\u0647 \u06a9\u0627\u0631\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u0646\u062f\u061f\n\u0627\u06af\u0631 \u0627\u0632 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f\u060c \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644 \u0648 \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0631\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0631\u0633\u0645\u06cc \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f. \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u0631\u0648\u0631\u0647\u0627 \u0646\u06cc\u0632 \u0628\u0627\u06cc\u062f \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0646\u0635\u0628 \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u060c \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc \u0627\u062d\u062a\u0645\u0627\u0644 \u0646\u0641\u0648\u0630 \u0642\u0628\u0644\u06cc \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd39 \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 CISA \u062c\u0632\u0626\u06cc\u0627\u062a\u06cc \u062f\u0631\u0628\u0627\u0631\u0647 \u0647\u06a9\u0631\u0647\u0627 \u06cc\u0627 \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646 \u0645\u0646\u062a\u0634\u0631 \u0646\u06a9\u0631\u062f\u0647\u060c \u0627\u0645\u0627 \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u0627\u06cc\u0646 \u0633\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647\u200c\u0627\u0646\u062f.\n\n#\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u0644\u06cc\u0646\u0648\u06a9\u0633\n\n\ud83d\udcc4\ud83d\udd0d @cyberbannews_ir", "creation_timestamp": "2026-09-23T00:00:26.264039Z"}, {"uuid": "914a2ed2-e3c8-4b15-8b06-e9ec29cfbfa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53266", "type": "seen", "source": "https://t.me/HackerNewscyber/3486", "content": "\u2708 \u0647\u0634\u062f\u0627\u0631 \u0622\u0645\u0631\u06cc\u06a9\u0627 \u062f\u0631\u0628\u0627\u0631\u0647 \u0633\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0641\u0639\u0627\u0644 \u062f\u0631 \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633\n\n\ud83d\udd34  \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0648 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0622\u0645\u0631\u06cc\u06a9\u0627 \u0633\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0631\u0627 \u0628\u0647 \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0648 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f \u0648 \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u0641\u062f\u0631\u0627\u0644 \u062e\u0648\u0627\u0633\u062a \u062d\u062f\u0627\u06a9\u062b\u0631 \u062a\u0627 \u06f2\u06f1 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u06f2\u06f0\u06f2\u06f6 \u0646\u0633\u0628\u062a \u0628\u0647 \u0631\u0641\u0639 \u0622\u0646\u200c\u0647\u0627 \u0627\u0642\u062f\u0627\u0645 \u06a9\u0646\u0646\u062f.\n\n\u25c0\ufe0f  \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u0647\u0627\u06cc CVE-2025-39682\u060c CVE-2025-39964 \u0648 CVE-2026-53266 \u0628\u0647\u200c\u062a\u0631\u062a\u06cc\u0628 \u062f\u0627\u0631\u0627\u06cc \u0634\u062f\u062a \u06f9.\u06f8\u060c \u06f7.\u06f8 \u0648 \u06f8.\u06f8 \u0647\u0633\u062a\u0646\u062f \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0647 \u0627\u0641\u0634\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062d\u0627\u0641\u0638\u0647\u060c \u0627\u0632\u06a9\u0627\u0631\u0627\u0641\u062a\u0627\u062f\u0646 \u0633\u0627\u0645\u0627\u0646\u0647\u060c \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0639\u0645\u0644\u06cc\u0627\u062a \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u0648 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0634\u0631\u0627\u06cc\u0637 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0647\u0627\u062c\u0645 \u0645\u0646\u062c\u0631 \u0634\u0648\u0646\u062f.\n\n\u25c0\ufe0f \u062a\u0627\u06a9\u0646\u0648\u0646 \u062c\u0632\u0626\u06cc\u0627\u062a \u0641\u0646\u06cc \u062f\u0631\u0628\u0627\u0631\u0647 \u0646\u062d\u0648\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0648\u0627\u0642\u0639\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0633\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0646\u062a\u0634\u0631 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a\u061b \u0628\u0627\u0627\u06cc\u0646\u200c\u062d\u0627\u0644\u060c \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0646 \u0622\u0646\u200c\u0647\u0627 \u062f\u0631 \u0641\u0647\u0631\u0633\u062a \u062a\u0647\u062f\u06cc\u062f\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647\u060c \u0636\u0631\u0648\u0631\u062a \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0641\u0648\u0631\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0644\u06cc\u0646\u0648\u06a9\u0633\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-23T07:00:04.855587Z"}, {"uuid": "c11d61f6-2cab-4466-a436-6a46dac89051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "seen", "source": "Telegram/GyNzMOR0JQS7j4Wl_HpE3d2VydegbkfCh4ZJA60BHVg1Q4w", "content": "", "creation_timestamp": "2026-09-25T09:21:08.000000Z"}, {"uuid": "6bf25c9c-63bf-496d-a2c3-9ff54da6ab09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53264", "type": "published-proof-of-concept", "source": "Telegram/GyNzMOR0JQS7j4Wl_HpE3d2VydegbkfCh4ZJA60BHVg1Q4w", "content": "", "creation_timestamp": "2026-09-25T09:21:08.000000Z"}]}