{"vulnerability": "cve-2020-26262", "sightings": [{"uuid": "87551987-c695-4b70-b80e-486c7919b74b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26262", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2519", "content": "#Red_Team_Tactics\n1. Sailing Past Security Measures In AD\nhttps://luemmelsec.github.io/Circumventing-Countermeasures-In-AD\n2. A cli for cracking, testing vulnerabilities on Json Web Token (JWT)\nhttps://github.com/mBouamama/MyJWT\n3. Bypass of Coturn's default access control protection\nhttps://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection", "creation_timestamp": "2021-01-18T11:05:06.000000Z"}, {"uuid": "007e9799-417a-44af-997c-168d61e16ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26262", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/805", "content": "Details about CVE-2020-26262, bypass of Coturn's default access control protection https://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection/", "creation_timestamp": "2026-08-03T13:19:34.993924Z"}, {"uuid": "bccafbdc-e30e-4943-9cb9-9950ab1c312c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26262", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/805", "content": "Details about CVE-2020-26262, bypass of Coturn's default access control protection https://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection/", "creation_timestamp": "2026-08-04T00:00:38.571420Z"}, {"uuid": "e54df18d-54a1-46a4-a78a-153a41a02e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26262", "type": "seen", "source": "https://t.me/reverseame/805", "content": "Details about CVE-2020-26262, bypass of Coturn's default access control protection https://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection/", "creation_timestamp": "2026-07-29T12:03:00.506625Z"}, {"uuid": "10b2e8f5-d7a6-4f81-8865-99a72a12c88e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26262", "type": "seen", "source": "https://t.me/reverseame/805", "content": "Details about CVE-2020-26262, bypass of Coturn's default access control protection https://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection/", "creation_timestamp": "2026-07-30T00:02:49.986008Z"}, {"uuid": "5a4a3c3c-0ca4-4aeb-9e79-179489a15610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26262", "type": "seen", "source": "https://t.me/cissp/2135", "content": "Android Penetration Testing: WebView Attacks\nhttps://www.hackingarticles.in/android-penetration-testing-webview-attacks\n\nUnvalidated User Input in MS SharePoint 2019\n(PoC for CVE-2020-1456)\n// Potential Damage/Attack Scenarios:\n- DoS/DDoS;\n- Tracking (GDPR);\n- Internal path disclosure;\n- Obfuscate attacks;\n- Reputation damage.\nhttps://slashcrypto.org/2021/01/15/CVE-2020-1456\n\n1. Sailing Past Security Measures In AD\nhttps://luemmelsec.github.io/Circumventing-Countermeasures-In-AD\n\n2. A cli for cracking, testing vulnerabilities on Json Web Token (JWT)\nhttps://github.com/mBouamama/MyJWT\n\n3. Bypass of Coturn's default access control protection\nhttps://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection\n\nAbusing cloud services to fly under the radar\nhttps://blog.fox-it.com/2021/01/12/abusing-cloud-services-to-fly-under-the-radar", "creation_timestamp": "2026-09-01T17:01:05.582989Z"}, {"uuid": "acdb2709-eeec-4f85-a21b-68d9cb659190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26262", "type": "seen", "source": "https://t.me/cissp/2135", "content": "Android Penetration Testing: WebView Attacks\nhttps://www.hackingarticles.in/android-penetration-testing-webview-attacks\n\nUnvalidated User Input in MS SharePoint 2019\n(PoC for CVE-2020-1456)\n// Potential Damage/Attack Scenarios:\n- DoS/DDoS;\n- Tracking (GDPR);\n- Internal path disclosure;\n- Obfuscate attacks;\n- Reputation damage.\nhttps://slashcrypto.org/2021/01/15/CVE-2020-1456\n\n1. Sailing Past Security Measures In AD\nhttps://luemmelsec.github.io/Circumventing-Countermeasures-In-AD\n\n2. A cli for cracking, testing vulnerabilities on Json Web Token (JWT)\nhttps://github.com/mBouamama/MyJWT\n\n3. Bypass of Coturn's default access control protection\nhttps://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection\n\nAbusing cloud services to fly under the radar\nhttps://blog.fox-it.com/2021/01/12/abusing-cloud-services-to-fly-under-the-radar", "creation_timestamp": "2026-09-02T01:04:55.357129Z"}, {"uuid": "79819c4b-65a7-4dd8-97dc-7a2742f35ae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26262", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2135", "content": "Android Penetration Testing: WebView Attacks\nhttps://www.hackingarticles.in/android-penetration-testing-webview-attacks\n\nUnvalidated User Input in MS SharePoint 2019\n(PoC for CVE-2020-1456)\n// Potential Damage/Attack Scenarios:\n- DoS/DDoS;\n- Tracking (GDPR);\n- Internal path disclosure;\n- Obfuscate attacks;\n- Reputation damage.\nhttps://slashcrypto.org/2021/01/15/CVE-2020-1456\n\n1. Sailing Past Security Measures In AD\nhttps://luemmelsec.github.io/Circumventing-Countermeasures-In-AD\n\n2. A cli for cracking, testing vulnerabilities on Json Web Token (JWT)\nhttps://github.com/mBouamama/MyJWT\n\n3. Bypass of Coturn's default access control protection\nhttps://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection\n\nAbusing cloud services to fly under the radar\nhttps://blog.fox-it.com/2021/01/12/abusing-cloud-services-to-fly-under-the-radar", "creation_timestamp": "2026-09-11T20:00:05.297985Z"}, {"uuid": "824902e3-a5bc-45ec-b5bd-e018d56729aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26262", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2135", "content": "Android Penetration Testing: WebView Attacks\nhttps://www.hackingarticles.in/android-penetration-testing-webview-attacks\n\nUnvalidated User Input in MS SharePoint 2019\n(PoC for CVE-2020-1456)\n// Potential Damage/Attack Scenarios:\n- DoS/DDoS;\n- Tracking (GDPR);\n- Internal path disclosure;\n- Obfuscate attacks;\n- Reputation damage.\nhttps://slashcrypto.org/2021/01/15/CVE-2020-1456\n\n1. Sailing Past Security Measures In AD\nhttps://luemmelsec.github.io/Circumventing-Countermeasures-In-AD\n\n2. A cli for cracking, testing vulnerabilities on Json Web Token (JWT)\nhttps://github.com/mBouamama/MyJWT\n\n3. Bypass of Coturn's default access control protection\nhttps://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection\n\nAbusing cloud services to fly under the radar\nhttps://blog.fox-it.com/2021/01/12/abusing-cloud-services-to-fly-under-the-radar", "creation_timestamp": "2026-09-12T00:00:29.785514Z"}]}