{"vulnerability": "cve-2026-2699", "sightings": [{"uuid": "13c2244a-a47e-4aac-8039-c7fc591b40cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26996", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mfc2qdbu5k26", "content": "", "creation_timestamp": "2026-02-20T12:00:59.339704Z"}, {"uuid": "dd1bd9e7-feb0-4323-9405-72122e3f0256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26990", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfclhhlnux24", "content": "", "creation_timestamp": "2026-02-20T17:00:15.403095Z"}, {"uuid": "08b1fe45-728c-4c27-b1cd-504c148382f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26996", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfcsxm45ia2c", "content": "", "creation_timestamp": "2026-02-20T19:14:33.716557Z"}, {"uuid": "e7fa2835-f252-4aa4-a75a-0b79e74cddba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26996", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mg3bcxedsh2z", "content": "", "creation_timestamp": "2026-03-02T12:35:20.279395Z"}, {"uuid": "ef588805-7198-466f-8fa2-aa14a6ee8eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26998", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyldb6z52q", "content": "", "creation_timestamp": "2026-03-05T14:20:14.897286Z"}, {"uuid": "abe89e3b-605d-4bde-9ac1-dbbe69944aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26990", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfb26obe462c", "content": "", "creation_timestamp": "2026-02-20T02:18:27.642240Z"}, {"uuid": "21aa5fc1-e331-45b9-9572-9f9a5ae0d5bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26999", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyldb6z52q", "content": "", "creation_timestamp": "2026-03-05T14:20:14.998472Z"}, {"uuid": "967bcefd-7e48-4482-a03e-29b7a5a78e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26999", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgfu7p5ycr22", "content": "", "creation_timestamp": "2026-03-06T17:40:09.528316Z"}, {"uuid": "5fde5c34-e848-4eab-940b-d24c45d417fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-26996", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116101783951367234", "content": "", "creation_timestamp": "2026-02-20T07:30:31.978704Z"}, {"uuid": "220d0305-47c7-4428-bdbe-f1e998d8f634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26990", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mf2n7qh4sv2q", "content": "", "creation_timestamp": "2026-02-17T13:10:25.553622Z"}, {"uuid": "2957afa3-eead-4d7c-9445-f00f5cdc2665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-26996", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mfblmr6wxy2w", "content": "", "creation_timestamp": "2026-02-20T07:30:34.615819Z"}, {"uuid": "897c5ecd-e48e-497b-b352-5c3d9c1f62dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26999", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgdjbhqnnx2u", "content": "", "creation_timestamp": "2026-03-05T19:18:58.196483Z"}, {"uuid": "d8d59182-3e5b-4439-9c9c-cbe57a23311c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-26996", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "bbc88f22-2f52-4881-91de-ebd407d890bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mij36jygvj2d", "content": "", "creation_timestamp": "2026-04-02T11:13:09.979345Z"}, {"uuid": "c448661c-0173-4d49-8b46-9d465084d137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2699", "type": "seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mij3ejoqwjj2", "content": "", "creation_timestamp": "2026-04-02T11:16:34.708059Z"}, {"uuid": "405a6c51-b755-43ca-9b2b-443d5b37dd52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mij3svljrk2a", "content": "", "creation_timestamp": "2026-04-02T11:24:32.164172Z"}, {"uuid": "8187efd6-6169-4c07-94b0-19b14e049730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mij3swjv232b", "content": "", "creation_timestamp": "2026-04-02T11:24:33.079738Z"}, {"uuid": "346f4cff-860d-465c-be03-8c5e79e7929d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mij62adeh32b", "content": "", "creation_timestamp": "2026-04-02T12:04:25.718892Z"}, {"uuid": "67efc43d-5ca2-455c-9c55-d232ba4811fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "bdc2fb02-c627-4535-9027-9fe00c39b87c", "vulnerability": "CVE-2026-2699", "type": "published-proof-of-concept", "source": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "content": "", "creation_timestamp": "2026-04-02T12:19:18.528807Z"}, {"uuid": "b009fa8f-e48d-4edc-84b7-4ef094071fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "bdc2fb02-c627-4535-9027-9fe00c39b87c", "vulnerability": "CVE-2026-2699", "type": "published-proof-of-concept", "source": "https://github.com/watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-2699", "content": "", "creation_timestamp": "2026-04-02T12:42:13.709131Z"}, {"uuid": "520036e8-c78b-4702-a5c3-ce97ceb7425b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://www.acn.gov.it/portale/w/progress-disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-in-sharefile", "content": "", "creation_timestamp": "2026-04-02T09:59:15.000000Z"}, {"uuid": "e3e7bf7d-3c22-4d3a-92a8-81de88b75342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mijfahwapp2i", "content": "", "creation_timestamp": "2026-04-02T14:13:11.249001Z"}, {"uuid": "65590806-606f-447e-a7c8-6f40d853ea7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2699", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/116335601728170417", "content": "", "creation_timestamp": "2026-04-02T14:33:27.681139Z"}, {"uuid": "80023319-eebd-4538-8ed5-30a81498a1b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2699", "type": "seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3mijhctyxrq32", "content": "", "creation_timestamp": "2026-04-02T14:50:25.888571Z"}, {"uuid": "a4e54519-e839-4435-ab17-2fe710fddb7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2699", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116336249890679489", "content": "", "creation_timestamp": "2026-04-02T17:18:18.836708Z"}, {"uuid": "6ae50c9e-c881-4ed5-8015-4d2f7257c328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mijrwohifo2z", "content": "", "creation_timestamp": "2026-04-02T18:00:21.836293Z"}, {"uuid": "3df545a5-7992-4da3-8569-16e38cfa0ad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2699", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mik2cnigal2s", "content": "", "creation_timestamp": "2026-04-02T20:30:12.797991Z"}, {"uuid": "016c4911-3150-4883-98c3-c85f235b44c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghgzduc2g", "content": "", "creation_timestamp": "2026-04-03T09:40:23.473788Z"}, {"uuid": "44b0adec-74b8-4f93-bbbd-8731c43d1466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwbvs2g", "content": "", "creation_timestamp": "2026-04-03T09:40:24.656795Z"}, {"uuid": "28559b63-33f9-4d99-9273-7c097fafd18d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwduc2g", "content": "", "creation_timestamp": "2026-04-03T09:40:25.797983Z"}, {"uuid": "7264d60b-67ec-462b-b5f4-f2b982699609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3milghkwetk2g", "content": "", "creation_timestamp": "2026-04-03T09:40:26.961961Z"}, {"uuid": "469393cf-9d1e-412a-be08-ff525cd338ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116340118328175816", "content": "", "creation_timestamp": "2026-04-03T09:42:06.461979Z"}, {"uuid": "b9c0e9a3-7912-4eec-bf33-ec422f1695fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3milof3qcgn2g", "content": "", "creation_timestamp": "2026-04-03T12:02:09.476234Z"}, {"uuid": "2b244eca-9ea8-4e84-8366-5f9d5e1e8616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3min6seoyp226", "content": "", "creation_timestamp": "2026-04-04T02:28:34.687904Z"}, {"uuid": "021a8d9f-fa14-4685-a839-8ab711e2c41b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mino27cdlk2u", "content": "", "creation_timestamp": "2026-04-04T07:01:23.362046Z"}, {"uuid": "3b868228-904a-4d88-9900-526184c5e58f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miptle46go2s", "content": "", "creation_timestamp": "2026-04-05T03:45:47.536336Z"}, {"uuid": "7d61d744-4b6b-4f04-8c70-8e90ecdf0260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miqtoyoqq22z", "content": "", "creation_timestamp": "2026-04-05T13:20:29.667344Z"}, {"uuid": "544bdfd0-104d-4f8f-9fbb-0dc0290d346d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3miukae62j42f", "content": "", "creation_timestamp": "2026-04-07T00:41:53.185889Z"}, {"uuid": "a5ec1161-f4fa-4b99-8347-d00f25797677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-2699.yaml", "content": "", "creation_timestamp": "2026-04-06T05:29:47.000000Z"}, {"uuid": "4a09b07d-5727-4074-b78a-5da465a73689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mivkxkg5g22r", "content": "", "creation_timestamp": "2026-04-07T10:27:34.882143Z"}, {"uuid": "d7a30243-a522-49b3-a7e9-df7b73c1b672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2699", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116362960092149860", "content": "", "creation_timestamp": "2026-04-07T10:31:04.283798Z"}, {"uuid": "50d59980-8a68-40c3-9f47-598db911e2e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mixaoxbf5327", "content": "", "creation_timestamp": "2026-04-08T02:30:30.023822Z"}, {"uuid": "02aca3af-2b64-4a91-bf53-b507f99a4efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mizr665myz26", "content": "", "creation_timestamp": "2026-04-09T02:29:14.658006Z"}, {"uuid": "45cf36b4-e1b4-4282-8fd6-c8f6b5e06546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mj4bn3n3ux2s", "content": "", "creation_timestamp": "2026-04-10T02:29:14.776134Z"}, {"uuid": "3d5205ef-691c-4a80-be3f-616ce9b9f8fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mj4hgg75pq2o", "content": "", "creation_timestamp": "2026-04-10T04:12:53.232930Z"}, {"uuid": "73d8eaf4-379e-4ffa-9d85-be73709ff014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mjemm2zcx22w", "content": "", "creation_timestamp": "2026-04-13T10:06:49.774435Z"}, {"uuid": "ef43e54e-e5e4-4f90-9c6f-e584676dc299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjxs6eio3g2r", "content": "", "creation_timestamp": "2026-04-21T01:07:08.317021Z"}, {"uuid": "5d779edd-da7b-4d89-83fc-5ef93c7581dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://t.me/GithubRedTeam/79307", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2699\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-07 20:55:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-2699\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-07T21:00:04.000000Z"}, {"uuid": "55a82c8f-0e8b-4a63-861b-5f2670de8567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://t.me/true_secator/8063", "content": "\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Progress ShareFile, \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043a\u0440\u0430\u0436\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u0437 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0441\u0440\u0435\u0434.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438, \u043a\u0430\u043a \u044d\u0442\u043e \u0443\u0436\u0435 \u0431\u044b\u043b\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0431\u0430\u043d\u0434\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Clop, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043c\u043e\u043d\u0435\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0445 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Accellion FTA, SolarWinds Serv-U, Gladinet CentreStack, GoAnywhere MFT, MOVEit Transfer \u0438 Cleo.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-2699) \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (CVE-2026-2701) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Storage Zones Controller (SZC), \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c \u0432 \u0432\u0435\u0442\u043a\u0435 5.x Progress ShareFile.\n\nSZC \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0431\u043e\u043b\u044c\u0448\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0432\u043e\u0438\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0438\u043c \u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0438\u0445 \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 (\u043b\u0438\u0431\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e, \u043b\u0438\u0431\u043e \u0443 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430) \u0438\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Progress.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445, \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432 Progress ShareFile 5.12.4, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 10 \u043c\u0430\u0440\u0442\u0430.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 watchTowr \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 CVE-2026-2699, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 ShareFile \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 HTTP-\u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0432 \u0432\u043d\u0443\u0442\u0440\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0437\u043e\u043d\u044b \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0432\u0430\u0436\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043f\u0430\u0440\u043e\u043b\u044c \u0437\u043e\u043d\u044b \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432\u0442\u043e\u0440\u0443\u044e CVE-2026-2701 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 ASPX-\u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 HMAC-\u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u0434\u043e\u0441\u0442\u0438\u0436\u0438\u043c\u043e \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-2699 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0444\u0440\u0430\u0437\u043e\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e watchTowr, \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043e\u043a\u043e\u043b\u043e 30 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Storage Zone Controller.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, ShadowServer Foundation \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 700 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432\u00a0Progress ShareFile, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0421\u0428\u0410 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435.\n\nWatchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u0441\u0432\u043e\u0438\u0445 \u0432\u044b\u0432\u043e\u0434\u0430\u0445 \u0432 Progress \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 6 \u043f\u043e 13 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0430 \u043f\u043e\u043b\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 18 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0432 Progress ShareFile 5.12.4. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u0448\u043b\u0430 10 \u043c\u0430\u0440\u0442\u0430.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u043e\u0434\u043d\u0430\u043a\u043e \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u043e\u043f\u044b\u0442\u0430 Clop \u0438 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0432 \u043f\u0430\u0431\u043b\u0438\u043a \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 ShareFile Storage Zone Controller \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c.", "creation_timestamp": "2026-04-03T09:43:35.000000Z"}, {"uuid": "4f86f7f7-9439-4d89-b98f-d309d76ed378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "published-proof-of-concept", "source": "Telegram/d4v8vrJY5-hrjXEnfkoos_XhaR7gsc3x3sr9dmVdI_WOTno", "content": "", "creation_timestamp": "2026-04-08T03:00:06.000000Z"}, {"uuid": "259ff098-50b2-4b32-b9b8-490d95ab32c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "published-proof-of-concept", "source": "Telegram/613aY007LGHyW6_rIrja4BsrlzuBvUbPzSCrjge10VR5WoE", "content": "", "creation_timestamp": "2026-04-02T15:21:07.000000Z"}, {"uuid": "5602052a-953b-4341-8652-23a34bea93fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-03)", "content": "", "creation_timestamp": "2026-08-04T10:15:08.135103Z"}, {"uuid": "b976a1ca-d2b8-4375-9869-f75a6a41024c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3ml5gyosfg526", "content": "~Watchtowr~\nA pre-auth RCE chain in Progress ShareFile Storage Zone Controller allows full system compromise.\n-\nIOCs: CVE-2026-2699, CVE-2026-2701\n-\n#RCE #ShareFile #ThreatIntel", "creation_timestamp": "2026-05-06T00:28:15.798029Z"}, {"uuid": "16cec70d-b712-4553-94b2-5acb35de535d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26996", "type": "seen", "source": "https://gist.github.com/djlan/ef21bf2701462062118b04dbb13dc3f3", "content": "# PR \u89e3\u91ca: [SECURITY][SFI] Resolve Vulnerability in minimatch (CVE-2026-26996)\n\n\u8be5 PR \u901a\u8fc7 pnpm \u7248\u672c\u8986\u76d6\u7edf\u4e00\u66ff\u6362\u5b58\u5728\u6f0f\u6d1e\u7684\u65e7\u7248 `minimatch`\uff0c\u4ee5\u6d88\u9664\u7ec4\u4ef6\u6cbb\u7406\u544a\u8b66\uff0c\u4f46\u8986\u76d6\u89c4\u5219\u4e5f\u53ef\u80fd\u5f71\u54cd\u539f\u672c\u4f9d\u8d56\u8f83\u65b0\u4e3b\u7248\u672c\u7684\u5305\u3002\n\n**PR \u94fe\u63a5**: https://dev.azure.com/msdata/A365/_git/vscode-trident/pullrequest/2175870\n**\u4f5c\u8005**: Agency\n**\u72b6\u6001**: abandoned\n**\u5206\u652f**: `copilot/api-690bd71d-40ef9c6a` \u2192 `main`\n**\u53d8\u66f4\u7edf\u8ba1**: 3 files changed, +18/-16 lines\uff08\u539f\u59cb diff \u4ec5\u5c55\u793a 2 \u4e2a\u6587\u4ef6\uff09\n\n## \u76ee\u5f55\n- [\u53d8\u66f4\u6982\u89c8](#\u53d8\u66f4\u6982\u89c8)\n- [\u5f71\u54cd\u5206\u6790](#\u5f71\u54cd\u5206\u6790)\n\n---\n\n## \u53d8\u66f4\u6982\u89c8\n\n### 1. \u4f9d\u8d56\u5b89\u5168\u7b56\u7565\n\n**\u76ee\u7684**: \u5728\u4e0d\u9010\u4e00\u5347\u7ea7\u6240\u6709\u4e0a\u6e38\u4f9d\u8d56\u7684\u60c5\u51b5\u4e0b\uff0c\u901a\u8fc7\u5305\u7ba1\u7406\u5668\u7684\u96c6\u4e2d\u8986\u76d6\u673a\u5236\uff0c\u5c06\u4f4e\u4e8e\u5b89\u5168\u7248\u672c\u7684 `minimatch` \u7edf\u4e00\u89e3\u6790\u5230 3.1.4\uff0c\u5feb\u901f\u5173\u95ed CVE-2026-26996\u3001CVE-2026-27903 \u548c CVE-2026-27904 \u5bf9\u5e94\u7684\u7ec4\u4ef6\u6cbb\u7406\u544a\u8b66\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [package.json](https://dev.azure.com/msdata/A365/_git/vscode-trident/pullrequest/2175870?path=/package.json&_a=files) \u2014 \u5728 pnpm overrides \u4e2d\u589e\u52a0 `minimatch` \u7684\u5b89\u5168\u7248\u672c\u7ea6\u675f\u3002\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **\u96c6\u4e2d\u4fee\u590d\u6613\u53d7\u653b\u51fb\u7248\u672c**: \u65b0\u589e `minimatch@<3.1.4` \u5230 `3.1.4` \u7684\u8986\u76d6\u89c4\u5219\uff0c\u4f7f\u4f9d\u8d56\u6811\u4e2d\u547d\u4e2d\u8be5\u8303\u56f4\u7684\u65e7\u7248\u672c\u4e0d\u518d\u7ee7\u7eed\u4f7f\u7528 3.1.2\uff0c\u4ece\u6839\u6e90\u4e0a\u7edf\u4e00\u5b89\u5168\u57fa\u7ebf\uff0c\u800c\u4e0d\u662f\u4ec5\u4fee\u590d\u67d0\u4e00\u4e2a\u76f4\u63a5\u4f9d\u8d56\u3002\n2. **\u964d\u4f4e\u4e0a\u6e38\u5347\u7ea7\u6210\u672c**: \u8be5\u65b9\u6848\u65e0\u9700\u7b49\u5f85 ESLint\u3001glob\u3001secretlint \u7b49\u591a\u4e2a\u95f4\u63a5\u4f9d\u8d56\u5206\u522b\u53d1\u5e03\u5347\u7ea7\uff0c\u53ef\u66f4\u5feb\u54cd\u5e94\u5b89\u5168\u544a\u8b66\uff0c\u5e76\u4fdd\u6301\u73b0\u6709\u76f4\u63a5\u4f9d\u8d56\u7248\u672c\u57fa\u672c\u4e0d\u53d8\u3002\n3. **\u56fa\u5b9a\u4fee\u590d\u7248\u672c**: \u4f7f\u7528\u7cbe\u786e\u7248\u672c 3.1.4 \u53ef\u4fdd\u8bc1\u5b89\u88c5\u7ed3\u679c\u53ef\u590d\u73b0\uff0c\u4f46\u540e\u7eed\u5b89\u5168\u8865\u4e01\u4e0d\u4f1a\u81ea\u52a8\u8fdb\u5165\uff0c\u9700\u8981\u6301\u7eed\u7ef4\u62a4\u8986\u76d6\u89c4\u5219\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n### 2. \u4f9d\u8d56\u9501\u5b9a\u4e0e\u4f20\u9012\u4f9d\u8d56\u6536\u655b\n\n**\u76ee\u7684**: \u5c06\u58f0\u660e\u7684\u5b89\u5168\u8986\u76d6\u89c4\u5219\u843d\u5b9e\u5230\u5b9e\u9645\u5b89\u88c5\u56fe\u4e2d\uff0c\u786e\u4fdd\u672c\u5730\u3001CI \u548c\u53d1\u5e03\u73af\u5883\u5747\u89e3\u6790\u5230\u4e00\u81f4\u7684 `minimatch` \u7248\u672c\uff0c\u907f\u514d\u4ec5\u4fee\u6539\u6e05\u5355\u5374\u672a\u66f4\u65b0\u9501\u6587\u4ef6\u3002\n\n**\u6d89\u53ca\u6587\u4ef6**:\n- [pnpm-lock.yaml](https://dev.azure.com/msdata/A365/_git/vscode-trident/pullrequest/2175870?path=/pnpm-lock.yaml&_a=files) \u2014 \u66f4\u65b0 override\u3001\u5305\u5b8c\u6574\u6027\u4fe1\u606f\u53ca\u591a\u4e2a\u4f20\u9012\u4f9d\u8d56\u7684\u89e3\u6790\u7ed3\u679c\u3002\n\n**\u5173\u952e\u53d8\u66f4**:\n1. **\u66ff\u6362\u6f0f\u6d1e\u7248\u672c**: \u9501\u6587\u4ef6\u79fb\u9664 `minimatch@3.1.2` \u7684\u89e3\u6790\u4e0e\u5feb\u7167\uff0c\u6539\u4e3a 3.1.4\uff0c\u5e76\u540c\u6b65\u66f4\u65b0\u5b8c\u6574\u6027\u54c8\u5e0c\uff0c\u786e\u4fdd\u5b89\u88c5\u65f6\u83b7\u53d6\u4fee\u590d\u540e\u7684\u5305\u3002\n2. **\u7edf\u4e00\u4f20\u9012\u4f9d\u8d56**: ESLint\u3001glob\u3001dotgitignore\u3001secretlint\u3001webpack \u76f8\u5173\u5de5\u5177\u53ca\u6d4b\u8bd5\u8986\u76d6\u5de5\u5177\u7b49\u591a\u4e2a\u4f9d\u8d56\u94fe\u5747\u4ece 3.1.2 \u6536\u655b\u5230 3.1.4\uff0c\u6269\u5927\u4e86\u6f0f\u6d1e\u4fee\u590d\u7684\u5b9e\u9645\u8986\u76d6\u8303\u56f4\u3002\n3. **\u6539\u53d8\u8f83\u65b0\u7248\u672c\u89e3\u6790**: `@types/minimatch@6.0.0` \u539f\u672c\u5173\u8054\u7684 `minimatch@10.0.3` \u4e5f\u88ab\u89e3\u6790\u4e3a 3.1.4\uff1b\u8fd9\u8bf4\u660e override \u7684\u5b9e\u9645\u4f5c\u7528\u8303\u56f4\u53ef\u80fd\u6bd4\u89c4\u5219\u6587\u5b57\u8868\u8fbe\u7684\u201c\u4ec5\u66ff\u6362\u4f4e\u4e8e 3.1.4\u201d\u66f4\u5e7f\uff0c\u9700\u8981\u91cd\u70b9\u9a8c\u8bc1\u7c7b\u578b\u5305\u3001\u6784\u5efa\u548c\u6d4b\u8bd5\u5de5\u5177\u7684\u517c\u5bb9\u6027\u3002\n\n[\u2191 \u8fd4\u56de\u76ee\u5f55](#\u76ee\u5f55)\n\n---\n\n## \u5f71\u54cd\u5206\u6790\n\n- **\u5f71\u54cd\u8303\u56f4**: \u5f71\u54cd\u6574\u4e2a\u5de5\u4f5c\u533a\u7684 Node.js \u4f9d\u8d56\u89e3\u6790\uff0c\u4e3b\u8981\u6d89\u53ca\u5f00\u53d1\u3001Lint\u3001\u6784\u5efa\u3001\u6d4b\u8bd5\u3001\u6587\u6863\u68c0\u67e5\u548c\u53d1\u5e03\u8f85\u52a9\u5de5\u5177\uff1b\u672a\u770b\u5230\u4ea7\u54c1\u8fd0\u884c\u65f6\u4ee3\u7801\u6216\u4e1a\u52a1\u903b\u8f91\u7684\u76f4\u63a5\u4fee\u6539\u3002\n- **\u7528\u6237\u611f\u77e5**: \u7ec8\u7aef\u7528\u6237\u9884\u8ba1\u65e0\u76f4\u63a5\u529f\u80fd\u53d8\u5316\uff1b\u5f00\u53d1\u8005\u548c CI \u53ef\u80fd\u89c2\u5bdf\u5230\u4f9d\u8d56\u5b89\u88c5\u7ed3\u679c\u3001glob \u6a21\u5f0f\u5339\u914d\u884c\u4e3a\u6216\u5de5\u5177\u6267\u884c\u7ed3\u679c\u53d1\u751f\u53d8\u5316\u3002\u7531\u4e8e PR \u72b6\u6001\u4e3a abandoned\uff0c\u8be5\u4fee\u590d\u5f53\u524d\u4e0d\u4f1a\u8fdb\u5165 `main`\u3002\n- **\u98ce\u9669\u70b9**:\n  1. **\u8de8\u4e3b\u7248\u672c\u964d\u7ea7\u98ce\u9669**: \u9501\u6587\u4ef6\u663e\u793a `minimatch@10.0.3` \u88ab\u66ff\u6362\u4e3a 3.1.4\u3002\u4e24\u4e2a\u4e3b\u7248\u672c\u4e4b\u95f4\u7684 API\u3001\u6a21\u5757\u683c\u5f0f\u3001Node.js \u652f\u6301\u8303\u56f4\u548c\u5339\u914d\u8bed\u4e49\u53ef\u80fd\u4e0d\u540c\uff0c\u4f9d\u8d56\u65b0\u7248\u80fd\u529b\u7684\u5de5\u5177\u53ef\u80fd\u51fa\u73b0\u6784\u5efa\u5931\u8d25\u6216\u8fd0\u884c\u5f02\u5e38\u3002\n  2. **\u5168\u5c40\u8986\u76d6\u5f71\u54cd\u9762\u8f83\u5927**: override \u4f1a\u5f71\u54cd\u591a\u4e2a\u5f7c\u6b64\u72ec\u7acb\u7684\u4f20\u9012\u4f9d\u8d56\u3002\u5373\u4f7f\u5b89\u5168\u6f0f\u6d1e\u5f97\u5230\u4fee\u590d\uff0c\u4e5f\u5e94\u8fd0\u884c\u5b8c\u6574\u7684\u5b89\u88c5\u3001Lint\u3001\u6784\u5efa\u548c\u6d4b\u8bd5\u6d41\u7a0b\uff0c\u5e76\u91cd\u70b9\u68c0\u67e5 glob \u5339\u914d\u76f8\u5173\u4efb\u52a1\u3002\n  3. **\u786c\u7f16\u7801\u7248\u672c\u7ef4\u62a4\u98ce\u9669**: \u7cbe\u786e\u56fa\u5b9a\u4e3a 3.1.4 \u4e0d\u4f1a\u81ea\u52a8\u5438\u6536\u540e\u7eed\u8865\u4e01\uff1b\u672a\u6765\u82e5\u51fa\u73b0\u65b0\u7684\u6f0f\u6d1e\u6216\u517c\u5bb9\u6027\u4fee\u590d\uff0c\u9700\u8981\u518d\u6b21\u4eba\u5de5\u66f4\u65b0\u3002\n  4. **\u53d8\u66f4\u7edf\u8ba1\u4e0d\u4e00\u81f4**: PR \u5143\u6570\u636e\u62a5\u544a 3 \u4e2a\u6587\u4ef6\u53d1\u751f\u53d8\u5316\uff0c\u4f46\u63d0\u4f9b\u7684\u539f\u59cb diff \u4ec5\u5305\u542b 2 \u4e2a\u6587\u4ef6\uff0c\u7b2c\u4e09\u4e2a\u6587\u4ef6\u7684\u5185\u5bb9\u548c\u5f71\u54cd\u65e0\u6cd5\u4ece\u5f53\u524d\u6750\u6599\u786e\u8ba4\u3002\n  5. **\u5b89\u5168\u8986\u76d6\u5b8c\u6574\u6027**: PR \u6807\u9898\u4ec5\u63d0\u53ca CVE-2026-26996\uff0c\u800c\u63cf\u8ff0\u540c\u65f6\u5173\u8054\u53e6\u5916\u4e24\u4e2a CVE\uff1b\u9700\u8981\u786e\u8ba4 3.1.4 \u786e\u5b9e\u662f\u5168\u90e8\u544a\u8b66\u8ba4\u53ef\u7684\u4fee\u590d\u7248\u672c\uff0c\u907f\u514d\u544a\u8b66\u88ab\u90e8\u5206\u5173\u95ed\u6216\u7248\u672c\u9009\u62e9\u4e0d\u8db3\u3002\n  6. **\u5e9f\u5f03\u72b6\u6001**: PR \u5df2 abandoned\uff0c\u5373\u4f7f\u65b9\u6848\u6709\u6548\u4e5f\u4e0d\u4f1a\u88ab\u5408\u5e76\uff0c\u76f8\u5173\u6f0f\u6d1e\u4ecd\u9700\u7531\u540e\u7eed PR \u6216\u5176\u4ed6\u5347\u7ea7\u8def\u5f84\u5904\u7406\u3002\n", "creation_timestamp": "2026-07-31T16:29:56.451591Z"}, {"uuid": "2b6ae329-3e90-4b7e-b321-47a87b427731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-26999", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-xw98-5q62-jx94", "content": "", "creation_timestamp": "2026-03-04T13:10:46.000000Z"}, {"uuid": "a875ae27-cca1-4d55-9982-b3dccc03ad50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-26998", "type": "published-proof-of-concept", "source": "https://github.com/traefik/traefik/security/advisories/GHSA-fw45-f5q2-2p4x", "content": "", "creation_timestamp": "2026-03-04T13:09:56.000000Z"}, {"uuid": "7e992949-a750-4260-9632-260b6a4630a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-26996", "type": "published-proof-of-concept", "source": "https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26", "content": "", "creation_timestamp": "2026-02-17T04:32:34.000000Z"}, {"uuid": "22dfa893-e1dc-4061-9b0a-86f74d9a7393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-26991", "type": "published-proof-of-concept", "source": "https://github.com/librenms/librenms/security/advisories/GHSA-5pqf-54qp-32wx", "content": "", "creation_timestamp": "2026-02-17T00:35:27.000000Z"}, {"uuid": "c434416b-5ce3-43eb-bd8e-d8eac713ff39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-26992", "type": "published-proof-of-concept", "source": "https://github.com/librenms/librenms/security/advisories/GHSA-93fx-g747-695x", "content": "", "creation_timestamp": "2026-02-17T00:35:22.000000Z"}, {"uuid": "adc58cdf-86d0-46aa-ae7c-f2644b4331bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-04)", "content": "", "creation_timestamp": "2026-08-05T10:00:08.465494Z"}, {"uuid": "4bfe2db3-b270-4707-9cab-72015645d8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-04)", "content": "", "creation_timestamp": "2026-08-05T10:15:13.526237Z"}, {"uuid": "a462a783-d02e-44b4-a08f-7ab10cb6a3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26996", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mo3ry7mosb27", "content": "\ud83d\udd17 CVE : CVE-2025-62718, CVE-2026-26996, CVE-2026-27903, CVE-2026-27904, CVE-2026-40971, CVE-2026-40974, CVE-2026-8620, CVE-2026-8633, CVE-2026-8644, CVE-2026-9311, CVE-2026-9319, CVE-2026-9330", "creation_timestamp": "2026-06-12T12:55:06.163314Z"}, {"uuid": "fd2ac5b0-dd28-4864-95f7-88dd73d0f513", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/427bdb3e-2dd6-4ecd-b538-9ea4109bf423", "content": "", "creation_timestamp": "2026-07-11T11:00:38.264881Z"}, {"uuid": "40c2f19f-6cb0-4b6f-ba4f-15ff59d9bd62", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5caec942-c9d3-40aa-97c0-b4d94038af7c", "content": "", "creation_timestamp": "2026-07-12T01:01:45.284853Z"}, {"uuid": "c1f11655-99e0-4072-820b-d87c13d915e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqmcvxhwmy2r", "content": "Progress Software suspended ShareFile Storage Zone Controller accounts over a credible threat. CVE-2026-2699 (CVSS 9.8) may be involved.\n\n#ShareFile #ProgressSoftware #CVE20262699 #StorageZoneController #DataSecurity", "creation_timestamp": "2026-07-14T13:31:03.999050Z"}, {"uuid": "a4b2580f-91ec-4c85-87ce-611f9e1f15f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://t.me/DarkArmyChannel/5764", "content": "New Progress ShareFile Flaws Expose Servers to Unauthorized Remote Takeover\n\nSecurity researchers at watchTowr Labs have disclosed a critical exploit chain in the Progress ShareFile Storage Zone Controller.\n\nThe vulnerabilities, tracked as CVE-2026-2699 and CVE-2026-2701, enable unauthenticated attackers to achieve Remote Code Execution (RCE) and completely compromise vulnerable servers.\n\nWith roughly 30,000 instances exposed to the public internet, organizations are urged to patch immediately to prevent catastrophic data breaches.\n\nManaged file transfer (MFT) solutions remain a top target for advanced persistent threat (APT) groups and ransomware syndicates.\n\nFollowing historic breaches involving tools like MOVEit, Cleo Harmony, and GoAnywhere, threat actors continuously hunt for unpatched data-sharing gateways.\n\nSee more here \ud83d\udc4b", "creation_timestamp": "2026-07-17T19:00:03.145969Z"}, {"uuid": "763297cf-1a0b-47f5-85c9-0ab9b758bf9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://t.me/DarkArmyChannel/5764", "content": "New Progress ShareFile Flaws Expose Servers to Unauthorized Remote Takeover\n\nSecurity researchers at watchTowr Labs have disclosed a critical exploit chain in the Progress ShareFile Storage Zone Controller.\n\nThe vulnerabilities, tracked as CVE-2026-2699 and CVE-2026-2701, enable unauthenticated attackers to achieve Remote Code Execution (RCE) and completely compromise vulnerable servers.\n\nWith roughly 30,000 instances exposed to the public internet, organizations are urged to patch immediately to prevent catastrophic data breaches.\n\nManaged file transfer (MFT) solutions remain a top target for advanced persistent threat (APT) groups and ransomware syndicates.\n\nFollowing historic breaches involving tools like MOVEit, Cleo Harmony, and GoAnywhere, threat actors continuously hunt for unpatched data-sharing gateways.\n\nSee more here \ud83d\udc4b", "creation_timestamp": "2026-07-18T00:00:23.087259Z"}, {"uuid": "cd522f7b-2502-4ac0-b9cf-1b484b024f04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-17)", "content": "", "creation_timestamp": "2026-07-18T10:15:08.582127Z"}, {"uuid": "6f56c056-4781-4898-86e1-a0d01bec33be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://t.me/critical_bug/1691", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: Progress ShareFile Pre-Auth RCE Chain (CVE-2026-2699 & CVE-2026-2701)", "creation_timestamp": "2026-07-19T16:00:11.232933Z"}, {"uuid": "7f8674c5-eea2-491b-ba74-eda404f79b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://t.me/critical_bug/1689", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE (CVE-2026-2699 + CVE-2026-2701) \ud83d\udd34\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u0430 \u2014 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043b\u044e\u0431\u043e\u0439 \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \ud83d\ude31\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n#Progress #ShareFile #CVE #ZeroDay #RCE #critical_bug", "creation_timestamp": "2026-07-19T16:00:11.084063Z"}, {"uuid": "ed4afe91-58cf-4527-90fe-60cfa7c8fb57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://t.me/critical_bug/1690", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE\nCVE-2026-2699 + CVE-2026-2701 \ud83d\udd34\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Progress ShareFile Storage Zone Controller, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0412\u0441\u0451 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CWE-698 (Execution After Redirect) \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /ConfigService/Admin.aspx. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0433\u043e. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (CVE-2026-2699) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c, \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0435\u0442 Zone Secret \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u2192 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 RCE (CVE-2026-2701).\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u041f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u043a\u043e\u043b\u043e 30 000 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438 \u2014 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 ShareFile Storage Zone Controller \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\n\u2b50\ufe0f \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\\#Progress \\#ShareFile \\#CVE \\#ZeroDay \\#RCE \\#CyberSecurity \\#Infosec \\#critical_bug", "creation_timestamp": "2026-07-19T16:00:11.155180Z"}, {"uuid": "61abc568-7834-4327-b115-21dbce29ab39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://t.me/critical_bug/1690", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE\nCVE-2026-2699 + CVE-2026-2701 \ud83d\udd34\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Progress ShareFile Storage Zone Controller, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0412\u0441\u0451 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CWE-698 (Execution After Redirect) \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /ConfigService/Admin.aspx. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0433\u043e. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (CVE-2026-2699) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c, \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0435\u0442 Zone Secret \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u2192 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 RCE (CVE-2026-2701).\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u041f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u043a\u043e\u043b\u043e 30 000 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438 \u2014 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 ShareFile Storage Zone Controller \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\n\u2b50\ufe0f \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\\#Progress \\#ShareFile \\#CVE \\#ZeroDay \\#RCE \\#CyberSecurity \\#Infosec \\#critical_bug", "creation_timestamp": "2026-07-20T00:00:25.194788Z"}, {"uuid": "4808a019-637f-49be-9edc-bc19dc7e8a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://t.me/critical_bug/1691", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: Progress ShareFile Pre-Auth RCE Chain (CVE-2026-2699 & CVE-2026-2701)", "creation_timestamp": "2026-07-20T00:00:25.264681Z"}, {"uuid": "cc39a457-c18c-468e-b323-98b86874128e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "https://t.me/critical_bug/1689", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE (CVE-2026-2699 + CVE-2026-2701) \ud83d\udd34\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u0430 \u2014 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043b\u044e\u0431\u043e\u0439 \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \ud83d\ude31\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n#Progress #ShareFile #CVE #ZeroDay #RCE #critical_bug", "creation_timestamp": "2026-07-20T00:00:25.124736Z"}, {"uuid": "77363477-bbb6-4ee5-89f5-82585f437388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1689", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE (CVE-2026-2699 + CVE-2026-2701) \ud83d\udd34\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u0430 \u2014 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043b\u044e\u0431\u043e\u0439 \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \ud83d\ude31\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n#Progress #ShareFile #CVE #ZeroDay #RCE #critical_bug", "creation_timestamp": "2026-07-21T00:00:41.112598Z"}, {"uuid": "76b557f1-4fbd-4160-82a5-e2523fb9d721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1691", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: Progress ShareFile Pre-Auth RCE Chain (CVE-2026-2699 & CVE-2026-2701)", "creation_timestamp": "2026-07-21T00:00:40.928987Z"}, {"uuid": "f555a07d-076a-4ee3-8800-a39ccc06859a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1690", "content": "\ud83d\udd25 \u0414\u0432\u043e\u0439\u043d\u043e\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e Progress ShareFile: Pre-Auth RCE\nCVE-2026-2699 + CVE-2026-2701 \ud83d\udd34\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Progress ShareFile Storage Zone Controller, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0412\u0441\u0451 \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CWE-698 (Execution After Redirect) \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /ConfigService/Admin.aspx. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0433\u043e. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (CVE-2026-2699) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c. \u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c, \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0435\u0442 Zone Secret \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u2192 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 RCE (CVE-2026-2701).\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u041f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u043a\u043e\u043b\u043e 30 000 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0441\u0435\u0442\u0438 \u2014 \u0438\u0434\u0435\u0430\u043b\u044c\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 ShareFile Storage Zone Controller \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.12.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435.\n\n\u2b50\ufe0f \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\\#Progress \\#ShareFile \\#CVE \\#ZeroDay \\#RCE \\#CyberSecurity \\#Infosec \\#critical_bug", "creation_timestamp": "2026-07-21T00:00:41.021939Z"}, {"uuid": "5cd7cfce-c576-476c-b6b1-50fe52b466c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-23)", "content": "", "creation_timestamp": "2026-07-24T10:15:06.327610Z"}, {"uuid": "f18cd02c-9a29-4bd5-b2e7-50ee95725eb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-24)", "content": "", "creation_timestamp": "2026-07-25T10:15:15.908861Z"}, {"uuid": "110d1c79-a851-4a58-a3c6-47ea3759cd4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-25)", "content": "", "creation_timestamp": "2026-07-26T10:15:38.709382Z"}, {"uuid": "d4a3c891-e816-42ad-b24c-bd4d2b4f39e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-26)", "content": "", "creation_timestamp": "2026-07-27T10:15:08.598639Z"}, {"uuid": "d4ffbca5-253c-46ee-a0ef-fe1790b30b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-27)", "content": "", "creation_timestamp": "2026-07-28T10:00:06.881930Z"}, {"uuid": "74eb1f3d-90a4-4341-875d-510fa81475ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-27)", "content": "", "creation_timestamp": "2026-07-28T10:15:20.132959Z"}, {"uuid": "66c1cc36-7dbc-4667-8aec-1b7b3d44f3d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2699", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-28)", "content": "", "creation_timestamp": "2026-07-29T10:15:09.562383Z"}]}