{"vulnerability": "cve-2026-3449", "sightings": [{"uuid": "3ceb1b29-75f8-46e8-a512-412877a89877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3449", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg5co73y2a2n", "content": "", "creation_timestamp": "2026-03-03T08:04:50.451730Z"}, {"uuid": "040414a0-a251-4cfa-a216-b8796b93c375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34490", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/b3ngk6uz6mptu", "content": "CVE-2026-34490 - XAAP Android Data Stored in Unencrypted Database\nCVE ID : CVE-2026-34490\n \n Published : July 31, 2026, 5:17 p.m. | 29\u00a0minutes ago\n \n Description : Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows a...", "creation_timestamp": "2026-07-31T18:14:22.263149Z"}, {"uuid": "d068b21b-2dd8-47df-b7ae-d271c0cc343d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34491", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117094125658809029", "content": "\ud83d\udcf0 CISA warns of XSS flaw in Johnson Controls Metasys ICS (CVE-2026-34491)\nCISA warns of a high-severity XSS flaw (CVE-2026-34491) in Johnson Controls Metasys ICS. The bug allows low-privilege users to hijack admin sessions. Affects versions 12-15. Patch now! #ICS #OTsecurity #CISA #Vulnerability\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-warns-of-xss-flaw-in-johnson-controls-metasys-building-automation-system/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-14T13:36:18.985464Z"}, {"uuid": "ff859804-8fd6-4c4e-9183-7cf46c488f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34491", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mt2boh23he2o", "content": "CISA warns of a high-severity XSS flaw (CVE-2026-34491) in Johnson Controls Metasys ICS. The bug allows low-privilege users to hijack admin sessions. Affects versions 12-15. Patch now! #ICS #OTsecurity #CISA #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-14T13:36:37.076185Z"}, {"uuid": "e2679b26-c2e6-48de-944d-0a21e8623d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34496", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-01", "content": "", "creation_timestamp": "2026-08-13T08:49:17.688623Z"}, {"uuid": "327a450f-d4dc-44dd-9c00-d03da51412ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34496", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mstgbpylkc2z", "content": "~Cisa~\nCritical RCE, SSRF, and privilege escalation vulnerabilities in Johnson Controls C-CURE 9000 and Victor enable unauthenticated adjacent-network attackers to execute arbitrary code.\n-\nIOCs: CVE-2026-21655, CVE-2026-21653, CVE-2026-34496\n-\n...", "creation_timestamp": "2026-08-11T20:10:20.668970Z"}, {"uuid": "32cd5235-54c0-4355-af64-0a65a950d4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34492", "type": "seen", "source": "https://t.me/ics_cert/1436", "content": "\ud83d\udee1\ufe0f \u0645\u062d\u0635\u0648\u0644 Airwall \u0634\u0631\u06a9\u062a \u062c\u0627\u0646\u0633\u0648\u0646 \u06a9\u0646\u062a\u0631\u0644\u0632\n\ud83c\udd94 ICSA-26-225-03\n\n\ud83c\udfed \u062a\u0648\u0644\u06cc\u062f\u06a9\u0646\u0646\u062f\u0647: \u0634\u0631\u06a9\u062a \u062c\u0627\u0646\u0633\u0648\u0646 \u06a9\u0646\u062a\u0631\u0644\u0632\n\ud83d\udce6 \u0645\u062d\u0635\u0648\u0644\u0627\u062a: Airwall\n\u26a0\ufe0f CVSS v3.1: 6.8 (\u0645\u062a\u0648\u0633\u0637)\n\ud83e\udded \u0628\u0631\u062f\u0627\u0631: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N\n\ud83e\uddf7 CVE: CVE-2026-34492, CVE-2026-64887\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0648\u0641\u0642\u06cc\u062a\u200c\u0622\u0645\u06cc\u0632 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u0631\u0627 \u0631\u0645\u0632\u06af\u0634\u0627\u06cc\u06cc \u06a9\u0646\u062f\u060c \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645\u200c\u0647\u0627\u06cc \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0631\u0627 \u062f\u0648\u0631 \u0628\u0632\u0646\u062f\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u062e\u0648\u0627\u0646\u062f\u0646 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u0622\u0648\u0631\u062f\u060c \u06cc\u0627 \u0628\u0647 \u0645\u0646\u0627\u0628\u0639 \u0645\u062d\u0627\u0641\u0638\u062a\u200c\u0634\u062f\u0647 \u0633\u06cc\u0633\u062a\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-09-19T12:00:05.700228Z"}, {"uuid": "aca5e6d9-e589-417c-9add-c044ba157447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34492", "type": "seen", "source": "https://t.me/ics_cert/1436", "content": "\ud83d\udee1\ufe0f \u0645\u062d\u0635\u0648\u0644 Airwall \u0634\u0631\u06a9\u062a \u062c\u0627\u0646\u0633\u0648\u0646 \u06a9\u0646\u062a\u0631\u0644\u0632\n\ud83c\udd94 ICSA-26-225-03\n\n\ud83c\udfed \u062a\u0648\u0644\u06cc\u062f\u06a9\u0646\u0646\u062f\u0647: \u0634\u0631\u06a9\u062a \u062c\u0627\u0646\u0633\u0648\u0646 \u06a9\u0646\u062a\u0631\u0644\u0632\n\ud83d\udce6 \u0645\u062d\u0635\u0648\u0644\u0627\u062a: Airwall\n\u26a0\ufe0f CVSS v3.1: 6.8 (\u0645\u062a\u0648\u0633\u0637)\n\ud83e\udded \u0628\u0631\u062f\u0627\u0631: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N\n\ud83e\uddf7 CVE: CVE-2026-34492, CVE-2026-64887\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0648\u0641\u0642\u06cc\u062a\u200c\u0622\u0645\u06cc\u0632 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u0631\u0627 \u0631\u0645\u0632\u06af\u0634\u0627\u06cc\u06cc \u06a9\u0646\u062f\u060c \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645\u200c\u0647\u0627\u06cc \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0631\u0627 \u062f\u0648\u0631 \u0628\u0632\u0646\u062f\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u062e\u0648\u0627\u0646\u062f\u0646 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u0622\u0648\u0631\u062f\u060c \u06cc\u0627 \u0628\u0647 \u0645\u0646\u0627\u0628\u0639 \u0645\u062d\u0627\u0641\u0638\u062a\u200c\u0634\u062f\u0647 \u0633\u06cc\u0633\u062a\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-09-20T00:00:10.013579Z"}]}