{"vulnerability": "cve-2026-6197", "sightings": [{"uuid": "7b1346d7-a8dc-4ac7-acb3-90fb51d16917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6197", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjfqgs65ao2t", "content": "", "creation_timestamp": "2026-04-13T20:48:07.629228Z"}, {"uuid": "d0ade902-eaa8-4c98-b8ad-1606546742ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6197", "type": "seen", "source": "Telegram/c7uZKOPwVy2hcS0GAJgtvZD1v9y_KI-NyzhYNMP5jQugHxE", "content": "", "creation_timestamp": "2026-04-13T21:22:40.000000Z"}, {"uuid": "54d99448-ef4a-4a12-9b55-ae943af8bc47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61975", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msggsnovzz2g", "content": "CVE-2026-61975 jet-reviews (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T16:15:11.915213Z"}, {"uuid": "7c1360d5-d774-4568-95bb-2ce7904d1155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61977", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msgk5v655o2x", "content": "CVE-2026-61977 jet-search (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T17:15:10.672752Z"}, {"uuid": "56a5227d-b449-4b5b-b1b9-571fc58f0cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61976", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msgxl3gs262u", "content": "CVE-2026-61976 jet-blocks (CVSS Score 5.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-06T21:15:13.018770Z"}, {"uuid": "86bf586f-f64b-4b43-a2ab-db98a822ac38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61975", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjm5r5slr2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61975: \u0423\u0433\u0440\u043e\u0437\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445\n\n\n\nhttps://kripta.biz/posts/1591B87C-DFC4-435E-8E9B-E2636D3862E4", "creation_timestamp": "2026-07-13T11:38:29.550317Z"}, {"uuid": "641d04f2-e392-48d0-9fa5-379fad364cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61977", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjnl3rpau2y", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-61977: \u0423\u0442\u0435\u0447\u043a\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0441\u0444\u0435\u0440\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/B877FE15-C195-4DB3-95C4-4EC5491B957C", "creation_timestamp": "2026-07-13T12:03:50.562927Z"}, {"uuid": "a2358320-5bfa-4017-8348-4c0e228a5b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61976", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjnulvaea2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61976: \u0423\u0433\u0440\u043e\u0437\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b\n\n\n\nhttps://kripta.biz/posts/72184BDE-7CD1-4A4E-AB5C-DF3049014220", "creation_timestamp": "2026-07-13T12:09:09.198264Z"}, {"uuid": "b25392f6-7686-4d34-b096-680a7c100672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61976", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjswlvtwy2k", "content": "CVE-2026-61976 - WordPress JetBlocks For Elementor plugin\nCVE ID : CVE-2026-61976\n \n Published : July 13, 2026, 10:16 a.m. | 3\u00a0hours, 13\u00a0minutes ago\n \n Description : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetBlock...", "creation_timestamp": "2026-07-13T13:39:45.240834Z"}, {"uuid": "a9765e23-15a2-467c-9823-328ca6f59104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61971", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjszxizpy2q", "content": "CVE-2026-61971 - WordPress User Profile Picture plugin\nCVE ID : CVE-2026-61971\n \n Published : July 13, 2026, 10:16 a.m. | 3\u00a0hours, 13\u00a0minutes ago\n \n Description : Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile Picture metronet-profile...", "creation_timestamp": "2026-07-13T13:41:37.901490Z"}, {"uuid": "5abafbb2-30d5-4c6b-a164-703cf9efb6f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61970", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjrqelee42x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61970: SSRF \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Themeisle Auto Featured Image \u0438 \u0435\u0451 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/DCB97352-031D-4822-A23D-78EE50CDEB46", "creation_timestamp": "2026-07-13T13:18:22.481402Z"}, {"uuid": "305cd6de-c96b-40b0-8286-42889655d925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61977", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjtovidza27", "content": "CVE-2026-61977 - WordPress JetSearch plugin\nCVE ID : CVE-2026-61977\n \n Published : July 13, 2026, 10:16 a.m. | 3\u00a0hours, 13\u00a0minutes ago\n \n Description : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch jet-search a...", "creation_timestamp": "2026-07-13T13:53:20.496456Z"}, {"uuid": "11427a07-8943-406e-9917-18067c263bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61975", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjtubhnlx2z", "content": "CVE-2026-61975 - WordPress JetReviews plugin\nCVE ID : CVE-2026-61975\n \n Published : July 13, 2026, 10:16 a.m. | 3\u00a0hours, 13\u00a0minutes ago\n \n Description : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-review...", "creation_timestamp": "2026-07-13T13:56:20.842209Z"}, {"uuid": "40b8cfbe-b08b-420b-8366-034e12467ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61976", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqjzvrozu62j", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-61976](https://patchstack.com/database/Wordpress/Plugin/jet-blocks/vulnerability/wordpr...\nhttps://patchstack.com/database/Wordpress/Plugin/jet-blocks/vulnerability/wordpress-jetblocks-for-elementor-plugin-1-5-0-sensitive-data-exposure-vulnerability?_s_id=", "creation_timestamp": "2026-07-13T15:44:34.052711Z"}, {"uuid": "c4c30248-2ced-4566-8863-45b9d0216c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61976", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkeyhgf262a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61976: \u0423\u0433\u0440\u043e\u0437\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445\n\n\n\nhttps://kripta.biz/posts/B5E566B6-56F4-43A6-BBFE-EF66911AFEA8", "creation_timestamp": "2026-07-13T19:02:54.741188Z"}, {"uuid": "48ca93f8-ba86-47f7-8868-a2a6c1468eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61971", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqknduvgfx2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61971: \u041e\u0431\u0445\u043e\u0434 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043a\u043b\u044e\u0447 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Cozmoslabs User Profile\n\n\n\nhttps://kripta.biz/posts/DC26DEF2-DC73-4DE2-8A45-7E7CFE90A28A", "creation_timestamp": "2026-07-13T21:32:27.957417Z"}, {"uuid": "4341a070-78f5-470c-acc5-43e9f75ea90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61977", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mql6hf3qxu26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61977: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/9B557CBE-FB3C-4C33-850A-E2AAA87ADD9A", "creation_timestamp": "2026-07-14T02:38:39.373943Z"}, {"uuid": "08bfe390-74b6-42c1-af99-19fb437c6607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61976", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mql6t6wspq27", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 CVE-2026-61976: \u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0442 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\n\n\nhttps://kripta.biz/posts/0160F2AB-5571-4E31-8F6C-A1F609769E9B", "creation_timestamp": "2026-07-14T02:45:15.424426Z"}, {"uuid": "472c745a-cb04-4641-aaf7-6196faad3dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61971", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mql726tnwu2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-61971: \u041e\u0431\u0445\u043e\u0434 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043a\u043b\u044e\u0447 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Cozmoslabs User Profile\n\n\n\nhttps://kripta.biz/posts/4B2936EC-2034-426D-B780-838203CDF4F4", "creation_timestamp": "2026-07-14T02:49:10.158108Z"}, {"uuid": "c93e6c94-0d02-4fda-85c9-206fe34e05bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61975", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mql7xh3zy42y", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438: \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-61975 \u0438 \u0435\u0451 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/1B846D47-D2BE-4013-8C57-AB043FDA8A25", "creation_timestamp": "2026-07-14T03:05:32.808042Z"}, {"uuid": "359a8480-9113-47ef-b374-d97cf5017e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61975", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqra2txvv24", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4 \u05e9\u05dc \u05de\u05d9\u05d3\u05e2 \u05e8\u05d2\u05d9\u05e9 \u05e9\u05dc \u05de\u05e2\u05e8\u05db\u05ea \u05dc\u05d0\u05d6\u05d5\u05e8 \u05e9\u05dc\u05d9\u05d8\u05d4 \u05dc\u05d0 \u05de\u05d5\u05e8\u05e9\u05d4: CVE-2026-61975\n\n\n\nhttps://khesef.xyz/posts/DCD796F2-A2AD-4F4E-885D-8263D99DC23C", "creation_timestamp": "2026-07-16T07:57:53.281645Z"}, {"uuid": "07fcc061-66c1-4360-a133-7c985e1f4d78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61977", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrba4m4n2q", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4 \u05e9\u05dc \u05de\u05d9\u05d3\u05e2 \u05e8\u05d2\u05d9\u05e9 \u05e9\u05dc \u05de\u05e2\u05e8\u05db\u05ea \u05dc\u05d9\u05e9\u05d5\u05d9\u05d5\u05ea \u05dc\u05d0 \u05de\u05d5\u05e8\u05e9\u05d5\u05ea: CVE-2026-61977\n\n\n\nhttps://khesef.xyz/posts/62BB63AB-7193-4099-A882-90C7542C7A60", "creation_timestamp": "2026-07-16T07:58:32.517165Z"}, {"uuid": "6f53c0f8-050c-4725-839d-6d10b92fe92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61976", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrbmnnf62p", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4 \u05e9\u05dc \u05de\u05d9\u05d3\u05e2 \u05e8\u05d2\u05d9\u05e9 \u05e9\u05dc \u05de\u05e2\u05e8\u05db\u05ea \u05dc\u05d9\u05d3\u05d9 \u05d2\u05d5\u05e4\u05d9\u05dd \u05dc\u05d0 \u05de\u05d5\u05e8\u05e9\u05d9\u05dd: CVE-2026-61976\n\n\n\nhttps://khesef.xyz/posts/4A86ACCB-8404-4B7F-96E8-34FA59D36DB6", "creation_timestamp": "2026-07-16T07:58:45.932085Z"}, {"uuid": "59b372b9-45ee-46db-85be-a8c45200c9ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61976", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrrdudz42y", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4 \u05e9\u05dc \u05de\u05d9\u05d3\u05e2 \u05e8\u05d2\u05d9\u05e9 \u05e9\u05dc \u05de\u05e2\u05e8\u05db\u05ea \u05dc\u05d0\u05d6\u05d5\u05e8 \u05e9\u05dc\u05d9\u05d8\u05d4 \u05dc\u05d0 \u05de\u05d5\u05e8\u05e9\u05d4: CVE-2026-61976\n\n\n\nhttps://khesef.xyz/posts/DA7823F2-2A56-4502-B15C-4457D1EB341D", "creation_timestamp": "2026-07-16T08:07:33.145836Z"}, {"uuid": "a3c06dba-b4bc-4404-ab48-6bb2d1e81638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61971", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrxubcii2z", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05d0\u05d1\u05d8\u05d7\u05ea WordPress - CVE-2026-61971 \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d2\u05d9\u05e9\u05d4 \u05dc\u05d0 \u05de\u05d5\u05e8\u05e9\u05d4\n\n\n\nhttps://khesef.xyz/posts/B9673D0A-8D18-44D0-9651-609783720227", "creation_timestamp": "2026-07-16T08:11:11.961340Z"}, {"uuid": "98775391-5759-46b3-8f91-0fce2a5146d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61977", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsdws2ch2i", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4 \u05e9\u05dc \u05de\u05d9\u05d3\u05e2 \u05e8\u05d2\u05d9\u05e9 \u05e9\u05dc \u05de\u05e2\u05e8\u05db\u05ea \u05dc\u05d9\u05e9\u05d5\u05d9\u05d5\u05ea \u05dc\u05d0 \u05de\u05d5\u05e8\u05e9\u05d5\u05ea: CVE-2026-61977\n\n\n\nhttps://khesef.xyz/posts/C6E32E0F-FF9E-4277-BEC8-BF5815DF02DF", "creation_timestamp": "2026-07-16T08:17:57.433474Z"}, {"uuid": "f799d269-5437-4cd5-a45f-8626db7f0645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61976", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsepjgjc2z", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4 \u05e9\u05dc \u05de\u05d9\u05d3\u05e2 \u05e8\u05d2\u05d9\u05e9 \u05e9\u05dc \u05de\u05e2\u05e8\u05db\u05ea \u05dc\u05d0\u05d6\u05d5\u05e8 \u05e9\u05dc\u05d9\u05d8\u05d4 \u05dc\u05d0 \u05de\u05d5\u05e8\u05e9\u05d4: CVE-2026-61976\n\n\n\nhttps://khesef.xyz/posts/97693A37-E1F8-4FFC-9352-72D535002251", "creation_timestamp": "2026-07-16T08:18:23.157565Z"}, {"uuid": "d0f8cd83-ac29-4aef-93a7-6f297643a39f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61975", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsfe4f662t", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4 \u05e9\u05dc \u05de\u05d9\u05d3\u05e2 \u05e8\u05d2\u05d9\u05e9 \u05e9\u05dc \u05de\u05e2\u05e8\u05db\u05ea \u05dc\u05d0\u05d6\u05d5\u05e8 \u05e9\u05dc\u05d9\u05d8\u05d4 \u05dc\u05d0 \u05de\u05d5\u05e8\u05e9\u05d4: CVE-2026-61975\n\n\n\nhttps://khesef.xyz/posts/B17E4444-0919-4EA4-AEA7-5899AEB963F5", "creation_timestamp": "2026-07-16T08:18:44.741338Z"}, {"uuid": "b9bbf016-b295-4022-a118-eaeabf729cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61971", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsf7tght24", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05e7\u05e9\u05d4 \u05d1\u05d0\u05d1\u05d8\u05d7\u05ea WordPress - CVE-2026-61971 \u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d2\u05d9\u05e9\u05d4 \u05dc\u05d0 \u05de\u05d5\u05e8\u05e9\u05d4\n\n\n\nhttps://khesef.xyz/posts/25A03B04-8EC6-4987-8554-E8C1B7FF4A18", "creation_timestamp": "2026-07-16T08:18:40.153831Z"}, {"uuid": "eba26b50-5c49-4971-ba97-1e1bb9a140b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mtwcwkfgbo2n", "content": "Hackers are exploiting two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress, tracked as CVE-2026-61979 and CVE-2026-15981. These flaws allow attackers to forge SAML responses and gain admin access.", "creation_timestamp": "2026-08-25T17:13:35.324112Z"}, {"uuid": "9ba43464-c6a9-49bd-927c-be2b892ceb0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mtyw6swvkg2q", "content": "miniOrange SAML 2.0 SSO for WordPress: two auth bypass flaws (CVE-2026-61979, CVE-2026-15981) actively exploited for admin takeover. patch now. #infosec https://0daynews.com/articles/2026-08-25-miniorange-saml-wordpress-auth-bypass-exploited", "creation_timestamp": "2026-08-26T18:03:32.998537Z"}, {"uuid": "29cd86bb-87a1-48a2-bf3c-2c1669804409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mtwqdmczlw2z", "content": "miniOrange SAML 2.0 SSO for WordPress: two auth bypass flaws (CVE-2026-61979, CVE-2026-15981) actively exploited for admin takeover. patch now. #infosec https://0daynews.com/articles/2026-08-25-miniorange-saml-wordpress-auth-bypass-exploited", "creation_timestamp": "2026-08-25T21:13:32.288269Z"}, {"uuid": "e51e11f5-d845-481e-aa50-4da07b3b4bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtz5arkpmh2r", "content": "CVE-2026-61979 is trending. Hype score 4, currently #6 on cvemon.\n\nUnauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-61979", "creation_timestamp": "2026-08-26T20:09:57.304404Z"}, {"uuid": "96a4847f-90e2-456b-a1e0-aadd964b5b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "exploited", "source": "https://t.me/true_secator/8541", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 miniOrange SAML 2.0 Single Sign On \u0434\u043b\u044f WordPress, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0438 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u0434 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041f\u043b\u0430\u0433\u0438\u043d miniOrange SAML SSO \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0441\u0430\u0439\u0442 WordPress \u0432 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0441\u043b\u0443\u0433 SAML, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Microsoft Entra ID, Okta, Google Workspace \u0438\u043b\u0438 OneLogin, \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 WordPress.\n\n\u0421\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Xecurify, miniOrange \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u043e \u0438\u0437 \u0441\u0435\u043c\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432, \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043a\u0430\u0447\u0430\u043d\u0430 10 000 \u0440\u0430\u0437, \u0430\u00a0\u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0448\u0435\u0441\u0442\u044c \u0438\u043c\u0435\u044e\u0442\u00a030 000 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0414\u0432\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-61979 \u0438 CVE-2026-15981 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043b\u0430\u0433\u0438\u043d miniOrange SAML SSO \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438\u0437 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-61979 \u0434\u043b\u044f \u0432\u044b\u0431\u043e\u0440\u0430 HMAC-SHA1.\n\n\u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u043b\u0430\u0433\u0438\u043d \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 RSA \u043e\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (IdP) \u043a\u0430\u043a \u043e\u0431\u0449\u0438\u0439 \u0441\u0435\u043a\u0440\u0435\u0442. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u0430\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u044c, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043b\u0430\u0433\u0438\u043d \u043f\u0440\u0438\u043c\u0435\u0442 \u0437\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u0443\u044e.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-15981 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u043b\u0430\u0433\u0438\u043d \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 OpenSSL (-1) \u043a\u0430\u043a \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0434\u043f\u0438\u0441\u044f\u043c \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Patchstack, \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0438\u044e\u043b\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u043a\u0430\u0441\u0430\u043b\u043e\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0448\u0435\u0441\u0442\u044c \u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u0445\u043e\u0442\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0438 \u0434\u043b\u044f \u043d\u0438\u0445.\n\n\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0440\u0438\u0441\u043a\u0435 \u0432\u043e \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0441\u0430\u0439\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u043f\u043b\u0430\u0442\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u043d\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u043b\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 Patchstack, 16 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 DigitalOcean \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 WordPress, \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0443\u044e \u0438\u0437-\u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u043e\u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c cookie-\u0444\u0430\u0439\u043b \u0441\u0435\u0441\u0441\u0438\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u043b\u0430\u0433\u0438\u043d \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 16.1.9.\n\n\u0422\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044f Patchstack \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0435, \u0447\u0442\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0435\u0434\u0443\u0442\u0441\u044f \u0441 \u0448\u0435\u0441\u0442\u0438 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432 \u0415\u0432\u0440\u043e\u043f\u0435, \u0410\u0444\u0440\u0438\u043a\u0435 \u0438 \u0421\u0428\u0410.\n\n\u0412 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u044b \u0430\u0442\u0430\u043a \u043c\u043e\u0433\u0443\u0442 \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u043e\u0437\u0440\u0430\u0441\u0442\u0438.\n\nPatchstack \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u0438 WordPress \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0442\u044c\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0435\u0433\u043e \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.", "creation_timestamp": "2026-08-26T00:00:10.261244Z"}, {"uuid": "5695aa57-658e-4f88-afc3-f95a8be2ca5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "seen", "source": "https://t.me/pphm_HackerNews/2841", "content": "\ud83d\udd34 Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access\n\nBad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible for an attacker to sign in as any WordPress user, including administrators.\n\nThe vulnerabilities, as disclosed by Patchstack, are listed below -\n\nCVE-2026-61979 (CVSS score: 8.1) - An unauthenticated privilege escalation vulnerability stemming from signature algorithm confusion (Fixed in version 17.0.5 for the Standard edition)\nCVE-2026-15981 (CVSS score: 9.8) - An authentication bypass vulnerability stemming from accepting malformed signatures as valid (Fixed in version 17.0.6 for the Standard edition)\n\"This is due to the mo_saml_validate_signature() function performing a loose boolean check on the raw tri-state integer returned by PHP's openssl_verify(), causing an error return value of -1 to be evaluated as truthy and therefore treated as a successful signature verification,\" according to a description of CVE-2026-15981 on CVE.org.", "creation_timestamp": "2026-08-26T00:00:10.118597Z"}, {"uuid": "93a39ba2-e265-40d5-98a4-45c9f7c71698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "published-proof-of-concept", "source": "Telegram/ieyM1N0sJ-YJRvtm6NThl3rbho7kdxYzpYg9I12kmDSF_w", "content": "", "creation_timestamp": "2026-08-26T00:00:10.233988Z"}, {"uuid": "8359a8fd-69c5-40ac-8d7e-394b47b18826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtx242sips2n", "content": "WordPress\u5411\u3051miniOrange SAML SSO\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b92\u4ef6\u3001\u7ba1\u7406\u8005\u4e57\u3063\u53d6\u308a\u53ef\u80fd\u3000\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u3078\u306e\u8a66\u884c\u3082\u78ba\u8a8d(CVE-2026-15981,CVE-2026-61979) \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027", "creation_timestamp": "2026-08-26T00:08:18.391734Z"}, {"uuid": "e56f1be0-73fa-4318-9924-8907240ba218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "seen", "source": "https://thehackernews.com/2026/08/attackers-target-miniorange-saml-flaws.html", "content": "Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible for an attacker to sign in as any WordPress user, including administrators.\n\nThe vulnerabilities, as disclosed by Patchstack, are listed below -\n\n\n  CVE-2026-61979 (CVSS score: 8.1) - An unauthenticated privilege escalation", "creation_timestamp": "2026-08-26T01:00:34.643922Z"}, {"uuid": "d113cc87-89a4-45f5-ad98-2f6204465c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtvi6g7iy52w", "content": "\ud83e\udd16 CVE-2026-61979 + CVE-2026-15981: critical auth bypass in the miniOrange SAML SSO WordPress plugin, exploited in the wild. Forged SAML responses \u2192 admin login. PoC public.\nhttps://www.bleepingcomputer.com/news/security/hackers-target-wordpress-sites-in-miniorange-auth-bypass-attacks/", "creation_timestamp": "2026-08-25T09:14:48.162660Z"}, {"uuid": "a034137a-610f-4a25-971c-c6427718549f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-61979", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mtvjio522g2w", "content": "\ud83d\udcf0 Peretas Targetkan Situs WordPress Lewat Celah Bypass Otentikasi Plugin miniOrange SAML SSO\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/25/peretas-targetkan-wordpress-lewat-celah-miniorange-saml-sso/\n\n#bypassOtentikasi #celahKeamanan #cve-2026-15981 #cve-2026-61979 #keamana", "creation_timestamp": "2026-08-25T09:38:26.801795Z"}, {"uuid": "cf3c7ba8-2656-4987-945b-75cbc1a25199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mu4vfqfoqk2r", "content": "A WordPress SSO plugin bug patched in July is being exploited in August \u2014 6 of 7 paid editions got zero advisory. CVE-2026-61979 + CVE-2026-15981 (9.8): forge SAML, log in as admin. \n\n\ud83c\uddec\ud83c\udde7 diesec.com/2026/08/mini...\n\ud83c\udde9\ud83c\uddea diesec.com/de/2026/08/m... \n\n#WordPress #CyberSecurity #diesec #vulnerability", "creation_timestamp": "2026-08-28T08:00:12.189184Z"}, {"uuid": "f000f007-a0c7-4bc8-b969-60a9942d8b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "seen", "source": "Telegram/ieyM1N0sJ-YJRvtm6NThl3rbho7kdxYzpYg9I12kmDSF_w", "content": "", "creation_timestamp": "2026-08-25T12:00:04.087091Z"}, {"uuid": "8df4730f-1542-4f70-bd1f-ed17839b478a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "exploited", "source": "https://t.me/true_secator/8541", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 miniOrange SAML 2.0 Single Sign On \u0434\u043b\u044f WordPress, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0438 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u0434 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041f\u043b\u0430\u0433\u0438\u043d miniOrange SAML SSO \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0441\u0430\u0439\u0442 WordPress \u0432 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0441\u043b\u0443\u0433 SAML, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Microsoft Entra ID, Okta, Google Workspace \u0438\u043b\u0438 OneLogin, \u0432\u043c\u0435\u0441\u0442\u043e \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 WordPress.\n\n\u0421\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Xecurify, miniOrange \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u043e \u0438\u0437 \u0441\u0435\u043c\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432, \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043a\u0430\u0447\u0430\u043d\u0430 10 000 \u0440\u0430\u0437, \u0430\u00a0\u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0448\u0435\u0441\u0442\u044c \u0438\u043c\u0435\u044e\u0442\u00a030 000 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0414\u0432\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-61979 \u0438 CVE-2026-15981 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043b\u0430\u0433\u0438\u043d miniOrange SAML SSO \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438\u0437 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0445 SAML-\u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-61979 \u0434\u043b\u044f \u0432\u044b\u0431\u043e\u0440\u0430 HMAC-SHA1.\n\n\u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u043b\u0430\u0433\u0438\u043d \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 RSA \u043e\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (IdP) \u043a\u0430\u043a \u043e\u0431\u0449\u0438\u0439 \u0441\u0435\u043a\u0440\u0435\u0442. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u0430\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u044c, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u043b\u0430\u0433\u0438\u043d \u043f\u0440\u0438\u043c\u0435\u0442 \u0437\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u0443\u044e.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-15981 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u043b\u0430\u0433\u0438\u043d \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 OpenSSL (-1) \u043a\u0430\u043a \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0434\u043f\u0438\u0441\u044f\u043c \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Patchstack, \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0438\u044e\u043b\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u043a\u0430\u0441\u0430\u043b\u043e\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0448\u0435\u0441\u0442\u044c \u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u0445\u043e\u0442\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0438 \u0434\u043b\u044f \u043d\u0438\u0445.\n\n\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0440\u0438\u0441\u043a\u0435 \u0432\u043e \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0441\u0430\u0439\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u043f\u043b\u0430\u0442\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u043d\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u043b\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 Patchstack, 16 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 DigitalOcean \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 WordPress, \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0443\u044e \u0438\u0437-\u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u043e\u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c cookie-\u0444\u0430\u0439\u043b \u0441\u0435\u0441\u0441\u0438\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u043b\u0430\u0433\u0438\u043d \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 16.1.9.\n\n\u0422\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044f Patchstack \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0435, \u0447\u0442\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0435\u0434\u0443\u0442\u0441\u044f \u0441 \u0448\u0435\u0441\u0442\u0438 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432 \u0415\u0432\u0440\u043e\u043f\u0435, \u0410\u0444\u0440\u0438\u043a\u0435 \u0438 \u0421\u0428\u0410.\n\n\u0412 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u044b \u0430\u0442\u0430\u043a \u043c\u043e\u0433\u0443\u0442 \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u043e\u0437\u0440\u0430\u0441\u0442\u0438.\n\nPatchstack \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u0438 WordPress \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0442\u044c\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0435\u0433\u043e \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.", "creation_timestamp": "2026-08-25T13:00:04.032675Z"}, {"uuid": "edc404bb-c756-45d1-bd95-6154c4b67471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "seen", "source": "https://thehackernews.com/2026/08/attackers-target-miniorange-saml-flaws.html", "content": "Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible for an attacker to sign in as any WordPress user, including administrators.\n\nThe vulnerabilities, as disclosed by Patchstack, are listed below -\n\n\n  CVE-2026-61979 (CVSS score: 8.1) - An unauthenticated privilege escalation", "creation_timestamp": "2026-08-25T13:00:37.975576Z"}, {"uuid": "23379e8a-aadc-404b-9700-7dc6a4b8067a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "seen", "source": "https://t.me/pphm_HackerNews/2841", "content": "\ud83d\udd34 Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access\n\nBad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible for an attacker to sign in as any WordPress user, including administrators.\n\nThe vulnerabilities, as disclosed by Patchstack, are listed below -\n\nCVE-2026-61979 (CVSS score: 8.1) - An unauthenticated privilege escalation vulnerability stemming from signature algorithm confusion (Fixed in version 17.0.5 for the Standard edition)\nCVE-2026-15981 (CVSS score: 9.8) - An authentication bypass vulnerability stemming from accepting malformed signatures as valid (Fixed in version 17.0.6 for the Standard edition)\n\"This is due to the mo_saml_validate_signature() function performing a loose boolean check on the raw tri-state integer returned by PHP's openssl_verify(), causing an error return value of -1 to be evaluated as truthy and therefore treated as a successful signature verification,\" according to a description of CVE-2026-15981 on CVE.org.", "creation_timestamp": "2026-08-25T14:00:03.997840Z"}, {"uuid": "c43c23b3-59c8-40fb-a72d-1fed684d5367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-61979", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtw6mopvw62m", "content": "MiniOrange SAML 2.0 SSO\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027\uff08CVE-2026-61979, CVE-2026-15981\uff09\u304c\u3042\u308a\u3001WordPress\u30b5\u30a4\u30c8\u304c\u653b\u6483\u5bfe\u8c61\u3068\u306a\u308b\u3002", "creation_timestamp": "2026-08-25T15:56:29.370271Z"}]}