{"metadata": {"vulnerability": "CVE-2026-34197", "count": 313, "kinds": {"milestone": 40, "sighting": 214, "kev": 17, "other": 42}}, "data": [{"timestamp": "2026-03-26T14:51:21.456Z", "date_only": false, "value": "2026-03-26T14:51:21.456Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-34197", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-07T02:48:16.618Z", "date_only": false, "value": "2026-04-07T02:48:16.618323Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3miurcefjib2u", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "f714ae29-265d-4062-9e13-a725f64f82c0", "url": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3miurcefjib2u"}, {"timestamp": "2026-04-07T07:50:10.958Z", "date_only": false, "value": "2026-04-07T07:50:10.958Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-34197", "field": "containers.adp.2.datePublic"}, {"timestamp": "2026-04-07T07:50:10.958Z", "date_only": false, "value": "2026-04-07T07:50:10.958Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-34197", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-04-07T07:50:10.958Z", "date_only": false, "value": "2026-04-07T07:50:10.958Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-34197", "field": "containers.adp.2.timeline.1.time"}, {"timestamp": "2026-04-07T08:29:14.653Z", "date_only": false, "value": "2026-04-07T08:29:14.653Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-34197", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-07T09:01:09.089Z", "date_only": false, "value": "2026-04-07T09:01:09.089Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-34197", "field": "containers.adp.2.timeline.0.time"}, {"timestamp": "2026-04-07T09:16:00Z", "date_only": false, "value": "2026-04-07T09:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-34197", "record": "UBUNTU-CVE-2026-34197", "field": "published"}, {"timestamp": "2026-04-07T09:16:20Z", "date_only": false, "value": "2026-04-07T09:16:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RXPJ-7QVF-XV32", "record": "GHSA-RXPJ-7QVF-XV32", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-04-07T09:16:20.967Z", "date_only": false, "value": "2026-04-07T09:16:20.967", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-34197", "record": "FKIE_CVE-2026-34197", "field": "published"}, {"timestamp": "2026-04-07T09:31:22Z", "date_only": false, "value": "2026-04-07T09:31:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RXPJ-7QVF-XV32", "record": "GHSA-RXPJ-7QVF-XV32", "field": "published"}, {"timestamp": "2026-04-07T10:15:24.978Z", "date_only": false, "value": "2026-04-07T10:15:24.978378Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mivkbvm6jg2i", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "c63508a3-eeb1-44e9-9692-fe46f058c4d6", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mivkbvm6jg2i"}, {"timestamp": "2026-04-07T14:52:24.351Z", "date_only": false, "value": "2026-04-07T14:52:24.351649Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mivzr6lbw32r", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "c8dd157f-31f9-47d9-988b-82297b0fd8aa", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mivzr6lbw32r"}, {"timestamp": "2026-04-07T15:20:46Z", "date_only": false, "value": "2026-04-07T15:20:46.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ubthoF1g8rbiNT2f93TzwsoAmJLY2ZrVE2ygc3thq3uaBv8", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "11c18482-f54f-410a-8288-b168d5470196"}, {"timestamp": "2026-04-07T20:43:11.175Z", "date_only": false, "value": "2026-04-07T20:43:11.175599Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3miwnegg72f2b", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "f045b7c5-3bc8-488a-a4dc-e2b62c8d4767", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3miwnegg72f2b"}, {"timestamp": "2026-04-07T21:09:32.579Z", "date_only": false, "value": "2026-04-07T21:09:32.579769Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3miwotlja5u2s", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "89e3782d-612c-4d25-960d-85c47952fb70", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3miwotlja5u2s"}, {"timestamp": "2026-04-07T22:00:00Z", "date_only": false, "value": "2026-04-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0991", "record": "WID-SEC-W-2026-0991", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-04-07T22:00:00Z", "date_only": false, "value": "2026-04-07T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0991", "record": "WID-SEC-W-2026-0991", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-04-07T22:00:00Z", "date_only": false, "value": "2026-04-07T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0991", "record": "WID-SEC-W-2026-0991", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": true, "value": "2026-04-08", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-17369", "record": "CNVD-2026-17369", "field": "submitTime"}, {"timestamp": "2026-04-08T01:19:08.933Z", "date_only": false, "value": "2026-04-08T01:19:08.933542Z", "kind": "sighting", "label": "Seen", "source": "https://swecyb.com/ap/users/116080658609901341/statuses/116366248806466359", "record": "cve-2026-34197", "field": "creation_timestamp", "uuid": "7b65e1ed-29be-4062-ac0d-1f18857ebdea", "url": "https://swecyb.com/ap/users/116080658609901341/statuses/116366248806466359"}, {"timestamp": "2026-04-08T05:10:24Z", "date_only": false, "value": "2026-04-08T05:10:24.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-34197.yaml", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "1fc9642d-1574-4edb-9df5-4f1f103475e3", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-34197.yaml"}, {"timestamp": "2026-04-08T10:23:22.824Z", "date_only": false, "value": "2026-04-08T10:23:22.824986Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3miy372s5nh2f", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "9cfba56d-a023-462c-9541-96324cc10f89", "url": "https://bsky.app/profile/undercode.bsky.social/post/3miy372s5nh2f"}, {"timestamp": "2026-04-08T11:00:12Z", "date_only": false, "value": "2026-04-08T11:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/yptGG6BWRGF8C8nLXpapkKDt2gflziHugEfgDfGoIkGr4N4", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "891e6711-39bd-402b-9f97-2f510050b280"}, {"timestamp": "2026-04-08T11:02:01.098Z", "date_only": false, "value": "2026-04-08T11:02:01.098390Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116368744139205098", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "632cdb1b-7881-45ff-9a1c-f38f964896b9", "url": "https://infosec.exchange/users/dragonjar/statuses/116368744139205098"}, {"timestamp": "2026-04-08T12:19:17Z", "date_only": false, "value": "2026-04-08T12:19:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/apache-activemq-security-advisory-av26-330", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "7f344abe-3da7-40b3-b58e-3490bc71033f", "url": "https://cyber.gc.ca/en/alerts-advisories/apache-activemq-security-advisory-av26-330"}, {"timestamp": "2026-04-08T15:39:00.575Z", "date_only": false, "value": "2026-04-08T15:39:00.575Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-34197", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-08T19:00:23.177Z", "date_only": false, "value": "2026-04-08T19:00:23.177392Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miyy3kksfs2m", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "e1bee8b9-f3fd-4857-8575-ba9332c1848d", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3miyy3kksfs2m"}, {"timestamp": "2026-04-08T19:01:15.318Z", "date_only": false, "value": "2026-04-08T19:01:15.318677Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/obivan/statuses/116370628597850274", "record": "cve-2026-34197", "field": "creation_timestamp", "uuid": "806bbef7-acd9-4d1b-b6cc-ac2fc522945c", "url": "https://infosec.exchange/users/obivan/statuses/116370628597850274"}, {"timestamp": "2026-04-08T19:01:30.497Z", "date_only": false, "value": "2026-04-08T19:01:30.497398Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3miyy5achwnh2", "record": "cve-2026-34197", "field": "creation_timestamp", "uuid": "232c83ca-50f2-46b7-938d-b8166ee9aba7", "url": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3miyy5achwnh2"}, {"timestamp": "2026-04-08T21:00:04Z", "date_only": false, "value": "2026-04-08T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/79475", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "7ba7408f-8ab6-478a-a8d9-ce0720320dad", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DEVSECURITYSPRO\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-08 20:07:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-34197 - Apache ActiveMQ RCE via Jolokia Endpoint PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/79475"}, {"timestamp": "2026-04-08T21:00:04Z", "date_only": false, "value": "2026-04-08T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/jQQxeN2mPQPtfMYo_To2hQ-_smSd26JApgUtHwY05JTWW84", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "76820aaa-5059-4707-bce2-0d7dd621a2da"}, {"timestamp": "2026-04-08T21:03:06.352Z", "date_only": false, "value": "2026-04-08T21:03:06.352744Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miz6wubr2p2d", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "8cf72ae6-a890-445b-ae57-17fe9364a758", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miz6wubr2p2d"}, {"timestamp": "2026-04-08T21:30:28.030Z", "date_only": false, "value": "2026-04-08T21:30:28.030345Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mizahvixlo2y", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "6f189e0c-cd55-4d62-be2d-5c08b06a9130", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mizahvixlo2y"}, {"timestamp": "2026-04-08T23:00:15Z", "date_only": false, "value": "2026-04-08T23:00:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/G_lDZt1AVaR75SGUo21F44mZVa217xtyO_DWnPW787yUq6A", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "b4349693-855e-46d5-aeb9-70fb8bb7f5bc"}, {"timestamp": "2026-04-09T03:00:05Z", "date_only": false, "value": "2026-04-09T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FvMidWB1RlAkOdzaN192pTFGGTmdpPivkw7a_MNWrEItiyc", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "75385d17-3c3c-4aa8-8180-ac22a9ba69b9"}, {"timestamp": "2026-04-09T08:36:52.749Z", "date_only": false, "value": "2026-04-09T08:36:52.749Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-ACTIVEMQ-2026-34197", "record": "BIT-ACTIVEMQ-2026-34197", "field": "published"}, {"timestamp": "2026-04-09T10:23:42.680Z", "date_only": false, "value": "2026-04-09T10:23:42.680057Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/obivan/statuses/116374255844845554", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "4dc002db-a2ca-48f0-9bd7-f68b05e56528", "url": "https://infosec.exchange/users/obivan/statuses/116374255844845554"}, {"timestamp": "2026-04-09T10:23:51.715Z", "date_only": false, "value": "2026-04-09T10:23:51.715138Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mj2loo6wm522", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "70816b05-64ba-47af-aae6-34583614f8e3", "url": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mj2loo6wm522"}, {"timestamp": "2026-04-09T11:00:10Z", "date_only": false, "value": "2026-04-09T11:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AHrniHWK2cY63D2zECoLlBw6NcBOYDEItPZcGgSioYBLUaE", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "8f56d63f-ac04-4de6-8eec-5ba4cf88e761"}, {"timestamp": "2026-04-09T11:27:44Z", "date_only": false, "value": "2026-04-09T11:27:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/apache-disponibile-poc-per-lo-sfruttamento-di-vulnerabilita-in-apache-activemq", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "195b33b6-b0c3-4cbf-815f-38396821fd44", "url": "https://www.acn.gov.it/portale/w/apache-disponibile-poc-per-lo-sfruttamento-di-vulnerabilita-in-apache-activemq"}, {"timestamp": "2026-04-09T15:28:25.654Z", "date_only": false, "value": "2026-04-09T15:28:25.654202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mj34pgs3jj2v", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "5c18c5e3-baf3-4fa3-910c-76cc3cf74620", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mj34pgs3jj2v"}, {"timestamp": "2026-04-09T17:20:06Z", "date_only": false, "value": "2026-04-09T17:20:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8085", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "3df942ed-d512-4f0e-b80b-6afb7e30ab59", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache ActiveMQ Classic, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 13 \u043b\u0435\u0442 \u0438 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418-\u043f\u043e\u043c\u043e\u0449\u043d\u0438\u043a\u0430 Claude, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b \u043f\u0443\u0442\u044c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0432 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-34197 (CVSS 8,8) \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Apache ActiveMQ/Broker \u0434\u043e 5.19.4, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 6.0.0 \u0434\u043e 6.2.3.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e ActiveMQ \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0442\u043a\u0443 \u00abArtemis\u00bb \u0441 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e, \u0432\u0435\u0440\u0441\u0438\u044f \u00abClassic\u00bb, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0430\u044f CVE-2026-34197, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0432\u0435\u0431-\u0431\u044d\u043a\u0435\u043d\u0434\u0430\u0445, \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043d\u0430 Java.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Horizon3 \u041d\u0430\u0432\u0438\u043d \u0421\u0443\u043d\u043a\u0430\u0432\u0430\u043b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u00ab\u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0441\u0442\u044b\u0445 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043e\u043a\u00bb \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Claude. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c 80% \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b Claude, \u0430 20% - \u0447\u0435\u043b\u043e\u0432\u0435\u043a.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u0421\u0443\u043d\u043a\u0430\u0432\u0430\u043b\u043b\u0438, \u0447\u0442\u043e Claude \u0443\u043a\u0430\u0437\u0430\u043b \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u043e\u0441\u043b\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 (Jolokia, JMX, \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043a\u043e\u043d\u043d\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d).\n\n\u041a\u0430\u0436\u0434\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0441\u0432\u043e\u044e \u0437\u0430\u0434\u0430\u0447\u0443, \u043d\u043e \u0432\u043c\u0435\u0441\u0442\u0435 \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c. \u0418\u043c\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c Claude \u043f\u0440\u043e\u044f\u0432\u0438\u043b \u0441\u0435\u0431\u044f \u0432\u043e \u0432\u0441\u0435\u0439 \u043a\u0440\u0430\u0441\u0435 - \u0443\u043c\u0435\u043b\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0432 \u0432\u0441\u0435 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0432\u043e\u0435\u0434\u0438\u043d\u043e.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c Apache 22 \u043c\u0430\u0440\u0442\u0430, \u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u00a0\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u0435\u0435 30 \u043c\u0430\u0440\u0442\u0430\u00a0\u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 ActiveMQ Classic 6.2.3 \u0438 5.19.4.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435\u00a0Horizon3 \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e API \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Jolokia \u0432 ActiveMQ \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0431\u0440\u043e\u043a\u0435\u0440\u0430 (addNetworkConnector), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439.\n\n\u041e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0431\u0440\u043e\u043a\u0435\u0440\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 Spring XML-\u0444\u0430\u0439\u043b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0435\u0433\u043e \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0414\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0447\u0435\u0440\u0435\u0437 Jolokia, \u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0441 6.0.0 \u043f\u043e 6.1.1 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0439 CVE-2024-32114, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a API \u0431\u0435\u0437 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0438 \u0440\u0438\u0441\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0443\u043a\u0430\u0437\u0430\u0432 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ActiveMQ CVE, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c ActiveMQ, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043e \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043a\u0430\u043a \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u0434\u0430\u0447\u0443, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 ActiveMQ \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0430 \u043c\u0435\u0442\u043e\u0434\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 ActiveMQ \u0445\u043e\u0440\u043e\u0448\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b.\n\nCVE-2026-34197 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0431\u0440\u043e\u043a\u0435\u0440\u0430 ActiveMQ.\n\n\u041e\u043d\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0438\u0441\u043a\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0431\u0440\u043e\u043a\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 VM \u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 brokerConfig=xbean:http://.\n\n\u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f. \u0415\u0441\u043b\u0438 \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0443\u0436\u0435 \u0431\u044b\u043b\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430.", "url": "https://t.me/true_secator/8085"}, {"timestamp": "2026-04-09T20:00:05Z", "date_only": false, "value": "2026-04-09T20:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/79629", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "5b228b60-76c4-4dc4-a786-be958745c61f", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KONDORDEVSECURITYCORP\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-09 19:42:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-34197 \u2014 Apache ActiveMQ RCE via Jolokia API | PoC Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/79629"}, {"timestamp": "2026-04-09T20:01:26.134Z", "date_only": false, "value": "2026-04-09T20:01:26.134120Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mj3lxneruz2m", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "537e4385-0493-4638-8223-1e98f016af3a", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mj3lxneruz2m"}, {"timestamp": "2026-04-09T22:15:27.021Z", "date_only": false, "value": "2026-04-09T22:15:27.021309Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj3thb5ifc26", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "ed6b92e3-158a-4adb-95d0-b3883cb11ccd", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj3thb5ifc26"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": true, "value": "2026-04-10", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-17369", "record": "CNVD-2026-17369", "field": "openTime"}, {"timestamp": "2026-04-10T02:00:04Z", "date_only": false, "value": "2026-04-10T02:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/79669", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "6dee0ad2-47fd-4a3d-8c6a-9f25b3000503", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hg0434hongzh0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-10 01:45:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/79669"}, {"timestamp": "2026-04-10T03:00:06Z", "date_only": false, "value": "2026-04-10T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UD4f2fAiHC8hrDsfHLnzkdfzuqQpRp_S5NbwfSwmP7L4Z6U", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "88cf9afb-e52a-4fc7-a975-99c85bc1a120"}, {"timestamp": "2026-04-10T03:00:13Z", "date_only": false, "value": "2026-04-10T03:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fUtnhOurQy6oT66Ts5dMq-O2k-_KovXZfTJ_RrnaQVRnVWc", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "68b4fa51-5a56-45a3-a911-69f542a6dbd7"}, {"timestamp": "2026-04-10T08:59:45.980Z", "date_only": false, "value": "2026-04-10T08:59:45.980432Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mj4xhf7aa22q", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "3b43a11f-fb35-4a82-9b59-d435565ed9eb", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mj4xhf7aa22q"}, {"timestamp": "2026-04-10T09:00:05Z", "date_only": false, "value": "2026-04-10T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/NQOCep9JXuunt-IAyUJYpZHdpB1OmZjsgFCnwZQxWJWW2jY", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "4331bd8a-3896-4775-bce4-cfe90821663e"}, {"timestamp": "2026-04-10T09:05:55Z", "date_only": false, "value": "2026-04-10T09:05:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/8777", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "9bab25a8-d3b8-496a-a8ac-fe4e59ad7fc9", "content": "A 13-year-old flaw in Apache ActiveMQ can lead to RCE.\n\nCVE-2026-34197 lets attackers run OS commands via the Jolokia API. Chained with CVE-2024-32114, it becomes unauthenticated RCE on some versions.\n\nPatched in 5.19.4 and 6.2.3.\n\n\ud83d\udd17 Learn more \u2192 https://thehackernews.com/2026/04/threatsday-bulletin-hybrid-p2p-botnet.html#chained-flaws-enable-stealth-rce", "url": "https://t.me/thehackernews/8777"}, {"timestamp": "2026-04-10T10:36:47Z", "date_only": false, "value": "2026-04-10T10:36:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/04/10/claude-uncovers-a-yearold-activemq.html", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "9933034c-d4d8-4934-8df3-ec04e10672cf", "url": "https://threatintel.cc/2026/04/10/claude-uncovers-a-yearold-activemq.html"}, {"timestamp": "2026-04-10T12:06:07.126Z", "date_only": false, "value": "2026-04-10T12:06:07.126217Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mj5bum7gmx22", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "2bac727d-0ede-4908-aa77-50b05bed8ea5", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mj5bum7gmx22"}, {"timestamp": "2026-04-10T12:36:41.279Z", "date_only": false, "value": "2026-04-10T12:36:41.279794Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/116380441044123386", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "cabae843-35cd-47d6-8949-1995dbe47d27", "url": "https://infosec.exchange/users/edwardk/statuses/116380441044123386"}, {"timestamp": "2026-04-10T12:37:03.198Z", "date_only": false, "value": "2026-04-10T12:37:03.198927Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mj5dlwfd5c2q", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "a2482440-926e-45d1-82cc-8d07f2eec187", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mj5dlwfd5c2q"}, {"timestamp": "2026-04-10T13:35:03Z", "date_only": false, "value": "2026-04-10T13:35:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3069", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "f49f41ad-7b14-4859-897b-4831b6f02a8d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 Jolokia \u0431\u0440\u043e\u043a\u0435\u0440\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Apache ActiveMQ \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e XML-\u0444\u0430\u0439\u043b\u0430 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e URL-\u0430\u0434\u0440\u0435\u0441\u0430\n\nBDU:2026-04928\nCVE-2026-34197\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (WAF) \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0445\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e \u00ab\u0431\u0435\u043b\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u0430\u043c\u00bb;\n- \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f admin;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt", "url": "https://t.me/bdufstecru/3069"}, {"timestamp": "2026-04-12T07:03:49.336Z", "date_only": false, "value": "2026-04-12T07:03:49.336874Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mjbrvsqpes2h", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "70f3cd1f-cfe9-4472-9930-53f4a1be1d06", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3mjbrvsqpes2h"}, {"timestamp": "2026-04-12T17:35:53.238Z", "date_only": false, "value": "2026-04-12T17:35:53.238226Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/g0rosato.bsky.social/post/3mjcva4sx3w2l", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "6c15c877-9859-4d1c-b998-1c5f9f4cf98a", "url": "https://bsky.app/profile/g0rosato.bsky.social/post/3mjcva4sx3w2l"}, {"timestamp": "2026-04-13T02:21:59Z", "date_only": false, "value": "2026-04-13T02:21:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-high-severity-vulnerability-apache-activemq-patch-immediately", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "c4bf4496-aa54-4991-9c1d-df0149738c19", "url": "https://ccb.belgium.be/advisories/warning-high-severity-vulnerability-apache-activemq-patch-immediately"}, {"timestamp": "2026-04-14T21:00:05Z", "date_only": false, "value": "2026-04-14T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/80319", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "c7b2897b-0d4a-4675-80ac-fa701bd0a0eb", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a keraattin\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-14 20:59:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-34197: Apache ActiveMQ Classic RCE via Jolokia API (CVSS 8.8). Python & Nmap NSE detection scripts. A 13-year-old vulnerability allows remote code execution through the addNetworkConnector MBean operation. Unauthenticated on versions 6.0.0 to 6.1.1. Fixed in 5.19.4 and 6.2.3.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/80319"}, {"timestamp": "2026-04-14T23:00:13Z", "date_only": false, "value": "2026-04-14T23:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8Wzt61lw_MeVylmiwywo88EC4T0HsJR8LsB9p_rph-fcq8A", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "c55a6d55-cf24-469e-8b2b-9d9eda6c83fe"}, {"timestamp": "2026-04-15T03:00:06Z", "date_only": false, "value": "2026-04-15T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0xXBXStjB2cDasBqndo5um3GC4cHR3-GcxAV3NhM3TQi8uM", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "93266cbc-fd75-42ed-8d09-45f9eb7054d4"}, {"timestamp": "2026-04-15T22:00:00Z", "date_only": false, "value": "2026-04-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0991", "record": "WID-SEC-W-2026-0991", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": false, "value": "2026-04-16T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-34197", "field": "timestamps.asserted_at", "uuid": "b05c8195-f268-47e2-922f-824f89fc55cc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": true, "value": "2026-04-16", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-34197", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": true, "value": "2026-04-16", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-34197", "field": "evidence.0.details.date_added", "uuid": "b05c8195-f268-47e2-922f-824f89fc55cc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": false, "value": "2026-04-16T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-34197", "field": "timestamps.first_seen_at", "uuid": "b05c8195-f268-47e2-922f-824f89fc55cc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": false, "value": "2026-04-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-34197", "field": "status.status_updated_at", "uuid": "b05c8195-f268-47e2-922f-824f89fc55cc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-16T17:19:57.223Z", "date_only": false, "value": "2026-04-16T17:19:57.223065Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116415528739254723", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "d8530d2b-3b6f-44e0-a01b-703895c41aa1", "url": "https://infosec.exchange/users/AAKL/statuses/116415528739254723"}, {"timestamp": "2026-04-16T17:32:10.176Z", "date_only": false, "value": "2026-04-16T17:32:10.176392Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6271140", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "eabcdfbc-8794-41eb-afa6-510a1c2e281e", "url": "https://feedsin.space/feed/CISAKevBot/items/6271140"}, {"timestamp": "2026-04-16T18:00:01Z", "date_only": false, "value": "2026-04-16T18:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-34197", "field": "timestamps.recorded_at", "uuid": "b05c8195-f268-47e2-922f-824f89fc55cc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-16T18:00:02.227Z", "date_only": false, "value": "2026-04-16T18:00:02.227302Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b05c8195-f268-47e2-922f-824f89fc55cc", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "71f331ea-ce7e-4409-b554-1a54899f2da1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b05c8195-f268-47e2-922f-824f89fc55cc"}, {"timestamp": "2026-04-16T20:32:54.492Z", "date_only": false, "value": "2026-04-16T20:32:54.492984Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/zettawire.com/post/3mjnaron7kq27", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "ffc765ff-c7db-48d3-9f9c-74daea7f1b17", "url": "https://bsky.app/profile/zettawire.com/post/3mjnaron7kq27"}, {"timestamp": "2026-04-16T21:40:47.785Z", "date_only": false, "value": "2026-04-16T21:40:47.785421Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mjnerlamon2u", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "70f468a8-4e4f-4d05-9de1-dbf3030cdf2c", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mjnerlamon2u"}, {"timestamp": "2026-04-16T21:49:16Z", "date_only": false, "value": "2026-04-16T21:49:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RXPJ-7QVF-XV32", "record": "GHSA-RXPJ-7QVF-XV32", "field": "modified"}, {"timestamp": "2026-04-16T22:00:00Z", "date_only": false, "value": "2026-04-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0991", "record": "WID-SEC-W-2026-0991", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-04-16T22:00:00Z", "date_only": false, "value": "2026-04-16T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0991", "record": "WID-SEC-W-2026-0991", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-17T01:22:00Z", "date_only": false, "value": "2026-04-17T01:22:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/04/apache-activemq-cve-2026-34197-added-to.html", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "8b9009d2-8002-4825-8bc9-e21197632e92", "url": "https://thehackernews.com/2026/04/apache-activemq-cve-2026-34197-added-to.html"}, {"timestamp": "2026-04-17T02:00:26.071Z", "date_only": false, "value": "2026-04-17T02:00:26.071049Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mjntbz7twu2v", "record": "cve-2026-34197", "field": "creation_timestamp", "uuid": "9246b18b-5f51-499f-96ed-75ac63565820", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mjntbz7twu2v"}, {"timestamp": "2026-04-17T02:38:30.046Z", "date_only": false, "value": "2026-04-17T02:38:30.046698Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mjnvg2x63y2v", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "9bdf37c4-b8ef-4c27-8fdf-8edfb0e45874", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mjnvg2x63y2v"}, {"timestamp": "2026-04-17T03:24:03Z", "date_only": false, "value": "2026-04-17T03:24:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/8820", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "c7e92f61-6748-4097-bf80-b348e9230548", "content": "\ud83d\udea8 CISA flags active exploitation of an Apache ActiveMQ flaw enabling remote code execution.\n\nAttackers abuse the Jolokia API to run OS commands. Default creds\u2014and in some versions no auth\u2014make it easier to exploit.\n\n\ud83d\udd17 Read \u2192 https://thehackernews.com/2026/04/apache-activemq-cve-2026-34197-added-to.html", "url": "https://t.me/thehackernews/8820"}, {"timestamp": "2026-04-17T03:44:39Z", "date_only": false, "value": "2026-04-17T03:44:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/248923", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "f1d7945d-1c1d-4dcf-ad8f-7752742526af", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation\nhttps://ift.tt/2kiB7eo", "url": "https://t.me/ctinow/248923"}, {"timestamp": "2026-04-17T03:55:13.496Z", "date_only": false, "value": "2026-04-17T03:55:13.496724Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-34197", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2026-04-17T03:55:13.496Z", "date_only": false, "value": "2026-04-17T03:55:13.496724Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-34197", "record": "FKIE_CVE-2026-34197", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-04-17T04:01:27.082Z", "date_only": false, "value": "2026-04-17T04:01:27.082332Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mjo22fk5qj24", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "2d8ff72d-b803-43c5-9dbc-30ae83a0517d", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mjo22fk5qj24"}, {"timestamp": "2026-04-17T04:02:29.110Z", "date_only": false, "value": "2026-04-17T04:02:29.110864Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mjo24agudx2t", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "0563a84a-a3a6-445b-a975-40167432b43c", "url": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mjo24agudx2t"}, {"timestamp": "2026-04-17T04:07:49.646Z", "date_only": false, "value": "2026-04-17T04:07:49.646921Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjo2fsopr72r", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "ea936d19-1df2-4042-a691-78a1ec51a9cb", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjo2fsopr72r"}, {"timestamp": "2026-04-17T04:38:52.391Z", "date_only": false, "value": "2026-04-17T04:38:52.391335Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mjo44x7vps3f", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "6bffec88-38d4-45f3-b4db-95496952a605", "url": "https://bsky.app/profile/shiojiri.com/post/3mjo44x7vps3f"}, {"timestamp": "2026-04-17T04:57:17.225Z", "date_only": false, "value": "2026-04-17T04:57:17.225000Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mjo56a6r6r2o", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "4f98b30d-5611-4aeb-a180-34c1c62f7b52", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mjo56a6r6r2o"}, {"timestamp": "2026-04-17T05:05:55.305Z", "date_only": false, "value": "2026-04-17T05:05:55.305399Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mjo5nawlf23f", "record": "cve-2026-34197", "field": "creation_timestamp", "uuid": "7ae31a90-fadc-4556-9443-8e854b062118", "url": "https://bsky.app/profile/shiojiri.com/post/3mjo5nawlf23f"}, {"timestamp": "2026-04-17T05:06:11.625Z", "date_only": false, "value": "2026-04-17T05:06:11.625302Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjo5o2sebay2", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "d6eb18c7-1c1a-4655-aeb1-caa97a1a24e4", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjo5o2sebay2"}, {"timestamp": "2026-04-17T05:09:59.903Z", "date_only": false, "value": "2026-04-17T05:09:59.903943Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3mjo5usi35222", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "97eebc27-6fb9-4249-b29c-d15e280d39c0", "url": "https://bsky.app/profile/reconbee.bsky.social/post/3mjo5usi35222"}, {"timestamp": "2026-04-17T05:13:25.877Z", "date_only": false, "value": "2026-04-17T05:13:25.877330Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjo62y6ke5h2", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "99101ff3-2fd3-46c4-b076-9624c53241bc", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjo62y6ke5h2"}, {"timestamp": "2026-04-17T05:22:36.879Z", "date_only": false, "value": "2026-04-17T05:22:36.879612Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mjo6ljox762h", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "7210c224-f169-4203-ba5d-97688d01afc1", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mjo6ljox762h"}, {"timestamp": "2026-04-17T07:34:11.212Z", "date_only": false, "value": "2026-04-17T07:34:11.212+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0991", "record": "WID-SEC-W-2026-0991", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-17T08:03:03Z", "date_only": false, "value": "2026-04-17T08:03:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/39689", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "756cdd3c-2524-41a5-bdf5-e6a35eb0e2e9", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation \u2013 thehackernews.com\n\nFri, 17 Apr 2026 11:22:00", "url": "https://t.me/TengkorakCyberCrewzz/39689"}, {"timestamp": "2026-04-17T08:03:03Z", "date_only": false, "value": "2026-04-17T08:03:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/9785", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "ba775794-77ed-4872-81ab-d2d1e938be42", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation \u2013 thehackernews.com\n\nFri, 17 Apr 2026 11:22:00", "url": "https://t.me/TengkorakCyberCrewzz/9785"}, {"timestamp": "2026-04-17T08:27:18Z", "date_only": false, "value": "2026-04-17T08:27:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/stone776/f6e73c25123acc0ce8b96fe52096f752", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "e6493955-833b-45df-81f5-e7239db7d94a", "url": "https://gist.github.com/stone776/f6e73c25123acc0ce8b96fe52096f752"}, {"timestamp": "2026-04-17T08:40:05.448Z", "date_only": false, "value": "2026-04-17T08:40:05.448242Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjojmkqgqlq2", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "cafb0016-596f-4a57-8de8-5114f1fa8947", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjojmkqgqlq2"}, {"timestamp": "2026-04-17T09:02:26Z", "date_only": false, "value": "2026-04-17T09:02:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/j_9mXT5eE4GHseWv3vUIM6qN7vJBZdG9bSZVjJejr3TQog", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "9b79d4f3-5e75-4508-8a36-33740b642779"}, {"timestamp": "2026-04-17T10:16:26.135Z", "date_only": false, "value": "2026-04-17T10:16:26.135064Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mjooyvrdpc2a", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "33cc8441-e294-4632-afc6-b579b692a409", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mjooyvrdpc2a"}, {"timestamp": "2026-04-17T10:30:29.027Z", "date_only": false, "value": "2026-04-17T10:30:29.027701Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116419580880658780", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "3c0f2ff3-05f7-490a-ad3c-dee221fa6a5d", "url": "https://infosec.exchange/users/offseq/statuses/116419580880658780"}, {"timestamp": "2026-04-17T10:30:30.155Z", "date_only": false, "value": "2026-04-17T10:30:30.155628Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjops37ox42o", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "839e2a4d-f684-4eda-8db9-70aefe8af4aa", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mjops37ox42o"}, {"timestamp": "2026-04-17T10:48:56.751Z", "date_only": false, "value": "2026-04-17T10:48:56.751140Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjoqsxkfhfg2", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "7e837b2b-e032-418f-8772-3230500ae48f", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjoqsxkfhfg2"}, {"timestamp": "2026-04-17T10:52:13.665Z", "date_only": false, "value": "2026-04-17T10:52:13.665044Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/technadu/statuses/116419666430889956", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "eb124d41-b4c4-4ebf-b9b5-a1e06784ade6", "url": "https://infosec.exchange/users/technadu/statuses/116419666430889956"}, {"timestamp": "2026-04-17T10:53:11.640Z", "date_only": false, "value": "2026-04-17T10:53:11.640999Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3mjor2esezs2u", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "7769915f-7f91-4728-b636-1832e550d3f8", "url": "https://bsky.app/profile/technadu.com/post/3mjor2esezs2u"}, {"timestamp": "2026-04-17T11:32:53.766Z", "date_only": false, "value": "2026-04-17T11:32:53.766549Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mjotbmgct52r", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "b0b3d570-04ef-4052-9db1-ce570bcaca85", "url": "https://bsky.app/profile/ninjaowl.ai/post/3mjotbmgct52r"}, {"timestamp": "2026-04-17T11:54:37.124Z", "date_only": false, "value": "2026-04-17T11:54:37.124148Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mjouiipvbo2q", "record": "cve-2026-34197", "field": "creation_timestamp", "uuid": "fada19bd-3b60-414a-a8e9-975f17f1f9d1", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mjouiipvbo2q"}, {"timestamp": "2026-04-17T12:42:46.650Z", "date_only": false, "value": "2026-04-17T12:42:46.650258Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/canartuc.com/post/3mjox6mfsi52o", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "fcdb7596-7ce2-4d16-8002-2957ca038d65", "url": "https://bsky.app/profile/canartuc.com/post/3mjox6mfsi52o"}, {"timestamp": "2026-04-17T13:53:11.578Z", "date_only": false, "value": "2026-04-17T13:53:11.578026Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/clankussy.abu.guru/post/3mjp34jvx5l2u", "record": "cve-2026-34197", "field": "creation_timestamp", "uuid": "637c2270-8787-40ff-af54-0e78ca9e9dd7", "url": "https://bsky.app/profile/clankussy.abu.guru/post/3mjp34jvx5l2u"}, {"timestamp": "2026-04-17T14:00:33.663Z", "date_only": false, "value": "2026-04-17T14:00:33.663211Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjp3jormoy25", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "60dbf5e6-d105-48c7-b013-e4e92567c3e7", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mjp3jormoy25"}, {"timestamp": "2026-04-17T14:00:33.889Z", "date_only": false, "value": "2026-04-17T14:00:33.889772Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116420406860273742", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "58af1331-ab99-4d9c-ad93-871c6a9d01c3", "url": "https://infosec.exchange/users/offseq/statuses/116420406860273742"}, {"timestamp": "2026-04-17T14:20:28Z", "date_only": false, "value": "2026-04-17T14:20:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/89032", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "7cf079b8-47b3-4b98-b66a-09214544cc3e", "content": "\ud83d\udd8b\ufe0f Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation \ud83d\udd8b\ufe0f\n\nA recently disclosed highseverity security flaw in Apache ActiveMQ\u00a0Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and Infrastructure Security Agency\u00a0CISA. To that end, the agency\u00a0has added the vulnerability, tracked\u00a0as CVE202634197 CVSS score 8.8, to its Known Exploited Vulnerabilities\u00a0KEV catalog, requiring Federal Civilian.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/89032"}, {"timestamp": "2026-04-17T17:33:27.376Z", "date_only": false, "value": "2026-04-17T17:33:27.376905Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mjphgbmf3s2e", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "106b81c0-c8ca-4ca6-ad37-bd2be5dc2c4f", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mjphgbmf3s2e"}, {"timestamp": "2026-04-17T17:38:08.085Z", "date_only": false, "value": "2026-04-17T17:38:08.085942Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mjphonwaci2g", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "fed0d657-4f72-4d4d-8e04-4e2d2e0b8c0b", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mjphonwaci2g"}, {"timestamp": "2026-04-17T18:30:06Z", "date_only": false, "value": "2026-04-17T18:30:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8118", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "4c7ba946-de93-413f-b68c-22971aa7a39e", "content": "\u041d\u0435\u0434\u0430\u0432\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Apache ActiveMQ \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-34197 \u0438 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 10 \u0434\u043d\u0435\u0439 \u043d\u0430\u0437\u0430\u0434, \u0441\u043a\u0440\u044b\u0432\u0430\u044f\u0441\u044c \u0432 \u043a\u043e\u0434\u0435 \u041f\u041e \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 13 \u043b\u0435\u0442. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 5.19.5 \u0438 6.2.3.\n\nApache ActiveMQ - \u044d\u0442\u043e \u0431\u0440\u043e\u043a\u0435\u0440 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043d\u0430\u0434\u0435\u0436\u043d\u0443\u044e \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u0443\u044e \u0441\u0432\u044f\u0437\u044c \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438.\u00a0\n\nCVE-2026-34197 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 API Jolokia \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\nHorizon3, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 7 \u0430\u043f\u0440\u0435\u043b\u044f, \u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-34197 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Apache ActiveMQ \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, CVE-2026-34197 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2024-32114, \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 CISA\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2026-34197\u00a0\u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u0442\u0435\u043c, \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u043d\u0435\u0434\u0435\u043b\u044e Fortinet \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "url": "https://t.me/true_secator/8118"}, {"timestamp": "2026-04-17T21:02:36.193Z", "date_only": false, "value": "2026-04-17T21:02:36.193955Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjpt4c2nmu2f", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "f14025b0-7eb9-4102-b6e4-1d650430fca3", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjpt4c2nmu2f"}, {"timestamp": "2026-04-17T23:03:24.139Z", "date_only": false, "value": "2026-04-17T23:03:24.139534Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mjpzuf67qs2d", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "cd3555ad-6873-4e02-8521-ff9ad2038240", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mjpzuf67qs2d"}, {"timestamp": "2026-04-18T02:29:07.374Z", "date_only": false, "value": "2026-04-18T02:29:07.374543Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjqfe77gah2r", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "caa598c3-13ff-4127-83a5-b9ff069358ab", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mjqfe77gah2r"}, {"timestamp": "2026-04-18T07:49:59.335Z", "date_only": false, "value": "2026-04-18T07:49:59.335594Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mjqxbxkdks2d", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "d9596af7-9ce0-42fc-ad9e-29d1a5b4585c", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mjqxbxkdks2d"}, {"timestamp": "2026-04-19T08:48:46.394Z", "date_only": false, "value": "2026-04-19T08:48:46.394786Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/canartuc.com/post/3mjtkzzkaq32g", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "1d05c38c-ad63-4d58-a679-fc9c38979e8c", "url": "https://bsky.app/profile/canartuc.com/post/3mjtkzzkaq32g"}, {"timestamp": "2026-04-19T10:53:32.415Z", "date_only": false, "value": "2026-04-19T10:53:32.415104Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjtryxpzowd2", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "26164118-246c-4c53-924c-119b1d6c2950", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjtryxpzowd2"}, {"timestamp": "2026-04-19T15:54:20.955Z", "date_only": false, "value": "2026-04-19T15:54:20.955667Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mjucswmxmc2l", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "ae224972-27be-4b5f-b012-af80cbd68bb0", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3mjucswmxmc2l"}, {"timestamp": "2026-04-19T23:29:13.457Z", "date_only": false, "value": "2026-04-19T23:29:13.457910Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mjv4aegtaa2i", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "62bb1b6b-fb83-42ba-8f07-ade08b7faaa6", "url": "https://bsky.app/profile/technoholic.bsky.social/post/3mjv4aegtaa2i"}, {"timestamp": "2026-04-20T04:00:04Z", "date_only": false, "value": "2026-04-20T04:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/81019", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "a6f938d4-0275-427e-8c85-9fc59b7fe93a", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ActiveMQ-EXPtools\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Catherines77\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-20 03:28:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u652f\u6301\u68c0\u6d4b\u548c\u5229\u7528ActiveMQ\u6f0f\u6d1e\uff0cCVE-2015-5254\uff0cCVE-2016-3088\uff0cCVE-2022-41678\uff0cCVE-2023-46604\uff0cCVE-2024-32114\uff0cCVE-2026-34197\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/81019"}, {"timestamp": "2026-04-20T05:07:17.913Z", "date_only": false, "value": "2026-04-20T05:07:17.913661Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mjvp4vumq22b", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "542ed02b-83bb-4e3a-99af-76b74b759377", "url": "https://bsky.app/profile/shortinfo.bsky.social/post/3mjvp4vumq22b"}, {"timestamp": "2026-04-20T11:09:29.528Z", "date_only": false, "value": "2026-04-20T11:09:29.528159Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mjwdel5xbs2r", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "93716949-3876-42fe-b8f6-480356682491", "url": "https://bsky.app/profile/concisecyber.bsky.social/post/3mjwdel5xbs2r"}, {"timestamp": "2026-04-20T14:24:59.924Z", "date_only": false, "value": "2026-04-20T14:24:59.924732Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5akt22l", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "c29117a2-c4ab-4751-8498-0c47be59ad7b", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5akt22l"}, {"timestamp": "2026-04-20T14:25:00.954Z", "date_only": false, "value": "2026-04-20T14:25:00.954808Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5awk22l", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "04d0ab18-a831-430e-a6e2-d0ab2456e70d", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5awk22l"}, {"timestamp": "2026-04-20T14:25:02.065Z", "date_only": false, "value": "2026-04-20T14:25:02.065608Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5axjc2l", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "d2e8dedc-6d7c-4f87-9008-f917280a99ca", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5axjc2l"}, {"timestamp": "2026-04-20T14:25:03.176Z", "date_only": false, "value": "2026-04-20T14:25:03.176103Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5ayik2l", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "36be928d-f24a-4b57-9a0f-76e3ca7d91f5", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5ayik2l"}, {"timestamp": "2026-04-20T14:25:04.183Z", "date_only": false, "value": "2026-04-20T14:25:04.183216Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5azhs2l", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "92f408c5-4228-4403-9516-35dd9cbccf7c", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5azhs2l"}, {"timestamp": "2026-04-20T14:25:05.148Z", "date_only": false, "value": "2026-04-20T14:25:05.148180Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5b3gc2l", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "a684a092-7901-44a3-8246-72c4d45edf06", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5b3gc2l"}, {"timestamp": "2026-04-20T14:25:06.169Z", "date_only": false, "value": "2026-04-20T14:25:06.169708Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5b4fk2l", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "aaf02931-8d26-4eb2-a7e6-b0398ee79e6a", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5b4fk2l"}, {"timestamp": "2026-04-20T14:25:08.348Z", "date_only": false, "value": "2026-04-20T14:25:08.348491Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5b6e22l", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "cdcce4c1-85ad-4549-ac67-70b912ff21af", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5b6e22l"}, {"timestamp": "2026-04-20T14:25:09.308Z", "date_only": false, "value": "2026-04-20T14:25:09.308339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5b6e32l", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "49c2f7a8-3bc0-4954-91b7-2a28586a43bb", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mjwoc5b6e32l"}, {"timestamp": "2026-04-20T16:37:03.858Z", "date_only": false, "value": "2026-04-20T16:37:03.858713Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mjwvocp24y2e", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "ba012159-d6b1-47dd-8ecf-c549fd9c098f", "url": "https://bsky.app/profile/ransomnews.online/post/3mjwvocp24y2e"}, {"timestamp": "2026-04-20T17:51:32.470Z", "date_only": false, "value": "2026-04-20T17:51:32.470811Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mjwzte2qts2k", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "4e5d111e-080e-4b06-b903-6e16fe10f0f1", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3mjwzte2qts2k"}, {"timestamp": "2026-04-20T17:51:33.492Z", "date_only": false, "value": "2026-04-20T17:51:33.492802Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mjwzthsczc2k", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "57e9942b-4f24-4269-b1ee-6325bdfd75aa", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3mjwzthsczc2k"}, {"timestamp": "2026-04-20T17:51:34.919Z", "date_only": false, "value": "2026-04-20T17:51:34.919664Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mjwzthsdyk2k", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "41b07c81-477b-42f1-b119-7e9141fd7230", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3mjwzthsdyk2k"}, {"timestamp": "2026-04-20T23:01:07.421Z", "date_only": false, "value": "2026-04-20T23:01:07.421642Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjxl4zcgx22s", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "6323e9f7-b9b4-4bcc-8c28-390cd291d4c4", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjxl4zcgx22s"}, {"timestamp": "2026-04-20T23:08:18.611Z", "date_only": false, "value": "2026-04-20T23:08:18.611738Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjxljtlwis2s", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "8e2de0af-f0cf-408b-8ca4-85eb25369a69", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjxljtlwis2s"}, {"timestamp": "2026-04-20T23:17:38.829Z", "date_only": false, "value": "2026-04-20T23:17:38.829242Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjxm2hw2cc2s", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "8376633a-889e-46ed-a443-40f05a543970", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjxm2hw2cc2s"}, {"timestamp": "2026-04-21T02:29:22.939Z", "date_only": false, "value": "2026-04-21T02:29:22.939461Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjxwrhgkau2x", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "2785eeb3-fabf-4d36-b207-59815d9052fd", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mjxwrhgkau2x"}, {"timestamp": "2026-04-21T12:03:43Z", "date_only": false, "value": "2026-04-21T12:03:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/39757", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "41d493df-df4f-483b-adcd-acc2073dfd86", "content": "6,000+ Publicly Exposed Apache ActiveMQ Instances Found Vulnerable to CVE-2026-34197 \u2013 gbhackers.com\n\nTue, 21 Apr 2026 14:58:24", "url": "https://t.me/TengkorakCyberCrewzz/39757"}, {"timestamp": "2026-04-21T12:03:43Z", "date_only": false, "value": "2026-04-21T12:03:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/9853", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "556c9f0b-eb58-455c-808b-dbb1e82b9cd2", "content": "6,000+ Publicly Exposed Apache ActiveMQ Instances Found Vulnerable to CVE-2026-34197 \u2013 gbhackers.com\n\nTue, 21 Apr 2026 14:58:24", "url": "https://t.me/TengkorakCyberCrewzz/9853"}, {"timestamp": "2026-04-22T00:16:41.620Z", "date_only": false, "value": "2026-04-22T00:16:41.620431Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mk27t3wudj2s", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "b23d861c-7866-4cbb-a602-8abf794da58d", "url": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mk27t3wudj2s"}, {"timestamp": "2026-04-22T03:07:22Z", "date_only": false, "value": "2026-04-22T03:07:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/04/22/thousands-of-apache-activemq-instances.html", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "2e76b983-f016-4fdc-aa88-d5d259d03640", "url": "https://threatintel.cc/2026/04/22/thousands-of-apache-activemq-instances.html"}, {"timestamp": "2026-04-22T05:07:14.306Z", "date_only": false, "value": "2026-04-22T05:07:14.306428Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/116446621464053706", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "86ee411f-8700-40f2-8d24-b9895aac81c1", "url": "https://infosec.exchange/users/edwardk/statuses/116446621464053706"}, {"timestamp": "2026-04-22T05:07:43.406Z", "date_only": false, "value": "2026-04-22T05:07:43.406759Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mk2q3ftucc2o", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "fa80b4ae-ce61-4fec-a575-0dc72ec9299c", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mk2q3ftucc2o"}, {"timestamp": "2026-04-22T05:24:42.060Z", "date_only": false, "value": "2026-04-22T05:24:42.060702Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/keesnk.bsky.social/post/3mk2qztek2222", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "95ad0a20-a5f3-40d4-88a1-a0c40d02e134", "url": "https://bsky.app/profile/keesnk.bsky.social/post/3mk2qztek2222"}, {"timestamp": "2026-04-22T07:30:17.282Z", "date_only": false, "value": "2026-04-22T07:30:17.282618Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mk2y2gvipz2u", "record": "cve-2026-34197", "field": "creation_timestamp", "uuid": "8f2955f4-676d-43e3-b6c1-9ed734ef2114", "url": "https://bsky.app/profile/getpacketai.bsky.social/post/3mk2y2gvipz2u"}, {"timestamp": "2026-04-22T14:59:51.724Z", "date_only": false, "value": "2026-04-22T14:59:51.724493Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mk3r6dppxq2t", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "9bb58ed4-7ee8-4cf2-a5d8-f6e3ee30960b", "url": "https://bsky.app/profile/infosecbot.bsky.social/post/3mk3r6dppxq2t"}, {"timestamp": "2026-04-22T20:51:01.681Z", "date_only": false, "value": "2026-04-22T20:51:01.681456Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/idenhaus.bsky.social/post/3mk4esboccv2y", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "8260d322-7110-445f-9102-a3414073fc1c", "url": "https://bsky.app/profile/idenhaus.bsky.social/post/3mk4esboccv2y"}, {"timestamp": "2026-04-22T21:07:39.443Z", "date_only": false, "value": "2026-04-22T21:07:39.443697Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mk4fpxfzas2t", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "4ecd46eb-14da-4618-9a78-600378a7bdac", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mk4fpxfzas2t"}, {"timestamp": "2026-04-22T21:17:09.829Z", "date_only": false, "value": "2026-04-22T21:17:09.829760Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mk4garovk22t", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "98d00e94-c5f8-4ba8-8686-5f10a5bcae56", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mk4garovk22t"}, {"timestamp": "2026-04-23T02:29:31.441Z", "date_only": false, "value": "2026-04-23T02:29:31.441651Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mk4xpkgxex2u", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "36377900-7f34-4ca2-b988-1a9e783257d8", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mk4xpkgxex2u"}, {"timestamp": "2026-04-23T18:20:07.791Z", "date_only": false, "value": "2026-04-23T18:20:07.791807Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk6mte66qo2s", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "6412131a-6fac-46b2-907b-f792a7253051", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk6mte66qo2s"}, {"timestamp": "2026-04-24T02:29:28.063Z", "date_only": false, "value": "2026-04-24T02:29:28.063074Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mk7i6drwho2g", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "29c2632f-68a3-4aad-a111-77e9d7ab53b4", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mk7i6drwho2g"}, {"timestamp": "2026-04-24T16:01:56Z", "date_only": false, "value": "2026-04-24T16:01:56+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2026-34197", "field": "timestamps.asserted_at", "uuid": "9f813fc5-06ca-40bc-bb53-6576a0d65770", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-24T16:01:56Z", "date_only": false, "value": "2026-04-24T16:01:56+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-34197", "field": "timestamps.first_seen_at", "uuid": "9f813fc5-06ca-40bc-bb53-6576a0d65770", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-25T02:29:06.641Z", "date_only": false, "value": "2026-04-25T02:29:06.641818Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mkbymlltlg2v", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "4aa73397-afd0-4f2f-94c6-8a74344a6a73", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mkbymlltlg2v"}, {"timestamp": "2026-04-25T12:03:19.319Z", "date_only": false, "value": "2026-04-25T12:03:19.319086Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3mkcypddfu42j", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "03a55e98-ed78-46b7-a6b9-5576856284d8", "url": "https://bsky.app/profile/solomonneas.dev/post/3mkcypddfu42j"}, {"timestamp": "2026-04-26T02:29:41.230Z", "date_only": false, "value": "2026-04-26T02:29:41.230997Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mkej4m65mr2x", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "eca3f2b9-3dae-40d7-88fa-bedcbb9cc2ff", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mkej4m65mr2x"}, {"timestamp": "2026-04-26T19:36:01.691Z", "date_only": false, "value": "2026-04-26T19:36:01.691903Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/canartuc.com/post/3mkgchu3tot2e", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "36456c10-bc6f-4afd-a7a5-eef9d5c14555", "url": "https://bsky.app/profile/canartuc.com/post/3mkgchu3tot2e"}, {"timestamp": "2026-04-27T02:29:40.886Z", "date_only": false, "value": "2026-04-27T02:29:40.886409Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mkgzljmjvd2z", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "1a1a5fc0-864d-4655-9cd0-418cd9b29b09", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mkgzljmjvd2z"}, {"timestamp": "2026-04-30T00:00:00Z", "date_only": true, "value": "2026-04-30", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-34197", "field": "evidence.0.details.due_date", "uuid": "b05c8195-f268-47e2-922f-824f89fc55cc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-30T21:16:52.035Z", "date_only": false, "value": "2026-04-30T21:16:52.035083Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cesnet-certs.mastodonczech.cz.ap.brid.gy/post/3mkqjxoulnhd2", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "a82b8481-2232-455f-9193-26fa570063ee", "content": "[[TLP:CLEAR] Apache ActiveMQ opravuje 4 zranitelnosti]\n\nApache Software Foundation verzemi 5.19.5 a 6.2.4 opravuje 4 zranitelnosti v produktech Apache ActiveMQ (Classic, All, Broker, Client, MQTT) \u2b07\ufe0f. Nejz\u00e1va\u017en\u011bj\u0161\u00ed z nich jsou pops\u00e1ny n\u00ed\u017ee, p\u0159i\u010dem\u017e zranitelnost CVE-2026-34197 je ji\u017e aktivn\u011b [\u2026]", "url": "https://bsky.app/profile/cesnet-certs.mastodonczech.cz.ap.brid.gy/post/3mkqjxoulnhd2"}, {"timestamp": "2026-04-30T22:41:31.050Z", "date_only": false, "value": "2026-04-30T22:41:31.050023Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/canartuc.com/post/3mkqop7wvun2g", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "9669a9b3-ba9d-490e-a48a-47df7c9376d4", "content": "Apache ActiveMQ's Jolokia bug (CVE-2026-34197) hits the federal patch deadline today. Horizon3.ai traced the root cause back thirteen years. Shadowserver scanned 6,364 exposed instances April 19. The management API is always exposed wider than the threat model says.\n\n#InfoSec #OpenSource", "url": "https://bsky.app/profile/canartuc.com/post/3mkqop7wvun2g"}, {"timestamp": "2026-05-02T00:00:00Z", "date_only": false, "value": "2026-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-02)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "7a14bbf9-2993-4cec-8622-0af1957b2d00"}, {"timestamp": "2026-05-03T11:11:07Z", "date_only": false, "value": "2026-05-03T11:11:07Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2124", "record": "OESA-2026-2124", "field": "published"}, {"timestamp": "2026-05-03T11:11:07Z", "date_only": false, "value": "2026-05-03T11:11:07Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2125", "record": "OESA-2026-2125", "field": "published"}, {"timestamp": "2026-05-03T11:11:07Z", "date_only": false, "value": "2026-05-03T11:11:07Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2126", "record": "OESA-2026-2126", "field": "published"}, {"timestamp": "2026-05-03T11:11:07Z", "date_only": false, "value": "2026-05-03T11:11:07Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2127", "record": "OESA-2026-2127", "field": "published"}, {"timestamp": "2026-05-05T01:45:35Z", "date_only": false, "value": "2026-05-05T01:45:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/schonbrennervertex/91ff31dfc9d8329e67faf7b023039fd4", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "cc220784-dd5d-4efb-b1b8-d81e946e9dca", "url": "https://gist.github.com/schonbrennervertex/91ff31dfc9d8329e67faf7b023039fd4"}, {"timestamp": "2026-05-17T00:00:00Z", "date_only": false, "value": "2026-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-17)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "b9d2abd6-75f4-4cef-a37c-6b7b7a06fa6d"}, {"timestamp": "2026-05-18T00:00:00Z", "date_only": false, "value": "2026-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-18)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "af2c7c71-630b-4b0f-bb23-1d902a7d9017"}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": true, "value": "2026-05-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "vendor_advisories.9.published_at"}, {"timestamp": "2026-05-22T13:17:14.151Z", "date_only": false, "value": "2026-05-22T13:17:14.151Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-34197", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-25T00:00:00Z", "date_only": true, "value": "2026-05-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": true, "value": "2026-05-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": true, "value": "2026-05-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "acf5fdee-19d3-46f5-b03c-c1a180cd058d"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "last_revision_date"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "initial_release_date"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "revisions.0.revision_date"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "6532deea-823a-4048-b46a-21000572c508"}, {"timestamp": "2026-05-29T08:03:47Z", "date_only": false, "value": "2026-05-29T08:03:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_activemq_jolokia_rce.rb", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "8ebd5ace-feca-4899-be14-df89f1ce2f55", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"dinosn\", \"h00die\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Apache ActiveMQ exposes a Jolokia JMX-over-HTTP API at /api/jolokia/.\\n          An authenticated attacker can invoke the addNetworkConnector() MBean\\n          operation with a crafted URI that causes the broker to fetch a remote\\n          Spring XML configuration over HTTP. The Spring XML instantiates a\\n          ProcessBuilder bean that executes attacker-supplied OS commands.\\n\\n          Default credentials (admin:admin) are accepted by many installations.\\n\\n          Verified on docker image\", \"disclosure_date\": \"2026-04-29\", \"fullname\": \"exploit/multi/http/apache_activemq_jolokia_rce\", \"is_install_path\": true, \"mod_time\": \"2026-05-28 12:56:10 +0000\", \"name\": \"Apache ActiveMQ RCE via Jolokia addNetworkConnector\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/apache_activemq_jolokia_rce.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/apache_activemq_jolokia_rce\", \"references\": [\"CVE-2026-34197\", \"URL-https://github.com/dinosn/CVE-2026-34197\", \"URL-https://horizon3.ai/attack-research/disclosures/cve-2026-34197-activemq-rce-jolokia/\"], \"rport\": 8161, \"session_types\": false, \"targets\": [\"Windows\", \"Linux\", \"Unix\"], \"type\": \"exploit\"}", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_activemq_jolokia_rce.rb"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-34197", "field": "timestamps.asserted_at", "uuid": "6d2ecaa6-b817-472f-964b-0d7b867c2d2b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-34197", "field": "evidence.0.details.added_date", "uuid": "6d2ecaa6-b817-472f-964b-0d7b867c2d2b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-01)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "e6ec10d9-bdb5-42f0-b803-91ce208e553c"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-34197", "field": "timestamps.first_seen_at", "uuid": "6d2ecaa6-b817-472f-964b-0d7b867c2d2b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-34197", "field": "status.status_updated_at", "uuid": "6d2ecaa6-b817-472f-964b-0d7b867c2d2b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-03T18:30:06Z", "date_only": false, "value": "2026-06-03T18:30:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8277", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "8db53736-f3e6-4944-a105-bcbc574843b0", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Acer \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0434\u0432\u0443\u0445 0-day \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0435\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0441 mesh-\u0441\u0435\u0442\u044c\u044e Wave 7, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 T7c_GBL_1.01.000055 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0413\u0435\u0440\u0433\u043e \u041f\u0430\u043f. \u041f\u0435\u0440\u0432\u0430\u044f CVE-2026-49200 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u0432 \u0430\u0440\u0445\u0438\u0432\u0430\u0445 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-49201 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043a\u043b\u044e\u0447\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0443 \u0447\u0435\u0440\u0435\u0437 \u0431\u044d\u043a\u0434\u043e\u0440.\n\n2. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (CVE-2026-8206) \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Kirki - Freeform Page Builder, Website Builder & Customizer \u0434\u043b\u044f WordPress \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u0410\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Defiant, \u0447\u0435\u0439 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d Wordfence \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u043e\u043b\u0435\u0435 222 \u043f\u043e\u043f\u044b\u0442\u043e\u043a\u00a0\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 24 \u0447\u0430\u0441\u0430. CVE-2026-8206 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0438 REST API \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e 'handle_forgot_password()'.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 500 000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432, \u043e\u0431\u044a\u0435\u043c\u044b \u0440\u0430\u0431\u043e\u0442\u044b \u0443 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f \u0438\u043c\u0435\u044e\u0442\u0441\u044f. \n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Wordfence, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u043c \u043a\u0440\u0443\u043f\u043d\u043e\u043c \u0440\u0435\u043b\u0438\u0437\u0435, \u0432\u0435\u0440\u0441\u0438\u0438 6.0.0, \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0434\u043e 6.0.6 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a\u00a0\u0441 WordPress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u043e\u0447\u0442\u0438 40% \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n3. \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f 0-day \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0410\u043c\u043c\u0430\u0440 \u0410\u0441\u043a\u0430\u0440 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 (GitHub), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0434\u043d\u0438\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c \u043c\u044b\u0448\u0438 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b GitHub \u0447\u0435\u0440\u0435\u0437 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440 Visual Studio Code.\n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Microsoft \u0431\u044b\u043b\u0438 \u043f\u0440\u043e\u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0438\u044f.\n\n4. BishopFox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0438\u00a0\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f CVE-2026-22557, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u043f\u0440\u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ubiquiti UniFi.\n\n5. HP \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 VoIP-\u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u0441\u0435\u0440\u0438\u0438 VVX, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-0826, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u0445 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Rapid7, \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0433\u0434\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f.\n\n6. Positive Technologies \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043c\u0430\u0439\u0441\u043a\u0438\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM, \u0443\u043a\u0430\u0437\u0430\u0432 \u0433\u0440\u043e\u043c\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux (CVE-2026-31431), ActiveMQ (CVE-2026-34197), SharePoint (CVE-2026-32201) \u0438 Acrobat Reader (CVE-2026-34621).\n\n7. CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux CVE-2022-0492 (CVSS 7,8) \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u0445\u043e\u0434\u0443 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432. \u041e\u043d\u0430 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0438\u043c\u0435\u043d.\n\n8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 HTTP/2 Bomb \u0432\u044b\u0432\u043e\u0434\u0438\u0442 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0437\u0430 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u043a\u0443\u043d\u0434\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Calif \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b DoS-\u0430\u0442\u0430\u043a \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0432 \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\nHTTP/2 Bomb \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Codex \u043e\u0442 OpenAI \u0438 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u0435 \u0431\u043e\u043c\u0431\u0443 \u0441\u0436\u0430\u0442\u0438\u044f, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0441\u0445\u0435\u043c\u0443 \u0441\u0436\u0430\u0442\u0438\u044f \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 HTTP/2 (HPACK), \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0432 \u0441\u0442\u0438\u043b\u0435 Slowloris, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 880 000 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 HTTP/2 \u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 NGINX, Apache HTTPD, Microsoft IIS, Envoy \u0438\u043b\u0438 Cloudflare Pingora.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u0441 \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0433\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u043f\u0440\u0438 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f 100 \u041c\u0431\u0438\u0442/\u0441 \u0438 \u0432 \u0441\u0447\u0438\u0442\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u043a\u0443\u043d\u0434\u044b \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u043b\u044e\u0431\u043e\u0439 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.", "url": "https://t.me/true_secator/8277"}, {"timestamp": "2026-06-06T15:00:07Z", "date_only": false, "value": "2026-06-06T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/JHG8zP7qXaf1JIIuvE9VKZ77ce8tH_i-fBPcLNZTDpaUFkw", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "5626c91c-ac33-4552-b212-ab60a8b2941a"}, {"timestamp": "2026-06-19T12:45:31.832Z", "date_only": false, "value": "2026-06-19T12:45:31.832767Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1303908d-46a3-4a2b-a385-ecced7b416ac", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "de6627c1-e4bb-4b99-b58d-ed51dd112e57", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1303908d-46a3-4a2b-a385-ecced7b416ac"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-34197", "field": "timestamps.recorded_at", "uuid": "6d2ecaa6-b817-472f-964b-0d7b867c2d2b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:39.870Z", "date_only": false, "value": "2026-06-23T14:03:39.870603Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6d2ecaa6-b817-472f-964b-0d7b867c2d2b", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "705a97b5-d0fa-4a0e-9417-57c21340851d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6d2ecaa6-b817-472f-964b-0d7b867c2d2b"}, {"timestamp": "2026-06-29T10:00:06.981Z", "date_only": false, "value": "2026-06-29T10:00:06.981989Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-28)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "bcbd3756-4d60-48db-be43-7d6836b2e330"}, {"timestamp": "2026-06-30T09:23:51.450Z", "date_only": false, "value": "2026-06-30T09:23:51.450881Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9f813fc5-06ca-40bc-bb53-6576a0d65770", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "e87c1535-8f5e-4973-8bf9-b387f802fd43", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9f813fc5-06ca-40bc-bb53-6576a0d65770"}, {"timestamp": "2026-07-02T10:00:10.580Z", "date_only": false, "value": "2026-07-02T10:00:10.580931Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-01)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "d0a4bb75-493b-425f-80a7-f284c9240694"}, {"timestamp": "2026-07-02T10:15:07.628Z", "date_only": false, "value": "2026-07-02T10:15:07.628361Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-01)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "f7359c84-6b73-46c5-9f8c-d4fa4d997b60"}, {"timestamp": "2026-07-12T13:00:03.614Z", "date_only": false, "value": "2026-07-12T13:00:03.614040Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/87566", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "d7ef9b7f-89ea-40d4-b3d8-60ae57bf4dc6", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a asdasddqwdq29-a11y\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 12:41:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nApache ActiveMQ RCE via Jolokia vulnerability analysis and reproduction notes\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/87566"}, {"timestamp": "2026-07-13T22:00:07.404Z", "date_only": false, "value": "2026-07-13T22:00:07.404310Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92499", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "578932c1-ffcc-4d68-a1e3-7d05eb0ccdbd", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pssec-io\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Dockerfile\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 11:37:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoc for CVE-2026-34197\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92499"}, {"timestamp": "2026-07-13T22:00:13.292Z", "date_only": false, "value": "2026-07-13T22:00:13.292729Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/91853", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "c8c87916-c5b8-40a2-968f-76ecd69b2e2a", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a apache-activemq-rce-research\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 06:48:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nApache ActiveMQ Classic RCE research: CVE-2026-34197 / CVE-2026-42588 bypass chain + hardened-6.2.6 audit findings + Crowdfense comparison (authorized lab research)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/91853"}, {"timestamp": "2026-07-15T00:00:28.979Z", "date_only": false, "value": "2026-07-15T00:00:28.979695Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/91853", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "a277c38c-715b-4c58-a6a8-fbc1fb958928", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a apache-activemq-rce-research\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-04 06:48:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nApache ActiveMQ Classic RCE research: CVE-2026-34197 / CVE-2026-42588 bypass chain + hardened-6.2.6 audit findings + Crowdfense comparison (authorized lab research)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/91853"}, {"timestamp": "2026-07-15T00:00:32.931Z", "date_only": false, "value": "2026-07-15T00:00:32.931075Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/92499", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "05ec79b8-67b9-4fa0-b186-4b9a032678aa", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pssec-io\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Dockerfile\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 11:37:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoc for CVE-2026-34197\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92499"}, {"timestamp": "2026-07-16T16:00:03.372Z", "date_only": false, "value": "2026-07-16T16:00:03.372088Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93709", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "bf328eac-f95f-4e95-80fb-14820d02a7d9", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 14:50:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-34197 - Apache ActiveMQ Jolokia Remote Code Execution (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93709"}, {"timestamp": "2026-07-16T19:00:16.747Z", "date_only": false, "value": "2026-07-16T19:00:16.747970Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_qFyWwPBG5YYrYVJCuvS8pNkDyhJdlaykHNtl_KVjYImn64", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "a12e87e9-953f-4be8-b25f-3f817237d3c1"}, {"timestamp": "2026-07-16T19:00:22.590Z", "date_only": false, "value": "2026-07-16T19:00:22.590415Z", "kind": "sighting", "label": "Seen", "source": "Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "0a77f126-6b54-4e5a-8f8b-dd8d6c669d99"}, {"timestamp": "2026-07-17T00:00:49.925Z", "date_only": false, "value": "2026-07-17T00:00:49.925244Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93709", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "9bc5449f-130c-437e-b378-7edf61b70c80", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a K3ysTr0K3R\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 14:50:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-34197 - Apache ActiveMQ Jolokia Remote Code Execution (RCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93709"}, {"timestamp": "2026-07-18T00:00:11.541Z", "date_only": false, "value": "2026-07-18T00:00:11.541306Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/dpmbE18R2X3GFwkSOa6JWFFXWxZYAauVOJ1P4vKBnJxqD5U", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "538be100-2810-485e-9524-3798228f85bd"}, {"timestamp": "2026-07-18T00:00:33.850Z", "date_only": false, "value": "2026-07-18T00:00:33.850408Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_qFyWwPBG5YYrYVJCuvS8pNkDyhJdlaykHNtl_KVjYImn64", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "f7899f2d-deaf-4260-99a7-ff57c57c0492"}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2026-34197", "field": "timestamps.last_seen_at", "uuid": "9f813fc5-06ca-40bc-bb53-6576a0d65770", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": true, "value": "2026-07-19", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2026-34197", "field": "evidence.0.details.observation_date", "uuid": "9f813fc5-06ca-40bc-bb53-6576a0d65770", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2026-34197", "field": "status.status_updated_at", "uuid": "9f813fc5-06ca-40bc-bb53-6576a0d65770", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T10:00:06.142Z", "date_only": false, "value": "2026-07-19T10:00:06.142045Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-18)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "22474cef-d419-4121-a0e4-3b5fb5f8da98"}, {"timestamp": "2026-07-19T16:00:05.485Z", "date_only": false, "value": "2026-07-19T16:00:05.485848Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/20949", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "a9ee8501-ed1d-41e0-9fff-c5536e57c549", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation \u2013 thehackernews.com\n\nFri, 17 Apr 2026 11:22:00", "url": "https://t.me/MalaysiaHacktivistz/20949"}, {"timestamp": "2026-07-19T16:00:05.676Z", "date_only": false, "value": "2026-07-19T16:00:05.676781Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/21023", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "40c250d7-464d-496a-b5a7-1fc26f3efc5a", "content": "6,000+ Publicly Exposed Apache ActiveMQ Instances Found Vulnerable to CVE-2026-34197 \u2013 gbhackers.com\n\nTue, 21 Apr 2026 14:58:24", "url": "https://t.me/MalaysiaHacktivistz/21023"}, {"timestamp": "2026-07-19T16:00:09.919Z", "date_only": false, "value": "2026-07-19T16:00:09.919178Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1735", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "865a133e-83d0-4cb3-9d7c-097d876cf492", "content": "\ud83d\udc31 hacker voice: WHO LEFT JOLOKIA OPEN?\n\n\ud83d\udd25 CVE-2026-34197: \u0441\u0432\u0435\u0436\u0430\u044f RCE \u0432 Apache ActiveMQ Classic\n\n\u26a0\ufe0f \u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u043e?  \n\u0427\u0435\u0440\u0435\u0437 Jolokia API \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0442\u044f\u043d\u0443\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0415\u0441\u043b\u0438 \u0433\u0434\u0435-\u0442\u043e \u0436\u0438\u0432\u0443\u0442 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u0435 admin:admin, \u0430 \u043d\u0430 6.0.0\u20136.1.1 \u0435\u0449\u0451 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u043a\u0430 \u0441 CVE-2024-32114, \u0432\u0441\u0451 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e.\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:  \n\u0427\u0435\u0440\u0435\u0437 addNetworkConnector(String) \u0432 /api/jolokia/ \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c URI \u0441 brokerConfig=xbean:http://.../payload.xml, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e ActiveMQ \u0442\u044f\u043d\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 Spring XML \u0438 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0439\u0442\u0438 \u0434\u043e Runtime.exec().\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:  \n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 5.19.4 \u0438\u043b\u0438 6.2.3  \n2. \u0417\u0430\u043a\u0440\u044b\u0442\u044c /api/jolokia/ \u0438 web console \u0438\u0437\u0432\u043d\u0435  \n3. \u0423\u0431\u0440\u0430\u0442\u044c \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438  \n4. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 Jolokia \u0438 \u0432\u044b\u0437\u043e\u0432\u044b addNetworkConnector\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435.\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n#ActiveMQ #Apache #CVE #RCE #Jolokia #CyberSecurity #Infosec #criticalbug", "url": "https://t.me/critical_bug/1735"}, {"timestamp": "2026-07-19T16:00:09.994Z", "date_only": false, "value": "2026-07-19T16:00:09.994990Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1736", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "de9212ee-7098-4ad2-8624-e2734f451ef7", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-34197 \u0432 PDF", "url": "https://t.me/critical_bug/1736"}, {"timestamp": "2026-07-19T16:00:10.531Z", "date_only": false, "value": "2026-07-19T16:00:10.531336Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1706", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "bcdcf039-ae93-4c9a-b0ba-24d80b05e434", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-34197: RCE \u0432 Apache ActiveMQ \u0447\u0435\u0440\u0435\u0437 Jolokia API (13 \u043b\u0435\u0442 \u0432 \u0442\u0435\u043d\u0438!)", "url": "https://t.me/critical_bug/1706"}, {"timestamp": "2026-07-19T16:00:10.560Z", "date_only": false, "value": "2026-07-19T16:00:10.560699Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1707", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "e7be208f-5dae-465d-a24b-3784bf116c54", "content": "\ud83d\udd25 13 \u043b\u0435\u0442 \u0432 \u0442\u0435\u043d\u0438: RCE \u0432 Apache ActiveMQ (CVE-2026-34197) \ud83d\udd34\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u044b\u0445 13 \u043b\u0435\u0442! \ud83d\ude31\n\n\ud83d\udca5 \u041e\u0434\u0438\u043d POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u0447\u0435\u0440\u0435\u0437 Jolokia API \u2014 \u0438 \u0443 \u0432\u0430\u0441 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c! \ud83d\udcbb\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \ud83d\udc47\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u2014 \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u043f\u0435\u0440\u0432\u044b\u043c! \ud83d\ude80", "url": "https://t.me/critical_bug/1707"}, {"timestamp": "2026-07-19T16:00:10.597Z", "date_only": false, "value": "2026-07-19T16:00:10.597260Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1708", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "a28c85cd-b7b5-460c-b45b-bcba5a8ed43b", "content": "\ud83d\udd25 13 \u043b\u0435\u0442 \u0432 \u0442\u0435\u043d\u0438: RCE \u0432 Apache ActiveMQ \u0447\u0435\u0440\u0435\u0437 Jolokia API (CVE-2026-34197) \ud83d\udd34\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u0430 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Apache ActiveMQ \u0446\u0435\u043b\u044b\u0445 13 \u043b\u0435\u0442! \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 Jolokia API, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a JMX MBeans \u0447\u0435\u0440\u0435\u0437 HTTP. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043c\u0435\u0442\u043e\u0434 addNetworkConnector \u0432 \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e. \u042d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 URL \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0415\u0441\u043b\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0442\u0443\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 URL, \u0431\u0440\u043e\u043a\u0435\u0440 \u043f\u043e\u0441\u043b\u0443\u0448\u043d\u043e \u0441\u043a\u0430\u0447\u0430\u0435\u0442 XML-\u0444\u0430\u0439\u043b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0432 \u043d\u0451\u043c \u043a\u043e\u0434 (\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f Spring).\n\n\u041e\u0434\u0438\u043d POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 \u0443 \u0432\u0430\u0441 RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435! \ud83d\udcbb\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0443\u0436\u043d\u044b \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Jolokia, \u043d\u043e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u044d\u0442\u043e admin:admin. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 6.0.0\u20136.1.1 \u0438\u0437-\u0437\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 (CVE-2024-32114) \u0434\u043e\u0441\u0442\u0443\u043f \u043a Jolokia \u043e\u0442\u043a\u0440\u044b\u0442 \u0432\u043e\u043e\u0431\u0449\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438! \u042d\u0442\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0431\u0430\u0433 \u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 Unauthenticated RCE.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Apache ActiveMQ Classic \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.19.4 \u0438\u043b\u0438 6.2.3\n2\ufe0f\u20e3 \u0421\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Jolokia (\u043d\u0435 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c admin:admin!)\n3\ufe0f\u20e3 \u0417\u0430\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0440\u0442 8161 \u043e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u2014 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 VPN\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 PoC \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#Apache #ActiveMQ #CVE #RCE #CyberSecurity #Infosec #critical_bug", "url": "https://t.me/critical_bug/1708"}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": true, "value": "2026-07-20", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "vendor_advisories.8.published_at"}, {"timestamp": "2026-07-20T00:00:06.832Z", "date_only": false, "value": "2026-07-20T00:00:06.832475Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1708", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "9c1bd9d0-c6ed-4178-a99e-60c7adec84e8", "content": "\ud83d\udd25 13 \u043b\u0435\u0442 \u0432 \u0442\u0435\u043d\u0438: RCE \u0432 Apache ActiveMQ \u0447\u0435\u0440\u0435\u0437 Jolokia API (CVE-2026-34197) \ud83d\udd34\n\n\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u0430 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Apache ActiveMQ \u0446\u0435\u043b\u044b\u0445 13 \u043b\u0435\u0442! \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 Jolokia API, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a JMX MBeans \u0447\u0435\u0440\u0435\u0437 HTTP. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043c\u0435\u0442\u043e\u0434 addNetworkConnector \u0432 \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e. \u042d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 URL \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0415\u0441\u043b\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0442\u0443\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 URL, \u0431\u0440\u043e\u043a\u0435\u0440 \u043f\u043e\u0441\u043b\u0443\u0448\u043d\u043e \u0441\u043a\u0430\u0447\u0430\u0435\u0442 XML-\u0444\u0430\u0439\u043b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0432 \u043d\u0451\u043c \u043a\u043e\u0434 (\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f Spring).\n\n\u041e\u0434\u0438\u043d POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 \u0443 \u0432\u0430\u0441 RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435! \ud83d\udcbb\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0443\u0436\u043d\u044b \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Jolokia, \u043d\u043e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u044d\u0442\u043e admin:admin. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 6.0.0\u20136.1.1 \u0438\u0437-\u0437\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 (CVE-2024-32114) \u0434\u043e\u0441\u0442\u0443\u043f \u043a Jolokia \u043e\u0442\u043a\u0440\u044b\u0442 \u0432\u043e\u043e\u0431\u0449\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438! \u042d\u0442\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0431\u0430\u0433 \u0432 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 Unauthenticated RCE.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Apache ActiveMQ Classic \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.19.4 \u0438\u043b\u0438 6.2.3\n2\ufe0f\u20e3 \u0421\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Jolokia (\u043d\u0435 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c admin:admin!)\n3\ufe0f\u20e3 \u0417\u0430\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0440\u0442 8161 \u043e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u2014 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 VPN\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 PoC \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#Apache #ActiveMQ #CVE #RCE #CyberSecurity #Infosec #critical_bug", "url": "https://t.me/critical_bug/1708"}, {"timestamp": "2026-07-20T00:00:06.918Z", "date_only": false, "value": "2026-07-20T00:00:06.918696Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1707", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "3bcf2e14-a92b-4f45-97b4-54b0fff31248", "content": "\ud83d\udd25 13 \u043b\u0435\u0442 \u0432 \u0442\u0435\u043d\u0438: RCE \u0432 Apache ActiveMQ (CVE-2026-34197) \ud83d\udd34\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0446\u0435\u043b\u044b\u0445 13 \u043b\u0435\u0442! \ud83d\ude31\n\n\ud83d\udca5 \u041e\u0434\u0438\u043d POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u0447\u0435\u0440\u0435\u0437 Jolokia API \u2014 \u0438 \u0443 \u0432\u0430\u0441 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c! \ud83d\udcbb\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \ud83d\udc47\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u2014 \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u043f\u0435\u0440\u0432\u044b\u043c! \ud83d\ude80", "url": "https://t.me/critical_bug/1707"}, {"timestamp": "2026-07-20T00:00:06.965Z", "date_only": false, "value": "2026-07-20T00:00:06.965980Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1706", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "6f579c42-6683-4704-96f1-1c93987aad4b", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-34197: RCE \u0432 Apache ActiveMQ \u0447\u0435\u0440\u0435\u0437 Jolokia API (13 \u043b\u0435\u0442 \u0432 \u0442\u0435\u043d\u0438!)", "url": "https://t.me/critical_bug/1706"}, {"timestamp": "2026-07-20T00:00:07.585Z", "date_only": false, "value": "2026-07-20T00:00:07.585219Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1736", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "83bd128b-490d-4bcf-a8eb-b3a2711f7817", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-34197 \u0432 PDF", "url": "https://t.me/critical_bug/1736"}, {"timestamp": "2026-07-20T00:00:07.622Z", "date_only": false, "value": "2026-07-20T00:00:07.622486Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1735", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "c5b31a38-8542-4965-ae37-806fd9681beb", "content": "\ud83d\udc31 hacker voice: WHO LEFT JOLOKIA OPEN?\n\n\ud83d\udd25 CVE-2026-34197: \u0441\u0432\u0435\u0436\u0430\u044f RCE \u0432 Apache ActiveMQ Classic\n\n\u26a0\ufe0f \u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u043e?  \n\u0427\u0435\u0440\u0435\u0437 Jolokia API \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0442\u044f\u043d\u0443\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0415\u0441\u043b\u0438 \u0433\u0434\u0435-\u0442\u043e \u0436\u0438\u0432\u0443\u0442 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u0435 admin:admin, \u0430 \u043d\u0430 6.0.0\u20136.1.1 \u0435\u0449\u0451 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u043a\u0430 \u0441 CVE-2024-32114, \u0432\u0441\u0451 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e.\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:  \n\u0427\u0435\u0440\u0435\u0437 addNetworkConnector(String) \u0432 /api/jolokia/ \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c URI \u0441 brokerConfig=xbean:http://.../payload.xml, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e ActiveMQ \u0442\u044f\u043d\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 Spring XML \u0438 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0439\u0442\u0438 \u0434\u043e Runtime.exec().\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:  \n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 5.19.4 \u0438\u043b\u0438 6.2.3  \n2. \u0417\u0430\u043a\u0440\u044b\u0442\u044c /api/jolokia/ \u0438 web console \u0438\u0437\u0432\u043d\u0435  \n3. \u0423\u0431\u0440\u0430\u0442\u044c \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438  \n4. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 Jolokia \u0438 \u0432\u044b\u0437\u043e\u0432\u044b addNetworkConnector\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435.\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su\n\n#ActiveMQ #Apache #CVE #RCE #Jolokia #CyberSecurity #Infosec #criticalbug", "url": "https://t.me/critical_bug/1735"}, {"timestamp": "2026-07-20T00:00:21.808Z", "date_only": false, "value": "2026-07-20T00:00:21.808909Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/20949", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "c046c9ee-fa2b-4147-b049-fff5bca85442", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation \u2013 thehackernews.com\n\nFri, 17 Apr 2026 11:22:00", "url": "https://t.me/MalaysiaHacktivistz/20949"}, {"timestamp": "2026-07-20T10:15:08.008Z", "date_only": false, "value": "2026-07-20T10:15:08.008549Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-19)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "8b9b3c02-3f17-4466-a4ed-d93edb077bdf"}, {"timestamp": "2026-07-20T18:00:12.924Z", "date_only": false, "value": "2026-07-20T18:00:12.924109Z", "kind": "sighting", "label": "Seen", "source": "Telegram/QkQGfXHJmhlUJ4Ok72ZW64yVSosDBVIcN9uDsRFq_Gn2BWo", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "04e9a160-2466-4336-8ebc-11a304cf51dc"}, {"timestamp": "2026-07-21T00:00:00Z", "date_only": true, "value": "2026-07-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-07-21T01:00:01Z", "date_only": false, "value": "2026-07-21T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2026-34197", "field": "timestamps.recorded_at", "uuid": "9f813fc5-06ca-40bc-bb53-6576a0d65770", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-21T04:00:07.749Z", "date_only": false, "value": "2026-07-21T04:00:07.749581Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/infosec_ita_notizie/2624", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "e74e8bb6-0fe8-49ab-9524-e21fc95864c7", "content": "\ud83d\uddde\ufe0f Apache ActiveMQ Classic CVE-2026-34197: 13-Year-Old Vulnerability Now Under Active Exploitation, CISA Issues Federal Patch Mandate\n\n\ud83c\udfe1 via securebulletin.com \ud83d\udd17 https://ift.tt/Zcu7I6l", "url": "https://t.me/infosec_ita_notizie/2624"}, {"timestamp": "2026-07-21T04:00:07.882Z", "date_only": false, "value": "2026-07-21T04:00:07.882169Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/infosec_ita_notizie/2584", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "428e6104-55ff-4322-9301-745489857439", "content": "\ud83d\uddde\ufe0f CISA Adds Apache ActiveMQ CVE-2026-34197 to KEV Catalog as Active Exploitation Surges\n\n\ud83c\udfe1 via securebulletin.com \ud83d\udd17 https://ift.tt/JPVZCpu", "url": "https://t.me/infosec_ita_notizie/2584"}, {"timestamp": "2026-07-22T00:00:00Z", "date_only": true, "value": "2026-07-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-07-22T00:00:03.948Z", "date_only": false, "value": "2026-07-22T00:00:03.948763Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QkQGfXHJmhlUJ4Ok72ZW64yVSosDBVIcN9uDsRFq_Gn2BWo", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "05c4e1a6-4215-4864-8d8a-7748ce3632c7"}, {"timestamp": "2026-07-22T05:00:03.849Z", "date_only": false, "value": "2026-07-22T05:00:03.849655Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/1295", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "f43ccc9a-da8f-470b-afd1-2b45c4abfc2a", "content": "Hidden Weaknesses Fuel a New Wave of Server Compromises\n\nA critical security flaw in Apache ActiveMQ has moved from obscurity to active exploitation, placing thousands of internet-facing servers at risk. The vulnerability, tracked as CVE-2026-34197, remained undetected for more than a decade before being uncovered by security researchers.\n\n\ud83d\udd17 Read More", "url": "https://t.me/pphm_HackerNews/1295"}, {"timestamp": "2026-07-23T00:00:00Z", "date_only": true, "value": "2026-07-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2026-07-23T00:00:00Z", "date_only": true, "value": "2026-07-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0958", "record": "CERTFR-2026-AVI-0958", "field": "vendor_advisories.27.published_at"}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": false, "value": "2026-07-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "last_revision_date"}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": true, "value": "2026-07-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "vendor_advisories.7.published_at"}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": true, "value": "2026-07-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0958", "record": "CERTFR-2026-AVI-0958", "field": "vendor_advisories.5.published_at"}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": false, "value": "2026-07-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0933", "record": "CERTFR-2026-AVI-0933", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": true, "value": "2026-07-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0958", "record": "CERTFR-2026-AVI-0958", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-07-28T00:00:00Z", "date_only": true, "value": "2026-07-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0958", "record": "CERTFR-2026-AVI-0958", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-07-29T00:00:00Z", "date_only": true, "value": "2026-07-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0958", "record": "CERTFR-2026-AVI-0958", "field": "vendor_advisories.7.published_at"}, {"timestamp": "2026-07-30T00:00:00Z", "date_only": true, "value": "2026-07-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0958", "record": "CERTFR-2026-AVI-0958", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-07-31T00:00:00Z", "date_only": false, "value": "2026-07-31T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0958", "record": "CERTFR-2026-AVI-0958", "field": "last_revision_date"}, {"timestamp": "2026-07-31T00:00:00Z", "date_only": false, "value": "2026-07-31T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0958", "record": "CERTFR-2026-AVI-0958", "field": "initial_release_date"}, {"timestamp": "2026-07-31T00:00:00Z", "date_only": false, "value": "2026-07-31T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0958", "record": "CERTFR-2026-AVI-0958", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-31T14:00:04.295Z", "date_only": false, "value": "2026-07-31T14:00:04.295628Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8465", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "edd1c22c-25f0-4fd5-891a-7dab1a99bc26", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Solar 4RAYS \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n\u0412\u043e \u043e\u0442\u0447\u0435\u0442\u043d\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 681 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0438 PoC. \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u043e 571. \u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 2026 \u0433\u043e\u0434\u0430, \u043d\u043e \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 2025, \u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n\u0412 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u044b 89 \u00ab\u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0445\u00bb \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 Solar 4RAYS \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0432\u0441\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u043d\u0438\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.\n\n\u0421\u0440\u0435\u0434\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0432\u044b\u0432\u043e\u0434\u043e\u0432:\n\n- \u041a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u043d\u0430 59,8%: \u0441 426 \u0434\u043e 681. \u0422\u0430\u043a\u043e\u0439 \u0440\u043e\u0441\u0442 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d \u043a\u0430\u043a \u0441\u0435\u0437\u043e\u043d\u043d\u044b\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c, \u0442\u0430\u043a \u0438 \u0442\u0435\u043c, \u0447\u0442\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0430\u043b \u043f\u0440\u0438\u043d\u0435\u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Linux \u0438 Windows.\n\n- \u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0438\u043c\u0435\u043b\u0438 83,84% \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u0430\u043a \u0438 \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n- \u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b 7,9 \u0431\u0430\u043b\u043b\u0430. \u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 - 8,1.\n\n- 90,2% \u0432\u0441\u0435\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 HTTP. \u0411\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0439 \u00ab\u043f\u0440\u0435\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00bb - TCP (1,23%).\n\n- \u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0440\u043e\u0432\u043d\u044f Critical \u0438 High \u0432 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0442 73,5% \u043e\u0442 \u043e\u0431\u0449\u0435\u0439 \u043c\u0430\u0441\u0441\u044b \u0432\u0441\u0435\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u044d\u0442\u043e\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b 72,06%.\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438 \u0442\u0435\u043c \u0434\u043b\u044f CMS WordPress \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 17,9%. \u0414\u043e\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0431\u0449\u0435\u043c \u043e\u0431\u044a\u0435\u043c\u0435 \u0443\u043f\u0430\u043b\u0430 \u043d\u0430 \u0434\u0432\u0430 \u043f\u0440\u043e\u0446\u0435\u043d\u0442\u043d\u044b\u0445 \u043f\u0443\u043d\u043a\u0442\u0430 \u0432 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u0441 \u043f\u0435\u0440\u0432\u044b\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c.\n\n- \u041d\u0430 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c 4,83% \u0432\u0441\u0435\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0421\u0440\u0435\u0434\u043d\u044f\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c 8.\n\n- \u0432 \u0422\u043e\u043f-5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u0432\u044b\u0448\u0435\u0434\u0448\u0438\u0445 PoC \u0432\u043e\u0448\u043b\u0438: CVE-2026-41940 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 cPanel), CVE-2026-42945 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438\u00bb \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ngx_http_rewrite_module \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 NGINX), CVE-2026-48907 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Joomla Content Editor (JCE) \u0434\u043b\u044f CMS Joomla), CVE-2026-34197 (RCE \u0432 \u0431\u0440\u043e\u043a\u0435\u0440\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 Apache ActiveMQ Classic), CVE-2026-8181 (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Burst Statistics \u0434\u043b\u044f WordPress).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Solar 4RAYS, \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0430 \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0441\u043e\u0444\u0442\u0435 \u043e\u0442 \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u043a \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0443 \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043c\u0430\u043b\u043e. \u0421\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0433\u043e\u0434\u0430 \u0442\u0440\u0435\u043d\u0434 \u043d\u0430 \u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0418\u0418-\u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f, \u0438\u0445 \u0441\u0442\u0430\u043b\u043e \u043f\u043e\u0447\u0442\u0438 \u0432\u0434\u0432\u043e\u0435 \u0431\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u043e\u043c \u0440\u0430\u043d\u0435\u0435.\n\nWordpress, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u0438 \u0440\u0430\u0437\u0432\u0438\u0442\u043e\u0441\u0442\u044c\u044e \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u00ab\u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c\u00bb \u043f\u043e \u0447\u0438\u0441\u043b\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u041f\u041e.\n\n\u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 \u0441\u0442\u0430\u043b\u043e \u044f\u0441\u043d\u043e, \u0447\u0442\u043e \u00ab\u0432\u043e\u0432\u0440\u0435\u043c\u044f\u00bb \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0443\u0436\u043d\u043e \u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e. \n\n\u0427\u0430\u0441\u0442\u043e \u0433\u043b\u0430\u0432\u043d\u043e\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435. \u0414\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0430\u0441\u043f\u0435\u043a\u0442\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0432 99% \u0441\u043b\u0443\u0447\u0430\u0435\u0432. \u041d\u043e \u0431\u044b\u0432\u0430\u0435\u0442 \u0442\u043e\u0442 \u0441\u0430\u043c\u044b\u0439 \u043e\u0434\u0438\u043d \u043f\u0440\u043e\u0446\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0435\u0447\u043d\u043e \u0432\u0441\u0435 \u043f\u043e\u0440\u0442\u0438\u0442.\n\n\u0412 \u044d\u0442\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 supply-chain-\u0430\u0442\u0430\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 Axios \u043c\u0438\u043d\u0443\u0432\u0448\u0435\u0439 \u0432\u0435\u0441\u043d\u043e\u0439. \u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043d\u0430 \u0440\u0443\u0431\u0435\u0436\u0435 \u043f\u0435\u0440\u0432\u043e\u0433\u043e \u0438 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 \u0441\u0442\u0430\u043b\u0438 \u043f\u043e\u044f\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0438 \u0441\u0442\u0430\u0442\u044c\u0438, \u0433\u043e\u0432\u043e\u0440\u044f\u0449\u0438\u0435 \u043e\u0431 Axios Supply Chain Attack.\n\n\u0410\u0442\u0430\u043a\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e \u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0448\u0435\u0441\u0442\u044c \u0441\u0442\u0430\u0434\u0438\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0441\u043e\u0432\u0435\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0447\u0430\u0441\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0442\u0438\u0442\u044c \u0432 \u0418\u0411-\u0441\u0444\u0435\u0440\u0435, \u043a\u043e\u0433\u0434\u0430 \u0440\u0435\u0447\u044c \u0437\u0430\u0445\u043e\u0434\u0438\u0442 \u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 \u0430\u0442\u0430\u043a \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438) \u0441\u0442\u0430\u043b\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u043c \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u0435 \u043d\u0443\u0436\u043d\u043e, - \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u043d\u0430\u043a\u0430\u043f\u043b\u0438\u0432\u0430\u044e\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 CVE \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u0432\u044b\u0432\u043e\u0434: \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 (\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b, \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b), \u043d\u043e \u043d\u0435 \u0434\u043b\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 production-\u0441\u0440\u0435\u0434\u0435.\n\n\u0414\u043b\u044f \u043d\u0438\u0445 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043e\u0442\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0440\u0443\u0447\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c: \u0438\u0437\u0443\u0447\u0430\u0442\u044c changelog, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 staging-\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043a\u0430\u0442\u043a\u043e\u0439 \u0432 \u043f\u0440\u043e\u0434.", "url": "https://t.me/true_secator/8465"}, {"timestamp": "2026-08-01T10:15:07.719Z", "date_only": false, "value": "2026-08-01T10:15:07.719568Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "287c47f5-5035-4337-a495-38830c639ea2"}, {"timestamp": "2026-08-02T10:44:57.117Z", "date_only": false, "value": "2026-08-02T10:44:57.117656Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-01)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "6d5eb89e-2d36-4682-ba86-76c3d6fad7ea"}, {"timestamp": "2026-08-04T13:18:20.950Z", "date_only": false, "value": "2026-08-04T13:18:20.950", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-34197", "record": "FKIE_CVE-2026-34197", "field": "lastModified"}, {"timestamp": "2026-08-06T11:11:07Z", "date_only": false, "value": "2026-08-06T11:11:07Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2124", "record": "OESA-2026-2124", "field": "modified"}, {"timestamp": "2026-08-06T11:11:07Z", "date_only": false, "value": "2026-08-06T11:11:07Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2125", "record": "OESA-2026-2125", "field": "modified"}, {"timestamp": "2026-08-06T11:11:07Z", "date_only": false, "value": "2026-08-06T11:11:07Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2126", "record": "OESA-2026-2126", "field": "modified"}, {"timestamp": "2026-08-06T11:11:07Z", "date_only": false, "value": "2026-08-06T11:11:07Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2127", "record": "OESA-2026-2127", "field": "modified"}, {"timestamp": "2026-08-17T12:05:05.421Z", "date_only": false, "value": "2026-08-17T12:05:05.421Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-34197", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-17T12:05:05.421Z", "date_only": false, "value": "2026-08-17T12:05:05.421Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-34197", "field": "containers.adp.2.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-18T19:00:04.282Z", "date_only": false, "value": "2026-08-18T19:00:04.282455Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/42028", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "1e1b0398-5857-4278-97c3-c6d8845448ad", "content": "CVE-2026-34197: 13-Year-Old Apache ActiveMQ RCE via Jolokia API Surfaces for In-the-Wild Attacks\n\nCVE-2026-34197: 13-Year-Old Apache ActiveMQ RCE via Jolokia API Surfaces for In-the-Wild Attacks\nhttps://darkwebinformer.com/cve-2026-34197-13-year-old-apache-activemq-rce-via-jolokia-api-surfaces-for-in-the-wild-attacks/", "url": "https://t.me/VulnerabilityNews/42028"}, {"timestamp": "2026-08-18T19:00:05.150Z", "date_only": false, "value": "2026-08-18T19:00:05.150546Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/41985", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "c8ae8c3d-73b0-45b4-8bab-1eb6c3bb5c8d", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-34197 Apache ActiveMQ Improper Input Validation Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/16/cisa-adds-one-known-exploited-vulnerability-catalog", "url": "https://t.me/VulnerabilityNews/41985"}, {"timestamp": "2026-08-18T19:00:05.232Z", "date_only": false, "value": "2026-08-18T19:00:05.232019Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/42011", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "27aadcdb-87d5-4e42-ba92-b40a939a92d9", "content": "Recent Apache ActiveMQ Vulnerability Exploited in the Wild\n\nThe remote code execution vulnerability tracked as CVE-2026-34197 came to light in early April.\nThe post Recent Apache ActiveMQ Vulnerability Exploited in the Wild appeared first on SecurityWeek.\nhttps://www.securityweek.com/recent-apache-activemq-vulnerability-exploited-in-the-wild/", "url": "https://t.me/VulnerabilityNews/42011"}, {"timestamp": "2026-08-18T19:00:05.282Z", "date_only": false, "value": "2026-08-18T19:00:05.282838Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/42021", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "857a811a-105f-461c-901d-fca6ab049c87", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation\n\nA recently disclosed high-severity security flaw in Apache ActiveMQ\u00a0Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and Infrastructure Security Agency\u00a0(CISA).\nTo that end, the agency\u00a0has added the vulnerability, tracked\u00a0as CVE-2026-34197 (CVSS score: 8.8), to its Known Exploited Vulnerabilities\u00a0(KEV) catalog, requiring Federal Civilian\nhttps://thehackernews.com/2026/04/apache-activemq-cve-2026-34197-added-to.html", "url": "https://t.me/VulnerabilityNews/42021"}, {"timestamp": "2026-08-19T00:00:08.593Z", "date_only": false, "value": "2026-08-19T00:00:08.593876Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/42021", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "426c8ecb-e603-454b-81a1-3a5a09e9589d", "content": "Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation\n\nA recently disclosed high-severity security flaw in Apache ActiveMQ\u00a0Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and Infrastructure Security Agency\u00a0(CISA).\nTo that end, the agency\u00a0has added the vulnerability, tracked\u00a0as CVE-2026-34197 (CVSS score: 8.8), to its Known Exploited Vulnerabilities\u00a0(KEV) catalog, requiring Federal Civilian\nhttps://thehackernews.com/2026/04/apache-activemq-cve-2026-34197-added-to.html", "url": "https://t.me/VulnerabilityNews/42021"}, {"timestamp": "2026-08-19T00:00:08.639Z", "date_only": false, "value": "2026-08-19T00:00:08.639129Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/42011", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "a4447045-21f8-4123-97c0-b4468948988c", "content": "Recent Apache ActiveMQ Vulnerability Exploited in the Wild\n\nThe remote code execution vulnerability tracked as CVE-2026-34197 came to light in early April.\nThe post Recent Apache ActiveMQ Vulnerability Exploited in the Wild appeared first on SecurityWeek.\nhttps://www.securityweek.com/recent-apache-activemq-vulnerability-exploited-in-the-wild/", "url": "https://t.me/VulnerabilityNews/42011"}, {"timestamp": "2026-08-19T00:00:08.746Z", "date_only": false, "value": "2026-08-19T00:00:08.746259Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/41985", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "5cf6c7a5-c1d3-450e-8b1a-3752c9375b04", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\n\nCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2026-34197 Apache ActiveMQ Improper Input Validation Vulnerability\nThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/16/cisa-adds-one-known-exploited-vulnerability-catalog", "url": "https://t.me/VulnerabilityNews/41985"}, {"timestamp": "2026-08-19T00:00:09.702Z", "date_only": false, "value": "2026-08-19T00:00:09.702621Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/42028", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "f8b1c3f3-d59b-45de-8b15-dbed47cec746", "content": "CVE-2026-34197: 13-Year-Old Apache ActiveMQ RCE via Jolokia API Surfaces for In-the-Wild Attacks\n\nCVE-2026-34197: 13-Year-Old Apache ActiveMQ RCE via Jolokia API Surfaces for In-the-Wild Attacks\nhttps://darkwebinformer.com/cve-2026-34197-13-year-old-apache-activemq-rce-via-jolokia-api-surfaces-for-in-the-wild-attacks/", "url": "https://t.me/VulnerabilityNews/42028"}, {"timestamp": "2026-08-19T10:15:19.104Z", "date_only": false, "value": "2026-08-19T10:15:19.104358Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-18)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "551caf3e-99d5-4e60-be50-706584b524e6"}, {"timestamp": "2026-08-20T10:00:04.111Z", "date_only": false, "value": "2026-08-20T10:00:04.111032Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/kasperskyb2b/2293", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "dbdd35b9-934f-404c-8322-016a6611a027", "content": "\ud83d\ude1e \u0418\u0418 \u043f\u043b\u043e\u0445\u043e \u0447\u0438\u043d\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0425\u043e\u0442\u044f \u0418\u0418 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u043a\u043e\u0440\u0438\u043b \u043f\u043e\u0438\u0441\u043a \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c LLM \u0434\u043b\u044f \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435 \u0432\u0441\u0451 \u0442\u0430\u043a \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043a\u043e\u0440\u043c\u0438\u043b\u0438 \u0434\u0432\u0443\u043c \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0448\u0435\u0441\u0442\u044c \u0441\u0432\u0435\u0436\u0438\u0445 \u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044f \u0438 CVE  \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b \u043f\u043e\u0447\u0442\u0438 \u043d\u0430\u0432\u0435\u0440\u043d\u044f\u043a\u0430 \u0437\u043d\u0430\u0435\u0442\u0435: CVE-2026-31431 (CopyFail), CVE-2026-34197 (RCE \u0432 ActiveMQ), CVE-2026-45185 (DeadLetter, RCE \u0432 EXIM) \u0438 \u0434\u0440. \u0417\u0430\u0442\u0435\u043c \u0434\u043b\u044f \u043d\u0438\u0445 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u0442\u0447\u0438 \u2014 6080 (!) \u0440\u0430\u0437.\n\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b:\n\ud83e\udd73 26% \u2014 \u043f\u0430\u0442\u0447 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0435 \u043c\u0435\u043d\u044f\u044f \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f;\n\ud83e\udd28 20% \u2014 \u043f\u0430\u0442\u0447 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442, \u043d\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u043c\u0435\u043d\u044f\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u0441 allow by default \u043d\u0430 deny);\n\ud83d\uddff \u0432 \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f ~53% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u043f\u0430\u0442\u0447 \u043b\u0438\u0431\u043e \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043b\u0438\u0431\u043e \u0432\u043d\u043e\u0441\u0438\u043b \u043d\u043e\u0432\u0443\u044e, \u043b\u0438\u0431\u043e \u0438 \u0442\u043e, \u0438 \u0434\u0440\u0443\u0433\u043e\u0435 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u043d\u0430 GPT 5.5 \u0438 Opus 4.8 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 2-3 \u0434\u043e\u043b\u043b\u0430\u0440\u0430, \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u0430 \u0442\u043e\u0433\u043e \u043d\u044e\u0430\u043d\u0441\u0430, \u0447\u0442\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0443 \u043d\u0430\u0434\u043e \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0442\u044c \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e, \u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440.\n\n\u0412 \u043e\u0442\u0447\u0451\u0442\u0435 \u0435\u0441\u0442\u044c \u0437\u0430\u0431\u0430\u0432\u043d\u044b\u0439 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0410\u043d\u0442\u0440\u043e\u043f\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043f\u0430\u0442\u0447\u0438 \u043d\u0443\u0436\u043d\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435. \u0412\u0440\u043e\u0434\u0435 \u0438 \u043d\u0435 \u043f\u043e\u0441\u043f\u043e\u0440\u0438\u0448\u044c, \u043d\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u0442\u043e\u0433\u043e \u0433\u043b\u0443\u0431\u043e\u043a\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u0445\u043e\u0440\u043e\u0448\u043e \u0432\u0438\u0434\u043d\u044b \u043a\u0430\u0436\u0434\u044b\u0439 \u0432\u0442\u043e\u0440\u043e\u0439 \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u043c\u0435\u0441\u044f\u0446\u0430, \u0430 \u0432\u0435\u0440\u043d\u0435\u0435 \u0441\u043f\u0443\u0441\u0442\u044f 2-3 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0433\u043e. \u041d\u0443 \u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0432 \u0434\u043d\u0438, \u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 GitHub. \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/2293"}, {"timestamp": "2026-08-21T00:00:00Z", "date_only": true, "value": "2026-08-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.9.published_at"}, {"timestamp": "2026-08-24T00:00:00Z", "date_only": true, "value": "2026-08-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-08-24T10:00:06.329Z", "date_only": false, "value": "2026-08-24T10:00:06.329305Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-23)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "53776b55-c24e-4301-9a04-1f5df1b1f8d6"}, {"timestamp": "2026-08-26T00:00:00Z", "date_only": true, "value": "2026-08-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-08-27T00:00:00Z", "date_only": true, "value": "2026-08-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "last_revision_date"}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": true, "value": "2026-08-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "revisions.0.revision_date"}, {"timestamp": "2026-08-28T10:00:09.401Z", "date_only": false, "value": "2026-08-28T10:00:09.401437Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "e08300b1-e859-4b71-b656-05185b7a5f11"}, {"timestamp": "2026-08-29T20:00:17.751Z", "date_only": false, "value": "2026-08-29T20:00:17.751598Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/1254", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "5787bfbe-edad-4aef-8a2b-3313299fa97d", "content": "A 13-year-old flaw in Apache ActiveMQ can lead to RCE.\n\nCVE-2026-34197 lets attackers run OS commands via the Jolokia API. Chained with CVE-2024-32114, it becomes unauthenticated RCE on some versions.\n\nPatched in 5.19.4 and 6.2.3.", "url": "https://t.me/CyberDispatch/1254"}, {"timestamp": "2026-08-29T23:00:08.335Z", "date_only": false, "value": "2026-08-29T23:00:08.335578Z", "kind": "sighting", "label": "Seen", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "c74810d4-deca-4ff4-8eb8-a3eac9ff821c"}, {"timestamp": "2026-08-31T00:00:47.825Z", "date_only": false, "value": "2026-08-31T00:00:47.825685Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "31fa3d90-afaa-4860-88e0-7f38deb0e63b"}, {"timestamp": "2026-09-03T10:15:15.280Z", "date_only": false, "value": "2026-09-03T10:15:15.280507Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-02)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "f3b008a5-5319-4c85-ba90-bad366b3649a"}, {"timestamp": "2026-09-04T17:00:06.341Z", "date_only": false, "value": "2026-09-04T17:00:06.341581Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/101111", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "af60c580-9e45-4c4e-85cf-75fdf86c93e2", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-34197-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a nirvanasec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-04 15:46:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101111"}, {"timestamp": "2026-09-05T10:15:25.617Z", "date_only": false, "value": "2026-09-05T10:15:25.617530Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-04)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "18962d6b-f3db-4de6-8f75-1d7990ecac0e"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-ACTIVEMQ-2026-34197", "record": "BIT-ACTIVEMQ-2026-34197", "field": "modified"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": true, "value": "2026-09-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1206", "record": "CERTFR-2026-AVI-1206", "field": "vendor_advisories.14.published_at"}, {"timestamp": "2026-09-12T15:22:56.555Z", "date_only": false, "value": "2026-09-12T15:22:56.555476Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Nayeraneru/bd66a0b4d4667e41feb2d2b5b73ec431", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "401d7731-6e4d-4b2e-91a6-24c1b529ebf7", "content": "# GSoC 2026 Final Report \u2014 Automated Vulnerable Environment Provisioning for Metasploit\n\n**Student:** Nayera Ahmed Shafik Mostafa  \n**Organization:** Metasploit  \n**Mentors:** Spencer McIntyre, h00die  \n**Project:** `test_env` \u2014 A Metasploit Plugin for Automated Vulnerable Environment Provisioning  \n**Final Pull Request:** https://github.com/rapid7/metasploit-framework/pull/21895 \n\n---\n\n## 1. Project Goals\n\nMetasploit is the de-facto standard for exploit development and security validation, yet setting up a vulnerable target environment remains a manual, out-of-band process. Users must read module documentation, hunt for Docker images, guess port mappings, and manually configure datastore options (`RHOSTS`, `RPORT`, credentials) before they can fire an exploit. This friction hurts reproducibility, slows down module development, and makes automated CI verification nearly impossible.\n\nThe goal of this project was to build a **first-class, native Metasploit workflow** that collapses this entire pipeline into a single command:\n\n```\nmsf > use exploit/multi/http/apache_activemq_jolokia_rce\nmsf exploit(...) > test_env build\n[+] Environment ready.\n```\n\nSpecifically, the project aimed to:\n\n1. **Automate provisioning** \u2014 Pull OCI images, allocate free host ports, launch containers, and health-check the service.\n2. **Preserve exploit context** \u2014 Automatically bind `RHOSTS`, `RPORT`, credentials, and other datastore options to the module.\n3. **Support lifecycle management** \u2014 Track, stop, start, and clean up environments across `msfconsole` restarts.\n4. **Enable CI validation** \u2014 Share the same environment definitions between local development and headless CI runners.\n5. **Require zero framework core changes** \u2014 Deliver everything as a self-contained plugin with opt-in module metadata.\n\n---\n\n## 2. What I Did\n\n### 2.1 Core Plugin (`plugins/test_env.rb`)\n\nA ~2,000-line Ruby plugin that adds the `test_env` command family to `msfconsole`. Key subsystems:\n\n| Subsystem | Responsibility |\n|-----------|----------------|\n| **Runtime Adapter** (`DockerRuntime`, `PodmanRuntime`) | Unified container abstraction with auto-detection. Podman includes rootless networking validation (`pasta` / `slirp4netns`). |\n| **Port Allocator** | Finds free ephemeral host ports, scanning both the local registry and actively bound runtime ports to avoid collisions with orphaned containers from previous sessions. |\n| **Health Manager** | Configurable readiness checks (`http`, `tcp`, `command`) with retry logic, timeouts, and Basic Auth support. |\n| **Provisioner** | One-time setup actions (e.g., driving the WordPress install wizard via HTTP POST) that run after health checks pass but before the environment is registered as ready. |\n| **Registry** (`BuiltEnvironmentRegistry`) | ActiveModel-backed YAML persistence in `~/.msf4/test_env_registry.yml` with POSIX file locking for safe multi-process access. Reconstructs state from OCI container labels on startup. |\n| **Command Dispatcher** | Routes `test_env build`, `list`, `modules`, `stop`, `start`, `remove`, `remove-all`, `exec`, `validate`, `status`, and `help`. |\n\n### 2.2 Environment Definition Schema (`data/vuln_envs/*.yml`)\n\nA YAML schema that serves as the **single source of truth** for a vulnerable service:\n\n- **`variants`** \u2014 Software versions / images (e.g., ActiveMQ `5.18.6` vs `5.18.2`).\n- **`shared`** \u2014 Base ports, credentials, health checks, datastore defaults, provisioning steps, and CI metadata.\n- **`profiles`** \u2014 Runtime configurations (e.g., `default` vs `broker-only`) via deep-merge overrides.\n- **`ci.exploit`** \u2014 Recommends payloads known to work against the image (e.g., avoiding a broken default).\n- **`ci.validation`** \u2014 Defines what \"success\" means (session type, expected command output).\n\nDefinitions shipped in this PR:\n\n- **`activemq.yml`** \u2014 Apache ActiveMQ Classic with Jolokia API (CVE-2026-34197).\n- **`wordpress.yml`** \u2014 Vulnerable WordPress with one-time install wizard provisioning + verification.\n- **`httpd.yml`** \u2014 Apache HTTP Server for auxiliary scanner testing.\n- **`openssh.yml`** \u2014 OpenSSH server for SSH scanner testing.\n\n### 2.3 Module Integration\n\nIntroduced `VulnerableEnvironment`, a new metadata key inside `update_info()` that follows the exact same framework pattern as `Name`, `Description`, `Notes`, etc.:\n\n```ruby\n'VulnerableEnvironment' => {\n  'definition'      => 'activemq',\n  'default_variant' => '5.18.6',\n  'profile'         => 'default',\n  'port_mapping'    => { 8161 => 'RPORT' }\n}\n```\n\nThe reference integration is on **`modules/exploits/multi/http/apache_activemq_jolokia_rce.rb`**.\n\n### 2.4 CI Integration\n\nReplaced static container definitions with environment-driven provisioning in GitHub Actions:\n\n- **`.github/workflows/test_env.yml`** \u2014 A matrix job that consumes the same YAML definitions as local users, validating shared definitions, health checks, datastore automation, and exploit execution across exploit and auxiliary modules.\n- **`scripts/ci_runner.sh`** \u2014 A headless msfconsole runner that bridges `PASS`/`FAIL` output to standard Unix exit codes for CI.\n\n### 2.5 Documentation\n\n- **`DEVELOPER_Doc.md`** \u2014 Complete schema reference, three-level merge hierarchy (`shared` \u2192 `profile` \u2192 `module overrides`), validation rules, and a step-by-step guide for authoring new definitions.\n- **`USER_Doc.md`** \u2014 Interactive usage guide, command reference with real console transcripts, typical workflows (interactive dev, multi-version testing, auxiliary scanning, resume-after-restart), and troubleshooting.\n\n---\n\n## 3. Current State\n\nThe project is **feature-complete** and **under final review** by the Rapid7 engineering team.\n\n### What was accomplished\n\n- \u2705 **Architecture design** (documented in Markdown): command dispatcher, module metadata, database schema, environment schema, runtime adapter\n- \u2705 **`test_env build`** \u2014 19-step pipeline: validate \u2192 resolve definition \u2192 pull image \u2192 allocate ports \u2192 launch \u2192 health check \u2192 provision \u2192 register \u2192 apply datastore\n- \u2705 **`test_env exec `** \u2014 Auto-loads module, applies stored datastore + recommended payload, allocates fresh `SRVPORT`/`FETCH_SRVPORT`\n- \u2705 **`test_env validate `** \u2014 Verifies sessions against `ci.validation` (session type, command output); works for exploit + auxiliary modules\n- \u2705 **`test_env modules`** \u2014 Discovers all modules with `VulnerableEnvironment` support\n- \u2705 **Lifecycle commands** \u2014 `list`, `stop`, `start`, `remove`, `remove-all` with range parsing (`1-3,5`)\n- \u2705 **Cross-session persistence** \u2014 YAML registry + container label reconstruction\n- \u2705 **Docker & Podman support** \u2014 including rootless Podman networking checks\n- \u2705 **CI matrix** \u2014 validating 8 module/definition combinations (exploit + auxiliary)\n- \u2705 **Full documentation** \u2014 user + developer guides\n---\n\n## 4. Future Work\n\nWhile the core plugin is complete, the following are natural extensions for the community:\n\n1. **More environment definitions** \u2014 The schema is designed for scale. Adding new services only requires a YAML file + module metadata.\n2. **Multi-request provisioning** \u2014 Extend the provisioner to support cookie/session carryover for multi-step install wizards.\n3. **Non-HTTP provisioning** \u2014 Add `type: command` provisioning for images that need a shell command rather than an HTTP POST.\n\n---\n\n## 5. Code & Pull Requests\n\n### Weekly Development (Mentor-Reviewed)\n\nDevelopment was done in 12 incremental pull requests in my forked repository, each reviewed weekly by my mentors:\n\n- Week 1: [`vulnenv-week1`](https://github.com/Nayeraneru/metasploit-framework/pull/1)\n- Week 2: [`vulnenv-week2`](https://github.com/Nayeraneru/metasploit-framework/pull/3)\n- Week 3: [`vulnenv-week3`](https://github.com/Nayeraneru/metasploit-framework/pull/4)\n- Week 4: [`vulnenv-week4`](https://github.com/Nayeraneru/metasploit-framework/pull/5)\n- Week 5: [`vulnenv-week5`](https://github.com/Nayeraneru/metasploit-framework/pull/6)\n- Week 6: [`vulnenv-week6`](https://github.com/Nayeraneru/metasploit-framework/pull/7)\n- Week 7: [`vulnenv-week7`](https://github.com/Nayeraneru/metasploit-framework/pull/8)\n- Week 8: [`vulnenv-week8`](https://github.com/Nayeraneru/metasploit-framework/pull/9)\n- Week 9: [`vulnenv-week9`](https://github.com/Nayeraneru/metasploit-framework/pull/10)\n- Week 10: [`vulnenv-week10`](https://github.com/Nayeraneru/metasploit-framework/pull/11)\n- Week 11: [`vulnenv-week11`](https://github.com/Nayeraneru/metasploit-framework/pull/12)\n- Week 12: [`vulnenv-week12`](https://github.com/Nayeraneru/metasploit-framework/pull/15)\n\nAll 12 branches were merged into the **`vulnenv`** integration branch.\n\n### Final Upstream Pull Request\n\n**[\u2192 Link to PR: `vulnenv` \u2192 `master` on `rapid7/metasploit-framework`](https://github.com/rapid7/metasploit-framework/pull/21895)**\n\nThis is the single PR currently under review by the Rapid7 engineering team. Each weekly PR linked above contains a detailed description of its respective changes.\n\n---\n\n## 6. Challenges & Lessons Learned\n\n1. **Cross-session state loss** \u2014 Solved with a YAML registry (`File.flock` for safety) + container-label reconstruction. *Lesson: container runtime is ground truth; registry is a cache.*\n\n2. **Port collisions with orphaned containers** \u2014 A port can test free yet be bound by a stale container. *Lesson: check the OS **and** the runtime.*\n\n3. **Broken default payloads** \u2014 ActiveMQ's auto-payload uses FTP, which Metasploit's fetch server doesn't support; added `ci.exploit.payload` overrides. *Lesson: environment definitions know the image better than modules.*\n\n4. **Process-local sessions** \u2014 Sessions die with their `msfconsole`; `exec`/`validate` must share one instance. *Lesson: document constraints honestly, don't hide them.*\n\n5. **WordPress not truly ready** \u2014 Apache ran, but no schema/admin existed; added `provision` + `verify` (install wizard POST + login-page health check). *Lesson: \"process running\" \u2260 \"application ready\" \u2014 verify the exploitable state.*\n\n---\n\n## 7. Acknowledgments\n\nHuge thanks to my mentors **Spencer McIntyre** and **h00die** for their weekly reviews, architectural guidance, and patience through 12 iterations. This project would not have been possible without the Metasploit community's excellent codebase and documentation.\n", "url": "https://gist.github.com/Nayeraneru/bd66a0b4d4667e41feb2d2b5b73ec431"}, {"timestamp": "2026-09-13T20:00:04.622Z", "date_only": false, "value": "2026-09-13T20:00:04.622254Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CYPERMRED/38", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "b3c841fb-1663-4b29-8464-15e905d48e79", "content": "A 13-year-old flaw in Apache ActiveMQ can lead to RCE.\n\nCVE-2026-34197 lets attackers run OS commands via the Jolokia\nAPI. Chained with CVE-2024-32114, it becomes unauthenticated RCE\non some versions.\n\nPatched in 5.19.4 and 6.2.3.\n\nLearn more -> https://thehackernews.com/2026/04/threatsday-\nbulletin-hybrid-p2p-botnet.html#chained-flaws-enable-stealth-rce", "url": "https://t.me/CYPERMRED/38"}, {"timestamp": "2026-09-14T00:00:00Z", "date_only": true, "value": "2026-09-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1206", "record": "CERTFR-2026-AVI-1206", "field": "vendor_advisories.9.published_at"}, {"timestamp": "2026-09-15T00:00:00Z", "date_only": true, "value": "2026-09-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1206", "record": "CERTFR-2026-AVI-1206", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-15T11:01:49.533Z", "date_only": false, "value": "2026-09-15T11:01:49.533426Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvkhx4hqfp2i", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "9d274250-ba82-4091-b39f-c06fb214f77d", "content": "TEST POST \u2014 new workflow validated (clean workspace, placeholder guard, reply/engagement rebuilt). NOT scheduled \u2014 regular slots 08/12/16/20/23 CET unchanged.\ud83d\udce2 CVE-2026-34197 (CVSS 8.8): ActiveMQ RCE (13yr bug); 6,400+ servers exposed. Patch Mar 30. Source: BleepingComputer. #CyberSecurity", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvkhx4hqfp2i"}, {"timestamp": "2026-09-16T00:00:00Z", "date_only": true, "value": "2026-09-16", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1206", "record": "CERTFR-2026-AVI-1206", "field": "vendor_advisories.7.published_at"}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": true, "value": "2026-09-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1206", "record": "CERTFR-2026-AVI-1206", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-09-18T00:00:00Z", "date_only": false, "value": "2026-09-18T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1206", "record": "CERTFR-2026-AVI-1206", "field": "last_revision_date"}, {"timestamp": "2026-09-18T00:00:00Z", "date_only": false, "value": "2026-09-18T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1206", "record": "CERTFR-2026-AVI-1206", "field": "initial_release_date"}, {"timestamp": "2026-09-18T00:00:00Z", "date_only": false, "value": "2026-09-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1206", "record": "CERTFR-2026-AVI-1206", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-29T00:00:00Z", "date_only": false, "value": "2026-09-29T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-279-04", "record": "ICSA-26-279-04", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-29T00:00:00Z", "date_only": false, "value": "2026-09-29T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-279-04", "record": "ICSA-26-279-04", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-29T17:32:31.874Z", "date_only": false, "value": "2026-09-29T17:32:31.874661Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-279-04", "record": "ICSA-26-279-04", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-01T23:00:20Z", "date_only": false, "value": "2026-10-01T23:00:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/irCiqRU6jZX2xrk34tdjVza5CyOKjhHwditkBTOWTlYC0H4", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "6e75563d-ec13-49f6-aa29-83771fdce627"}, {"timestamp": "2026-10-01T23:00:20Z", "date_only": false, "value": "2026-10-01T23:00:20.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/irCiqRU6jZX2xrk34tdjVza5CyOKjhHwditkBTOWTlYC0H4", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "29f45c34-9bea-4573-a3ec-d7cddcd73c71"}, {"timestamp": "2026-10-06T00:00:00Z", "date_only": false, "value": "2026-10-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-06)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "9267b77b-3b71-452d-aedd-7454579f4087"}, {"timestamp": "2026-10-06T05:00:00Z", "date_only": false, "value": "2026-10-06T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-04", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "da9d12fb-b9ba-4022-b797-f0bfc5fe614f", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-04"}, {"timestamp": "2026-10-06T06:00:00Z", "date_only": false, "value": "2026-10-06T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-279-04", "record": "ICSA-26-279-04", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-06T06:00:00Z", "date_only": false, "value": "2026-10-06T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-279-04", "record": "ICSA-26-279-04", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-10-16)", "record": "CVE-2026-34197", "field": "creation_timestamp", "uuid": "4b962d56-a12e-4c3f-bbf9-cca8580c3925"}, {"timestamp": "2026-10-17T09:40:52Z", "date_only": false, "value": "2026-10-17T09:40:52Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-34197", "record": "UBUNTU-CVE-2026-34197", "field": "modified"}]}