{"metadata": {"vulnerability": "CVE-2026-3844", "count": 67, "kinds": {"milestone": 4, "sighting": 54, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-03-09T18:35:58.751Z", "date_only": false, "value": "2026-03-09T18:35:58.751Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-3844", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-22T13:59:41Z", "date_only": false, "value": "2026-04-22T13:59:41.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-3844", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-04-23T02:25:21.927Z", "date_only": false, "value": "2026-04-23T02:25:21.927Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-3844", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-04-23T02:25:21.927Z", "date_only": false, "value": "2026-04-23T02:25:21.927Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-3844", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-23T03:00:30.799Z", "date_only": false, "value": "2026-04-23T03:00:30.799580Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/116451785443473415", "record": "cve-2026-3844", "field": "creation_timestamp", "uuid": "fd285ddd-77bb-4d03-ba7a-289197c0a070", "url": "https://infosec.exchange/users/offseq/statuses/116451785443473415"}, {"timestamp": "2026-04-23T03:00:32.972Z", "date_only": false, "value": "2026-04-23T03:00:32.972949Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mk4zgzcg3k2g", "record": "cve-2026-3844", "field": "creation_timestamp", "uuid": "cb975810-9a56-4323-b03f-582721ea28b7", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mk4zgzcg3k2g"}, {"timestamp": "2026-04-23T03:16:17Z", "date_only": false, "value": "2026-04-23T03:16:17Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C529-Q7MW-HQ6J", "record": "GHSA-C529-Q7MW-HQ6J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-04-23T03:16:17.527Z", "date_only": false, "value": "2026-04-23T03:16:17.527", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3844", "record": "FKIE_CVE-2026-3844", "field": "published"}, {"timestamp": "2026-04-23T04:00:22Z", "date_only": false, "value": "2026-04-23T04:00:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C529-Q7MW-HQ6J", "record": "GHSA-C529-Q7MW-HQ6J", "field": "published"}, {"timestamp": "2026-04-23T04:00:23Z", "date_only": false, "value": "2026-04-23T04:00:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C529-Q7MW-HQ6J", "record": "GHSA-C529-Q7MW-HQ6J", "field": "modified"}, {"timestamp": "2026-04-23T05:19:00Z", "date_only": false, "value": "2026-04-23T05:19:00.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AFbUj5XU0FaWjJKIeAgIoECWWJJu8HcCym9i1gF2DKGuNiY", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "a74fa47e-54ae-4076-9d46-ba38db270c01"}, {"timestamp": "2026-04-23T12:31:40.405Z", "date_only": false, "value": "2026-04-23T12:31:40.405493Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-3844", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-04-23T12:31:40.405Z", "date_only": false, "value": "2026-04-23T12:31:40.405493Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3844", "record": "FKIE_CVE-2026-3844", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-04-23T12:31:46.631Z", "date_only": false, "value": "2026-04-23T12:31:46.631Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-3844", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-23T12:31:46.631Z", "date_only": false, "value": "2026-04-23T12:31:46.631Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-3844", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-24T00:15:25.174Z", "date_only": false, "value": "2026-04-24T00:15:25.174216Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mk7aoonbvr2d", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "539427fc-4552-43f6-b1d6-c84b6397dda8", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mk7aoonbvr2d"}, {"timestamp": "2026-04-24T03:14:59.692Z", "date_only": false, "value": "2026-04-24T03:14:59.692987Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mk7kpr2hhn2s", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "3e5d5fd4-54be-40a1-9771-dec6e1df954c", "url": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mk7kpr2hhn2s"}, {"timestamp": "2026-04-24T07:00:11Z", "date_only": false, "value": "2026-04-24T07:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eelDkHdLJbJmJstqnnCy8CHcXComrmhazlsAZwNwqP__Cw4", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "4bd697d0-0738-47b1-b192-a151c6658978"}, {"timestamp": "2026-04-24T09:00:04Z", "date_only": false, "value": "2026-04-24T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eiq80vTfK0uEvpSaVkLstXl9YEDfyEgGUyA39bKhe3J3sOM", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "9e6bee98-cfc2-4d26-8837-626e11bf2d23"}, {"timestamp": "2026-04-24T11:00:13Z", "date_only": false, "value": "2026-04-24T11:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZFqC61vDQ3iGO6DCHh4lMH5qLHDwT9-aDJnCe_4rQv5sz9k", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "5d41c883-a265-46d8-9074-1bfa7eb48e78"}, {"timestamp": "2026-04-24T12:09:00Z", "date_only": false, "value": "2026-04-24T12:09:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8140", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "67086352-9758-40a7-8d58-ac9f7e5757b3", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Breeze Cache \u0434\u043b\u044f WordPress, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-3844 \u0438 \u0442\u044f\u0433\u0430\u043b\u0430\u0441\u044c \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 170 \u0440\u0430\u0437 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c Wordfence \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041f\u043b\u0430\u0433\u0438\u043d \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Breeze Cache \u0434\u043b\u044f WordPress \u043e\u0442 Cloudways \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 400 000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0438 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0447\u0430\u0441\u0442\u043e\u0442\u044b \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043a\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8 \u0438\u0437 10 \u0438 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0425\u0443\u043d\u0433\u043e\u043c \u041d\u0433\u0443\u0435\u043d\u043e\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Defiant \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430 \u0444\u0430\u0439\u043b\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 fetch_gravatar_from_remote, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0438 \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0430\u0439\u0442\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 Host Files Locally - Gravatars, \u0447\u0442\u043e \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\nCVE-2026-3844 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Breeze Cache, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 2.4.4. Cloudways \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.4.5, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u043d\u0435\u0435 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e\u00a0\u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 WordPress, \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d \u0431\u044b\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 138 000 \u0440\u0430\u0437. \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u0441\u0430\u0439\u0442\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0430\u0439\u0442\u043e\u0432, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u043f\u0446\u0438\u044f Host Files Locally - Gravatars.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u0443\u0441\u043f\u043b\u0443\u0442\u0430\u0442\u0430\u0446\u0438\u044e, \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 Breeze Cache \u043d\u0430 \u0431\u043e\u0440\u0442\u0443 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u043b\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0435\u0433\u043e (\u0438\u043b\u0438 \u0445\u043e\u0442\u044f \u0431\u044b Host Files Locally - Gravatars).", "url": "https://t.me/true_secator/8140"}, {"timestamp": "2026-04-24T12:54:40.275Z", "date_only": false, "value": "2026-04-24T12:54:40.275948Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mkal4cotdk2b", "record": "cve-2026-3844", "field": "creation_timestamp", "uuid": "cc5ae58f-0d8d-4d54-b493-2769d5e4bd2f", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mkal4cotdk2b"}, {"timestamp": "2026-04-24T13:33:06.837Z", "date_only": false, "value": "2026-04-24T13:33:06.837345Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkanb2yes62c", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "c4d09668-2fd9-4e98-a497-8bd42a8a852f", "url": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkanb2yes62c"}, {"timestamp": "2026-04-24T15:00:07Z", "date_only": false, "value": "2026-04-24T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/DK4BbVzmE_Jdht-pfKWYiPS8pPyh5W_Tab9UrU56o57GOsg", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "23f9276d-9826-4309-94b0-3b671a17f4c5"}, {"timestamp": "2026-04-24T21:00:04Z", "date_only": false, "value": "2026-04-24T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OlSx-i4MOnRiLD9w2NsovYSChfTHJAiqMYmGpteGinUk6Zg", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "5e3056b8-e3b9-4272-a385-edb3081073b5"}, {"timestamp": "2026-04-24T21:02:39.294Z", "date_only": false, "value": "2026-04-24T21:02:39.294424Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mkbgeovp572g", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "69249f3c-74d4-4031-8675-511c7100ad17", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mkbgeovp572g"}, {"timestamp": "2026-04-24T22:55:39.053Z", "date_only": false, "value": "2026-04-24T22:55:39.053493Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mkbmowowsc2t", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "7c1efc68-1a16-4fc2-8d2e-f684a29e0ba4", "url": "https://bsky.app/profile/intel.overresearched.net/post/3mkbmowowsc2t"}, {"timestamp": "2026-04-25T14:59:27Z", "date_only": false, "value": "2026-04-25T14:59:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/249347", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "88dab91a-cb47-48b3-aba8-008c02588180", "content": "Over 400,000 sites at risk as hackers exploit Breeze Cache plugin flaw (CVE-2026-3844)\nhttps://ift.tt/a3HNT1R", "url": "https://t.me/ctinow/249347"}, {"timestamp": "2026-04-25T15:00:05Z", "date_only": false, "value": "2026-04-25T15:00:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/lTZ0lC-YJL4Se6BN05Isfh2kRWfneqTVkYzSgTAzaYfKiqlk", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "2558b4c8-f104-4db2-a97f-18111ab9b944"}, {"timestamp": "2026-04-25T15:21:48.801Z", "date_only": false, "value": "2026-04-25T15:21:48.801911Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mkddseftev2b", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "c96c476b-2a25-4348-8a61-2fd4d714d82c", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mkddseftev2b"}, {"timestamp": "2026-04-25T19:00:11Z", "date_only": false, "value": "2026-04-25T19:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/nKEyw9MjoGdomWTZ3S8SlTvKWSYFHtmZQZAzmqMnPOrvSyM", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "e2e0f07c-81c3-4580-9c75-29d574459b23"}, {"timestamp": "2026-04-25T21:30:43Z", "date_only": false, "value": "2026-04-25T21:30:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_mHslSCvaIGn1j1iUTbHND1YCwmXWG04PfEklTdaGV8CE-0", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "babef6e3-d0b0-4d09-a66f-bb0547137053"}, {"timestamp": "2026-04-26T01:00:04.711Z", "date_only": false, "value": "2026-04-26T01:00:04.711080Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkee4ehrje2t", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "c8e5aef5-c0e9-457f-aab8-e00792afb845", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkee4ehrje2t"}, {"timestamp": "2026-04-26T03:00:05Z", "date_only": false, "value": "2026-04-26T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kld9yLBbS6fzFNytGTSDXwsTRi8Qoep-LDw8M-oA9J472Qs", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "92f40299-a6ac-45e2-98e5-3ea0e8128b46"}, {"timestamp": "2026-04-26T13:37:07.424Z", "date_only": false, "value": "2026-04-26T13:37:07.424523Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkfog3bvuc2h", "record": "cve-2026-3844", "field": "creation_timestamp", "uuid": "f42bf9d8-78a6-43d9-8a70-544981cfc961", "url": "https://bsky.app/profile/cyberhub.blog/post/3mkfog3bvuc2h"}, {"timestamp": "2026-04-26T21:51:31.018Z", "date_only": false, "value": "2026-04-26T21:51:31.018557Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mkgk23xj7k2h", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "e24bb464-beb7-4bf9-a037-c03f995c82ec", "url": "https://bsky.app/profile/intel.overresearched.net/post/3mkgk23xj7k2h"}, {"timestamp": "2026-04-27T01:54:50.421Z", "date_only": false, "value": "2026-04-27T01:54:50.421621Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mkgxn7nauk2d", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "63d2047c-52bf-48a5-95b9-2a5e6ac84878", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mkgxn7nauk2d"}, {"timestamp": "2026-04-28T14:42:06.111Z", "date_only": false, "value": "2026-04-28T14:42:06.111782Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mkksxzhtky2o", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "311285e8-9b24-483e-8c5e-6d5e07f66788", "url": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mkksxzhtky2o"}, {"timestamp": "2026-04-29T00:12:01.775Z", "date_only": false, "value": "2026-04-29T00:12:01.775202Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/116485096788734609", "record": "cve-2026-3844", "field": "creation_timestamp", "uuid": "e6ae25b8-e3e1-4ee4-9dce-deca63b5c816", "url": "https://infosec.exchange/users/patrickcmiller/statuses/116485096788734609"}, {"timestamp": "2026-04-30T15:00:06Z", "date_only": false, "value": "2026-04-30T15:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/3tKSA63ykFsNCx7Ci_YM-GlAoFttSrYjQJCM_fsQcGoJpDo", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "d3e66a7d-e357-4ca8-82d4-dfa022b4a011"}, {"timestamp": "2026-04-30T15:00:27Z", "date_only": false, "value": "2026-04-30T15:00:27.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/k5OTU-9lUzFKUTq8zqq2Ea-jY-aJMqpZsl5nZtaT5jx_Wu8", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "b3cb25ea-9f37-4778-9ff8-5bc5b3301dce"}, {"timestamp": "2026-05-06T04:43:46.351Z", "date_only": false, "value": "2026-05-06T04:43:46.351774Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3ml5vbl6bhu2s", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "90461827-e6c2-4290-b059-6a5f61a9db64", "content": "CVE-2026-3844: Breeze Cache bajo ataque activo\n\n\u00bfTen\u00e9s Breeze Cache instalado? La vulnerabilidad CVE-2026-3844 (CVSS 9.8) permite subir archivos PHP sin autenticaci\u00f3n. Actualiz\u00e1 a 2.4.5 ahora.\n\n#breezecache #cve20263844 #wordpressplugins #rce #seguridadwordpress", "url": "https://bsky.app/profile/donwebmedia.bsky.social/post/3ml5vbl6bhu2s"}, {"timestamp": "2026-05-06T11:31:28.435Z", "date_only": false, "value": "2026-05-06T11:31:28.435038Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mysites.guru/post/3ml6m2lxqk32n", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "81fa7ebe-6e2d-4bd4-80a9-ab359e4a87e3", "content": "Active exploitation of Breeze Cache (CVE-2026-3844): unauth RCE on the default WordPress cache plugin for 400,000+ Cloudways sites. Patched in 2.4.5.\n\nmysites.guru/blog/breeze-...", "url": "https://bsky.app/profile/mysites.guru/post/3ml6m2lxqk32n"}, {"timestamp": "2026-05-07T11:28:32.545Z", "date_only": false, "value": "2026-05-07T11:28:32.545668Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mysites.guru/post/3mlb4ebplbn2m", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "a882dc5a-08bd-434e-97be-d8f41220ee8c", "content": "ICYMI: Active exploitation of Breeze Cache (CVE-2026-3844): unauth RCE on the default WordPress cache plugin for 400,000+ Cloudways sites. Patched in 2.4.5.\n\nmysites.guru/blog/breeze-...", "url": "https://bsky.app/profile/mysites.guru/post/3mlb4ebplbn2m"}, {"timestamp": "2026-05-07T21:00:05Z", "date_only": false, "value": "2026-05-07T21:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/vzTACITSxs978bepVF2fAbJ-LA46ia7V8AwPJb289jK3goA", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "e268f169-129d-4400-a0b5-50da0c84d7be"}, {"timestamp": "2026-05-08T15:00:13Z", "date_only": false, "value": "2026-05-08T15:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eNyXP0VFcQtqPlK-8vkGtqhnCSC85Z7lTOQp_rxjHxWaPHc", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "afe1ab50-eb8b-4c5a-99f7-b6699d14e394"}, {"timestamp": "2026-05-10T23:00:03Z", "date_only": false, "value": "2026-05-10T23:00:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/83721", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "7d07ec93-7202-4765-b9ad-d79cfb56482a", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-3844\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zycoder0day\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-10 22:56:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/83721"}, {"timestamp": "2026-05-11T03:00:13Z", "date_only": false, "value": "2026-05-11T03:00:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/W1vRPSZWweVUHMSWt8CrUKCu5wOz0SjAywl1baktpA9KBTI", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "8d0b6093-3ad5-4e41-b3da-bfecfcceb245"}, {"timestamp": "2026-05-26T16:23:59Z", "date_only": false, "value": "2026-05-26T16:23:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/skizofrenic/4204cd4fced5d254fe3bb8d9eb411fc8", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "ef7c76eb-f03e-4901-ae05-122fd32cb2a2", "url": "https://gist.github.com/skizofrenic/4204cd4fced5d254fe3bb8d9eb411fc8"}, {"timestamp": "2026-06-06T11:00:14Z", "date_only": false, "value": "2026-06-06T11:00:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/MkZ_OGQrZR4dMhKDK0OVbcEjJF0IE8jmF8NR0mdJeKW4f6Q", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "ba27f236-b65b-4561-a5ea-b041ae2c4ae6"}, {"timestamp": "2026-06-17T10:44:19.980Z", "date_only": false, "value": "2026-06-17T10:44:19.980", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-3844", "record": "FKIE_CVE-2026-3844", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:34.197Z", "date_only": false, "value": "2026-06-19T12:45:34.197901Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bcdf9335-f583-4a7a-ad00-5b6afa914fc4", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "38f2c2e9-b7c1-4b07-afcb-cd7031ba33a1", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bcdf9335-f583-4a7a-ad00-5b6afa914fc4"}, {"timestamp": "2026-07-10T14:03:09.829Z", "date_only": false, "value": "2026-07-10T14:03:09.829160Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqcctoyqs52s", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "647f9f72-3020-4420-8040-b456641d772c", "content": "\ud83c\udf0a WP-SHELLSTORM: an exposed server (left open 22 days) revealed a crew backdooring WP/Joomla via 27 known flaws. Breeze plugin CVE-2026-3844 alone hit 45k targets, 17k+ backdoored. Patch plugins.\n\n\ud83d\udd17 https://thehackernews.com/2026/07/exposed-hacker-server-reveals-wp.html", "url": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mqcctoyqs52s"}, {"timestamp": "2026-07-11T04:24:28.827Z", "date_only": false, "value": "2026-07-11T04:24:28.827487Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mqdsxtkkno2x", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "98aea405-3fe8-47b4-96ef-b931b1726c9a", "content": "WP-SHELLSTORM: 25.000 sitios WordPress hackeados\n\n\u00bfTu sitio WordPress usa Breeze Cache? WP-SHELLSTORM comprometi\u00f3 25.195 sitios con CVE-2026-3844 (CVSS 9.8). Cheque\u00e1 si fuiste afectado y limpi\u00e1 el backdoor\n\n#wpshellstorm #backdoorwordpress #cve20263844 #breezecache #webshell", "url": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mqdsxtkkno2x"}, {"timestamp": "2026-08-03T20:41:22.096Z", "date_only": false, "value": "2026-08-03T20:41:22.096228Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7ebtfrsn2j", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "b201d046-b607-4b9b-92f5-ae5a269fa3e6", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-38446](https://github.com/fr3akhacks/cve-disclosures/blob/master/osTicket/CVE-2026-3844...\nhttps://github.com/fr3akhacks/cve-disclosures/blob/master/osTicket/CVE-2026-38446.md #PatchManagement #Vulnerability #CVE", "url": "https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7ebtfrsn2j"}, {"timestamp": "2026-08-08T15:00:03.476Z", "date_only": false, "value": "2026-08-08T15:00:03.476405Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/97167", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "52256cc8-feb5-4bd0-82d9-ad2f08e360dc", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-3844\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AnggaTechI\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 11:45:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-3844 \u2014 Unauthenticated Arbitrary File Upload to RCE in Breeze Cache (WordPress).  CVSS 9.8 CRITICAL. Mass scanner + auto shell injector with multi-threading.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97167"}, {"timestamp": "2026-08-08T23:21:50.874Z", "date_only": false, "value": "2026-08-08T23:21:50.874012Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8Dh3YUE7Kfb7FvNcXIDSqcPSChtli_9yVwlxO3uxT68v6BA", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "3ac55443-a111-42d4-9d53-71c851c669a2"}, {"timestamp": "2026-08-08T23:28:21.261Z", "date_only": false, "value": "2026-08-08T23:28:21.261634Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/W3dJlaDRMaKJWPJ40xraShmD_BqcR5KzJbAmj6TjVp75Nic", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "b6b82bcd-9848-4f69-8ce5-3a890f1466e5"}, {"timestamp": "2026-08-29T20:00:16.448Z", "date_only": false, "value": "2026-08-29T20:00:16.448915Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/1425", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "cf49d8ad-a59b-48a5-b92c-f921300caf30", "content": "Over 400,000 sites at risk as hackers exploit Breeze Cache plugin flaw (CVE-2026-3844)", "url": "https://t.me/CyberDispatch/1425"}, {"timestamp": "2026-08-31T00:00:28.081Z", "date_only": false, "value": "2026-08-31T00:00:28.081992Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberDispatch/1425", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "857c7341-028e-4def-b635-2d25d9d77c0b", "content": "Over 400,000 sites at risk as hackers exploit Breeze Cache plugin flaw (CVE-2026-3844)", "url": "https://t.me/CyberDispatch/1425"}, {"timestamp": "2026-09-01T13:00:05.488Z", "date_only": false, "value": "2026-09-01T13:00:05.488866Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/p3Nt3st3rsTAr/40", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "a538573f-044c-4ca8-ad51-0f52155c346b", "content": "https://www.wordfence.com/blog/2026/05/attackers-actively-exploiting-critical-vulnerability-in-breeze-cache-plugin/\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-3844", "url": "https://t.me/p3Nt3st3rsTAr/40"}, {"timestamp": "2026-09-01T13:00:05.640Z", "date_only": false, "value": "2026-09-01T13:00:05.640445Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/p3Nt3st3rsTAr/26", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "749d0651-d161-4552-b2b6-5a69d741fda7", "content": "https://github.com/p3Nt3st3r-sTAr/CVE-2026-3844", "url": "https://t.me/p3Nt3st3rsTAr/26"}, {"timestamp": "2026-09-01T20:00:04.971Z", "date_only": false, "value": "2026-09-01T20:00:04.971425Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/A3kw4Azfx6FWjhZu7WmB4t5NNV4q7suExSuAjYiMwesJ6L0", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "86c3d30e-8839-4c2f-8ecd-f57813a61ce0"}, {"timestamp": "2026-09-02T01:05:06.973Z", "date_only": false, "value": "2026-09-02T01:05:06.973983Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/p3Nt3st3rsTAr/26", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "a7a85877-02b4-40e0-a428-406150271a19", "content": "https://github.com/p3Nt3st3r-sTAr/CVE-2026-3844", "url": "https://t.me/p3Nt3st3rsTAr/26"}, {"timestamp": "2026-09-02T01:05:07.240Z", "date_only": false, "value": "2026-09-02T01:05:07.240228Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/p3Nt3st3rsTAr/40", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "ca27dd18-ea45-47ab-979c-d9ce9e6cbcca", "content": "https://www.wordfence.com/blog/2026/05/attackers-actively-exploiting-critical-vulnerability-in-breeze-cache-plugin/\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-3844", "url": "https://t.me/p3Nt3st3rsTAr/40"}, {"timestamp": "2026-09-02T06:00:14.630Z", "date_only": false, "value": "2026-09-02T06:00:14.630058Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingTeamGrupoOfficial/45453", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "16eb32f4-82a3-4fcd-aab5-188aa99888c4", "content": "CVE-2026-3844\n*\nBreeze Cache < = 2.4.4 Carga de archivos arbitrarios no autenticada a RCE\n*\nPoC", "url": "https://t.me/HackingTeamGrupoOfficial/45453"}, {"timestamp": "2026-09-03T00:00:47.598Z", "date_only": false, "value": "2026-09-03T00:00:47.598135Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingTeamGrupoOfficial/45453", "record": "CVE-2026-3844", "field": "creation_timestamp", "uuid": "18c31cbd-318f-415c-835a-ff95eb3c95e0", "content": "CVE-2026-3844\n*\nBreeze Cache < = 2.4.4 Carga de archivos arbitrarios no autenticada a RCE\n*\nPoC", "url": "https://t.me/HackingTeamGrupoOfficial/45453"}]}