{"metadata": {"vulnerability": "CVE-2026-43499", "count": 1176, "kinds": {"milestone": 159, "sighting": 458, "kev": 0, "other": 559}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0431", "record": "NCSC-2026-0431", "field": "document.tracking.generator.date"}, {"timestamp": "2025-12-16T00:00:00Z", "date_only": false, "value": "2025-12-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-12-16T00:00:00Z", "date_only": false, "value": "2025-12-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-12-16T00:00:00Z", "date_only": false, "value": "2025-12-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-12-16T00:00:00Z", "date_only": false, "value": "2025-12-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-01-13T00:00:00Z", "date_only": false, "value": "2026-01-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-01-13T00:00:00Z", "date_only": false, "value": "2026-01-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-01-23T00:00:00Z", "date_only": false, "value": "2026-01-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-01-23T00:00:00Z", "date_only": false, "value": "2026-01-23T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-04-06T00:00:00Z", "date_only": false, "value": "2026-04-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-04-06T00:00:00Z", "date_only": false, "value": "2026-04-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-01T00:00:00Z", "date_only": false, "value": "2026-05-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-05-01T14:12:56.014Z", "date_only": false, "value": "2026-05-01T14:12:56.014Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-43499", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-02T00:00:00Z", "date_only": false, "value": "2026-05-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-43499", "record": "MSRC_CVE-2026-43499", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:38492", "record": "RHSA-2026:38492", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:38492", "record": "RHSA-2026:38492", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:38492", "record": "RHSA-2026:38492", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:37728", "record": "RHSA-2026:37728", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39984", "record": "RHSA-2026:39984", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40425", "record": "RHSA-2026:40425", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:41062", "record": "RHSA-2026:41062", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:41063", "record": "RHSA-2026:41063", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:41920", "record": "RHSA-2026:41920", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59142", "record": "RHSA-2026:59142", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59146", "record": "RHSA-2026:59146", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59148", "record": "RHSA-2026:59148", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:38492", "record": "RHSA-2026:38492", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:37728", "record": "RHSA-2026:37728", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39984", "record": "RHSA-2026:39984", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40425", "record": "RHSA-2026:40425", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:41062", "record": "RHSA-2026:41062", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:41063", "record": "RHSA-2026:41063", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:41920", "record": "RHSA-2026:41920", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59142", "record": "RHSA-2026:59142", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59146", "record": "RHSA-2026:59146", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59148", "record": "RHSA-2026:59148", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-21T12:17:49.281Z", "date_only": false, "value": "2026-05-21T12:17:49.281Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-43499", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-21T13:16:00Z", "date_only": false, "value": "2026-05-21T13:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-43499", "record": "UBUNTU-CVE-2026-43499", "field": "published"}, {"timestamp": "2026-05-21T13:16:19Z", "date_only": false, "value": "2026-05-21T13:16:19Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CQC6-9F34-295V", "record": "GHSA-CQC6-9F34-295V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-21T13:16:19.300Z", "date_only": false, "value": "2026-05-21T13:16:19.300", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-43499", "record": "FKIE_CVE-2026-43499", "field": "published"}, {"timestamp": "2026-05-21T15:34:08Z", "date_only": false, "value": "2026-05-21T15:34:08Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CQC6-9F34-295V", "record": "GHSA-CQC6-9F34-295V", "field": "published"}, {"timestamp": "2026-05-21T15:55:22.604Z", "date_only": false, "value": "2026-05-21T15:55:22.604213Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmerscvff72i", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1ca3fc88-83e6-41ef-9ff6-e9a5c3d7438b", "content": "CVE-2026-43499 - rtmutex: Use waiter::task instead of current in remove_waiter()\nCVE ID : CVE-2026-43499\n \n Published : May 21, 2026, 1:16 p.m. | 1\u00a0hour, 1\u00a0minute ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nrtmutex: Use waiter::tas...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmerscvff72i"}, {"timestamp": "2026-05-21T22:00:00Z", "date_only": false, "value": "2026-05-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1656", "record": "WID-SEC-W-2026-1656", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-21T22:00:00Z", "date_only": false, "value": "2026-05-21T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1656", "record": "WID-SEC-W-2026-1656", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-21T22:00:00Z", "date_only": false, "value": "2026-05-21T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1656", "record": "WID-SEC-W-2026-1656", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-22T01:01:34Z", "date_only": false, "value": "2026-05-22T01:01:34.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-43499", "record": "MSRC_CVE-2026-43499", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-22T01:01:34Z", "date_only": false, "value": "2026-05-22T01:01:34.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-43499", "record": "MSRC_CVE-2026-43499", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-05-25T00:00:00Z", "date_only": false, "value": "2026-05-25T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10859-1", "record": "OPENSUSE-SU-2026:10859-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-25T00:00:00Z", "date_only": false, "value": "2026-05-25T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10859-1", "record": "OPENSUSE-SU-2026:10859-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-05-25T00:00:00Z", "date_only": false, "value": "2026-05-25T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10859-1", "record": "OPENSUSE-SU-2026:10859-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-25T00:00:00Z", "date_only": false, "value": "2026-05-25T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10859-1", "record": "OPENSUSE-SU-2026:10859-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-26T07:19:22.955Z", "date_only": false, "value": "2026-05-26T07:19:22.955744Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-43499", "record": "BELL-CVE-2026-43499", "field": "published"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59142", "record": "RHSA-2026:59142", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59146", "record": "RHSA-2026:59146", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59148", "record": "RHSA-2026:59148", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59142", "record": "RHSA-2026:59142", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59146", "record": "RHSA-2026:59146", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59148", "record": "RHSA-2026:59148", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59142", "record": "RHSA-2026:59142", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59146", "record": "RHSA-2026:59146", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59148", "record": "RHSA-2026:59148", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59142", "record": "RHSA-2026:59142", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59146", "record": "RHSA-2026:59146", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59148", "record": "RHSA-2026:59148", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-05-30T00:00:00Z", "date_only": false, "value": "2026-05-30T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-05-30T00:00:00Z", "date_only": false, "value": "2026-05-30T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": true, "value": "2026-06-01", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0745", "record": "CERTFR-2026-AVI-0745", "field": "vendor_advisories.10.published_at"}, {"timestamp": "2026-06-01T12:00:00Z", "date_only": false, "value": "2026-06-01T12:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-06-02T00:00:00Z", "date_only": true, "value": "2026-06-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0745", "record": "CERTFR-2026-AVI-0745", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-04T17:29:42.230Z", "date_only": false, "value": "2026-06-04T17:29:42.230000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-06-04T22:00:00Z", "date_only": false, "value": "2026-06-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1656", "record": "WID-SEC-W-2026-1656", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": true, "value": "2026-06-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0745", "record": "CERTFR-2026-AVI-0745", "field": "vendor_advisories.8.published_at"}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": true, "value": "2026-06-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0782", "record": "CERTFR-2026-AVI-0782", "field": "vendor_advisories.7.published_at"}, {"timestamp": "2026-06-05T16:12:36Z", "date_only": false, "value": "2026-06-05T16:12:36Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22043-1", "record": "SUSE-SU-2026:22043-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-05T16:12:36Z", "date_only": false, "value": "2026-06-05T16:12:36Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:22043-1", "record": "SUSE-SU-2026:22043-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-05T16:12:36Z", "date_only": false, "value": "2026-06-05T16:12:36Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22043-1", "record": "SUSE-SU-2026:22043-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-05T16:12:36Z", "date_only": false, "value": "2026-06-05T16:12:36Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:22043-1", "record": "SUSE-SU-2026:22043-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-05T16:14:08Z", "date_only": false, "value": "2026-06-05T16:14:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22076-1", "record": "SUSE-SU-2026:22076-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-05T16:14:08Z", "date_only": false, "value": "2026-06-05T16:14:08Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:22076-1", "record": "SUSE-SU-2026:22076-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-05T16:14:08Z", "date_only": false, "value": "2026-06-05T16:14:08Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22076-1", "record": "SUSE-SU-2026:22076-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-05T16:14:08Z", "date_only": false, "value": "2026-06-05T16:14:08Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:22076-1", "record": "SUSE-SU-2026:22076-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-05T17:10:52Z", "date_only": false, "value": "2026-06-05T17:10:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22048-1", "record": "SUSE-SU-2026:22048-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-05T17:10:52Z", "date_only": false, "value": "2026-06-05T17:10:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22087-1", "record": "SUSE-SU-2026:22087-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-05T17:10:52Z", "date_only": false, "value": "2026-06-05T17:10:52Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:22048-1", "record": "SUSE-SU-2026:22048-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-05T17:10:52Z", "date_only": false, "value": "2026-06-05T17:10:52Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:22087-1", "record": "SUSE-SU-2026:22087-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-05T17:10:52Z", "date_only": false, "value": "2026-06-05T17:10:52Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22048-1", "record": "SUSE-SU-2026:22048-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-05T17:10:52Z", "date_only": false, "value": "2026-06-05T17:10:52Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22087-1", "record": "SUSE-SU-2026:22087-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-05T17:10:52Z", "date_only": false, "value": "2026-06-05T17:10:52Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:22048-1", "record": "SUSE-SU-2026:22048-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-05T17:10:52Z", "date_only": false, "value": "2026-06-05T17:10:52Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:22087-1", "record": "SUSE-SU-2026:22087-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-05T18:24:53Z", "date_only": false, "value": "2026-06-05T18:24:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20912-1", "record": "OPENSUSE-SU-2026:20912-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-05T18:24:53Z", "date_only": false, "value": "2026-06-05T18:24:53Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20912-1", "record": "OPENSUSE-SU-2026:20912-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-05T18:24:53Z", "date_only": false, "value": "2026-06-05T18:24:53Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20912-1", "record": "OPENSUSE-SU-2026:20912-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-05T18:24:53Z", "date_only": false, "value": "2026-06-05T18:24:53Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20912-1", "record": "OPENSUSE-SU-2026:20912-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-08T22:00:00Z", "date_only": false, "value": "2026-06-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1656", "record": "WID-SEC-W-2026-1656", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": true, "value": "2026-06-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0745", "record": "CERTFR-2026-AVI-0745", "field": "vendor_advisories.7.published_at"}, {"timestamp": "2026-06-09T08:18:34Z", "date_only": false, "value": "2026-06-09T08:18:34Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2310-1", "record": "SUSE-SU-2026:2310-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-09T08:18:34Z", "date_only": false, "value": "2026-06-09T08:18:34Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:2310-1", "record": "SUSE-SU-2026:2310-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-09T08:18:34Z", "date_only": false, "value": "2026-06-09T08:18:34Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2310-1", "record": "SUSE-SU-2026:2310-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-09T08:18:34Z", "date_only": false, "value": "2026-06-09T08:18:34Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:2310-1", "record": "SUSE-SU-2026:2310-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-09T13:20:53Z", "date_only": false, "value": "2026-06-09T13:20:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2317-1", "record": "SUSE-SU-2026:2317-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-09T13:20:53Z", "date_only": false, "value": "2026-06-09T13:20:53Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:2317-1", "record": "SUSE-SU-2026:2317-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-09T13:20:53Z", "date_only": false, "value": "2026-06-09T13:20:53Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2317-1", "record": "SUSE-SU-2026:2317-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-09T13:20:53Z", "date_only": false, "value": "2026-06-09T13:20:53Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:2317-1", "record": "SUSE-SU-2026:2317-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-09T14:40:06Z", "date_only": false, "value": "2026-06-09T14:40:06.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-43499", "record": "MSRC_CVE-2026-43499", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-06-09T14:40:06Z", "date_only": false, "value": "2026-06-09T14:40:06.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-43499", "record": "MSRC_CVE-2026-43499", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1656", "record": "WID-SEC-W-2026-1656", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": true, "value": "2026-06-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0745", "record": "CERTFR-2026-AVI-0745", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2026-06-10T07:16:12.119Z", "date_only": false, "value": "2026-06-10T07:16:12.119Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-43499", "record": "MSRC_CVE-2026-43499", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-10T08:40:38Z", "date_only": false, "value": "2026-06-10T08:40:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2331-1", "record": "SUSE-SU-2026:2331-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-10T08:40:38Z", "date_only": false, "value": "2026-06-10T08:40:38Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:2331-1", "record": "SUSE-SU-2026:2331-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-10T08:40:38Z", "date_only": false, "value": "2026-06-10T08:40:38Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2331-1", "record": "SUSE-SU-2026:2331-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-10T08:40:38Z", "date_only": false, "value": "2026-06-10T08:40:38Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:2331-1", "record": "SUSE-SU-2026:2331-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-10T08:41:18Z", "date_only": false, "value": "2026-06-10T08:41:18Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2332-1", "record": "SUSE-SU-2026:2332-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-10T08:41:18Z", "date_only": false, "value": "2026-06-10T08:41:18Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:2332-1", "record": "SUSE-SU-2026:2332-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-10T08:41:18Z", "date_only": false, "value": "2026-06-10T08:41:18Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2332-1", "record": "SUSE-SU-2026:2332-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-10T08:41:18Z", "date_only": false, "value": "2026-06-10T08:41:18Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:2332-1", "record": "SUSE-SU-2026:2332-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-10T22:00:00Z", "date_only": false, "value": "2026-06-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1656", "record": "WID-SEC-W-2026-1656", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-06-12T00:00:00Z", "date_only": false, "value": "2026-06-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0745", "record": "CERTFR-2026-AVI-0745", "field": "last_revision_date"}, {"timestamp": "2026-06-12T00:00:00Z", "date_only": false, "value": "2026-06-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0745", "record": "CERTFR-2026-AVI-0745", "field": "initial_release_date"}, {"timestamp": "2026-06-12T00:00:00Z", "date_only": true, "value": "2026-06-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0782", "record": "CERTFR-2026-AVI-0782", "field": "vendor_advisories.5.published_at"}, {"timestamp": "2026-06-12T00:00:00Z", "date_only": false, "value": "2026-06-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0745", "record": "CERTFR-2026-AVI-0745", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-12T11:11:36Z", "date_only": false, "value": "2026-06-12T11:11:36Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2026-2674", "record": "OESA-2026-2674", "field": "published"}, {"timestamp": "2026-06-14T22:00:00Z", "date_only": false, "value": "2026-06-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1656", "record": "WID-SEC-W-2026-1656", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-06-15T00:00:00Z", "date_only": true, "value": "2026-06-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0782", "record": "CERTFR-2026-AVI-0782", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-06-15T17:11:08Z", "date_only": false, "value": "2026-06-15T17:11:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22137-1", "record": "SUSE-SU-2026:22137-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-15T17:11:08Z", "date_only": false, "value": "2026-06-15T17:11:08Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:22137-1", "record": "SUSE-SU-2026:22137-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-15T17:11:08Z", "date_only": false, "value": "2026-06-15T17:11:08Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22137-1", "record": "SUSE-SU-2026:22137-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-15T17:11:08Z", "date_only": false, "value": "2026-06-15T17:11:08Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:22137-1", "record": "SUSE-SU-2026:22137-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-15T18:32:29Z", "date_only": false, "value": "2026-06-15T18:32:29Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22108-1", "record": "SUSE-SU-2026:22108-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-15T18:32:29Z", "date_only": false, "value": "2026-06-15T18:32:29Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:22108-1", "record": "SUSE-SU-2026:22108-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-15T18:32:29Z", "date_only": false, "value": "2026-06-15T18:32:29Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22108-1", "record": "SUSE-SU-2026:22108-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-15T18:32:29Z", "date_only": false, "value": "2026-06-15T18:32:29Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:22108-1", "record": "SUSE-SU-2026:22108-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-15T22:00:00Z", "date_only": false, "value": "2026-06-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1656", "record": "WID-SEC-W-2026-1656", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-06-16T00:00:00Z", "date_only": true, "value": "2026-06-16", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0782", "record": "CERTFR-2026-AVI-0782", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-16T14:35:58Z", "date_only": false, "value": "2026-06-16T14:35:58Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2421-1", "record": "SUSE-SU-2026:2421-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-16T14:35:58Z", "date_only": false, "value": "2026-06-16T14:35:58Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:2421-1", "record": "SUSE-SU-2026:2421-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-16T14:35:58Z", "date_only": false, "value": "2026-06-16T14:35:58Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2421-1", "record": "SUSE-SU-2026:2421-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-16T14:35:58Z", "date_only": false, "value": "2026-06-16T14:35:58Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:2421-1", "record": "SUSE-SU-2026:2421-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-16T22:00:00Z", "date_only": false, "value": "2026-06-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1656", "record": "WID-SEC-W-2026-1656", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2026-06-16T22:00:00Z", "date_only": false, "value": "2026-06-16T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1656", "record": "WID-SEC-W-2026-1656", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T08:45:24.531Z", "date_only": false, "value": "2026-06-17T08:45:24.531+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1656", "record": "WID-SEC-W-2026-1656", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-18T00:00:00Z", "date_only": true, "value": "2026-06-18", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0782", "record": "CERTFR-2026-AVI-0782", "field": "vendor_advisories.12.published_at"}, {"timestamp": "2026-06-18T13:36:00Z", "date_only": false, "value": "2026-06-18T13:36:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2450-1", "record": "SUSE-SU-2026:2450-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-18T13:36:00Z", "date_only": false, "value": "2026-06-18T13:36:00Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:2450-1", "record": "SUSE-SU-2026:2450-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-18T13:36:00Z", "date_only": false, "value": "2026-06-18T13:36:00Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2450-1", "record": "SUSE-SU-2026:2450-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-18T13:36:00Z", "date_only": false, "value": "2026-06-18T13:36:00Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:2450-1", "record": "SUSE-SU-2026:2450-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-19T00:00:00Z", "date_only": false, "value": "2026-06-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0782", "record": "CERTFR-2026-AVI-0782", "field": "last_revision_date"}, {"timestamp": "2026-06-19T00:00:00Z", "date_only": false, "value": "2026-06-19T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0782", "record": "CERTFR-2026-AVI-0782", "field": "initial_release_date"}, {"timestamp": "2026-06-19T00:00:00Z", "date_only": false, "value": "2026-06-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0782", "record": "CERTFR-2026-AVI-0782", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-22T00:00:00Z", "date_only": true, "value": "2026-06-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0807", "record": "CERTFR-2026-AVI-0807", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-06-23T00:00:00Z", "date_only": true, "value": "2026-06-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0807", "record": "CERTFR-2026-AVI-0807", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-06-23T14:31:51Z", "date_only": false, "value": "2026-06-23T14:31:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2591-1", "record": "SUSE-SU-2026:2591-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-23T14:31:51Z", "date_only": false, "value": "2026-06-23T14:31:51Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:2591-1", "record": "SUSE-SU-2026:2591-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-23T14:31:51Z", "date_only": false, "value": "2026-06-23T14:31:51Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2591-1", "record": "SUSE-SU-2026:2591-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-23T14:31:51Z", "date_only": false, "value": "2026-06-23T14:31:51Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:2591-1", "record": "SUSE-SU-2026:2591-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-24T00:00:00Z", "date_only": false, "value": "2026-06-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-06-24T00:00:00Z", "date_only": true, "value": "2026-06-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0807", "record": "CERTFR-2026-AVI-0807", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-24T00:00:00Z", "date_only": false, "value": "2026-06-24T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-06-24T20:15:07.184Z", "date_only": false, "value": "2026-06-24T20:15:07.184353Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2026-43499", "record": "BELL-CVE-2026-43499", "field": "modified"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:38492", "record": "RHSA-2026:38492", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:37728", "record": "RHSA-2026:37728", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39984", "record": "RHSA-2026:39984", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40425", "record": "RHSA-2026:40425", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:41062", "record": "RHSA-2026:41062", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:41063", "record": "RHSA-2026:41063", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": true, "value": "2026-06-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0807", "record": "CERTFR-2026-AVI-0807", "field": "vendor_advisories.19.published_at"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": true, "value": "2026-06-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0833", "record": "CERTFR-2026-AVI-0833", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": true, "value": "2026-06-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0864", "record": "CERTFR-2026-AVI-0864", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:38492", "record": "RHSA-2026:38492", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:37728", "record": "RHSA-2026:37728", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39984", "record": "RHSA-2026:39984", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40425", "record": "RHSA-2026:40425", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:41062", "record": "RHSA-2026:41062", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:41063", "record": "RHSA-2026:41063", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-06-26T00:00:00Z", "date_only": false, "value": "2026-06-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0807", "record": "CERTFR-2026-AVI-0807", "field": "last_revision_date"}, {"timestamp": "2026-06-26T00:00:00Z", "date_only": false, "value": "2026-06-26T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0807", "record": "CERTFR-2026-AVI-0807", "field": "initial_release_date"}, {"timestamp": "2026-06-26T00:00:00Z", "date_only": true, "value": "2026-06-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0833", "record": "CERTFR-2026-AVI-0833", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-06-26T00:00:00Z", "date_only": false, "value": "2026-06-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0807", "record": "CERTFR-2026-AVI-0807", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-29T00:00:00Z", "date_only": true, "value": "2026-06-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0864", "record": "CERTFR-2026-AVI-0864", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2026-06-30T00:00:00Z", "date_only": true, "value": "2026-06-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0833", "record": "CERTFR-2026-AVI-0833", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-30T00:00:00Z", "date_only": true, "value": "2026-06-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0864", "record": "CERTFR-2026-AVI-0864", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-30T11:07:10Z", "date_only": false, "value": "2026-06-30T11:07:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22458-1", "record": "SUSE-SU-2026:22458-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-30T11:07:10Z", "date_only": false, "value": "2026-06-30T11:07:10Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:22458-1", "record": "SUSE-SU-2026:22458-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-30T11:07:10Z", "date_only": false, "value": "2026-06-30T11:07:10Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22458-1", "record": "SUSE-SU-2026:22458-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-30T11:07:10Z", "date_only": false, "value": "2026-06-30T11:07:10Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:22458-1", "record": "SUSE-SU-2026:22458-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-30T17:41:36Z", "date_only": false, "value": "2026-06-30T17:41:36Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22433-1", "record": "SUSE-SU-2026:22433-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-30T17:41:36Z", "date_only": false, "value": "2026-06-30T17:41:36Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:22433-1", "record": "SUSE-SU-2026:22433-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-30T17:41:36Z", "date_only": false, "value": "2026-06-30T17:41:36Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22433-1", "record": "SUSE-SU-2026:22433-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-30T17:41:36Z", "date_only": false, "value": "2026-06-30T17:41:36Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:22433-1", "record": "SUSE-SU-2026:22433-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-01T00:00:00Z", "date_only": true, "value": "2026-07-01", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0831", "record": "CERTFR-2026-AVI-0831", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-07-01T00:00:00Z", "date_only": true, "value": "2026-07-01", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0833", "record": "CERTFR-2026-AVI-0833", "field": "vendor_advisories.26.published_at"}, {"timestamp": "2026-07-02T00:00:00Z", "date_only": true, "value": "2026-07-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0831", "record": "CERTFR-2026-AVI-0831", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-07-02T06:19:37.934Z", "date_only": false, "value": "2026-07-02T06:19:37.934506Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f16bfe3f-5e3e-417f-a7b0-62ec17323479", "url": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702"}, {"timestamp": "2026-07-03T00:00:00Z", "date_only": false, "value": "2026-07-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0831", "record": "CERTFR-2026-AVI-0831", "field": "last_revision_date"}, {"timestamp": "2026-07-03T00:00:00Z", "date_only": false, "value": "2026-07-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0833", "record": "CERTFR-2026-AVI-0833", "field": "last_revision_date"}, {"timestamp": "2026-07-03T00:00:00Z", "date_only": false, "value": "2026-07-03T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0831", "record": "CERTFR-2026-AVI-0831", "field": "initial_release_date"}, {"timestamp": "2026-07-03T00:00:00Z", "date_only": false, "value": "2026-07-03T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0833", "record": "CERTFR-2026-AVI-0833", "field": "initial_release_date"}, {"timestamp": "2026-07-03T00:00:00Z", "date_only": true, "value": "2026-07-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0862", "record": "CERTFR-2026-AVI-0862", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-07-03T00:00:00Z", "date_only": false, "value": "2026-07-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0831", "record": "CERTFR-2026-AVI-0831", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-03T00:00:00Z", "date_only": false, "value": "2026-07-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0833", "record": "CERTFR-2026-AVI-0833", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-04T00:00:00Z", "date_only": false, "value": "2026-07-04T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-07-04T00:00:00Z", "date_only": false, "value": "2026-07-04T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-07-04T00:00:00Z", "date_only": false, "value": "2026-07-04T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-07-04T00:00:00Z", "date_only": false, "value": "2026-07-04T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-07-04T00:00:00Z", "date_only": false, "value": "2026-07-04T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-07-04T00:00:00Z", "date_only": false, "value": "2026-07-04T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-07-05T00:00:00Z", "date_only": true, "value": "2026-07-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0862", "record": "CERTFR-2026-AVI-0862", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-07-06T00:00:00Z", "date_only": true, "value": "2026-07-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0861", "record": "CERTFR-2026-AVI-0861", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-07-06T00:00:00Z", "date_only": true, "value": "2026-07-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0864", "record": "CERTFR-2026-AVI-0864", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-07-06T06:15:09.707Z", "date_only": false, "value": "2026-07-06T06:15:09.707057Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3610cbf7-e9ea-4ca7-b47a-50ebeba71c47", "url": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706"}, {"timestamp": "2026-07-08T00:00:00Z", "date_only": true, "value": "2026-07-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0864", "record": "CERTFR-2026-AVI-0864", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2026-07-08T02:14:54.336Z", "date_only": false, "value": "2026-07-08T02:14:54.336844Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq42deor742i", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "bc6bfd9c-f537-4037-9e90-ebef196fe0e9", "content": "Researchers disclosed GhostLock (CVE-2026-43499) with public PoC code. The 15-year Linux kernel bug enables privilege escalation and container escape.\n\n#GhostLock #CVE202643499 #LinuxKernel #PrivilegeEscalation #ContainerEscape #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mq42deor742i"}, {"timestamp": "2026-07-08T06:34:44.727Z", "date_only": false, "value": "2026-07-08T06:34:44.727323Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq4itynutb2u", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8679f940-80d3-4311-887e-3da7441ccb8f", "content": "GhostLock (CVE-2026-43499) is a Linux use-after-free that allows any logged-in user to gain full root control on unpatched systems.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq4itynutb2u"}, {"timestamp": "2026-07-08T07:24:23.613Z", "date_only": false, "value": "2026-07-08T07:24:23.613614Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/116883158678172054", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a338ad5d-d731-4be1-bc55-9bae3baa8b02", "content": "\ud83d\uded1 A newly found 15-year-old #Linux kernel flaw, GhostLock (CVE-2026-43499), could let any logged-in user gain root on unpatched distributions.\nA working exploit code is now public, and it escaped containers in tests.\nRead details here: https://thehackernews.com/2026/07/15-year-old-ghostlock-flaw-enables-root.html", "url": "https://infosec.exchange/users/tomcat/statuses/116883158678172054"}, {"timestamp": "2026-07-08T07:36:17.608Z", "date_only": false, "value": "2026-07-08T07:36:17.608285Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mq4mc3475y27", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "905f6fcc-93e9-4f11-966c-76ffe04d1a81", "content": "15\u5e74\u9593\u5b58\u5728\u3057\u305fLinux\u30ab\u30fc\u30cd\u30eb\u306e\u300cGhostLock\u300d\u8106\u5f31\u6027\u3001root\u6a29\u9650\u596a\u53d6\u3068\u30b3\u30f3\u30c6\u30ca\u30a8\u30b9\u30b1\u30fc\u30d7\u3092\u53ef\u80fd\u306b\n\nNebula Security\u306e\u7814\u7a76\u8005\u3089\u304c\u3001Linux\u30ab\u30fc\u30cd\u30eb\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cGhostLock\u300d\uff08CVE-2026-43499\uff09\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f15\u5e74\u9593\u306b\u308f\u305f\u308a\u5b58\u5728\u3057\u7d9a\u3051\u3066\u304a\u308a\u3001\u307b\u307c\u3059\u3079\u3066\u306eLinux\u30c7\u30a3\u30b9\u30c8\u30ea\u30d3\u30e5\u30fc\u30b7\u30e7\u30f3\u306b\u304a\u3044\u3066\u78ba\u5b9f\u306a\u6a29\u9650\u6607\u683c\u3068\u30b3\u30f3\u30c6\u30ca\u30a8\u30b9\u30b1\u30fc\u30d7\u3092\u53ef\u80fd\u306b\u3057\u307e\u3059\u3002\u554f\u984c\u306f2011...", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mq4mc3475y27"}, {"timestamp": "2026-07-08T08:17:05.391Z", "date_only": false, "value": "2026-07-08T08:17:05.391444Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mq4okzprzt27", "record": "cve-2026-43499", "field": "creation_timestamp", "uuid": "e1a55179-ba6b-427b-be6b-2a28dc34a4f7", "content": "GhostLock: 15-Year Linux Kernel Flaw Grants Root to Any Local User\n\nhttps://blindthoughts.com/ghostlock-linux-kernel-root-escape-cve-2026-43499\n\n#linux #kernel #privilegeescalation #containerescape #cve", "url": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mq4okzprzt27"}, {"timestamp": "2026-07-08T08:24:30.147Z", "date_only": false, "value": "2026-07-08T08:24:30.147420Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mq4oybosik22", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "6df95cc5-b3b8-4319-9f6a-e5203756ce52", "content": "\ud83e\udd16 CVE-2026-43499 (GhostLock) : 15-year-old Linux kernel flaw. Lets any local user gain full root access & escape containers on all major distros. No special privileges needed.\\n\\nhttps://thehackernews.com/2026/07/15-year-old-ghostlock-flaw-enables-root.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mq4oybosik22"}, {"timestamp": "2026-07-08T10:00:59.317Z", "date_only": false, "value": "2026-07-08T10:00:59.317706Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/07/15-year-old-ghostlock-flaw-enables-root.html", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c25bf3b0-61b2-47c6-89fd-bcd749764db0", "content": "Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched.\n\nThe vulnerable code has shipped by default in essentially every mainstream distribution since 2011. The flaw needs no special permission, no unusual settings, and no network", "url": "https://thehackernews.com/2026/07/15-year-old-ghostlock-flaw-enables-root.html"}, {"timestamp": "2026-07-08T10:02:37.913Z", "date_only": false, "value": "2026-07-08T10:02:37.913142Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mq4uhqrxzb2x", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "550406cf-d37b-4825-ab1b-032013b645be", "content": "Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not bee...\n\n\ud83d\udd17 https://thehackernews.com/2026/07/15-year-old-ghostlock-flaw-enables-root.html", "url": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mq4uhqrxzb2x"}, {"timestamp": "2026-07-08T14:04:52.557Z", "date_only": false, "value": "2026-07-08T14:04:52.557829Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mq5byvighn2o", "record": "cve-2026-43499", "field": "creation_timestamp", "uuid": "a7ce0719-5327-4e20-83ca-b52acae01471", "content": "GhostLock (CVE-2026-43499): a 15-year-old Linux kernel flaw hands any local user root in 5 seconds. Patch ICS, OT, and container hosts now. #ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/ghostlock-cve-2026-43499-linux-root-container-escape-2026", "url": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mq5byvighn2o"}, {"timestamp": "2026-07-08T19:53:22.254Z", "date_only": false, "value": "2026-07-08T19:53:22.254102Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/grsecurity.bsky.social/post/3mq5vhkasy22p", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ca3e89fe-6bff-45bd-a1ea-019a476d0b50", "content": "If you're just now hearing about GhostLock and looking to fix it, make sure you don't introduce two unpriv-reachable DoSes associated with its fixes. The fix the Linux CNA lists for CVE-2026-43499 introduces a NULL deref, which caused CVE-2026-53166 to be issued.", "url": "https://bsky.app/profile/grsecurity.bsky.social/post/3mq5vhkasy22p"}, {"timestamp": "2026-07-08T20:49:15.286Z", "date_only": false, "value": "2026-07-08T20:49:15.286249Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.social/users/jschauma/statuses/116886323468147785", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1c35ff80-d367-4f47-81d1-7e76468493c8", "content": "Here's your weekly batch of Linux local privilege escalation vulnerabilities:\nCVE-2026-43499 \"GhostLock\"https://nebusec.ai/research/ionstack-part-2/\nCVE-2026-46242 \"Bad Epoll\"https://github.com/J-jaeyoung/bad-epoll\nEnjoy! \u270c\ufe0f", "url": "https://mstdn.social/users/jschauma/statuses/116886323468147785"}, {"timestamp": "2026-07-08T20:49:19.881Z", "date_only": false, "value": "2026-07-08T20:49:19.881415Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3mq5ym2fuptm2", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9c0b785e-80c8-408e-a586-daf4b7c1fc39", "content": "Here's your weekly batch of Linux local privilege escalation vulnerabilities:\n\nCVE-2026-43499 \"GhostLock\"\nhttps://nebusec.ai/research/ionstack-part-2/\n\nCVE-2026-46242 \"Bad Epoll\"\nhttps://github.com/J-jaeyoung/bad-epoll\n\nEnjoy! \u270c\ufe0f", "url": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3mq5ym2fuptm2"}, {"timestamp": "2026-07-08T21:29:54.368Z", "date_only": false, "value": "2026-07-08T21:29:54.368391Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq62uouavk24", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b5387688-09fc-496f-88be-131f5bcb49c1", "content": "Linux: GhostLock / CVE-2026-43499 / stack-UAF and LPE in kernels 2.6.39 till 7.1", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq62uouavk24"}, {"timestamp": "2026-07-08T22:22:10.721Z", "date_only": false, "value": "2026-07-08T22:22:10.721Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-43499", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-08T23:10:03.591Z", "date_only": false, "value": "2026-07-08T23:10:03.591529Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mq6ahrcief2p", "record": "cve-2026-43499", "field": "creation_timestamp", "uuid": "8ed55117-612f-46f2-897d-7823cc212890", "content": "\ud83d\udd0d Nouvel article : CVE-2026-43499 (GhostLock)\n\nStack-UAF 15 ans dans le rtmutex Linux, d\u00e9couvert par l'IA VEGA. LPE + container escape \u00e0 97%, 92 337 $ de bounty. Aucun privil\u00e8ge requis.\n\n\ud83d\udcdd https://madpowah.github.io/2026/07/09/cve-2026-43499-ghostlock-ionstack.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mq6ahrcief2p"}, {"timestamp": "2026-07-09T00:00:00Z", "date_only": true, "value": "2026-07-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0861", "record": "CERTFR-2026-AVI-0861", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-07-09T00:19:38.077Z", "date_only": false, "value": "2026-07-09T00:19:38.077322Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mq6ee6nzok2a", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f42637bd-7418-4dd0-a8b6-45f76624c2c2", "content": "15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros\n\nResearchers at\u00a0Nebula Security\u00a0have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full\u00a0root\u00a0control of a machine that has not been patched.\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mq6ee6nzok2a"}, {"timestamp": "2026-07-09T01:18:33.495Z", "date_only": false, "value": "2026-07-09T01:18:33.495668Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities_20260702", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "eac51771-3446-4c91-8a70-016ee0c98580", "url": "https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities_20260702"}, {"timestamp": "2026-07-09T04:30:17.098Z", "date_only": false, "value": "2026-07-09T04:30:17.098846Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq6sef2uxe2t", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "577bdb34-9c9d-4935-a70c-8899b769c74a", "content": "Re: Linux: GhostLock / CVE-2026-43499 / stack-UAF and LPE in kernels 2.6.39 till 7.1", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq6sef2uxe2t"}, {"timestamp": "2026-07-09T04:51:06.780Z", "date_only": false, "value": "2026-07-09T04:51:06.780391Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mq6tjis2lm2z", "record": "cve-2026-43499", "field": "creation_timestamp", "uuid": "9dc8528f-3999-46c8-b8c0-7d7613b2b0cf", "content": "GhostLock (CVE-2026-43499): a fifteen-year-old rtmutex bug just handed root to anyone with a\u00a0shell\n\nGhostLock (CVE-2026-43499) is a 15-year rtmutex use-after-free giving root to any\u2026\n\nhttps://thecybersecguru.com/news/ghostlock-cve-2026-43499-linux-kernel-0day/?utm_source=bluesky&utm_medium=social", "url": "https://bsky.app/profile/thecybersecguru.com/post/3mq6tjis2lm2z"}, {"timestamp": "2026-07-09T04:58:12.601Z", "date_only": false, "value": "2026-07-09T04:58:12.601047Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3mq6twcfvpl2m", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9a4cfb8e-534c-4446-bd82-2f1000e182ec", "content": "Public Exploit Turns 15-Year Linux Kernel Flaw Into 5-Second Root\u00a0Attack\n\nLinux kernel privilege escalation vulnerability GhostLock (CVE-2026-43499) has lurked undetected in every major distribution since 2011. A public exploit now lets any logged-in user gain full root in roughly five seconds, no\u2026", "url": "https://bsky.app/profile/newsarea.bsky.social/post/3mq6twcfvpl2m"}, {"timestamp": "2026-07-09T08:13:23.871Z", "date_only": false, "value": "2026-07-09T08:13:23.871945Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dacbarbos.mastodon.social.ap.brid.gy/post/3mq76t6jv3fm2", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a5ec23e5-43c8-4c81-a7ad-c79f6d120563", "content": "MT @nebusecurity@x.com\nGhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. #infosec\nhttps://github.com/NebuSec/CyberMeowfia/blob/main/IonStack/CVE-2026-43499/poc/poc.c", "url": "https://bsky.app/profile/dacbarbos.mastodon.social.ap.brid.gy/post/3mq76t6jv3fm2"}, {"timestamp": "2026-07-09T08:15:40.378Z", "date_only": false, "value": "2026-07-09T08:15:40.378020Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dacbarbos.eurosky.social/post/3mq76xfejd223", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3274fc87-5e50-4612-ad1b-743c721f3b12", "content": "MT @nebusecurity@x.com \nGhostLock (CVE-2026-43499) is a 15yr old kernel 0-day we used in IonStack full chain exploit. #infosec \ngithub.com/NebuSec/Cybe...", "url": "https://bsky.app/profile/dacbarbos.eurosky.social/post/3mq76xfejd223"}, {"timestamp": "2026-07-09T11:02:28.373Z", "date_only": false, "value": "2026-07-09T11:02:28.373338Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq7ibnyxfs2r", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8e5568db-a4f4-47ea-9a10-fe4dd3731cbb", "content": "GhostLock (CVE-2026-43499) is a Linux kernel flaw enabling unprivileged local users to gain root control in about five seconds on unpatched systems.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq7ibnyxfs2r"}, {"timestamp": "2026-07-09T12:04:42.595Z", "date_only": false, "value": "2026-07-09T12:04:42.595013Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq7lqx7dei2b", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f7225a3f-a91a-4ca4-899a-57827b05ecd7", "content": "GhostLock (CVE-2026-43499) is a long-lived Linux use-after-free flaw enabling local root escalation and container escape.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq7lqx7dei2b"}, {"timestamp": "2026-07-09T13:00:33.670Z", "date_only": false, "value": "2026-07-09T13:00:33.670463Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mq7outfyec2i", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "58e917aa-dc78-4ac5-81c5-19b4f873e438", "content": "Linux kernel flaw GhostLock (CVE-2026-43499) went undiscovered for 15 years, enabling local root and container escape. Nebula Security earned $92,337 from Google for its exploit proof. #GhostLock #kernelCTF #Linux", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mq7outfyec2i"}, {"timestamp": "2026-07-09T13:45:27.352Z", "date_only": false, "value": "2026-07-09T13:45:27.352475Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mq7rf3plwp2v", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "625868f1-77f6-4ef5-80fe-3fcc3cfefdce", "content": "GhostLock (CVE-2026-43499) : 15 ans dans le noyau Linux, exploit fiable \u00e0 97 %, root en 5 secondes.\n\nLe point complet \ud83d\udc47\nwww.it-connect.fr/ghostlock-fa...\n\n#linux #infosec", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3mq7rf3plwp2v"}, {"timestamp": "2026-07-09T16:16:38.576Z", "date_only": false, "value": "2026-07-09T16:16:38.576893Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linuxiac.bsky.social/post/3mq7ztecd2s27", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8877860f-dc73-4fb8-b4e7-c4d916a9d64b", "content": "CVE-2026-43499, dubbed GhostLock by Nebula Security, exposes a long-standing Linux kernel futex bug that can lead to local root access.\nlinuxiac.com/15-year-old-...\n\n#Linux #Kernel #Security #OpenSource", "url": "https://bsky.app/profile/linuxiac.bsky.social/post/3mq7ztecd2s27"}, {"timestamp": "2026-07-09T17:20:06.594Z", "date_only": false, "value": "2026-07-09T17:20:06.594136Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqa5eurpyj2u", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "cef0d4c6-2cc9-4c91-b095-26fb1124f43a", "content": "Re: Linux: GhostLock / CVE-2026-43499 / stack-UAF and LPE in kernels 2.6.39 till 7.1", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqa5eurpyj2u"}, {"timestamp": "2026-07-09T17:22:06.926Z", "date_only": false, "value": "2026-07-09T17:22:06.926829Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/almalinux.org/post/3mqa5iguh3o2b", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8ef3737c-df6a-47ed-95ac-cc4352066a33", "content": "We are shipping patched kernels for GhostLock (CVE-2026-43499), a new Linux kernel local-privilege-escalation flaw.\n\nEvery supported AlmaLinux release is affected.\n\nHelp us with testing and learn more: https://almalinux.org/blog/2026-07-09-ghostlock/?utm_medium=social&utm_source=bluesky", "url": "https://bsky.app/profile/almalinux.org/post/3mqa5iguh3o2b"}, {"timestamp": "2026-07-09T20:07:43.793Z", "date_only": false, "value": "2026-07-09T20:07:43.793040Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/adjordan.bsky.social/post/3mqagqmq7es2z", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "89ef24f5-113b-413f-824f-1886283807b1", "content": "\"Researchers at\u00a0Nebula Security\u00a0have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full\u00a0root\u00a0control of a machine that has not been patched.\"\n thehackernews.com/2026/07/15-y....", "url": "https://bsky.app/profile/adjordan.bsky.social/post/3mqagqmq7es2z"}, {"timestamp": "2026-07-09T20:10:42.329Z", "date_only": false, "value": "2026-07-09T20:10:42.329097Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mqagvuhg7l2d", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5c6ed8eb-11da-4208-bde2-59c0486069e2", "content": "\ud83d\udd34 EXPLOITED\n\nGhostLock (CVE-2026-43499): a 15-year-old Linux kernel bug gives any local user root and breaks out of containers to the host.\n\nEvery major distro since 2011 is affected; a working exploit is public.\n\nPatch multi-tenant hosts first.", "url": "https://bsky.app/profile/suriq.io/post/3mqagvuhg7l2d"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0861", "record": "CERTFR-2026-AVI-0861", "field": "last_revision_date"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0862", "record": "CERTFR-2026-AVI-0862", "field": "last_revision_date"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0864", "record": "CERTFR-2026-AVI-0864", "field": "last_revision_date"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": true, "value": "2026-07-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0861", "record": "CERTFR-2026-AVI-0861", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0862", "record": "CERTFR-2026-AVI-0862", "field": "initial_release_date"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0864", "record": "CERTFR-2026-AVI-0864", "field": "initial_release_date"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": true, "value": "2026-07-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0899", "record": "CERTFR-2026-AVI-0899", "field": "vendor_advisories.5.published_at"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0861", "record": "CERTFR-2026-AVI-0861", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0862", "record": "CERTFR-2026-AVI-0862", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-10T00:00:00Z", "date_only": false, "value": "2026-07-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0864", "record": "CERTFR-2026-AVI-0864", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-10T01:30:50.493Z", "date_only": false, "value": "2026-07-10T01:30:50.493891Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stevensaus.com/post/3mqaysghdws2k", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "eb635b8d-fcdb-4076-ae3e-a3b9f4849a3b", "content": "15-Year-Old Linux Kernel GhostLock Flaw Lets Local Users Gain Root  \n\nCVE-2026-43499, dubbed GhostLock by Nebula Security, exposes a long-standing Linux kernel futex bug that can lead to local root access.  \n\n  \n\nhttps://s.faithcollapsing.com/wt27a", "url": "https://bsky.app/profile/stevensaus.com/post/3mqaysghdws2k"}, {"timestamp": "2026-07-10T01:31:14.504Z", "date_only": false, "value": "2026-07-10T01:31:14.504320Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/StevenSaus.faithcollapsing.com.ap.brid.gy/post/3mqayt3ktboq2", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1c5808c5-e7a6-416b-91df-b73acd5c0cd6", "content": "15-Year-Old Linux Kernel GhostLock Flaw Lets Local Users Gain Root\n\nCVE-2026-43499, dubbed GhostLock by Nebula Security, exposes a long-standing Linux kernel futex bug that can lead to local root access.\n\n#kernel #linux-&-open-source-news #software [\u2026] \n\n[Original post on faithcollapsing.com]", "url": "https://bsky.app/profile/StevenSaus.faithcollapsing.com.ap.brid.gy/post/3mqayt3ktboq2"}, {"timestamp": "2026-07-10T06:29:23.730Z", "date_only": false, "value": "2026-07-10T06:29:23.730000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:39984", "record": "RHSA-2026:39984", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-07-10T06:29:23.730Z", "date_only": false, "value": "2026-07-10T06:29:23.730000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:40425", "record": "RHSA-2026:40425", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-07-10T06:29:23.730Z", "date_only": false, "value": "2026-07-10T06:29:23.730000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:41062", "record": "RHSA-2026:41062", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-07-10T06:29:23.730Z", "date_only": false, "value": "2026-07-10T06:29:23.730000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:41063", "record": "RHSA-2026:41063", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-07-10T08:00:09.674Z", "date_only": false, "value": "2026-07-10T08:00:09.674894Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bitralix.com/post/3mqboklj3kk2a", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5e87cbad-f38e-46c6-989d-25cd80a43975", "content": "CVE-2026-43499: ojo al host \ud83e\udde9\n\nEn contenedores, no basta con mirar la imagen: el kernel del host sostiene el aislamiento. Revisar versi\u00f3n, privilegios y reinicios pendientes puede evitar sorpresas. \ud83d\udd10\n\nConsulta el contenido completo aqu\u00ed: \ud83d\udc47\nbitralix.es/cww80\n\n#Linux #Seguridad", "url": "https://bsky.app/profile/bitralix.com/post/3mqboklj3kk2a"}, {"timestamp": "2026-07-10T08:04:38.646Z", "date_only": false, "value": "2026-07-10T08:04:38.646703Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mqbosj5xcc27", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3f716f1c-9a5d-4069-8dd6-3456bf854529", "content": "GhostLock (CVE-2026-43499): una vulnerabilitat que porta 15 anys al kernel de Linux i que permet a qualsevol usuari amb acc\u00e9s local convertir-se en root sense necessitar permisos especials. Tamb\u00e9 permet escapar de contenidors. Solucionat al kernel 7.1.\n thehackernews.com/2026/07/15-y...", "url": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mqbosj5xcc27"}, {"timestamp": "2026-07-10T09:12:20.404Z", "date_only": false, "value": "2026-07-10T09:12:20.404590Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tugate.ch/post/3mqbslnru2i2v", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "96012377-150c-4582-896e-c389a6dbd970", "content": "Falha GhostLock no Linux permite controlo total de sistemas desatualizados. Investigadores da Nebula Security divulgaram a vulnerabilidade GhostLock (CVE-2026-43499), que afeta a grande maioria das distribui\u00e7\u00f5es do Linux desde 2011. \ud83d\udea8 \n\n#controlo #falha #linux ", "url": "https://bsky.app/profile/tugate.ch/post/3mqbslnru2i2v"}, {"timestamp": "2026-07-10T12:26:51Z", "date_only": false, "value": "2026-07-10T12:26:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:37728", "record": "RHSA-2026:37728", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-10T12:26:51Z", "date_only": false, "value": "2026-07-10T12:26:51+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:37728", "record": "RHSA-2026:37728", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-10T12:26:51Z", "date_only": false, "value": "2026-07-10T12:26:51+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:37728", "record": "RHSA-2026:37728", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-10T19:42:32.699Z", "date_only": false, "value": "2026-07-10T19:42:32.699041Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/radwebhosting.com/post/3mqcvska6t42f", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3c6041d9-5f6a-4061-add9-345ebff06efc", "content": "GhostLock (CVE-2026-43499): What It Is and Why We Patched All Managed Servers \n\nThis article provides an overview of recently patched #security vulnerability, Ghostlock (CVE-2026-43499).\nGhostLock (CVE-2026-43499): What It Is, Why It ...\nContinued \ud83d\udc49 #criticalvulnerability #privilegeescalation", "url": "https://bsky.app/profile/radwebhosting.com/post/3mqcvska6t42f"}, {"timestamp": "2026-07-10T19:46:02.845Z", "date_only": false, "value": "2026-07-10T19:46:02.845313Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/radwebhosting.com/post/3mqcvysolpt2l", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "af5a7222-9fe5-4a3e-991f-75091f0e8158", "content": "GhostLock (CVE-2026-43499): What It Is and Why We Patched All Managed Servers \n\nThis article provides an overview of recently patched #security vulnerability, Ghostlock (CVE-2026-43499).\nGhostLock (CVE-2026-43499): What It Is, Why It ...\nContinued \ud83d\udc49 #privilegeescalation #criticalvulnerability", "url": "https://bsky.app/profile/radwebhosting.com/post/3mqcvysolpt2l"}, {"timestamp": "2026-07-10T20:57:03.246Z", "date_only": false, "value": "2026-07-10T20:57:03.246915Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/radwebhosting.com/post/3mqczxrpxxo2g", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "da9aec49-ea02-42e5-bd4f-5b746ea54b52", "content": "Updated Post: GhostLock (CVE-2026-43499): What It Is and Why We Patched All Managed Servers\n#ServiceAnnouncement", "url": "https://bsky.app/profile/radwebhosting.com/post/3mqczxrpxxo2g"}, {"timestamp": "2026-07-10T21:17:42.076Z", "date_only": false, "value": "2026-07-10T21:17:42.076963Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bestofhn.bsky.social/post/3mqd34oxqpb2s", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1deabeb4-ef3f-470a-a01d-e3374409b793", "content": "GhostLock, a Linux kernel stack-UAF (CVE-2026-43499) since 2011.\n\nSubmit to upvote on HN\nhttps://news.ycombinator.com/submitlink?u=https%3A%2F%2Fnebusec.ai%2Fresearch%2Fionstack-part-2%2F&t=GhostLock%2C%20a%20stack-UAF%20that%20has%20existed%20in%20ALL%20Linux%20distributions%20for%2015%20years", "url": "https://bsky.app/profile/bestofhn.bsky.social/post/3mqd34oxqpb2s"}, {"timestamp": "2026-07-11T16:00:22.183Z", "date_only": false, "value": "2026-07-11T16:00:22.183632Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mqezu7be4c2p", "record": "cve-2026-43499", "field": "creation_timestamp", "uuid": "d7762880-3a6c-495e-8282-39c966c14a05", "content": "\ud83d\udce2 GhostLock (CVE-2026-43499) : stack-UAF dans le noyau Linux depuis 15 ans, exploit stable \u00e0 97%\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nPubli\u00e9 le 7 juillet 2026 p\u2026\nhttps://cyberveille.ch/posts/2026-07-11-ghostlock-cve-2026-43499-stack-uaf-dans-le-noyau-linux-depuis-15-ans-exploit-stable-a-97/ #CVE_2026_43499 #Cyberveille", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mqezu7be4c2p"}, {"timestamp": "2026-07-12T07:39:15.855Z", "date_only": false, "value": "2026-07-12T07:39:15.855898Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kevinhermes.bsky.social/post/3mqgod3blsz2p", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "424781fb-7f19-44f1-ad97-bd8a762e6a32", "content": "A 15-year-old Linux kernel flaw just went public \u2014 any local user gets root, and it escapes Docker containers. GhostLock (CVE-2026-43499) is live.", "url": "https://bsky.app/profile/kevinhermes.bsky.social/post/3mqgod3blsz2p"}, {"timestamp": "2026-07-12T09:56:23.114Z", "date_only": false, "value": "2026-07-12T09:56:23.114726Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/msolde.bsky.social/post/3mqgvyakllc2f", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5ea4ddd6-4599-47f3-9899-42ff1cf61b51", "content": "\u201cLocal\u201d does not mean \u201clow risk.\u201d GhostLock (CVE-2026-43499) lets an unprivileged Linux process gain root. On shared hosts, containers or CI runners, one small breach can become full system compromise. Patch, reboot, and verify the running kernel. #Linux #CyberSecurity", "url": "https://bsky.app/profile/msolde.bsky.social/post/3mqgvyakllc2f"}, {"timestamp": "2026-07-12T12:00:22.424Z", "date_only": false, "value": "2026-07-12T12:00:22.424394Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mqh4vxp4ib2p", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f5c2b86e-86f7-4df0-9431-fa829e75d368", "content": "Linux kernel GhostLock (CVE-2026-43499) can let logged-in users gain full root and escape containers on unpatched systems. Patch immediately and verify kernel version\u2026 #Cybersecurity #Vulnerability #CloudSecurity\n\nSource: https://thehackernews.com/2026/07/15-year-old-ghostlock-flaw-enables-root.html", "url": "https://bsky.app/profile/iberianm.bsky.social/post/3mqh4vxp4ib2p"}, {"timestamp": "2026-07-13T00:00:00Z", "date_only": true, "value": "2026-07-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0899", "record": "CERTFR-2026-AVI-0899", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-07-13T00:00:00Z", "date_only": false, "value": "2026-07-13T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:38491", "record": "ALSA-2026:38491", "field": "published"}, {"timestamp": "2026-07-13T00:00:00Z", "date_only": false, "value": "2026-07-13T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_almalinux \u00b7 ALSA-2026:38492", "record": "ALSA-2026:38492", "field": "published"}, {"timestamp": "2026-07-13T04:44:38.622Z", "date_only": false, "value": "2026-07-13T04:44:38.622961Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hn-frontpage-bot.bsky.social/post/3mqiuzqatk222", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "af093290-61a7-49bb-a022-d085718ac43e", "content": "GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel vulnerability involving a stack-based use-after-free in the rtmutex subsystem. The flaw allows unprivileged local attackers to achieve privilege escalation and container escape. Users should update to the latest LTS.", "url": "https://bsky.app/profile/hn-frontpage-bot.bsky.social/post/3mqiuzqatk222"}, {"timestamp": "2026-07-13T09:10:08Z", "date_only": false, "value": "2026-07-13T09:10:08+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:38492", "record": "RHSA-2026:38492", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-13T09:10:08Z", "date_only": false, "value": "2026-07-13T09:10:08+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:38492", "record": "RHSA-2026:38492", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-13T09:10:08Z", "date_only": false, "value": "2026-07-13T09:10:08+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:38492", "record": "RHSA-2026:38492", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-13T12:44:17.090Z", "date_only": false, "value": "2026-07-13T12:44:17.090742Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybersidekick.bsky.social/post/3mqjptg4naj2h", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e0e03a25-1525-4b96-b935-2de70aee3bc1", "content": "GhostLock (CVE-2026-43499): A critical Linux kernel privilege escalation that bypasses Kubernetes security controls entirely. Multi-tenant clusters at risk. Here's what you need to know \ud83e\uddf5", "url": "https://bsky.app/profile/thecybersidekick.bsky.social/post/3mqjptg4naj2h"}, {"timestamp": "2026-07-13T13:00:04.154Z", "date_only": false, "value": "2026-07-13T13:00:04.154773Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/6234", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "fa64266e-2cde-4a9e-a540-611501bc11f4", "content": "IonStack: root Android 17 \u0441 \u043e\u0434\u043d\u043e\u0433\u043e URL\n\nNebula Security \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 IonStack \u2014 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0443\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 Firefox \u2192 Linux kernel, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430 Android 17 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0432\u0435\u0441\u0442\u0438 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a \u043f\u043e URL \u0434\u043e root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2026-10702, JIT miscompilation \u0432 JavaScript Engine Firefox, \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f \u0432 Firefox 151.0.3, \u0438 CVE-2026-43499 GhostLock \u2014 use-after-free \u0432 rtmutex/futex-PI \u043a\u043e\u0434\u0435 \u044f\u0434\u0440\u0430 Linux.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0442\u043e browser-to-kernel full chain. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0431\u0430\u0433 \u0432 Firefox \u0434\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430\u0442\u0435\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f kernel LPE \u043f\u0440\u043e\u0431\u0438\u0432\u0430\u0435\u0442 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423 GhostLock \u043c\u0435\u0445\u0430\u043d\u0438\u043a\u0430: \u043e\u0431\u044b\u0447\u043d\u044b\u0435 threading/futex syscalls \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u0438\u0441\u044f\u0447\u0438\u0439 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u0441\u0442\u0435\u043a \u044f\u0434\u0440\u0430; \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Nebula, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u2014 Linux 2.6.39-rc1 \u0434\u043e 7.1-rc1 \u043f\u0440\u0438 CONFIG_FUTEX_PI=y, \u0430 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432 kernelCTF \u0431\u044b\u043b\u0430 \u043e\u043a\u043e\u043b\u043e 97% \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439.\n\n\u0412\u0430\u0436\u043d\u043e\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435: \u044d\u0442\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u0434\u0435\u043c\u043e \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 PoC, \u0430 \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. Android-\u0447\u0430\u0441\u0442\u044c \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 Firefox/Fenix \u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u044f\u0434\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435; \u043d\u0430 \u0434\u0435\u043c\u043e-\u0441\u0430\u0439\u0442\u0435 Nebula \u043f\u0440\u044f\u043c\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043f\u043e\u0442\u0435\u0440\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udc31  GitHub PoC\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2 MAX", "url": "https://t.me/poxek/6234"}, {"timestamp": "2026-07-13T13:00:30.080Z", "date_only": false, "value": "2026-07-13T13:00:30.080971Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/enakat-it.bsky.social/post/3mqjqqcmh7626", "record": "cve-2026-43499", "field": "creation_timestamp", "uuid": "a121993d-878e-463e-a67e-eb531e34f985", "content": "Linux\u30ab\u30fc\u30cd\u30eb\u306b\u7279\u6a29\u6607\u683c\u306e\u8106\u5f31\u6027CVE-2026-43499\u304c\u5224\u660e\n\u30a8\u30f3\u30b8\u30cb\u30a2\u3078\u306e\u5f71\u97ff\uff1a\u30b3\u30f3\u30c6\u30ca\u5206\u96e2\u304c\u7a81\u7834\u3055\u308c\u30ce\u30fc\u30c9\u304a\u3088\u3073\u30af\u30e9\u30b9\u30bf\u30fc\u6a29\u9650\u596a\u53d6\u306e\u30ea\u30b9\u30af\u304c\u5897\u5927\nhttps://dev.to/thecybersidekick/ghostlock-cve-2026-43499-how-a-linux-kernel-privilege-escalation-exposes-kubernetes-multi-tenant-4703", "url": "https://bsky.app/profile/enakat-it.bsky.social/post/3mqjqqcmh7626"}, {"timestamp": "2026-07-13T13:43:28Z", "date_only": false, "value": "2026-07-13T13:43:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-13T13:43:28Z", "date_only": false, "value": "2026-07-13T13:43:28+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-13T13:43:28Z", "date_only": false, "value": "2026-07-13T13:43:28+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-13T14:02:32.632Z", "date_only": false, "value": "2026-07-13T14:02:32.632007Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/CakesTwix.shkey.cakestwix.com.ap.brid.gy/post/3mqju76x6hbl2", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "466e51a8-cdfa-49f1-915d-15495e03a8f7", "content": "\u0422\u043e\u0439 \u0432\u043e, \u043d\u0430\u043f\u0435\u0432\u043d\u043e \u0431\u0430\u0447\u0438\u043b\u0438 \u0449\u043e \u044f \u0442\u0440\u043e\u0448\u043a\u0438, \u0430 \u0442\u043e\u0447\u043d\u0456\u0448\u0435 @acroreiser \u043f\u043e\u0447\u0430\u0432 \u0444\u0456\u043a\u0441\u0438\u0442\u0438 \u0443 \u0441\u0432\u043e\u0457\u0445 \u044f\u0434\u0440\u0430\u0445 \u043d\u0435 \u0442\u0456\u043b\u044c\u043a\u0438 BPF, \u0430 \u0449\u0435 \u0439 CVE\n\n\u0422\u0430\u043a\u043e\u0436 \u043d\u0430\u043f\u0435\u0432\u043d\u043e \u0431\u0430\u0447\u0438\u043b\u0438 \u0442\u0430\u043a\u043e\u0439 CVE \u044f\u043a CVE-2026-43499, \u0449\u043e \u0443 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0456 \u0434\u0430\u0454 root \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 Linux, \u0442\u043e\u0431\u0442\u043e \u0441\u0430\u043c Android \u0442\u0435\u0436 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0438\u0439. \u0412\u0436\u0435 \u0454 \u0440\u0435\u043f\u043e \u0437 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u0430\u043d\u043d\u044f\u043c \u0446\u044c\u043e\u0433\u043e cve \u043d\u0430 \u0445\u043b\u044f\u043e\u043c\u0456 [\u2026]", "url": "https://bsky.app/profile/CakesTwix.shkey.cakestwix.com.ap.brid.gy/post/3mqju76x6hbl2"}, {"timestamp": "2026-07-13T14:51:37.763Z", "date_only": false, "value": "2026-07-13T14:51:37.763128Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/krazylars.bsky.social/post/3mqjwwznyis2t", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "03524613-bf5d-4b5f-b660-de9ee23c58d1", "content": "An AI tool named VEGA identified a 15-year-old root bug, CVE-2026-43499, in the kernel's futex code that allows local users to access and escape Docker containers. The vulnerability affects distributions like Ubuntu and RHEL dating back to 2011, requiring an immediate update to the Linux 7.1 kernel.", "url": "https://bsky.app/profile/krazylars.bsky.social/post/3mqjwwznyis2t"}, {"timestamp": "2026-07-13T15:00:04.516Z", "date_only": false, "value": "2026-07-13T15:00:04.516332Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8401", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e39c252b-e370-4471-898f-d4f87a365ae5", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux \u0431\u043e\u043b\u0435\u0435 15 \u043b\u0435\u0442, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-43499 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GhostLock. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root \u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u0417\u0430 \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Nebula Security \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 92 337 \u0434\u043e\u043b\u043b. \u043f\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 kernelCTF \u043e\u0442 Google.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Nebula, \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u043f\u0435\u0445\u0430 \u0432 97%. GhostLock \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432 Linux 2.6.39 \u0432 2011 \u0433\u043e\u0434\u0443 \u0438 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0441\u044f \u0432 \u044f\u0434\u0440\u0435 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432 Linux 7.1, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432 \u0432\u0441\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b.\n\nGhostLock \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043c\u044c\u044e\u0442\u0435\u043a\u0441\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 (rtmutex) \u044f\u0434\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 futex.\n\n\u0418\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u044f\u0434\u0440\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0438\u0441\u044f\u0447\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 \u043f\u0430\u043c\u044f\u0442\u044c \u0432 \u0441\u0442\u0435\u043a\u0435 \u043f\u043e\u0442\u043e\u043a\u0430 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u044d\u0442\u0430 \u043f\u0430\u043c\u044f\u0442\u044c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0441\u0432\u043e\u0431\u043e\u0434\u0438\u0442\u044c \u044d\u0442\u0443 \u043f\u0430\u043c\u044f\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u044f\u0434\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root.\n\n\u0425\u043e\u0442\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 Nebula Security \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u044f\u0434\u0440\u0430 \u0438 \u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044f\u0434\u0440\u0430, \u043b\u0435\u0436\u0430\u0449\u0430\u044f \u0432 \u0435\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u0430.\n\n\u0412\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f, \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0436\u0435 \u0431\u044b\u043b\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0434\u0440\u0443\u0433\u043e\u043c, \u0433\u0434\u0435 \u043e\u043d\u0430 \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u043f\u043e\u0442\u043e\u043a\u0430 \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u043e\u0442\u043e\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u043b \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0439 \u043e\u0431\u044a\u0435\u043a\u0442 \u044f\u0434\u0440\u0430.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 GhostLock \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0438\u043c\u0435\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043b\u0438 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u044f\u0434\u0440\u0430.\n\n\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430, \u0435\u0441\u043b\u0438 \u0432 \u043d\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 CONFIG_FUTEX_PI, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u044b\u0445 \u044f\u0434\u0435\u0440 Linux.\n\n\u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 18 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u0433\u043e\u0434\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c. \u0414\u0440\u0443\u0433\u043e\u0439 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0431\u044b\u043b \u043f\u0440\u0438\u043d\u044f\u0442 \u0434\u0432\u0430 \u0434\u043d\u044f \u0441\u043f\u0443\u0441\u0442\u044f, \u0438 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u044f \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u044f\u0434\u0440\u0430.\n\nGoogle \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 Nebula Security \u0432 kernelCTF 30 \u0438\u044e\u043d\u044f, \u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442, \u0447\u0442\u043e \u044f\u0434\u0440\u043e \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0438 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044f \u00ab\u0432\u0438\u0441\u044f\u0447\u0438\u0439\u00bb \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\nNebula Security \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0437\u0430\u0449\u0438\u0442\u044b, \u043a\u0430\u043a RANDOMIZE_KSTACK_OFFSET, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0435\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0445\u043e\u0442\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u044f\u0434\u0440\u0430 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c Linux \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u044f\u0434\u0440\u0430, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u043c, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0438 \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 GhostLock \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435 \u044f\u0434\u0440\u0430 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "url": "https://t.me/true_secator/8401"}, {"timestamp": "2026-07-13T15:51:12.563Z", "date_only": false, "value": "2026-07-13T15:51:12.563408Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mqk2bg5nrc22", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "4b968e38-62d3-453a-95f0-3699b7c3b49b", "content": "GhostLock (CVE-2026-43499): a use-after-free in the Linux kernel, shipped by default since 2011 and disclosed this week. Any logged-in user gets full root in about 5 seconds. And it escapes containers, so it runs as root on the host. \nwww.itpro.com/software/lin...", "url": "https://bsky.app/profile/pentest-tools.com/post/3mqk2bg5nrc22"}, {"timestamp": "2026-07-13T20:54:09Z", "date_only": false, "value": "2026-07-13T20:54:09Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:38491", "record": "ALSA-2026:38491", "field": "modified"}, {"timestamp": "2026-07-13T20:55:25Z", "date_only": false, "value": "2026-07-13T20:55:25Z", "kind": "other", "label": "Updated", "source": "osv_almalinux \u00b7 ALSA-2026:38492", "record": "ALSA-2026:38492", "field": "modified"}, {"timestamp": "2026-07-13T22:00:03.708Z", "date_only": false, "value": "2026-07-13T22:00:03.708964Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/387", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1f5995aa-eac0-40bf-b51a-28e7ba997f03", "content": "GhostLock \u2014 CVE-2026-43499\n\nThis is a Linux kernel vulnerability found by\u00a0VEGA\u00a0that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in kernelCTF. This writeup covers the technical details of the exploit.\n\n\ud83d\udd17 Research:\nhttps://nebusec.ai/research/ionstack-part-2/\n\n\ud83d\udd17 Exploit:\nhttps://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499\n\n#linux #kernel #lpe #container #escape", "url": "https://t.me/P0x3k_1N73LL1G3NC3/387"}, {"timestamp": "2026-07-13T22:00:03.755Z", "date_only": false, "value": "2026-07-13T22:00:03.755126Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93191", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "00ad2172-47fd-4dd7-bd98-2b9c8ba35e83", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a oppo-pgem10-ghostlock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Thiasap\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 07:36:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOPPO Find X6 Pro GhostLock (CVE-2026-43499) exploit adaptation\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93191"}, {"timestamp": "2026-07-13T22:00:05.975Z", "date_only": false, "value": "2026-07-13T22:00:05.975330Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92743", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1f93de7a-2bda-4709-8fda-087e89f490c5", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a oppo-ghostlock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pubglite55\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 22:57:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92743"}, {"timestamp": "2026-07-13T22:00:07.054Z", "date_only": false, "value": "2026-07-13T22:00:07.054883Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/92587", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "2f180504-7506-4ada-8678-942ded5af47f", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-armv7\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc3650\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 00:41:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92587"}, {"timestamp": "2026-07-13T22:00:18.053Z", "date_only": false, "value": "2026-07-13T22:00:18.053863Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/90796", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "dfe8a4f7-1f17-49b0-9eea-23453b2583b1", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MobiusM\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-27 05:05:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/90796"}, {"timestamp": "2026-07-13T23:00:11.055Z", "date_only": false, "value": "2026-07-13T23:00:11.055966Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/geeknewsbot.bsky.social/post/3mqksaq7j7n2b", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "0cd655d5-8c63-4d1a-a9ed-5e0de84e131a", "content": "GhostLock, 15\ub144\uac04 \ubaa8\ub4e0 Linux \ubc30\ud3ec\ud310\uc5d0 \uc874\uc7ac\ud55c \uc2a4\ud0dd UAF\n\nGhostLock(CVE-2026-43499) \uc740 Linux 2.6.39\uc5d0 \ub3c4\uc785\ub3fc 7.1\uc5d0\uc11c \uc218\uc815\ub41c \ucee4\ub110 \ucde8\uc57d\uc810\uc73c\ub85c, \ube44\ud2b9\uad8c \ub85c\uceec \uacf5\uaca9\uc790\uac00 \uc77c\ubc18\uc801\uc778 \uc2a4\ub808\ub529 \uc2dc\uc2a4\ud15c \ud638\ucd9c\ub9cc\uc73c\ub85c \uc2a4\ud0dd UAF\ub97c \uc77c\uc73c\ucf1c \ub8e8\ud2b8 \uad8c\ud55c \ud68d\ub4dd\uacfc \ucee8\ud14c\uc774\ub108 \ud0c8\ucd9c \uc5d0 \uc774\uc6a9\ud560 \uc218 \uc788\uc74c Requeue-PI \ud504\ub85d\uc2dc \uacbd\ub85c\uc758 remove_wai...", "url": "https://bsky.app/profile/geeknewsbot.bsky.social/post/3mqksaq7j7n2b"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": false, "value": "2026-07-14T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:39083", "record": "RHSA-2026:39083", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": false, "value": "2026-07-14T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-019113", "record": "SSA-019113", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": false, "value": "2026-07-14T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:39083", "record": "RHSA-2026:39083", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": false, "value": "2026-07-14T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:39083", "record": "RHSA-2026:39083", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": true, "value": "2026-07-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0899", "record": "CERTFR-2026-AVI-0899", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": false, "value": "2026-07-14T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:39083", "record": "RHSA-2026:39083", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": false, "value": "2026-07-14T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-019113", "record": "SSA-019113", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": false, "value": "2026-07-14T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:39984", "record": "RHSA-2026:39984", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": false, "value": "2026-07-14T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:40425", "record": "RHSA-2026:40425", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": false, "value": "2026-07-14T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:41062", "record": "RHSA-2026:41062", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": false, "value": "2026-07-14T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:41063", "record": "RHSA-2026:41063", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-07-14T00:00:06.651Z", "date_only": false, "value": "2026-07-14T00:00:06.651558Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Dr5t3AWmhNxHtW6q-vVADHq8j4ahaU0CPtmbuUWAbez-NA", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c38f842a-a5b1-46b0-afa2-6b1bcd100369"}, {"timestamp": "2026-07-14T00:00:06.737Z", "date_only": false, "value": "2026-07-14T00:00:06.737157Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Cr3wALFZfb610mv1uphOTC6B9r8adn_Xd1An_hCUvMHm7w", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e4e90fdf-876e-4150-85ff-a922e976413e"}, {"timestamp": "2026-07-14T00:00:09.081Z", "date_only": false, "value": "2026-07-14T00:00:09.081152Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93191", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8736d26c-5402-4807-9f64-533d2118054b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a oppo-pgem10-ghostlock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Thiasap\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-13 07:36:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOPPO Find X6 Pro GhostLock (CVE-2026-43499) exploit adaptation\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93191"}, {"timestamp": "2026-07-14T00:00:09.127Z", "date_only": false, "value": "2026-07-14T00:00:09.127482Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/387", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e375337c-961c-4bd7-a2fd-d3b4bbf1fa3d", "content": "GhostLock \u2014 CVE-2026-43499\n\nThis is a Linux kernel vulnerability found by\u00a0VEGA\u00a0that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in kernelCTF. This writeup covers the technical details of the exploit.\n\n\ud83d\udd17 Research:\nhttps://nebusec.ai/research/ionstack-part-2/\n\n\ud83d\udd17 Exploit:\nhttps://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499\n\n#linux #kernel #lpe #container #escape", "url": "https://t.me/P0x3k_1N73LL1G3NC3/387"}, {"timestamp": "2026-07-14T00:00:46.086Z", "date_only": false, "value": "2026-07-14T00:00:46.086194Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/8401", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "232b5eb6-7a7f-48df-935e-84a5c4575d94", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux \u0431\u043e\u043b\u0435\u0435 15 \u043b\u0435\u0442, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-43499 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GhostLock. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root \u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u0417\u0430 \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Nebula Security \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 92 337 \u0434\u043e\u043b\u043b. \u043f\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 kernelCTF \u043e\u0442 Google.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Nebula, \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u043f\u0435\u0445\u0430 \u0432 97%. GhostLock \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432 Linux 2.6.39 \u0432 2011 \u0433\u043e\u0434\u0443 \u0438 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0441\u044f \u0432 \u044f\u0434\u0440\u0435 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432 Linux 7.1, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432 \u0432\u0441\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b.\n\nGhostLock \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043c\u044c\u044e\u0442\u0435\u043a\u0441\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 (rtmutex) \u044f\u0434\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 futex.\n\n\u0418\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u044f\u0434\u0440\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0438\u0441\u044f\u0447\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 \u043f\u0430\u043c\u044f\u0442\u044c \u0432 \u0441\u0442\u0435\u043a\u0435 \u043f\u043e\u0442\u043e\u043a\u0430 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u044d\u0442\u0430 \u043f\u0430\u043c\u044f\u0442\u044c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0441\u0432\u043e\u0431\u043e\u0434\u0438\u0442\u044c \u044d\u0442\u0443 \u043f\u0430\u043c\u044f\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u044f\u0434\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root.\n\n\u0425\u043e\u0442\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 Nebula Security \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u044f\u0434\u0440\u0430 \u0438 \u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044f\u0434\u0440\u0430, \u043b\u0435\u0436\u0430\u0449\u0430\u044f \u0432 \u0435\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u0430.\n\n\u0412\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f, \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0436\u0435 \u0431\u044b\u043b\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0434\u0440\u0443\u0433\u043e\u043c, \u0433\u0434\u0435 \u043e\u043d\u0430 \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u043f\u043e\u0442\u043e\u043a\u0430 \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u043e\u0442\u043e\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u043b \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0439 \u043e\u0431\u044a\u0435\u043a\u0442 \u044f\u0434\u0440\u0430.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 GhostLock \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0438\u043c\u0435\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043b\u0438 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u044f\u0434\u0440\u0430.\n\n\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430, \u0435\u0441\u043b\u0438 \u0432 \u043d\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 CONFIG_FUTEX_PI, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u044b\u0445 \u044f\u0434\u0435\u0440 Linux.\n\n\u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 18 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u0433\u043e\u0434\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c. \u0414\u0440\u0443\u0433\u043e\u0439 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0431\u044b\u043b \u043f\u0440\u0438\u043d\u044f\u0442 \u0434\u0432\u0430 \u0434\u043d\u044f \u0441\u043f\u0443\u0441\u0442\u044f, \u0438 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u044f \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u044f\u0434\u0440\u0430.\n\nGoogle \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 Nebula Security \u0432 kernelCTF 30 \u0438\u044e\u043d\u044f, \u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442, \u0447\u0442\u043e \u044f\u0434\u0440\u043e \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0438 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044f \u00ab\u0432\u0438\u0441\u044f\u0447\u0438\u0439\u00bb \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\nNebula Security \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0437\u0430\u0449\u0438\u0442\u044b, \u043a\u0430\u043a RANDOMIZE_KSTACK_OFFSET, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0435\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0445\u043e\u0442\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u044f\u0434\u0440\u0430 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c Linux \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u044f\u0434\u0440\u0430, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u043c, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0438 \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 GhostLock \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435 \u044f\u0434\u0440\u0430 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "url": "https://t.me/true_secator/8401"}, {"timestamp": "2026-07-14T00:00:48.206Z", "date_only": false, "value": "2026-07-14T00:00:48.206462Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/6234", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d3968d53-d81c-4fec-9e62-892ffa0d38f6", "content": "IonStack: root Android 17 \u0441 \u043e\u0434\u043d\u043e\u0433\u043e URL\n\nNebula Security \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 IonStack \u2014 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0443\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 Firefox \u2192 Linux kernel, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430 Android 17 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0432\u0435\u0441\u0442\u0438 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a \u043f\u043e URL \u0434\u043e root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2026-10702, JIT miscompilation \u0432 JavaScript Engine Firefox, \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f \u0432 Firefox 151.0.3, \u0438 CVE-2026-43499 GhostLock \u2014 use-after-free \u0432 rtmutex/futex-PI \u043a\u043e\u0434\u0435 \u044f\u0434\u0440\u0430 Linux.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0442\u043e browser-to-kernel full chain. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0431\u0430\u0433 \u0432 Firefox \u0434\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430\u0442\u0435\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f kernel LPE \u043f\u0440\u043e\u0431\u0438\u0432\u0430\u0435\u0442 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423 GhostLock \u043c\u0435\u0445\u0430\u043d\u0438\u043a\u0430: \u043e\u0431\u044b\u0447\u043d\u044b\u0435 threading/futex syscalls \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u0438\u0441\u044f\u0447\u0438\u0439 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u0441\u0442\u0435\u043a \u044f\u0434\u0440\u0430; \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Nebula, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u2014 Linux 2.6.39-rc1 \u0434\u043e 7.1-rc1 \u043f\u0440\u0438 CONFIG_FUTEX_PI=y, \u0430 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432 kernelCTF \u0431\u044b\u043b\u0430 \u043e\u043a\u043e\u043b\u043e 97% \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439.\n\n\u0412\u0430\u0436\u043d\u043e\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435: \u044d\u0442\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u0434\u0435\u043c\u043e \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 PoC, \u0430 \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. Android-\u0447\u0430\u0441\u0442\u044c \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 Firefox/Fenix \u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u044f\u0434\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435; \u043d\u0430 \u0434\u0435\u043c\u043e-\u0441\u0430\u0439\u0442\u0435 Nebula \u043f\u0440\u044f\u043c\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043f\u043e\u0442\u0435\u0440\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udc31  GitHub PoC\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2 MAX", "url": "https://t.me/poxek/6234"}, {"timestamp": "2026-07-14T05:39:50Z", "date_only": false, "value": "2026-07-14T05:39:50+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-14T05:39:50Z", "date_only": false, "value": "2026-07-14T05:39:50+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-14T05:39:50Z", "date_only": false, "value": "2026-07-14T05:39:50+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-14T07:30:43.292Z", "date_only": false, "value": "2026-07-14T07:30:43.292161Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqlornb55u24", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "2bd0e422-92e4-433b-a55a-a1c12a16da9e", "content": "Top 3 CVE for last 7 days:\nCVE-2026-53359: 26 interactions\nCVE-2026-43499: 25 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-56291: 6 interactions\nCVE-2026-48907: 5 interactions\nCVE-2026-57830: 3 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mqlornb55u24"}, {"timestamp": "2026-07-14T12:00:04.785Z", "date_only": false, "value": "2026-07-14T12:00:04.785336Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/1203", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "0c7f9d0d-b23c-4700-87c3-73dbadc63ffa", "content": "Weekly 8 AI & Cyber signals to act on (Jul 11\u201313, 2026)\n\n#AISecurity@bhhub\n\n\u2728 GitLost turns a public GitHub issue into private-repo exfiltration\nNoma reproduced an unauthenticated prompt injection against a GitHub Agentic Workflow with cross-repository read access: the agent fetched a private README and posted it into a public issue. The PoC is configuration-dependent, but the control is clear\u2014untrusted issue text, broad agent permissions, and public write-back must not share one trust boundary.\n\n\u2728 Invisible Unicode defeats MCP\u2019s one-time approval view\nA real-protocol study tested eight metadata payloads across three MCP server libraries. All eight reached model context, none triggered re-approval, and Unicode TAG characters alone stayed invisible to the reviewer; all 32 cross-library cells agreed. The authors released a harness and fail-closed verifier, though independent replication is pending.\n\n\u2728 Update: Langflow cross-tenant flow execution is now in CISA KEV\nCISA added CVE-2026-55255 to KEV on July 7 after evidence of active exploitation. The authenticated IDOR lets an attacker execute another user\u2019s flow by supplying its ID; GitHub scores it 9.9 and Langflow fixed it in 1.9.1. This is a new exploitation-status event, not a replay of the June disclosure.\n\n#AppSec@bhhub\n\n\u2728 GhostLock turns a 15-year Linux stack UAF into root\nNebula Security published a kernelCTF exploit for CVE-2026-43499: regular futex PI syscalls create a dangling stack pointer, then a control-flow pivot yields privilege escalation or container escape. The researchers report 97% reliability and a $92,337 reward; unpatched kernels carrying the affected path need the upstream fix.\n\n\u2728 Browser wallets leak links between addresses, sites, and identities\nA PoPETs-accepted measurement of 85 Chrome wallets representing 35.16 million users formalizes five privacy threats. Routine RPC calls linked addresses, most Ethereum wallets kept exposing revoked addresses, and provider injection into cross-origin iframes enabled passive cross-site tracking\u2014evidence that wallet privacy needs protocol-level, not merely UI-level, controls.\n\n\u2728 SolSmith found 25 Solidity compiler miscompilations\nThree years of semantics-aware differential fuzzing uncovered 25 previously missed compiler bugs, some latent for years, then classified their root causes and user impact. Because immutable smart-contract behavior depends on compiler correctness, the result argues for continuously testing optimization passes with valid, adversarially generated programs; the paper does not quantify deployed-contract exposure.\n\n#RedTeam@bhhub\n\n\u2728 Bit2Watt weaponizes legal GPU workloads against power infrastructure\nThe CHES 2026 paper validates workload-driven power modulation with analysis, simulations, GPUs, and a grid-connected PV inverter. In its synchronized worst-case model, 1,000 GPUs on a 1-MW, 90%-DER system drove current THD to 46.8% and damping to \u22120.27; those grid-scale effects are simulated, but expose a cross-layer tenant threat normal telemetry may miss.\n\n#BlueTeam@bhhub\n\n\u2728 Internet-wide scans expose healthcare\u2019s plaintext attack surface\nThe Euro S&P study scanned DICOM, HL7, and FHIR across IPv4 and IPv6 and ran a nine-month honeypot. It found 2,841 services with authentication flaws, 94.4% of exposed endpoints without transport encryption, and 1,373 systems with known vulnerabilities up to CVSS 9.8, followed by coordinated disclosure\u2014clear priorities for segmentation, TLS, inventory, and remediation.", "url": "https://t.me/bhhub/1203"}, {"timestamp": "2026-07-14T12:03:23.695Z", "date_only": false, "value": "2026-07-14T12:03:23.695448Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:38491", "record": "RLSA-2026:38491", "field": "published"}, {"timestamp": "2026-07-14T12:30:51.483Z", "date_only": false, "value": "2026-07-14T12:30:51.483638Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/analytikdata.ch/post/3mqm7kchko42o", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e1f90485-4ce1-4f62-86c3-0b3a1b9a3101", "content": "GhostLock (CVE-2026-43499): 15 Jahre alte Linux-Kernel-L\u00fccke \u2014 lokaler Root-Zugriff und Container-Ausbruch, \u00f6ffentlicher Exploit. Kernel patchen UND neu starten: Bei uns war ein Server gepatcht, aber nie gebootet. Erst der Reboot sch\u00fctzt. https://nebusec.ai/research/ionstack-part-2/", "url": "https://bsky.app/profile/analytikdata.ch/post/3mqm7kchko42o"}, {"timestamp": "2026-07-14T14:53:37.303Z", "date_only": false, "value": "2026-07-14T14:53:37.303188Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cant10.bsky.social/post/3mqmhjjqhos2k", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d64db4df-179d-4a42-8509-09cbbf4a67c5", "content": "VEGA, el agente de inteligencia artificial de Nebula Security, descubri\u00f3 GhostLock (CVE-2026-43499), una vulnerabilidad cr\u00edtica en el kernel de Linux que llevaba oculta 15 a\u00f1os, desde la versi\u00f3n 2.6.39 de 2011.", "url": "https://bsky.app/profile/cant10.bsky.social/post/3mqmhjjqhos2k"}, {"timestamp": "2026-07-14T18:00:03.576Z", "date_only": false, "value": "2026-07-14T18:00:03.576045Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/19684", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ee9560b8-b20b-44dd-8bed-7cb524b92463", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c GhostLock \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 2011 \u0433\u043e\u0434\u0430 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b Linux\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Nebula Security \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 GhostLock (CVE-2026-43499), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux. \u042d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u043a\u043e\u0434\u0435 \u044f\u0434\u0440\u0430 \u0441 2011 \u0433\u043e\u0434\u0430 \u0438 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b.\n\nhttps://xakep.ru/2026/07/14/ghostlock/", "url": "https://t.me/xakep_ru/19684"}, {"timestamp": "2026-07-14T18:05:26.050Z", "date_only": false, "value": "2026-07-14T18:05:26.050107Z", "kind": "milestone", "label": "Published", "source": "osv_rocky \u00b7 RLSA-2026:38492", "record": "RLSA-2026:38492", "field": "published"}, {"timestamp": "2026-07-15T00:00:00Z", "date_only": true, "value": "2026-07-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0899", "record": "CERTFR-2026-AVI-0899", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-07-15T00:00:18.602Z", "date_only": false, "value": "2026-07-15T00:00:18.602745Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/xakep_ru/19684", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "df44ac41-d3b6-4532-bb82-06db4bced07a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c GhostLock \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 2011 \u0433\u043e\u0434\u0430 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b Linux\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Nebula Security \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 GhostLock (CVE-2026-43499), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux. \u042d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u043e\u0431\u0435\u0433 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 \u043a\u043e\u0434\u0435 \u044f\u0434\u0440\u0430 \u0441 2011 \u0433\u043e\u0434\u0430 \u0438 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b.\n\nhttps://xakep.ru/2026/07/14/ghostlock/", "url": "https://t.me/xakep_ru/19684"}, {"timestamp": "2026-07-15T00:00:22.483Z", "date_only": false, "value": "2026-07-15T00:00:22.483653Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/90796", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a8223540-b391-4206-999f-5e3f2720ca3f", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MobiusM\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-27 05:05:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/90796"}, {"timestamp": "2026-07-15T00:00:25.156Z", "date_only": false, "value": "2026-07-15T00:00:25.156600Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bhhub/1203", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f1f48c00-8c8b-4f5f-9822-41fcd3e983cf", "content": "Weekly 8 AI & Cyber signals to act on (Jul 11\u201313, 2026)\n\n#AISecurity@bhhub\n\n\u2728 GitLost turns a public GitHub issue into private-repo exfiltration\nNoma reproduced an unauthenticated prompt injection against a GitHub Agentic Workflow with cross-repository read access: the agent fetched a private README and posted it into a public issue. The PoC is configuration-dependent, but the control is clear\u2014untrusted issue text, broad agent permissions, and public write-back must not share one trust boundary.\n\n\u2728 Invisible Unicode defeats MCP\u2019s one-time approval view\nA real-protocol study tested eight metadata payloads across three MCP server libraries. All eight reached model context, none triggered re-approval, and Unicode TAG characters alone stayed invisible to the reviewer; all 32 cross-library cells agreed. The authors released a harness and fail-closed verifier, though independent replication is pending.\n\n\u2728 Update: Langflow cross-tenant flow execution is now in CISA KEV\nCISA added CVE-2026-55255 to KEV on July 7 after evidence of active exploitation. The authenticated IDOR lets an attacker execute another user\u2019s flow by supplying its ID; GitHub scores it 9.9 and Langflow fixed it in 1.9.1. This is a new exploitation-status event, not a replay of the June disclosure.\n\n#AppSec@bhhub\n\n\u2728 GhostLock turns a 15-year Linux stack UAF into root\nNebula Security published a kernelCTF exploit for CVE-2026-43499: regular futex PI syscalls create a dangling stack pointer, then a control-flow pivot yields privilege escalation or container escape. The researchers report 97% reliability and a $92,337 reward; unpatched kernels carrying the affected path need the upstream fix.\n\n\u2728 Browser wallets leak links between addresses, sites, and identities\nA PoPETs-accepted measurement of 85 Chrome wallets representing 35.16 million users formalizes five privacy threats. Routine RPC calls linked addresses, most Ethereum wallets kept exposing revoked addresses, and provider injection into cross-origin iframes enabled passive cross-site tracking\u2014evidence that wallet privacy needs protocol-level, not merely UI-level, controls.\n\n\u2728 SolSmith found 25 Solidity compiler miscompilations\nThree years of semantics-aware differential fuzzing uncovered 25 previously missed compiler bugs, some latent for years, then classified their root causes and user impact. Because immutable smart-contract behavior depends on compiler correctness, the result argues for continuously testing optimization passes with valid, adversarially generated programs; the paper does not quantify deployed-contract exposure.\n\n#RedTeam@bhhub\n\n\u2728 Bit2Watt weaponizes legal GPU workloads against power infrastructure\nThe CHES 2026 paper validates workload-driven power modulation with analysis, simulations, GPUs, and a grid-connected PV inverter. In its synchronized worst-case model, 1,000 GPUs on a 1-MW, 90%-DER system drove current THD to 46.8% and damping to \u22120.27; those grid-scale effects are simulated, but expose a cross-layer tenant threat normal telemetry may miss.\n\n#BlueTeam@bhhub\n\n\u2728 Internet-wide scans expose healthcare\u2019s plaintext attack surface\nThe Euro S&P study scanned DICOM, HL7, and FHIR across IPv4 and IPv6 and ran a nine-month honeypot. It found 2,841 services with authentication flaws, 94.4% of exposed endpoints without transport encryption, and 1,373 systems with known vulnerabilities up to CVSS 9.8, followed by coordinated disclosure\u2014clear priorities for segmentation, TLS, inventory, and remediation.", "url": "https://t.me/bhhub/1203"}, {"timestamp": "2026-07-15T00:00:33.321Z", "date_only": false, "value": "2026-07-15T00:00:33.321857Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/92587", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "2d1c8f47-5b84-4678-ad0d-90ef5f899a04", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-armv7\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc3650\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 00:41:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92587"}, {"timestamp": "2026-07-15T00:00:36.639Z", "date_only": false, "value": "2026-07-15T00:00:36.639063Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/92743", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "76b03b22-5ad2-4c67-8e9b-92524ea35525", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a oppo-ghostlock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pubglite55\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 22:57:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/92743"}, {"timestamp": "2026-07-15T00:00:37.009Z", "date_only": false, "value": "2026-07-15T00:00:37.009313Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Cr3wALFZfb610mv1uphOTC6B9r8adn_Xd1An_hCUvMHm7w", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1feb8c92-9a2c-49e9-8a9f-d77ef939e295"}, {"timestamp": "2026-07-15T00:00:37.039Z", "date_only": false, "value": "2026-07-15T00:00:37.039477Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Dr5t3AWmhNxHtW6q-vVADHq8j4ahaU0CPtmbuUWAbez-NA", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7b788194-9a67-48f6-8ed0-718298b14102"}, {"timestamp": "2026-07-15T04:32:45.468Z", "date_only": false, "value": "2026-07-15T04:32:45.468808Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqnvcdm2qd2u", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "958377e6-51c7-428e-84cc-b4e0a8883e4d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-43499: 26 interactions\nCVE-2026-20262: 14 interactions\nCVE-2026-44747: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-44747: 14 interactions\nCVE-2026-47295: 6 interactions\nCVE-2026-54527: 6 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mqnvcdm2qd2u"}, {"timestamp": "2026-07-15T07:00:20.484Z", "date_only": false, "value": "2026-07-15T07:00:20.484596Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devops-daily.com/post/3mqo5kacdtw2y", "record": "cve-2026-43499", "field": "creation_timestamp", "uuid": "360e3954-594c-436f-8237-016fea7f1124", "content": "\ud83d\udcdd Your Container Is Not a Security Boundary: GhostLock (CVE-2026-43499)\n\nA 15-year-old Linux kernel bug just got a public exploit that breaks out of containers and hands any local user root on the host. GhostLock is a...\n\nRead here: https://devops-daily.com/posts/ghostlock-cve-2026-43499-contain...", "url": "https://bsky.app/profile/devops-daily.com/post/3mqo5kacdtw2y"}, {"timestamp": "2026-07-15T12:00:03.826Z", "date_only": false, "value": "2026-07-15T12:00:03.826660Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/9438", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "10aaae27-b547-4732-953e-7d43201da663", "content": "\ud83d\uded1 A newly found 15-year-old #Linux kernel flaw, GhostLock (CVE-2026-43499), could let any logged-in user gain root on unpatched distributions.\n\nA working exploit code is now public, and it escaped containers in tests.\n\nRead details here: https://thehackernews.com/2026/07/15-year-old-ghostlock-flaw-enables-root.html", "url": "https://t.me/thehackernews/9438"}, {"timestamp": "2026-07-15T13:00:05.524Z", "date_only": false, "value": "2026-07-15T13:00:05.524209Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerNewscyber/3213", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e200c05c-9cd1-45a5-a208-b1dcb75b723c", "content": "\u2708\ufe0f \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06f1\u06f5 \u0633\u0627\u0644\u0647 \u062f\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633\n\n\ud83c\udfa4\u067e\u0698\u0648\u0647\u0634\u06af\u0631\u0627\u0646 \u0634\u0631\u06a9\u062a Nebula Security \u0627\u0632 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-43499 \u0648 \u0646\u0627\u0645 GhostLock \u062f\u0631 \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u062e\u0628\u0631 \u062f\u0627\u062f\u0647\u200c\u0627\u0646\u062f\u061b \u0646\u0642\u0635\u06cc \u06a9\u0647 \u0627\u0632 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f1 \u062f\u0631 \u0627\u06a9\u062b\u0631 \u062a\u0648\u0632\u06cc\u0639\u200c\u0647\u0627\u06cc \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0627\u0633\u062a.\n\n\ud83c\udfa5\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0646\u0648\u0639 Use-After-Free \u0628\u0648\u062f\u0647 \u0648 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u062d\u0644\u06cc \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0648\u06cc\u0698\u0647\u060c \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u062e\u0648\u062f \u0631\u0627 \u0628\u0647 Root \u0627\u0631\u062a\u0642\u0627 \u062f\u0627\u062f\u0647 \u0648 \u0627\u0632 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627\u06cc \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631\u06cc \u062e\u0627\u0631\u062c \u0634\u0648\u0646\u062f. \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0627 \u0646\u0631\u062e \u0645\u0648\u0641\u0642\u06cc\u062a \u062d\u062f\u0648\u062f \u06f9\u06f7 \u062f\u0631\u0635\u062f \u0639\u0645\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u06a9\u062f \u0627\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645 \u0622\u0646 \u0646\u06cc\u0632 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\n\u2708\ufe0f @HackerNewsCyber", "url": "https://t.me/HackerNewscyber/3213"}, {"timestamp": "2026-07-15T13:47:23Z", "date_only": false, "value": "2026-07-15T13:47:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:39984", "record": "RHSA-2026:39984", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-15T13:47:23Z", "date_only": false, "value": "2026-07-15T13:47:23+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:39984", "record": "RHSA-2026:39984", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-15T13:47:23Z", "date_only": false, "value": "2026-07-15T13:47:23+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:39984", "record": "RHSA-2026:39984", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-15T13:48:13Z", "date_only": false, "value": "2026-07-15T13:48:13+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-15T13:48:13Z", "date_only": false, "value": "2026-07-15T13:48:13+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-15T13:48:13Z", "date_only": false, "value": "2026-07-15T13:48:13+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-15T15:58:53Z", "date_only": false, "value": "2026-07-15T15:58:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-15T15:58:53Z", "date_only": false, "value": "2026-07-15T15:58:53+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-15T15:58:53Z", "date_only": false, "value": "2026-07-15T15:58:53+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-15T16:23:48Z", "date_only": false, "value": "2026-07-15T16:23:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-15T16:23:48Z", "date_only": false, "value": "2026-07-15T16:23:48+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-15T16:23:48Z", "date_only": false, "value": "2026-07-15T16:23:48+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-15T16:30:06.494Z", "date_only": false, "value": "2026-07-15T16:30:06.494997Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackmag.com/post/3mqp5ezvp642e", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "dddcc83e-a4fc-4295-8592-a380ddc641e0", "content": "\ud83d\udfe2 GhostLock vulnerability has existed since 2011 and affects major Linux distributions\n\n\ud83d\udde8\ufe0f Researchers at Nebula Security have disclosed a vulnerability in the Linux kernel called GhostLock (CVE-2026-43499). Thi\u2026\n\n#news", "url": "https://bsky.app/profile/hackmag.com/post/3mqp5ezvp642e"}, {"timestamp": "2026-07-15T20:45:29.450Z", "date_only": false, "value": "2026-07-15T20:45:29.450279Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bearstech.com/post/3mqplnotvo72h", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3170699b-9a71-41f2-9020-3f6122a45e45", "content": "Un bel article qui d\u00e9taille GhostLock (CVE-2026-43499) : une vuln\u00e9rabilit\u00e9 du noyau Linux pr\u00e9sente depuis 2011 dans quasi toutes les distributions Linux.\n\n\ud83d\udc49 nebusec.ai/research/...", "url": "https://bsky.app/profile/bearstech.com/post/3mqplnotvo72h"}, {"timestamp": "2026-07-16T00:00:00Z", "date_only": true, "value": "2026-07-16", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0899", "record": "CERTFR-2026-AVI-0899", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2026-07-16T00:17:30Z", "date_only": false, "value": "2026-07-16T00:17:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:40425", "record": "RHSA-2026:40425", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-16T00:17:30Z", "date_only": false, "value": "2026-07-16T00:17:30+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:40425", "record": "RHSA-2026:40425", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-16T00:17:30Z", "date_only": false, "value": "2026-07-16T00:17:30+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:40425", "record": "RHSA-2026:40425", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-16T04:42:33.015Z", "date_only": false, "value": "2026-07-16T04:42:33.015780Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqqgcrdq6x27", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1d96953a-74d7-4ef6-9ee5-8fd3406f8160", "content": "Top 3 CVE for last 7 days:\nCVE-2026-43499: 23 interactions\nCVE-2026-15409: 17 interactions\nCVE-2026-20262: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-15409: 15 interactions\nCVE-2026-15410: 8 interactions\nCVE-2026-1541: 6 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mqqgcrdq6x27"}, {"timestamp": "2026-07-16T07:24:12Z", "date_only": false, "value": "2026-07-16T07:24:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-16T07:24:12Z", "date_only": false, "value": "2026-07-16T07:24:12+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-16T07:24:12Z", "date_only": false, "value": "2026-07-16T07:24:12+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-16T12:00:05.135Z", "date_only": false, "value": "2026-07-16T12:00:05.135679Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93630", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "37e1457f-98f9-4804-bb45-e05bfd4f1a1f", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-rothko\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SlightNeko\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 02:51:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 GhostLock exploit for Redmi K70 Ultra (rothko) - data-only physmap overwrite\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93630"}, {"timestamp": "2026-07-16T12:00:05.292Z", "date_only": false, "value": "2026-07-16T12:00:05.292961Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93613", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ff1f5924-f325-463e-b1f7-acadf1675667", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-popsicle\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a x-spy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 154  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 42\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 22:47:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93613"}, {"timestamp": "2026-07-16T12:00:05.613Z", "date_only": false, "value": "2026-07-16T12:00:05.613471Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93634", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "fd69164d-02b4-4ca2-a720-fc0d05d0a819", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CyberMeowfia-ace3\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DistrictBlauw\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 03:52:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 exploit with OnePlus Ace3 support\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93634"}, {"timestamp": "2026-07-16T12:00:05.740Z", "date_only": false, "value": "2026-07-16T12:00:05.740517Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93520", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5fb9ce00-c18f-46c8-b8da-b6408a5786f1", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a onesmiledx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 09:32:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA modified method to root Android device with locked bootloader via new exploit. (Only for Samsung now or smthing like that devices cuz i ported it to N970U1), Fork of https://github.com/localhosts-A/CyberMeowfia\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93520"}, {"timestamp": "2026-07-16T12:00:06.197Z", "date_only": false, "value": "2026-07-16T12:00:06.197516Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93468", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d9b7c45e-700a-4aa1-b95c-4f1d73741167", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a duchamp-root\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Colorful-glassblock\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 04:28:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nXiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93468"}, {"timestamp": "2026-07-16T12:00:06.445Z", "date_only": false, "value": "2026-07-16T12:00:06.445589Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93428", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9879437a-9ca8-42d4-9888-21f1f261c902", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-oneplus\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a JoinChang\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 19:09:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93428"}, {"timestamp": "2026-07-16T12:00:06.600Z", "date_only": false, "value": "2026-07-16T12:00:06.600485Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93455", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8d95a0e1-702d-43e3-97cf-fadfd5cac7d6", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Logitech-G-Cloud-GhostLock-CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HYCQAQ\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 02:28:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u7f57\u6280\u4e91\u638c\u673a \u00b7 GhostLock CVE-2026-43499 root \u5c1d\u8bd5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93455"}, {"timestamp": "2026-07-16T12:00:06.671Z", "date_only": false, "value": "2026-07-16T12:00:06.671832Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93408", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "06e3a7d2-04cb-445c-8e04-2e8ad4e13a87", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a oppo-A5-PRO-5G-CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a qsvggff-spec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 16:56:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u672c\u6b21\u4e2a\u4eba\u6f0f\u6d1e\u7814\u7a76\u8fdb\u5c55\u6210\u679c\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93408"}, {"timestamp": "2026-07-16T12:00:06.779Z", "date_only": false, "value": "2026-07-16T12:00:06.779764Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93424", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b6b7cdc5-2cd2-4c05-86f0-4b77b48ea317", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a JoinChang\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 19:05:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93424"}, {"timestamp": "2026-07-16T12:00:06.858Z", "date_only": false, "value": "2026-07-16T12:00:06.858226Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93393", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "6ae28e64-d4fe-4657-9800-6a4ad9756f8e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-Poc-Analysis\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Linuxoid-cn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 14:33:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nVulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93393"}, {"timestamp": "2026-07-16T16:00:03.326Z", "date_only": false, "value": "2026-07-16T16:00:03.326662Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93708", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "72a1f714-6e33-4722-8c55-6edb55a6d7b7", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IonStack-CVE-2026-43499-jinghu\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ayyy7128\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 14:57:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 exploit reproduction on jinghu (Xiaomi Pad 7 Ultra)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93708"}, {"timestamp": "2026-07-16T18:00:03.886Z", "date_only": false, "value": "2026-07-16T18:00:03.886576Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93720", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5e63c63a-5b23-4840-8e72-b2131e58e057", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-jinghu\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ayyy7128\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 15:53:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 exploit reproduction on jinghu (Xiaomi Pad 7 Ultra)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93720"}, {"timestamp": "2026-07-16T19:00:04.181Z", "date_only": false, "value": "2026-07-16T19:00:04.181596Z", "kind": "sighting", "label": "Seen", "source": "Telegram/lkTqxrRLFzmZiKWrqHB7ywSYEM6i5xRhtt_z45dAnhSWBug", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5f65f49e-bb39-4b5e-94ae-b73e3205bf5e"}, {"timestamp": "2026-07-16T19:00:06.491Z", "date_only": false, "value": "2026-07-16T19:00:06.491331Z", "kind": "sighting", "label": "Seen", "source": "Telegram/6kr7hIoL88BrLchA92ncvvrRqf7Y35-wLyAsUuKqT9ornHo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "438b2dbf-ec53-424e-aa99-b9f72de78b11"}, {"timestamp": "2026-07-16T19:00:06.654Z", "date_only": false, "value": "2026-07-16T19:00:06.654643Z", "kind": "sighting", "label": "Seen", "source": "Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d88134b5-baad-45c7-8bb0-f3edc8f85b1b"}, {"timestamp": "2026-07-16T19:00:07.187Z", "date_only": false, "value": "2026-07-16T19:00:07.187747Z", "kind": "sighting", "label": "Seen", "source": "Telegram/iYHsotoqlE8Z-AEKaQiVsXXSjTyl0MfV01akvHQ1zfYFYEI", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a94633ba-6626-44e6-a295-89fe3d71b258"}, {"timestamp": "2026-07-16T19:00:08.529Z", "date_only": false, "value": "2026-07-16T19:00:08.529226Z", "kind": "sighting", "label": "Seen", "source": "Telegram/vOHofO2qPvPXIyPNButd37pf6Fhua5DFTWTRaJatxt7pU5Q", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7d72d485-b059-4365-887a-e57e1f1dcb4d"}, {"timestamp": "2026-07-16T19:00:09.922Z", "date_only": false, "value": "2026-07-16T19:00:09.922931Z", "kind": "sighting", "label": "Seen", "source": "Telegram/iICdo6JkqLQcGiJzEUOva0XUBnrNpqjKkG8FagtyyTeeKdc", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "fac1ab49-23f0-4296-b104-2a6a8a75288a"}, {"timestamp": "2026-07-16T19:00:10.245Z", "date_only": false, "value": "2026-07-16T19:00:10.245050Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AsJtO6oP9l3H1kOcYxBEHOpAfkfZHY5OWvaOoNeuBwMm9sA", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d82b4d4d-ba24-4f75-a6c9-bc71064342db"}, {"timestamp": "2026-07-16T19:00:10.467Z", "date_only": false, "value": "2026-07-16T19:00:10.467257Z", "kind": "sighting", "label": "Seen", "source": "Telegram/QcCULqR_90DoYHZQQv3lizl4V2L6hUeyHJg5WfJTRhJBtz0", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "abbb03e5-6969-402e-8062-33e883e9e796"}, {"timestamp": "2026-07-16T19:00:10.578Z", "date_only": false, "value": "2026-07-16T19:00:10.578307Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7856q1VSKrM2rmaP9pUA3g7DeLjSvGX41DbCgkqetCbQx1c", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "2269da25-1116-4727-85ce-7ff94aea0708"}, {"timestamp": "2026-07-16T19:00:10.986Z", "date_only": false, "value": "2026-07-16T19:00:10.986958Z", "kind": "sighting", "label": "Seen", "source": "Telegram/tYmsElsn9h--aUiAjXnDcQx9kxldzvlWhq7A7UpXPwomXD0", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e1353d30-7236-420d-a92b-1ac4ef2c687c"}, {"timestamp": "2026-07-16T19:00:14.008Z", "date_only": false, "value": "2026-07-16T19:00:14.008475Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ptfoq-36JIr04842aRlYyiRH2eHGSh16yRBc9X59r84iQ6U", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "00e99093-a9c3-480c-9081-b59747ccc78f"}, {"timestamp": "2026-07-16T19:00:16.062Z", "date_only": false, "value": "2026-07-16T19:00:16.062593Z", "kind": "sighting", "label": "Seen", "source": "Telegram/uxGFUVPy3TOzkodNgeg8vepR-kYpq91Dg5jOn-NGrDlDjCc", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c72f674a-d1e7-44f6-acb3-ac56339d5c73"}, {"timestamp": "2026-07-16T19:00:16.903Z", "date_only": false, "value": "2026-07-16T19:00:16.903647Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_qFyWwPBG5YYrYVJCuvS8pNkDyhJdlaykHNtl_KVjYImn64", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b829d963-e5cc-4f99-89d1-7719caad0a28"}, {"timestamp": "2026-07-16T19:00:30.195Z", "date_only": false, "value": "2026-07-16T19:00:30.195303Z", "kind": "sighting", "label": "Seen", "source": "Telegram/LBqrNkVY4dEwnjUy7Kq7g-cCM4l6IBHTiJls5F94h7vNHE8", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "cbabd30b-4f23-4f39-aeb2-039bdee87871"}, {"timestamp": "2026-07-16T21:55:01Z", "date_only": false, "value": "2026-07-16T21:55:01+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:41062", "record": "RHSA-2026:41062", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-16T21:55:01Z", "date_only": false, "value": "2026-07-16T21:55:01+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:41062", "record": "RHSA-2026:41062", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-16T21:55:01Z", "date_only": false, "value": "2026-07-16T21:55:01+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:41062", "record": "RHSA-2026:41062", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-16T21:59:56Z", "date_only": false, "value": "2026-07-16T21:59:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:41063", "record": "RHSA-2026:41063", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-16T21:59:56Z", "date_only": false, "value": "2026-07-16T21:59:56+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:41063", "record": "RHSA-2026:41063", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-16T21:59:56Z", "date_only": false, "value": "2026-07-16T21:59:56+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:41063", "record": "RHSA-2026:41063", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-16T22:41:18.297Z", "date_only": false, "value": "2026-07-16T22:41:18.297135Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mitstek.bsky.social/post/3mqscllray22o", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9be430ad-7238-4cc9-b675-95ea9dcd865b", "content": "GhostLock (CVE-2026-43499) kernel privilege escalation: Patch released | AlmaLinux OS\nalmalinux.org/blog/2026-07...", "url": "https://bsky.app/profile/mitstek.bsky.social/post/3mqscllray22o"}, {"timestamp": "2026-07-17T00:00:00Z", "date_only": false, "value": "2026-07-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0899", "record": "CERTFR-2026-AVI-0899", "field": "last_revision_date"}, {"timestamp": "2026-07-17T00:00:00Z", "date_only": true, "value": "2026-07-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0899", "record": "CERTFR-2026-AVI-0899", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-07-17T00:00:00Z", "date_only": true, "value": "2026-07-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0926", "record": "CERTFR-2026-AVI-0926", "field": "vendor_advisories.9.published_at"}, {"timestamp": "2026-07-17T00:00:00Z", "date_only": true, "value": "2026-07-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0928", "record": "CERTFR-2026-AVI-0928", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-07-17T00:00:00Z", "date_only": false, "value": "2026-07-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0899", "record": "CERTFR-2026-AVI-0899", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-17T00:00:07.544Z", "date_only": false, "value": "2026-07-17T00:00:07.544120Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7856q1VSKrM2rmaP9pUA3g7DeLjSvGX41DbCgkqetCbQx1c", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "99f4eb78-b85a-472c-912e-5ad9dc30ccbd"}, {"timestamp": "2026-07-17T00:00:07.752Z", "date_only": false, "value": "2026-07-17T00:00:07.752246Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AsJtO6oP9l3H1kOcYxBEHOpAfkfZHY5OWvaOoNeuBwMm9sA", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "790883d2-c08b-42ed-a86a-5cef93be1312"}, {"timestamp": "2026-07-17T00:00:07.871Z", "date_only": false, "value": "2026-07-17T00:00:07.871349Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QcCULqR_90DoYHZQQv3lizl4V2L6hUeyHJg5WfJTRhJBtz0", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "6a7d8ea7-078e-48a8-b4f4-57e3ee6fc30a"}, {"timestamp": "2026-07-17T00:00:08.560Z", "date_only": false, "value": "2026-07-17T00:00:08.560111Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iICdo6JkqLQcGiJzEUOva0XUBnrNpqjKkG8FagtyyTeeKdc", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "96a48ebc-0844-4d4f-9152-73bab6e02f1a"}, {"timestamp": "2026-07-17T00:00:09.274Z", "date_only": false, "value": "2026-07-17T00:00:09.274091Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/vOHofO2qPvPXIyPNButd37pf6Fhua5DFTWTRaJatxt7pU5Q", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e7129406-3e92-48b4-872d-a16fc3688877"}, {"timestamp": "2026-07-17T00:00:11.482Z", "date_only": false, "value": "2026-07-17T00:00:11.482572Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gEg0EOaWFFZnEfHhBHmpZpiTrHvldsjFXSF402VZoO1TzNg", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ab10dce5-8cca-4be1-8692-ecf5fcf05657"}, {"timestamp": "2026-07-17T00:00:25.283Z", "date_only": false, "value": "2026-07-17T00:00:25.283401Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6kr7hIoL88BrLchA92ncvvrRqf7Y35-wLyAsUuKqT9ornHo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c842d9a7-45e0-4c8a-95d6-d9cfc8351d3a"}, {"timestamp": "2026-07-17T00:00:26.387Z", "date_only": false, "value": "2026-07-17T00:00:26.387522Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lkTqxrRLFzmZiKWrqHB7ywSYEM6i5xRhtt_z45dAnhSWBug", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b8187eb9-4974-4e6e-b4ab-0571a819cf8d"}, {"timestamp": "2026-07-17T00:00:49.877Z", "date_only": false, "value": "2026-07-17T00:00:49.877976Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93393", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "41658f0f-49b1-4d81-a903-4a9dc047ca61", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-Poc-Analysis\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Linuxoid-cn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 14:33:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nVulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93393"}, {"timestamp": "2026-07-17T00:00:49.965Z", "date_only": false, "value": "2026-07-17T00:00:49.965977Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93708", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "437b487e-6a62-4310-ae1e-4466645024d0", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IonStack-CVE-2026-43499-jinghu\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ayyy7128\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 14:57:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 exploit reproduction on jinghu (Xiaomi Pad 7 Ultra)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93708"}, {"timestamp": "2026-07-17T00:00:50.705Z", "date_only": false, "value": "2026-07-17T00:00:50.705628Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93424", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d18817fc-1707-4357-8877-175256a04cf4", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a JoinChang\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 19:05:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93424"}, {"timestamp": "2026-07-17T00:00:52.834Z", "date_only": false, "value": "2026-07-17T00:00:52.834159Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93408", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "251371f6-be9e-4174-bef7-a1b6982beb94", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a oppo-A5-PRO-5G-CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a qsvggff-spec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 16:56:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u672c\u6b21\u4e2a\u4eba\u6f0f\u6d1e\u7814\u7a76\u8fdb\u5c55\u6210\u679c\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93408"}, {"timestamp": "2026-07-17T00:00:53.006Z", "date_only": false, "value": "2026-07-17T00:00:53.006050Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93455", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3388c8d4-37fe-4886-9c78-664ca4357e8e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Logitech-G-Cloud-GhostLock-CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HYCQAQ\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 02:28:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u7f57\u6280\u4e91\u638c\u673a \u00b7 GhostLock CVE-2026-43499 root \u5c1d\u8bd5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93455"}, {"timestamp": "2026-07-17T00:00:53.187Z", "date_only": false, "value": "2026-07-17T00:00:53.187214Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93428", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "38272a5e-4c8e-464e-8c10-d8bfee71b1e6", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-oneplus\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a JoinChang\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 19:09:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93428"}, {"timestamp": "2026-07-17T00:00:53.415Z", "date_only": false, "value": "2026-07-17T00:00:53.415079Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93468", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "08793650-70f9-4389-960e-02b8abf7865e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a duchamp-root\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Colorful-glassblock\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 04:28:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nXiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93468"}, {"timestamp": "2026-07-17T00:00:54.454Z", "date_only": false, "value": "2026-07-17T00:00:54.454855Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93520", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3c30258a-eb4d-45e5-9e5b-d776354999a6", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a onesmiledx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 09:32:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA modified method to root Android device with locked bootloader via new exploit. (Only for Samsung now or smthing like that devices cuz i ported it to N970U1), Fork of https://github.com/localhosts-A/CyberMeowfia\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93520"}, {"timestamp": "2026-07-17T01:00:07.341Z", "date_only": false, "value": "2026-07-17T01:00:07.341863Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iYHsotoqlE8Z-AEKaQiVsXXSjTyl0MfV01akvHQ1zfYFYEI", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8d51a5bc-93e9-47ae-ad6b-7fa6da4b39ec"}, {"timestamp": "2026-07-17T12:00:05.796Z", "date_only": false, "value": "2026-07-17T12:00:05.796615Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/S_E_Reborn/6477", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c282889b-2057-4cf8-a371-e216317163f8", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux \u0431\u043e\u043b\u0435\u0435 15 \u043b\u0435\u0442, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-43499 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GhostLock. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root \u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u0417\u0430 \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Nebula Security \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 92 337 \u0434\u043e\u043b\u043b. \u043f\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 kernelCTF \u043e\u0442 Google.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Nebula, \u043e\u0448\u0438\u0431\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u043f\u0435\u0445\u0430 \u0432 97%. GhostLock \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432 Linux 2.6.39 \u0432 2011 \u0433\u043e\u0434\u0443 \u0438 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0441\u044f \u0432 \u044f\u0434\u0440\u0435 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432 Linux 7.1, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432 \u0432\u0441\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b.\n\nGhostLock \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0432 \u043a\u043e\u0434\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043c\u044c\u044e\u0442\u0435\u043a\u0441\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 (rtmutex) \u044f\u0434\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u0432 futex.\n\n\u0418\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u044f\u0434\u0440\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0438\u0441\u044f\u0447\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 \u043f\u0430\u043c\u044f\u0442\u044c \u0432 \u0441\u0442\u0435\u043a\u0435 \u043f\u043e\u0442\u043e\u043a\u0430 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u044d\u0442\u0430 \u043f\u0430\u043c\u044f\u0442\u044c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0435\u0442 \u0431\u044b\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0441\u0432\u043e\u0431\u043e\u0434\u0438\u0442\u044c \u044d\u0442\u0443 \u043f\u0430\u043c\u044f\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u044f\u0434\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root.\n\n\u0425\u043e\u0442\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 Nebula Security \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u044f\u0434\u0440\u0430 \u0438 \u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044f\u0434\u0440\u0430, \u043b\u0435\u0436\u0430\u0449\u0430\u044f \u0432 \u0435\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u0430.\n\n\u0412\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f, \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0436\u0435 \u0431\u044b\u043b\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0434\u0440\u0443\u0433\u043e\u043c, \u0433\u0434\u0435 \u043e\u043d\u0430 \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u043f\u043e\u0442\u043e\u043a\u0430 \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u043e\u0442\u043e\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u043b \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0439 \u043e\u0431\u044a\u0435\u043a\u0442 \u044f\u0434\u0440\u0430.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 GhostLock \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0438\u043c\u0435\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043b\u0438 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u044f\u0434\u0440\u0430.\n\n\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430, \u0435\u0441\u043b\u0438 \u0432 \u043d\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 CONFIG_FUTEX_PI, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u044b\u0445 \u044f\u0434\u0435\u0440 Linux.\n\n\u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 18 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u0433\u043e\u0434\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c. \u0414\u0440\u0443\u0433\u043e\u0439 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0431\u044b\u043b \u043f\u0440\u0438\u043d\u044f\u0442 \u0434\u0432\u0430 \u0434\u043d\u044f \u0441\u043f\u0443\u0441\u0442\u044f, \u0438 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u044f \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u044f\u0434\u0440\u0430.\n\nGoogle \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0435 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 Nebula Security \u0432 kernelCTF 30 \u0438\u044e\u043d\u044f, \u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442, \u0447\u0442\u043e \u044f\u0434\u0440\u043e \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0438 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044f \u00ab\u0432\u0438\u0441\u044f\u0447\u0438\u0439\u00bb \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\nNebula Security \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0437\u0430\u0449\u0438\u0442\u044b, \u043a\u0430\u043a RANDOMIZE_KSTACK_OFFSET, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0435\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0445\u043e\u0442\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u044f\u0434\u0440\u0430 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u043d\u044b\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c Linux \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u044f\u0434\u0440\u0430, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u043c, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0438 \u0441\u0442\u0430\u043d\u0443\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 GhostLock \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435 \u044f\u0434\u0440\u0430 \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "url": "https://t.me/S_E_Reborn/6477"}, {"timestamp": "2026-07-17T12:52:30Z", "date_only": false, "value": "2026-07-17T12:52:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-17T12:52:30Z", "date_only": false, "value": "2026-07-17T12:52:30+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-17T12:52:30Z", "date_only": false, "value": "2026-07-17T12:52:30+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-17T13:11:34Z", "date_only": false, "value": "2026-07-17T13:11:34+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-17T13:11:34Z", "date_only": false, "value": "2026-07-17T13:11:34+00:00", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-17T13:11:34Z", "date_only": false, "value": "2026-07-17T13:11:34+00:00", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-17T16:00:04.363Z", "date_only": false, "value": "2026-07-17T16:00:04.363533Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93852", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "eee8b42d-9291-4cb8-8b00-6caf4572e540", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-S25U\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BuSung-dev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 14  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-17 14:55:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStandalone CVE-2026-43499 PoC for Galaxy S25 Ultra SM-S938N S938NKSUACZF1\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93852"}, {"timestamp": "2026-07-17T19:43:21.393Z", "date_only": false, "value": "2026-07-17T19:43:21.393597Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/web.www.haxette.se.ap.brid.gy/post/3mquj4grex2l2", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9cf6eac8-7103-48e0-9c13-071c7e6e4dba", "content": "Ett AI-drivet analysverktyg har hittat en allvarlig s\u00e5rbarhet i Linux-k\u00e4rnan som legat ouppt\u00e4ckt i omkring 15 \u00e5r. Buggen, som f\u00e5tt namnet GhostLock och beteckningen CVE-2026-43499, g\u00f6r att vilken inloggad anv\u00e4ndare som helst kan ta full kontroll (root) \u00f6ver en opatchad dator, utan s\u00e4rskilda [\u2026]", "url": "https://bsky.app/profile/web.www.haxette.se.ap.brid.gy/post/3mquj4grex2l2"}, {"timestamp": "2026-07-18T00:00:33.756Z", "date_only": false, "value": "2026-07-18T00:00:33.756471Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_qFyWwPBG5YYrYVJCuvS8pNkDyhJdlaykHNtl_KVjYImn64", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "339e6df2-b6dc-4baa-9110-3b9f63b4d8ce"}, {"timestamp": "2026-07-18T00:00:42.557Z", "date_only": false, "value": "2026-07-18T00:00:42.557561Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ptfoq-36JIr04842aRlYyiRH2eHGSh16yRBc9X59r84iQ6U", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "6b013563-5f5a-4bdf-a040-9b46b79e704a"}, {"timestamp": "2026-07-18T00:00:45.663Z", "date_only": false, "value": "2026-07-18T00:00:45.663189Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/tYmsElsn9h--aUiAjXnDcQx9kxldzvlWhq7A7UpXPwomXD0", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1bc40d9c-f852-4526-b5e7-ab7fed441183"}, {"timestamp": "2026-07-18T02:00:05.361Z", "date_only": false, "value": "2026-07-18T02:00:05.361734Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LBqrNkVY4dEwnjUy7Kq7g-cCM4l6IBHTiJls5F94h7vNHE8", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "85c95cbb-7107-4be7-a5bf-9c4c7f4406a9"}, {"timestamp": "2026-07-18T07:00:04.384Z", "date_only": false, "value": "2026-07-18T07:00:04.384750Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93945", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e9e874ec-b541-48b6-813f-94ad6c841b7b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock-for-OnePlus\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a p2p3p\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 05:59:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\uff08CVE-2026-43499\uff09\u5185\u6838\u6f0f\u6d1e\u5229\u7528\u7a0b\u5e8f\uff0c\u9002\u7528\u4e8e\u5df2\u9501\u5b9a Bootloader \u7684\u4e00\u52a0\u8bbe\u5907\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93945"}, {"timestamp": "2026-07-18T10:00:04.666Z", "date_only": false, "value": "2026-07-18T10:00:04.666199Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93964", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8115e5ad-74aa-4957-bf42-5ccee7bcc8fb", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a smt878u-ionstack-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Wtrwx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 08:20:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 (IonStack/GhostLock) pure-C re-root POC for Samsung SM-T878U / gts7l (T878USQS8DXE1)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93964"}, {"timestamp": "2026-07-18T13:00:04.353Z", "date_only": false, "value": "2026-07-18T13:00:04.353904Z", "kind": "sighting", "label": "Seen", "source": "Telegram/MQdgKvb0lL-Y3hpXW_cbMeYRV8SpRfjn4CNV10YZAx_t9g", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8942264c-dc5b-4fae-8ca5-e6777a3d1550"}, {"timestamp": "2026-07-19T00:00:28.429Z", "date_only": false, "value": "2026-07-19T00:00:28.429811Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93964", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a6c3e3ce-80ba-42ef-9794-3ee43da4ee9c", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a smt878u-ionstack-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Wtrwx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-18 08:20:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 (IonStack/GhostLock) pure-C re-root POC for Samsung SM-T878U / gts7l (T878USQS8DXE1)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93964"}, {"timestamp": "2026-07-19T01:00:08.850Z", "date_only": false, "value": "2026-07-19T01:00:08.850165Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/MQdgKvb0lL-Y3hpXW_cbMeYRV8SpRfjn4CNV10YZAx_t9g", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8a3d3607-972b-464b-a33e-e4097acd1a0c"}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": true, "value": "2026-07-20", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0926", "record": "CERTFR-2026-AVI-0926", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": true, "value": "2026-07-20", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0928", "record": "CERTFR-2026-AVI-0928", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-07-20T06:01:45Z", "date_only": false, "value": "2026-07-20T06:01:45+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:41920", "record": "RHSA-2026:41920", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-20T06:01:45Z", "date_only": false, "value": "2026-07-20T06:01:45+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:41920", "record": "RHSA-2026:41920", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-07-20T06:01:45Z", "date_only": false, "value": "2026-07-20T06:01:45+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:41920", "record": "RHSA-2026:41920", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-20T18:00:05.108Z", "date_only": false, "value": "2026-07-20T18:00:05.108857Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/9tpNlnwjVZVYwuWejBnBA-eWQSN8G2bIqRE_fuaoLBUZlFA", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "76de84d7-92d8-455e-b92e-b854c144f10d"}, {"timestamp": "2026-07-20T18:00:05.959Z", "date_only": false, "value": "2026-07-20T18:00:05.959494Z", "kind": "sighting", "label": "Seen", "source": "Telegram/CZBJvlZ1W3OH6fsaJgVtYfOnMMQCQpGY5IWdZ_FaTQwAkWo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "207dd6f4-88ea-4814-91e6-10a854a34871"}, {"timestamp": "2026-07-20T18:00:06.285Z", "date_only": false, "value": "2026-07-20T18:00:06.285871Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FAhkP69mP1IwQSaxAcFWZvu6CnSkNPg4O9iKi7h8BG1-uIM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ac920cea-89b4-437b-9afe-8357d15dc039"}, {"timestamp": "2026-07-20T18:00:13.029Z", "date_only": false, "value": "2026-07-20T18:00:13.029423Z", "kind": "sighting", "label": "Seen", "source": "Telegram/QkQGfXHJmhlUJ4Ok72ZW64yVSosDBVIcN9uDsRFq_Gn2BWo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1db7956a-c8b3-4996-a1d3-28b9ad336423"}, {"timestamp": "2026-07-20T18:00:13.377Z", "date_only": false, "value": "2026-07-20T18:00:13.377917Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "01498275-0645-4c21-82a0-6e8b9f271327"}, {"timestamp": "2026-07-21T00:00:00Z", "date_only": true, "value": "2026-07-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0926", "record": "CERTFR-2026-AVI-0926", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-07-21T00:00:00Z", "date_only": true, "value": "2026-07-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0928", "record": "CERTFR-2026-AVI-0928", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2026-07-21T00:57:16.374Z", "date_only": false, "value": "2026-07-21T00:57:16.374363Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/radwebhosting.com/post/3mr4m24hbpc2h", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a479a8d6-b421-45e5-992f-cd14f9b09f0a", "content": "GhostLock (CVE-2026-43499): What It Is And Why We Patched All Managed Servers - Rad Web Hosting Blog  blog.radwebhosting.com/ghostlock-cv...", "url": "https://bsky.app/profile/radwebhosting.com/post/3mr4m24hbpc2h"}, {"timestamp": "2026-07-21T05:00:06.484Z", "date_only": false, "value": "2026-07-21T05:00:06.484128Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/94410", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "632b9d16-aa22-4367-8b67-6975edbc0928", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a d224407\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-21 02:17:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/94410"}, {"timestamp": "2026-07-22T00:00:00Z", "date_only": true, "value": "2026-07-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0928", "record": "CERTFR-2026-AVI-0928", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-07-22T00:00:03.724Z", "date_only": false, "value": "2026-07-22T00:00:03.724915Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "76b93ec8-b014-48c1-a83a-9fd5b7cbebad"}, {"timestamp": "2026-07-22T00:00:04Z", "date_only": false, "value": "2026-07-22T00:00:04.000291Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QkQGfXHJmhlUJ4Ok72ZW64yVSosDBVIcN9uDsRFq_Gn2BWo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8de056b2-c353-4eb6-a3c8-c236c2e042b9"}, {"timestamp": "2026-07-22T00:00:07.244Z", "date_only": false, "value": "2026-07-22T00:00:07.244256Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FAhkP69mP1IwQSaxAcFWZvu6CnSkNPg4O9iKi7h8BG1-uIM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c67d26b0-ed9d-4416-aa08-d59eb9909716"}, {"timestamp": "2026-07-22T17:00:04.475Z", "date_only": false, "value": "2026-07-22T17:00:04.475330Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Dukm_htJrIpGOZqoDJUhS517XJJYQfKNbcSgKtz1K8tDTao", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9d329ac2-282e-400c-97e6-fbe826653284"}, {"timestamp": "2026-07-22T17:00:04.743Z", "date_only": false, "value": "2026-07-22T17:00:04.743787Z", "kind": "sighting", "label": "Seen", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "13028217-b22d-4c90-a48f-94f0720b3226"}, {"timestamp": "2026-07-22T17:00:05.092Z", "date_only": false, "value": "2026-07-22T17:00:05.092404Z", "kind": "sighting", "label": "Seen", "source": "Telegram/q3tIaYx4agF_M3da1rV7jtAQTpWs9uwXUcQ2UZM8hUpw4XQ", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9280ea28-5389-46d3-9101-5e91ace1ecdd"}, {"timestamp": "2026-07-22T19:28:08.676Z", "date_only": false, "value": "2026-07-22T19:28:08.676925Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116965276885231507", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "11c35b7c-f1ae-49a2-a65b-775d92838651", "content": "\ud83d\udea8 A Go-based PoC scanner is available for CVE-2026-43499, also known as GhostLock, a Linux kernel use-after-free vulnerability that may allow local privilege escalation.\nGitHub: https://github.com/gagaltotal/CVE-2026-43499-PoC-Scanner\nThe tool includes a passive scan mode and a PoC trigger that may cause a kernel panic or system crash.", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/116965276885231507"}, {"timestamp": "2026-07-23T00:00:00Z", "date_only": true, "value": "2026-07-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0926", "record": "CERTFR-2026-AVI-0926", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-07-23T00:00:00Z", "date_only": true, "value": "2026-07-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0928", "record": "CERTFR-2026-AVI-0928", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-07-23T00:00:09.106Z", "date_only": false, "value": "2026-07-23T00:00:09.106447Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/q3tIaYx4agF_M3da1rV7jtAQTpWs9uwXUcQ2UZM8hUpw4XQ", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e0d9b4f7-a21c-4193-82a4-4ac10561cd86"}, {"timestamp": "2026-07-23T00:00:09.523Z", "date_only": false, "value": "2026-07-23T00:00:09.523137Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f842e3e1-5f0f-491d-9bc7-3e50194ae2fe"}, {"timestamp": "2026-07-23T00:00:09.789Z", "date_only": false, "value": "2026-07-23T00:00:09.789415Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Dukm_htJrIpGOZqoDJUhS517XJJYQfKNbcSgKtz1K8tDTao", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b99c491f-8e26-4469-a75b-4ecd2f212a96"}, {"timestamp": "2026-07-23T04:00:05.997Z", "date_only": false, "value": "2026-07-23T04:00:05.997355Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/94582", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "15723f83-8727-4775-af25-8282d8ba1924", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-PoC-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 03:56:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 PoC Scanner\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/94582"}, {"timestamp": "2026-07-23T12:00:03.190Z", "date_only": false, "value": "2026-07-23T12:00:03.190106Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/94802", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "76ba97e7-11bf-4fe7-93c8-1a437d9d7483", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a rmx3888-cve-2026-43499-config\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Bailan766\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 10:24:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 exploit configuration for realme RMX3888 (Android 16) - 20 verified kernel offsets\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/94802"}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": false, "value": "2026-07-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0926", "record": "CERTFR-2026-AVI-0926", "field": "last_revision_date"}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": false, "value": "2026-07-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0928", "record": "CERTFR-2026-AVI-0928", "field": "last_revision_date"}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": false, "value": "2026-07-24T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0926", "record": "CERTFR-2026-AVI-0926", "field": "initial_release_date"}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": false, "value": "2026-07-24T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0928", "record": "CERTFR-2026-AVI-0928", "field": "initial_release_date"}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": true, "value": "2026-07-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0954", "record": "CERTFR-2026-AVI-0954", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": false, "value": "2026-07-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0926", "record": "CERTFR-2026-AVI-0926", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-24T00:00:00Z", "date_only": false, "value": "2026-07-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0928", "record": "CERTFR-2026-AVI-0928", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-24T00:00:08.565Z", "date_only": false, "value": "2026-07-24T00:00:08.565589Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/94802", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "765632a5-f21d-4ac8-b544-5d0907627746", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a rmx3888-cve-2026-43499-config\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Bailan766\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-23 10:24:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 exploit configuration for realme RMX3888 (Android 16) - 20 verified kernel offsets\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/94802"}, {"timestamp": "2026-07-24T00:00:11.502Z", "date_only": false, "value": "2026-07-24T00:00:11.502637Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/94582", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c9dedcac-deba-4491-8fd5-df67bcbbb8b1", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-PoC-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-22 03:56:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 PoC Scanner\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/94582"}, {"timestamp": "2026-07-25T00:00:09.302Z", "date_only": false, "value": "2026-07-25T00:00:09.302750Z", "kind": "sighting", "label": "Seen", "source": "Telegram/g675v-UH8DF27WnjgWKKSkETruqTm270nowLOMEt8RLgjhY", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "4e96dfd2-5384-4313-ab7a-c33926bcbcdf"}, {"timestamp": "2026-07-25T04:00:04.027Z", "date_only": false, "value": "2026-07-25T04:00:04.027427Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95042", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "95db9096-fbde-4caa-9b43-cd8d4e4a2bb0", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #\u6f0f\u6d1e #\u5229\u7528 #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock-for-OnePlus15T\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cuteaplane\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-25 03:02:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\uff08CVE-2026-43499\uff09\u5185\u6838\u6f0f\u6d1e\u5229\u7528\u7a0b\u5e8f\uff0c\u9002\u7528\u4e8e\u672a\u89e3\u9501 Bootloader \u7684\u4e00\u52a015T.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95042"}, {"timestamp": "2026-07-25T05:00:03.675Z", "date_only": false, "value": "2026-07-25T05:00:03.675573Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95046", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "6dc1c967-0db1-4b75-9835-b1aab08087ed", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a UnPlus\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a No-22-Github\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-25 03:57:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 per-boot root exploit \u2014 core logic (arm64 Android GKI 6.6)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95046"}, {"timestamp": "2026-07-25T12:00:03.594Z", "date_only": false, "value": "2026-07-25T12:00:03.594228Z", "kind": "sighting", "label": "Seen", "source": "Telegram/19jX0NJqwe-eDt64VLMorAQsUD0HmaUpeFyqaT6gmBrbpYo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f6b52ef3-8183-46b6-ae24-d5572bfb73cc"}, {"timestamp": "2026-07-26T00:00:45.178Z", "date_only": false, "value": "2026-07-26T00:00:45.178351Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/19jX0NJqwe-eDt64VLMorAQsUD0HmaUpeFyqaT6gmBrbpYo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f06b8385-63b7-4fcb-8953-07512748ec39"}, {"timestamp": "2026-07-26T00:00:46.615Z", "date_only": false, "value": "2026-07-26T00:00:46.615791Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95046", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "fe6ffce5-091e-44cb-94a7-f1e181e9386c", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a UnPlus\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a No-22-Github\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-25 03:57:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 per-boot root exploit \u2014 core logic (arm64 Android GKI 6.6)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95046"}, {"timestamp": "2026-07-26T00:00:46.696Z", "date_only": false, "value": "2026-07-26T00:00:46.696938Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95042", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f9e62fe0-dc6c-4a6e-92cc-7c85b8be1289", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #\u6f0f\u6d1e #\u5229\u7528 #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock-for-OnePlus15T\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cuteaplane\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-25 03:02:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\uff08CVE-2026-43499\uff09\u5185\u6838\u6f0f\u6d1e\u5229\u7528\u7a0b\u5e8f\uff0c\u9002\u7528\u4e8e\u672a\u89e3\u9501 Bootloader \u7684\u4e00\u52a015T.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95042"}, {"timestamp": "2026-07-26T00:00:47.542Z", "date_only": false, "value": "2026-07-26T00:00:47.542649Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/g675v-UH8DF27WnjgWKKSkETruqTm270nowLOMEt8RLgjhY", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3f64fb1f-f0d9-4fc7-8ab7-4600b5b8ebf8"}, {"timestamp": "2026-07-26T02:00:24.051Z", "date_only": false, "value": "2026-07-26T02:00:24.051196Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/4737", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "56584785-0da3-44f6-addc-ea9bcc80bd74", "content": "GhostLock: 15-\u043b\u0435\u0442\u043d\u044f\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 Linux \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0432 root \u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430  \n\nNebula Security \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0441 2011 \u0433\u043e\u0434\u0430 \u043f\u043e\u0447\u0442\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-43499 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,8) \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0431\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0430\u0432 \u0438 \u0431\u0435\u0437 \u0440\u0435\u0434\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u044f\u0434\u0440\u0430. \u0410\u0432\u0442\u043e\u0440\u044b \u0434\u043e\u0432\u0435\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0434\u043e \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u043a\u043e\u043b\u043e 97% \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0433\u0440\u0430\u0434\u0443 \u0432 kernelCTF.\n\u00a0\n\u0412 \u044f\u0434\u0440\u0435 \u0435\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0430 rtmutex, \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u044e\u0449\u0430\u044f \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u0435 \u0441\u0440\u043e\u0447\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0438 \u0437\u0430 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e\u0439. \u0427\u0430\u0441\u0442\u044c\u044e \u044d\u0442\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u044d\u0442\u0430\u043f \u043e\u0447\u0438\u0441\u0442\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u0430\u0434\u0430\u0447\u0430 \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0435\u0442 \u043e\u0436\u0438\u0434\u0430\u0442\u044c. \u041e\u0431\u044b\u0447\u043d\u043e \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e. \u041d\u043e \u0432 \u043e\u0434\u043d\u043e\u043c \u0440\u0435\u0434\u043a\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u043a\u043e\u0433\u0434\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0437\u0430\u0445\u043e\u0434\u0438\u0442 \u0432 \u0442\u0443\u043f\u0438\u043a \u0438 \u0432\u044b\u043d\u0443\u0436\u0434\u0435\u043d\u0430 \u043e\u0442\u043c\u0435\u043d\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435, \u043e\u0447\u0438\u0441\u0442\u043a\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438 \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044c \u043d\u0435 \u0442\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0438.\n\u00a0\n\u042d\u0442\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u044f\u0434\u0440\u043e \u0441 \u00ab\u0437\u0430\u043c\u0435\u0442\u043a\u043e\u0439\u00bb, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442 \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043d\u043e \u0443\u0436\u0435 \u043e\u0442\u0431\u0440\u043e\u0441\u0438\u043b\u043e \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e. \u0414\u043e\u0432\u0435\u0440\u0438\u0435 \u043a \u044d\u0442\u043e\u043c\u0443 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u043c\u0443 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044e \u2014 \u0432\u043e\u0442 \u0432 \u0447\u0435\u043c \u0432\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0441\u0432\u043e\u0435\u0433\u043e \u0440\u043e\u0434\u0430 \u043f\u0440\u043e\u0441\u0447\u0435\u0442, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f (use-after-free). \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Nebula \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0445\u0438\u0442\u0440\u044b\u0445 \u0448\u0430\u0433\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u044d\u0442\u0443 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c, \u0432 \u0438\u0442\u043e\u0433\u0435 \u043e\u0431\u043c\u0430\u043d\u0443\u0432 \u044f\u0434\u0440\u043e \u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u00abroot\u00bb. \u041d\u0430 \u0438\u0445 \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u044d\u0442\u043e \u0437\u0430\u043d\u044f\u043b\u043e \u043e\u043a\u043e\u043b\u043e \u043f\u044f\u0442\u0438 \u0441\u0435\u043a\u0443\u043d\u0434.\n\u00a0\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 Linux \u0441 2011 \u0433\u043e\u0434\u0430 \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u0438 \u0432\u043e\u0448\u043b\u0430 \u0432 Linux 7.1.\n\u00a0\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u0440\u0430\u0449\u0430\u044e\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0434\u0432\u0430 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u0441\u0431\u043e\u0440\u043a\u0438, RANDOMIZE_KSTACK_OFFSET \u0438 STATIC_USERMODE_HELPER, \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u044f\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u043c\u0435\u0440\u0430\u043c\u0438 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439. \n\u00a0\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://nebusec.ai/research/ionstack-part-2/\n\u00a0\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Linux", "url": "https://t.me/EchelonEyes/4737"}, {"timestamp": "2026-07-26T07:01:46.287Z", "date_only": false, "value": "2026-07-26T07:01:46.287947Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/zhatez/2805", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7e78aaf3-247c-42db-bf48-72c2b33a43a8", "content": "IonStack: root Android 17 \u0441 \u043e\u0434\u043d\u043e\u0433\u043e URL\n\nNebula Security \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 IonStack \u2014 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0443\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 Firefox \u2192 Linux kernel, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430 Android 17 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0432\u0435\u0441\u0442\u0438 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a \u043f\u043e URL \u0434\u043e root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2026-10702, JIT miscompilation \u0432 JavaScript Engine Firefox, \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f \u0432 Firefox 151.0.3, \u0438 CVE-2026-43499 GhostLock \u2014 use-after-free \u0432 rtmutex/futex-PI \u043a\u043e\u0434\u0435 \u044f\u0434\u0440\u0430 Linux.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0442\u043e browser-to-kernel full chain. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0431\u0430\u0433 \u0432 Firefox \u0434\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430\u0442\u0435\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f kernel LPE \u043f\u0440\u043e\u0431\u0438\u0432\u0430\u0435\u0442 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423 GhostLock \u043c\u0435\u0445\u0430\u043d\u0438\u043a\u0430: \u043e\u0431\u044b\u0447\u043d\u044b\u0435 threading/futex syscalls \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u0438\u0441\u044f\u0447\u0438\u0439 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u0441\u0442\u0435\u043a \u044f\u0434\u0440\u0430; \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Nebula, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u2014 Linux 2.6.39-rc1 \u0434\u043e 7.1-rc1 \u043f\u0440\u0438 CONFIG_FUTEX_PI=y, \u0430 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432 kernelCTF \u0431\u044b\u043b\u0430 \u043e\u043a\u043e\u043b\u043e 97% \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439.\n\n\u0412\u0430\u0436\u043d\u043e\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435: \u044d\u0442\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u0434\u0435\u043c\u043e \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 PoC, \u0430 \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. Android-\u0447\u0430\u0441\u0442\u044c \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 Firefox/Fenix \u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u044f\u0434\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435; \u043d\u0430 \u0434\u0435\u043c\u043e-\u0441\u0430\u0439\u0442\u0435 Nebula \u043f\u0440\u044f\u043c\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043f\u043e\u0442\u0435\u0440\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udc31  GitHub PoC\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2 MAX", "url": "https://t.me/zhatez/2805"}, {"timestamp": "2026-07-26T14:00:04.352Z", "date_only": false, "value": "2026-07-26T14:00:04.352081Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95237", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "53ae8469-27f8-435f-95d9-8c02f968da05", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-root-KernelSU\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a woshimaniubi8\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-26 12:56:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u57fa\u4e8e\u5185\u6838\u6f0f\u6d1eCVE-2026-43499\u7684\u672c\u5730\u63d0\u6743\u9002\u914d\uff0c\u96c6\u6210\u5d4c\u5165\u5f0f KernelSU \u3002\u7f16\u8bd1\u751f\u6210`preload.so`\uff1b\u89e6\u53d1\u6210\u529f\u540e\u4f1a\u4ee5 `late-load` \u6a21\u5f0f(\u8d8a\u72f1\u6a21\u5f0f)\u542f\u52a8 KernelSU\u3002\u652f\u6301(xbl_config.img / vendor_boot.img) + boot.img \u751f\u6210target.h  Local privilege escalation adaptation based on a kernel vulnerability, integrating embedded KernelSU. Compiles and generates `preload.so`; , KernelSU will be started in `late-load` mode\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95237"}, {"timestamp": "2026-07-26T22:00:03.777Z", "date_only": false, "value": "2026-07-26T22:00:03.777692Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Pju2lk9uaKkbkjso0NTtdRvjd808czCF5fWgGC8yN_eU0QM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c8027c7c-f839-4bac-8d55-343cf4a34aae"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-07-27T00:00:00Z", "date_only": false, "value": "2026-07-27T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-07-27T00:00:08.917Z", "date_only": false, "value": "2026-07-27T00:00:08.917170Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Pju2lk9uaKkbkjso0NTtdRvjd808czCF5fWgGC8yN_eU0QM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c05486bc-7ffc-4d29-88d6-247c9e2e9f46"}, {"timestamp": "2026-07-27T00:00:19.153Z", "date_only": false, "value": "2026-07-27T00:00:19.153661Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/4737", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3ac6e668-b0ac-4125-847f-fd07891f7263", "content": "GhostLock: 15-\u043b\u0435\u0442\u043d\u044f\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 Linux \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0432 root \u0438 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430  \n\nNebula Security \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0441 2011 \u0433\u043e\u0434\u0430 \u043f\u043e\u0447\u0442\u0438 \u0432\u043e \u0432\u0441\u0435\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-43499 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,8) \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0431\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0430\u0432 \u0438 \u0431\u0435\u0437 \u0440\u0435\u0434\u043a\u0438\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u044f\u0434\u0440\u0430. \u0410\u0432\u0442\u043e\u0440\u044b \u0434\u043e\u0432\u0435\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0434\u043e \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u043a\u043e\u043b\u043e 97% \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0433\u0440\u0430\u0434\u0443 \u0432 kernelCTF.\n\u00a0\n\u0412 \u044f\u0434\u0440\u0435 \u0435\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0430 rtmutex, \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u044e\u0449\u0430\u044f \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u0435 \u0441\u0440\u043e\u0447\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0438 \u0437\u0430 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e\u0439. \u0427\u0430\u0441\u0442\u044c\u044e \u044d\u0442\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u044d\u0442\u0430\u043f \u043e\u0447\u0438\u0441\u0442\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u0430\u0434\u0430\u0447\u0430 \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u0435\u0442 \u043e\u0436\u0438\u0434\u0430\u0442\u044c. \u041e\u0431\u044b\u0447\u043d\u043e \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e. \u041d\u043e \u0432 \u043e\u0434\u043d\u043e\u043c \u0440\u0435\u0434\u043a\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u043a\u043e\u0433\u0434\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0437\u0430\u0445\u043e\u0434\u0438\u0442 \u0432 \u0442\u0443\u043f\u0438\u043a \u0438 \u0432\u044b\u043d\u0443\u0436\u0434\u0435\u043d\u0430 \u043e\u0442\u043c\u0435\u043d\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435, \u043e\u0447\u0438\u0441\u0442\u043a\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438 \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044c \u043d\u0435 \u0442\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0438.\n\u00a0\n\u042d\u0442\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u044f\u0434\u0440\u043e \u0441 \u00ab\u0437\u0430\u043c\u0435\u0442\u043a\u043e\u0439\u00bb, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442 \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u043d\u043e \u0443\u0436\u0435 \u043e\u0442\u0431\u0440\u043e\u0441\u0438\u043b\u043e \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e. \u0414\u043e\u0432\u0435\u0440\u0438\u0435 \u043a \u044d\u0442\u043e\u043c\u0443 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u043c\u0443 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044e \u2014 \u0432\u043e\u0442 \u0432 \u0447\u0435\u043c \u0432\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0441\u0432\u043e\u0435\u0433\u043e \u0440\u043e\u0434\u0430 \u043f\u0440\u043e\u0441\u0447\u0435\u0442, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f (use-after-free). \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Nebula \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0445\u0438\u0442\u0440\u044b\u0445 \u0448\u0430\u0433\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u044d\u0442\u0443 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c, \u0432 \u0438\u0442\u043e\u0433\u0435 \u043e\u0431\u043c\u0430\u043d\u0443\u0432 \u044f\u0434\u0440\u043e \u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u00abroot\u00bb. \u041d\u0430 \u0438\u0445 \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u044d\u0442\u043e \u0437\u0430\u043d\u044f\u043b\u043e \u043e\u043a\u043e\u043b\u043e \u043f\u044f\u0442\u0438 \u0441\u0435\u043a\u0443\u043d\u0434.\n\u00a0\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0432 Linux \u0441 2011 \u0433\u043e\u0434\u0430 \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u0438 \u0432\u043e\u0448\u043b\u0430 \u0432 Linux 7.1.\n\u00a0\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u0440\u0430\u0449\u0430\u044e\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0434\u0432\u0430 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u0441\u0431\u043e\u0440\u043a\u0438, RANDOMIZE_KSTACK_OFFSET \u0438 STATIC_USERMODE_HELPER, \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u044f\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u043c\u0435\u0440\u0430\u043c\u0438 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439. \n\u00a0\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://nebusec.ai/research/ionstack-part-2/\n\u00a0\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Linux", "url": "https://t.me/EchelonEyes/4737"}, {"timestamp": "2026-07-27T00:00:26.836Z", "date_only": false, "value": "2026-07-27T00:00:26.836653Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95237", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e78b7476-bf0f-4d3a-b5d6-8126b81ee356", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-root-KernelSU\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a woshimaniubi8\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-26 12:56:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u57fa\u4e8e\u5185\u6838\u6f0f\u6d1eCVE-2026-43499\u7684\u672c\u5730\u63d0\u6743\u9002\u914d\uff0c\u96c6\u6210\u5d4c\u5165\u5f0f KernelSU \u3002\u7f16\u8bd1\u751f\u6210`preload.so`\uff1b\u89e6\u53d1\u6210\u529f\u540e\u4f1a\u4ee5 `late-load` \u6a21\u5f0f(\u8d8a\u72f1\u6a21\u5f0f)\u542f\u52a8 KernelSU\u3002\u652f\u6301(xbl_config.img / vendor_boot.img) + boot.img \u751f\u6210target.h  Local privilege escalation adaptation based on a kernel vulnerability, integrating embedded KernelSU. Compiles and generates `preload.so`; , KernelSU will be started in `late-load` mode\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95237"}, {"timestamp": "2026-07-27T03:00:04.056Z", "date_only": false, "value": "2026-07-27T03:00:04.056387Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rEoAW_BRJJDgx3HUGXYCrbn1mRYrjAni9y98I3Isgm8SRC8", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "92551a5b-0ee7-4cf5-933e-49a2ea015256"}, {"timestamp": "2026-07-27T17:00:06.053Z", "date_only": false, "value": "2026-07-27T17:00:06.053908Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95389", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "eff84bd2-e1ad-448e-bb7c-f7cd58b80e79", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dnlid\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 15:22:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499: Linux kernel futex PI use-after-free research package\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95389"}, {"timestamp": "2026-07-28T00:00:00Z", "date_only": true, "value": "2026-07-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0954", "record": "CERTFR-2026-AVI-0954", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-07-28T00:00:06.779Z", "date_only": false, "value": "2026-07-28T00:00:06.779091Z", "kind": "sighting", "label": "Seen", "source": "Telegram/F8vrTrUv3gIbFxM3rOXxL26ctNEruG5Sfgafbhhsmc8elBo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c99eb41a-e575-45cd-8ccd-21edf798462b"}, {"timestamp": "2026-07-28T00:00:30.050Z", "date_only": false, "value": "2026-07-28T00:00:30.050926Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95389", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8ad6f009-fe55-4b1a-bc83-24fd35814043", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dnlid\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 15:22:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499: Linux kernel futex PI use-after-free research package\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95389"}, {"timestamp": "2026-07-28T02:00:04.358Z", "date_only": false, "value": "2026-07-28T02:00:04.358648Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95442", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "4b30d3f6-722e-4b5b-a63c-123d81b9e22b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-pkb110\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KawaiiHachimi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 00:55:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95442"}, {"timestamp": "2026-07-28T12:08:07.022Z", "date_only": false, "value": "2026-07-28T12:08:07.022520Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:38491", "record": "RLSA-2026:38491", "field": "modified"}, {"timestamp": "2026-07-28T13:00:04.078Z", "date_only": false, "value": "2026-07-28T13:00:04.078470Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95514", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7fa0a5b0-8735-4293-b103-fdf915c8fff1", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Root-My-Device\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Witaqua-tools\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Kotlin\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 10:18:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nKSU installer for supported Samsung Galaxy firmware with CVE-2026-43499\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95514"}, {"timestamp": "2026-07-28T18:07:48.100Z", "date_only": false, "value": "2026-07-28T18:07:48.100656Z", "kind": "other", "label": "Updated", "source": "osv_rocky \u00b7 RLSA-2026:38492", "record": "RLSA-2026:38492", "field": "modified"}, {"timestamp": "2026-07-28T20:00:07.762Z", "date_only": false, "value": "2026-07-28T20:00:07.762229Z", "kind": "sighting", "label": "Seen", "source": "Telegram/h1j6Jl6m2npLlEniyRpMllHKNmi9d2U9i1x7gM3I-76diKo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c7faebb6-66df-4ab7-b237-6f68834a8259"}, {"timestamp": "2026-07-28T22:00:05.761Z", "date_only": false, "value": "2026-07-28T22:00:05.761876Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/zhatez/2805", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7b55986e-2b23-4cad-b02e-e3ed526db78b", "content": "IonStack: root Android 17 \u0441 \u043e\u0434\u043d\u043e\u0433\u043e URL\n\nNebula Security \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430 IonStack \u2014 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u0443\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 Firefox \u2192 Linux kernel, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430 Android 17 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0432\u0435\u0441\u0442\u0438 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a \u043f\u043e URL \u0434\u043e root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2026-10702, JIT miscompilation \u0432 JavaScript Engine Firefox, \u0437\u0430\u043a\u0440\u044b\u0442\u0430\u044f \u0432 Firefox 151.0.3, \u0438 CVE-2026-43499 GhostLock \u2014 use-after-free \u0432 rtmutex/futex-PI \u043a\u043e\u0434\u0435 \u044f\u0434\u0440\u0430 Linux.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0442\u043e browser-to-kernel full chain. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0431\u0430\u0433 \u0432 Firefox \u0434\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430\u0442\u0435\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f kernel LPE \u043f\u0440\u043e\u0431\u0438\u0432\u0430\u0435\u0442 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0435\u0442 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423 GhostLock \u043c\u0435\u0445\u0430\u043d\u0438\u043a\u0430: \u043e\u0431\u044b\u0447\u043d\u044b\u0435 threading/futex syscalls \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u0438\u0441\u044f\u0447\u0438\u0439 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u0441\u0442\u0435\u043a \u044f\u0434\u0440\u0430; \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Nebula, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u2014 Linux 2.6.39-rc1 \u0434\u043e 7.1-rc1 \u043f\u0440\u0438 CONFIG_FUTEX_PI=y, \u0430 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432 kernelCTF \u0431\u044b\u043b\u0430 \u043e\u043a\u043e\u043b\u043e 97% \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439.\n\n\u0412\u0430\u0436\u043d\u043e\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435: \u044d\u0442\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u0434\u0435\u043c\u043e \u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 PoC, \u0430 \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. Android-\u0447\u0430\u0441\u0442\u044c \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 Firefox/Fenix \u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u044f\u0434\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435; \u043d\u0430 \u0434\u0435\u043c\u043e-\u0441\u0430\u0439\u0442\u0435 Nebula \u043f\u0440\u044f\u043c\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u043f\u0430\u0434\u0435\u043d\u0438\u044f\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u0445 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043f\u043e\u0442\u0435\u0440\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udc31  GitHub PoC\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2 MAX", "url": "https://t.me/zhatez/2805"}, {"timestamp": "2026-07-29T00:00:00Z", "date_only": true, "value": "2026-07-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0954", "record": "CERTFR-2026-AVI-0954", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-07-29T00:00:13.144Z", "date_only": false, "value": "2026-07-29T00:00:13.144028Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/h1j6Jl6m2npLlEniyRpMllHKNmi9d2U9i1x7gM3I-76diKo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "067c8daa-bce6-4685-b9f4-db5b5b1743e6"}, {"timestamp": "2026-07-29T00:00:35.221Z", "date_only": false, "value": "2026-07-29T00:00:35.221681Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95514", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "27f8b639-23cc-41e4-9004-64b127f6204e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Root-My-Device\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Witaqua-tools\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Kotlin\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 10:18:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nKSU installer for supported Samsung Galaxy firmware with CVE-2026-43499\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95514"}, {"timestamp": "2026-07-29T00:00:51.499Z", "date_only": false, "value": "2026-07-29T00:00:51.499109Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95442", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "74299cd7-e8b3-4794-8ad0-01685a11f2e3", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-pkb110\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a KawaiiHachimi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-28 00:55:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95442"}, {"timestamp": "2026-07-29T00:00:53.599Z", "date_only": false, "value": "2026-07-29T00:00:53.599258Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/F8vrTrUv3gIbFxM3rOXxL26ctNEruG5Sfgafbhhsmc8elBo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d55e77bc-481f-4883-98ec-e45df5811c9a"}, {"timestamp": "2026-07-29T11:00:06.140Z", "date_only": false, "value": "2026-07-29T11:00:06.140654Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95652", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "227fce9e-92d0-4271-a625-01bf6d73feec", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a mt6985-CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 233laoliu\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 08:22:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 exploit adapter for MT6985 MediaTek Dimensity 9300 (vivo PD2241)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95652"}, {"timestamp": "2026-07-29T12:00:04.437Z", "date_only": false, "value": "2026-07-29T12:00:04.437059Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/aenix_io/427", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "81f95986-637f-4913-83db-df19eed6f231", "content": "\ud83d\udc7bThird CVE this week, but good news: Cozystack isn't exposed by design and the fix is the same v1.13.6 upgrade you already know. Details below\ud83d\udc47\n\nSecurity Advisory: CVE-2026-43499 (\"GhostLock\") \u2014 Cozystack Exposure Assessment\nOn July 7, 2026, a critical Linux kernel local privilege escalation \u2014 CVE-2026-43499 (\"GhostLock\") \u2014 was disclosed with a working proof-of-concept. It is a stack use-after-free in the kernel real-time mutex (rtmutex) priority-inheritance path, reachable from futex(2): on the proxy-lock rollback taken from futex_requeue(), remove_waiter() clears pi_blocked_on on the wrong task, leaving a dangling pointer to a freed kernel stack frame. Introduced in Linux 2.6.39 (2011), it affects every kernel up to v7.1-rc1, needs only CONFIG_FUTEX_PI=y (no capabilities, no user namespaces), and can be escalated into a container escape \u2014 an unprivileged local process reaching root on the host kernel.\n\nThe upstream fix is commit 3bfdc63936dd, shipped in stable kernels 6.1.175, 6.6.140, 6.12.86, 6.18.27, and 7.0.4.\n\nReference: https://nvd.nist.gov/vuln/detail/CVE-2026-43499\n\nConfirmed not affected\nGhostLock is a local escalation: it presupposes the attacker can already run native code on the host kernel's syscall surface. By design, Cozystack gives tenants no way to do that.\n\nManaged Kubernetes and VirtualMachine services. All tenant workloads execute inside guest virtual machines running on top of unprivileged containers. Tenant code has no direct access to the host kernel syscall surface \u2014 a futex sequence issued inside a guest reaches the guest kernel, not the host.\n\nManaged databases run as non-root, non-superuser users, with no Kubernetes API access and no ability to execute arbitrary code in the server process, so a tenant cannot issue the syscall sequence the exploit requires.\n\nNo arbitrary tenant code on the management cluster. Cozystack exposes only the managed services we provide \u2014 there is no surface on which a tenant runs arbitrary native code in a container on a management node.\nBy the design of Cozystack, we currently do not see any viable attack path that would allow a tenant to reach the host kernel surface affected by this vulnerability.\n\nRecommended action \u2014 same as Januscape: upgrade the kernel\nThe vulnerability is confirmed in current Talos Linux releases, and any future regression in the isolation above could re-expose it \u2014 so we recommend applying the kernel fix regardless.\n\nGhostLock is fixed in Talos Linux v1.13.6 (kernel 6.18.38-talos, newer than the first fixed 6.18.27). This is the same upgrade we recommended for CVE-2026-53359 (\"Januscape\") and CVE-2026-46113 \u2014 one move to v1.13.6 closes all three.\n\nAlready upgraded to v1.13.6 for Januscape? You are protected \u2014 no further action needed.\nNot yet? Follow the same runbook: build an Image Factory installer with your extensions, upgrade node-by-node to v1.13.6, and verify talosctl read /proc/sys/kernel/osrelease shows 6.18.38-talos. Move one node at a time, waiting for etcd quorum and storage health between control-plane nodes.\nIf you cannot upgrade immediately, kernel.randomize_kstack_offset=1 (via machine.sysctls) reduces the exploit's reliability as a defense-in-depth measure \u2014 not a substitute for the fix.\n\nWe will update this advisory as fixed releases and further mitigations are confirmed.", "url": "https://t.me/aenix_io/427"}, {"timestamp": "2026-07-29T12:01:46.594Z", "date_only": false, "value": "2026-07-29T12:01:46.594021Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ittales/723", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a7a9e9b9-fef9-41b4-b68a-30547a6c60fa", "content": "\u041c\u0430\u0440\u0430\u0444\u043e\u043d LPE \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Linux \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Nebula Security \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 GhostLock (CVE-2026-43499), stack-use-after-free \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 rtmutex \u044f\u0434\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0432\u043d\u0435\u0441\u0451\u043d \u0435\u0449\u0451 \u0432 Linux 2.6.39 \u0438 \u043f\u0440\u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0431\u043e\u043b\u0435\u0435 15 \u043b\u0435\u0442. \u041a\u043e\u0440\u0435\u043d\u044c \u0431\u0430\u0433\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430 proxy-\u043f\u0443\u0442\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f remove_waiter() \u043e\u0447\u0438\u0449\u0430\u0435\u0442 pi_blocked_on \u043d\u0435 \u0443 \u0442\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0438, \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0432\u0438\u0441\u044f\u0447\u0438\u0439 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b \u0431\u0435\u0437 \u043f\u0430\u0442\u0447\u0430 (\u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u043e\u0442 v2.6.39-rc1 \u0434\u043e v7.1-rc1), \u043f\u0440\u0438\u0447\u0451\u043c \u0442\u0440\u0438\u0433\u0433\u0435\u0440 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043d\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043d\u0438 user namespaces, \u043d\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u044f\u0434\u0440\u0430.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u0432 container escape, \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u043e root \u043d\u0430 \u0445\u043e\u0441\u0442\u0435. \u0410\u0432\u0442\u043e\u0440\u044b \u0434\u043e\u0432\u0435\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043e 97% \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 forge \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e rt_mutex_waiter, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044c inet6_protos[IPPROTO_UDP] \u0438 \u0442\u0440\u044e\u043a \u0441 CPU entry area, \u0437\u0430 \u0447\u0442\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 92 337 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0432 Google kernelCTF.\n\n\u041f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0438 PoC \u0443\u0436\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u043e \u0432\u044b\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 CyberMeowfia \u043d\u0430 GitHub.", "url": "https://t.me/ittales/723"}, {"timestamp": "2026-07-29T19:29:51.954Z", "date_only": false, "value": "2026-07-29T19:29:51.954205Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mrsnxetww725", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f184c43c-136d-4ca2-aaab-dcc7ae170990", "content": "Quick POC using \n@nebusecurity\n CVE-2026-43499 to root my bootloader locked US S25 (SM-S931U1). Btw this works on latest fw. This phone is Android 16, June update.\n\n\nhttps://\nnebusec.ai/research/ionst\nack-pa\u2026\n\n\ud83d\udd01 RT @FuzzySec | reposted by @HackingLZ\nhttps://x.com/FuzzySec/status/2082544006735491573", "url": "https://bsky.app/profile/infosecbot.bsky.social/post/3mrsnxetww725"}, {"timestamp": "2026-07-29T20:00:03.770Z", "date_only": false, "value": "2026-07-29T20:00:03.770682Z", "kind": "sighting", "label": "Seen", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "308b2fd1-6b4a-4d00-a76b-c9d58feb5f2d"}, {"timestamp": "2026-07-30T00:00:21.638Z", "date_only": false, "value": "2026-07-30T00:00:21.638926Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/TzHuoTQGGjrCLjvjb-w7G7VP2W7wuY36FTV_RC7C2rNjBX8", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7d13511e-13fa-43b6-aadb-332b34bbe7b2"}, {"timestamp": "2026-07-30T00:02:05.955Z", "date_only": false, "value": "2026-07-30T00:02:05.955138Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95652", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7f37f5a7-bf5c-428f-892c-0976740cc1ec", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a mt6985-CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 233laoliu\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 08:22:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 exploit adapter for MT6985 MediaTek Dimensity 9300 (vivo PD2241)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95652"}, {"timestamp": "2026-07-30T14:00:04.516Z", "date_only": false, "value": "2026-07-30T14:00:04.516455Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95853", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "bdf8228d-e7ca-449a-85ac-1f779796a692", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-A34\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a FuCnox\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 12:53:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStandalone CVE-2026-43499 PoC for Galaxy A34 SM-A346E A346EXXSEEZC7\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95853"}, {"timestamp": "2026-07-31T00:00:00Z", "date_only": false, "value": "2026-07-31T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0954", "record": "CERTFR-2026-AVI-0954", "field": "last_revision_date"}, {"timestamp": "2026-07-31T00:00:00Z", "date_only": false, "value": "2026-07-31T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0954", "record": "CERTFR-2026-AVI-0954", "field": "initial_release_date"}, {"timestamp": "2026-07-31T00:00:00Z", "date_only": false, "value": "2026-07-31T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0954", "record": "CERTFR-2026-AVI-0954", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-31T00:00:29.791Z", "date_only": false, "value": "2026-07-31T00:00:29.791204Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/95853", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "584c8624-c9bc-4bad-b087-cea85843a47e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-A34\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a FuCnox\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 12:53:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nStandalone CVE-2026-43499 PoC for Galaxy A34 SM-A346E A346EXXSEEZC7\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/95853"}, {"timestamp": "2026-07-31T00:30:14.149Z", "date_only": false, "value": "2026-07-31T00:30:14.149985Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/almalinux.org/post/3mrvp7fd6yt24", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8b720f58-05b7-46dc-ae24-7b18235c1d4b", "content": "ICYMI, GhostLock (CVE-2026-43499) is now patched in AlmaLinux production repos for 8, 9, and 10. \n\nUpdate your kernel and reboot to protect against this unprivileged local root/container escape vulnerability! almalinux.org/blog/2026-07...", "url": "https://bsky.app/profile/almalinux.org/post/3mrvp7fd6yt24"}, {"timestamp": "2026-07-31T17:00:03.360Z", "date_only": false, "value": "2026-07-31T17:00:03.360799Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/96029", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "2bf5fb9c-169f-4655-acf5-10b8190d5c59", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-emerald\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a datfooldive\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 15:34:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) kernel exploit for Poco M6 Pro (emerald) with locked bootloader\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96029"}, {"timestamp": "2026-07-31T21:00:03.972Z", "date_only": false, "value": "2026-07-31T21:00:03.972405Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/96049", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8384e028-95b0-4dec-9305-d5621a71b74a", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-aresin\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NothingFumo\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 18:58:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) exploit for POCO F3 GT (aresin) \u2014 MediaTek Dimensity 1200, Linux 4.14.186 ARM64 kernel privilege escalation via futex PI chain manipulation\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96049"}, {"timestamp": "2026-07-31T22:00:02.742Z", "date_only": false, "value": "2026-07-31T22:00:02.742185Z", "kind": "sighting", "label": "Seen", "source": "Telegram/lzREupovl051IH-OQxANl3xWT1ZBkl1PTRgXqKJ4p6mKnoQ", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f21f1d3f-e734-4d2b-a7a4-65a70faeafc5"}, {"timestamp": "2026-08-01T00:00:11.121Z", "date_only": false, "value": "2026-08-01T00:00:11.121362Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lzREupovl051IH-OQxANl3xWT1ZBkl1PTRgXqKJ4p6mKnoQ", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e3db692f-9c33-4cef-9021-0b8286cfb182"}, {"timestamp": "2026-08-01T00:00:12.387Z", "date_only": false, "value": "2026-08-01T00:00:12.387576Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96049", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "34124215-bdc7-4469-a873-dd1e88a84952", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-aresin\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NothingFumo\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 18:58:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) exploit for POCO F3 GT (aresin) \u2014 MediaTek Dimensity 1200, Linux 4.14.186 ARM64 kernel privilege escalation via futex PI chain manipulation\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96049"}, {"timestamp": "2026-08-01T00:00:26.519Z", "date_only": false, "value": "2026-08-01T00:00:26.519245Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96029", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "2c0f4e03-345b-48a7-b559-19fb05f83ec3", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-emerald\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a datfooldive\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-31 15:34:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) kernel exploit for Poco M6 Pro (emerald) with locked bootloader\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96029"}, {"timestamp": "2026-08-01T05:00:04.774Z", "date_only": false, "value": "2026-08-01T05:00:04.774968Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cEEeW8M2zTMZY9yZabG8BMy6x3nVsYzDk88Xm6la5ZTC6cI", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d28cd9ff-08f7-4b47-b5b5-7825e21e8885"}, {"timestamp": "2026-08-01T15:00:04.755Z", "date_only": false, "value": "2026-08-01T15:00:04.755140Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ittales/723", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a5ed2498-4172-4314-b540-00fae3054966", "content": "\u041c\u0430\u0440\u0430\u0444\u043e\u043d LPE \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Linux \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Nebula Security \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 GhostLock (CVE-2026-43499), stack-use-after-free \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 rtmutex \u044f\u0434\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0432\u043d\u0435\u0441\u0451\u043d \u0435\u0449\u0451 \u0432 Linux 2.6.39 \u0438 \u043f\u0440\u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0431\u043e\u043b\u0435\u0435 15 \u043b\u0435\u0442. \u041a\u043e\u0440\u0435\u043d\u044c \u0431\u0430\u0433\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043d\u0430 proxy-\u043f\u0443\u0442\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f remove_waiter() \u043e\u0447\u0438\u0449\u0430\u0435\u0442 pi_blocked_on \u043d\u0435 \u0443 \u0442\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0438, \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0432\u0438\u0441\u044f\u0447\u0438\u0439 \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c \u043d\u0430 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c \u0441\u0442\u0435\u043a\u0430 \u044f\u0434\u0440\u0430. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b \u0431\u0435\u0437 \u043f\u0430\u0442\u0447\u0430 (\u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d \u043e\u0442 v2.6.39-rc1 \u0434\u043e v7.1-rc1), \u043f\u0440\u0438\u0447\u0451\u043c \u0442\u0440\u0438\u0433\u0433\u0435\u0440 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043d\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043d\u0438 user namespaces, \u043d\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u044f\u0434\u0440\u0430.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u0430\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u0432 container escape, \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043d\u044f\u0442\u044c\u0441\u044f \u0434\u043e root \u043d\u0430 \u0445\u043e\u0441\u0442\u0435. \u0410\u0432\u0442\u043e\u0440\u044b \u0434\u043e\u0432\u0435\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043e 97% \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 forge \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e rt_mutex_waiter, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044c inet6_protos[IPPROTO_UDP] \u0438 \u0442\u0440\u044e\u043a \u0441 CPU entry area, \u0437\u0430 \u0447\u0442\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 92 337 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0432 Google kernelCTF.\n\n\u041f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0438 PoC \u0443\u0436\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u043e \u0432\u044b\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 CyberMeowfia \u043d\u0430 GitHub.", "url": "https://t.me/ittales/723"}, {"timestamp": "2026-08-01T16:00:04.164Z", "date_only": false, "value": "2026-08-01T16:00:04.164472Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XmVvH6UtN7-gCe9ILrkWYtW7P9LJK3s3Bp7zoYIg-DtLmu8", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "474b4c10-706f-49bb-ae32-14f835ddc133"}, {"timestamp": "2026-08-02T00:00:07.839Z", "date_only": false, "value": "2026-08-02T00:00:07.839817Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/96208", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "320250b4-95ae-4620-b9d7-a8a8bb51bc52", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-S26\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 1ndevelopment\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-01 22:52:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRoot exploit for exploit for Galaxy S26\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96208"}, {"timestamp": "2026-08-02T00:00:41.311Z", "date_only": false, "value": "2026-08-02T00:00:41.311844Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XmVvH6UtN7-gCe9ILrkWYtW7P9LJK3s3Bp7zoYIg-DtLmu8", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a2916656-7b01-4b53-8467-3c8d8c314bca"}, {"timestamp": "2026-08-02T00:01:15.170Z", "date_only": false, "value": "2026-08-02T00:01:15.170701Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cEEeW8M2zTMZY9yZabG8BMy6x3nVsYzDk88Xm6la5ZTC6cI", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "39cd9851-74d4-4fda-ab90-7febf480ce72"}, {"timestamp": "2026-08-02T06:08:46.034Z", "date_only": false, "value": "2026-08-02T06:08:46.034512Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LkH85X-JUMEtHWq9ccTX7RdLtAYJyJlmaTWlNzBdkhBs1mA", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a6f3940c-4b48-4c4d-8b2a-3eca3e0fbb72"}, {"timestamp": "2026-08-02T12:04:24.804Z", "date_only": false, "value": "2026-08-02T12:04:24.804544Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Sb6Wc5i4LRFsLhrsQkDxumTYRfcqahqqyXLA7zXm3As8rD4", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "41ecccab-7c44-428e-b7d2-692516d44cbb"}, {"timestamp": "2026-08-02T23:18:17.248Z", "date_only": false, "value": "2026-08-02T23:18:17.248958Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/k13wpBMjikAWn-MEXpBBL1rwnEDpUB06hWYX97kzArPBO4U", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "76c9cbf2-47ee-47e3-8536-4a90babee7a9"}, {"timestamp": "2026-08-03T03:25:15.055Z", "date_only": false, "value": "2026-08-03T03:25:15.055838Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96208", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9769a7cb-d89b-4feb-a950-d18f481a51c5", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-S26\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 1ndevelopment\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-01 22:52:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRoot exploit for exploit for Galaxy S26\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96208"}, {"timestamp": "2026-08-03T06:00:02.891Z", "date_only": false, "value": "2026-08-03T06:00:02.891458Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/androidMalware/2942", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "af3c60a5-1f5b-4422-adc1-86a1a8bf0d3b", "content": "Root My Pixel: is an Android application designed to automate root access on Google Pixel 10 devices leveraging the NebuSec IonStack exploit (CVE-2026-43499) and integrating ReSukiSU / KernelSU\nhttps://github.com/alex193a/Root-My-Pixel", "url": "https://t.me/androidMalware/2942"}, {"timestamp": "2026-08-03T11:08:45.507Z", "date_only": false, "value": "2026-08-03T11:08:45.507334Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/J-du4f--0l3IHC1KT7R89jit5XIfJmikNA5AEhCBft2gzZU", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "651b3cae-3c5c-40b6-a08d-a5b2da837cb4"}, {"timestamp": "2026-08-03T15:00:05.406Z", "date_only": false, "value": "2026-08-03T15:00:05.406336Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96442", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "892ec77f-cbe1-4bb8-80cb-d7d47ef64435", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-myron-tw\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a jason5545\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 13:30:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) kernel exploit port for REDMI K90 Pro Max Taiwan firmware (myron, WPMTWXM) \u2014 offsets, build guide, prebuilt binary\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96442"}, {"timestamp": "2026-08-03T22:00:04.625Z", "date_only": false, "value": "2026-08-03T22:00:04.625894Z", "kind": "sighting", "label": "Seen", "source": "Telegram/8MACsHHBjvH-w2bDE0n4lckqBSM7-2MqijGfC_zfnUjzr_w", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b8265820-5d56-434c-9a07-c018a32b7703"}, {"timestamp": "2026-08-04T00:00:11.118Z", "date_only": false, "value": "2026-08-04T00:00:11.118712Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8MACsHHBjvH-w2bDE0n4lckqBSM7-2MqijGfC_zfnUjzr_w", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "12922f7d-13d0-4f30-a050-7e82f5008512"}, {"timestamp": "2026-08-04T00:00:47.577Z", "date_only": false, "value": "2026-08-04T00:00:47.577810Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/androidMalware/2942", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "62f14223-6e6d-4d55-8985-64157fa8c36d", "content": "Root My Pixel: is an Android application designed to automate root access on Google Pixel 10 devices leveraging the NebuSec IonStack exploit (CVE-2026-43499) and integrating ReSukiSU / KernelSU\nhttps://github.com/alex193a/Root-My-Pixel", "url": "https://t.me/androidMalware/2942"}, {"timestamp": "2026-08-04T08:23:06Z", "date_only": false, "value": "2026-08-04T08:23:06+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-08-04T12:00:09.123Z", "date_only": false, "value": "2026-08-04T12:00:09.123784Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96579", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a90d2197-744e-4dad-b415-36fe2ec3de46", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499_x86_Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a eroorvbsyes-hotmail\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 10:59:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 x86 Exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96579"}, {"timestamp": "2026-08-04T15:00:04.699Z", "date_only": false, "value": "2026-08-04T15:00:04.699663Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96610", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "288c9a1f-0ae1-4a54-abfd-2c73dafd1443", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Root-My-Galaxy\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BuSung-dev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Kotlin\n\u2b50 Star\u6570\u91cf\uff1a 557  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 84\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 13:40:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nKSU installer for supported Samsung Galaxy firmware with CVE-2026-43499\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96610"}, {"timestamp": "2026-08-04T17:00:04.508Z", "date_only": false, "value": "2026-08-04T17:00:04.508022Z", "kind": "sighting", "label": "Seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "2a2293be-011c-4b38-b302-f44d40902084"}, {"timestamp": "2026-08-04T21:00:04.667Z", "date_only": false, "value": "2026-08-04T21:00:04.667852Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96646", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "bd7f82cd-b326-45a1-b328-21b1e3036ca9", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-sm-a155f\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a taoubi1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 19:10:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) kernel exploit for samsung devices with locked bootloader\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96646"}, {"timestamp": "2026-08-04T22:00:04.494Z", "date_only": false, "value": "2026-08-04T22:00:04.494747Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96655", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "6bff4c41-9570-4ee0-9f3f-5fb390ea6d4e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-honor-aak\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oopnv70-lab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 20:56:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) exploit adapted for Honor AAK-AN00 (MagicOS 10, kernel 6.6.89-android15)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96655"}, {"timestamp": "2026-08-05T00:00:00Z", "date_only": true, "value": "2026-08-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0982", "record": "CERTFR-2026-AVI-0982", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-08-05T00:00:08.817Z", "date_only": false, "value": "2026-08-05T00:00:08.817233Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ubMxN9VMabMrJ7rvptmD8NbSolwJbrtCzhuDoQkI-rmXIlM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7e347e5a-7c5e-4d0d-a369-07fb4ce505f8"}, {"timestamp": "2026-08-05T12:28:22.054Z", "date_only": false, "value": "2026-08-05T12:28:22.054Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-43499", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-06T04:45:35.193Z", "date_only": false, "value": "2026-08-06T04:45:35.193138Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260806", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "2ed99520-65ef-4486-9f3d-a9882bd8be17", "url": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260806"}, {"timestamp": "2026-08-06T11:11:36Z", "date_only": false, "value": "2026-08-06T11:11:36Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2026-2674", "record": "OESA-2026-2674", "field": "modified"}, {"timestamp": "2026-08-07T00:00:00Z", "date_only": false, "value": "2026-08-07T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0982", "record": "CERTFR-2026-AVI-0982", "field": "last_revision_date"}, {"timestamp": "2026-08-07T00:00:00Z", "date_only": false, "value": "2026-08-07T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0982", "record": "CERTFR-2026-AVI-0982", "field": "initial_release_date"}, {"timestamp": "2026-08-07T00:00:00Z", "date_only": false, "value": "2026-08-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0982", "record": "CERTFR-2026-AVI-0982", "field": "revisions.0.revision_date"}, {"timestamp": "2026-08-08T23:28:21.313Z", "date_only": false, "value": "2026-08-08T23:28:21.313454Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/W3dJlaDRMaKJWPJ40xraShmD_BqcR5KzJbAmj6TjVp75Nic", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3ff9d024-3b30-4887-83bc-f01b8792345a"}, {"timestamp": "2026-08-08T23:32:42.306Z", "date_only": false, "value": "2026-08-08T23:32:42.306669Z", "kind": "sighting", "label": "Seen", "source": "Telegram/C3q2vOTdkXA6iF-h_zMGQrZVnDCfVSala-72eNVn5iLBkyI", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9b3bf917-1b43-4358-b8f8-26858ecf7694"}, {"timestamp": "2026-08-09T00:05:53.516Z", "date_only": false, "value": "2026-08-09T00:05:53.516004Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/C3q2vOTdkXA6iF-h_zMGQrZVnDCfVSala-72eNVn5iLBkyI", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7654f3eb-3551-4326-8589-d9cd4887bf1c"}, {"timestamp": "2026-08-10T12:00:03.834Z", "date_only": false, "value": "2026-08-10T12:00:03.834931Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/97420", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "be1804d6-d500-4087-a517-80c5a84ac6f2", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock-GOT-W29\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zzzxxxxxxxxxx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 10:54:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 (GhostLock) research on HUAWEI MatePad Pro 11 GOT-W29\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97420"}, {"timestamp": "2026-08-10T14:00:03.699Z", "date_only": false, "value": "2026-08-10T14:00:03.699344Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/97435", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8d2cef46-7f11-4a3a-9c9a-e293421b1fc6", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock-Galaxy\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a wxxsfxyzm\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 11  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 12:40:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRoot your Galaxy using CVE-2026-43499\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97435"}, {"timestamp": "2026-08-10T23:00:03.333Z", "date_only": false, "value": "2026-08-10T23:00:03.333128Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/97495", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "72b10536-60ac-4637-b8bb-8642df1a8f76", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #\u63d0\u6743 #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-apk\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oopnv70-lab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 22:03:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u72ec\u7acb APK\uff1aCVE-2026-43499 GhostLock \u63d0\u6743 + Shizuku shell \u8eab\u4efd\u6267\u884c\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97495"}, {"timestamp": "2026-08-11T00:00:06.463Z", "date_only": false, "value": "2026-08-11T00:00:06.463282Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/97495", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7f2d1621-579f-4864-8b23-d0c62f2ec625", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #\u63d0\u6743 #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-apk\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oopnv70-lab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-10 22:03:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u72ec\u7acb APK\uff1aCVE-2026-43499 GhostLock \u63d0\u6743 + Shizuku shell \u8eab\u4efd\u6267\u884c\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97495"}, {"timestamp": "2026-08-11T08:00:04.867Z", "date_only": false, "value": "2026-08-11T08:00:04.867671Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/97538", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ded92172-77d2-4e20-91f6-9215c4932db4", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock-OPPO-PCKM00\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yijiacloud\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 06:55:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 GhostLock futex UAF LPE PoC for OPPO PCKM00 (SM6150) / Linux 4.14.180\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97538"}, {"timestamp": "2026-08-11T08:00:04.927Z", "date_only": false, "value": "2026-08-11T08:00:04.927414Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/97539", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "52242adb-67dd-41d8-97c3-cb266bd1ac64", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-cve-2026-43499-4.19-k40\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yijiacloud\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 07:00:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 (GhostLock) rtmutex remove_waiter() UAF local-root PoC adapted for Qualcomm Android 4.19 kernels (Redmi K40 / Snapdragon 870 class), LD_PRELOAD based\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97539"}, {"timestamp": "2026-08-11T21:00:03.281Z", "date_only": false, "value": "2026-08-11T21:00:03.281616Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/97625", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ecb383a1-174f-4b9e-bb24-18db15afdb50", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Root-My-Pixel\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a alex193a\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Kotlin\n\u2b50 Star\u6570\u91cf\uff1a 131  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 29\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 18:47:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nJailbreak supported Google Pixel phones with CVE-2026-43499\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97625"}, {"timestamp": "2026-08-11T22:07:15.082Z", "date_only": false, "value": "2026-08-11T22:07:15.082804Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3mstmryo27c2n", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "17cf789f-5289-4c9f-bd16-cf31de0d827c", "content": "IonStack part III: Rooting Android 17 with GhostLock\n\nArticle about adapting the exploit of CVE-2026-43499 (kernel stack UAF) to Android.\n\nThe researchers used KernelSnitch, ashmem fops overwriting, pipe_buffer corruption, and other tricks to perform LPE.\n\nnebusec.ai/research/ion...", "url": "https://bsky.app/profile/linkersec.bsky.social/post/3mstmryo27c2n"}, {"timestamp": "2026-08-12T00:00:00Z", "date_only": true, "value": "2026-08-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1027", "record": "CERTFR-2026-AVI-1027", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-08-12T00:00:08.668Z", "date_only": false, "value": "2026-08-12T00:00:08.668203Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/97539", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "bcf4409e-cf63-4e8d-878a-d0d92b9a919b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-cve-2026-43499-4.19-k40\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yijiacloud\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 07:00:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 (GhostLock) rtmutex remove_waiter() UAF local-root PoC adapted for Qualcomm Android 4.19 kernels (Redmi K40 / Snapdragon 870 class), LD_PRELOAD based\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97539"}, {"timestamp": "2026-08-12T00:00:08.787Z", "date_only": false, "value": "2026-08-12T00:00:08.787830Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/97538", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "43d87a7a-0241-4eb7-af29-d76250bb9c60", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock-OPPO-PCKM00\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yijiacloud\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 06:55:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 GhostLock futex UAF LPE PoC for OPPO PCKM00 (SM6150) / Linux 4.14.180\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97538"}, {"timestamp": "2026-08-12T08:00:03.785Z", "date_only": false, "value": "2026-08-12T08:00:03.785947Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/WiDJBjqrOJ27O7YsOGd2JJKWoe0Lz6-1jjxrLxSiYfMB4PI", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e6f1ab96-f5f4-4c0f-9b7b-250b8e74c366"}, {"timestamp": "2026-08-12T08:00:04.063Z", "date_only": false, "value": "2026-08-12T08:00:04.063338Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/PfEGiROgrNR5ykZ5BXHTDqc3pwoH93Egm5-xEiTSmFuTh6c", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "67e6a4bf-40cc-43fb-a0e6-f4fc6d164917"}, {"timestamp": "2026-08-12T08:00:04.477Z", "date_only": false, "value": "2026-08-12T08:00:04.477655Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/J7UFmymbxIn8KumOrkK4VS44HM4Alboab9CCQoPlnVBTDCw", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b8dac03c-ed14-40c3-9de9-18d32611c805"}, {"timestamp": "2026-08-12T08:00:05.829Z", "date_only": false, "value": "2026-08-12T08:00:05.829424Z", "kind": "sighting", "label": "Seen", "source": "Telegram/wDwm6-AY-JX6nhNni9OQWjE6Au1_mqn06OkP8toYPUyKP30", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "74ddf835-0d2e-47d8-b1dd-60e5f9f7106f"}, {"timestamp": "2026-08-12T08:00:06.643Z", "date_only": false, "value": "2026-08-12T08:00:06.643423Z", "kind": "sighting", "label": "Seen", "source": "Telegram/qgP_vo_Jvq2lEMuW-OWZBjJxYxBuu9oJoDKD06SudZJL_fI", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a6fc0162-0506-4def-9b4d-726f3227c5dd"}, {"timestamp": "2026-08-12T08:00:07.332Z", "date_only": false, "value": "2026-08-12T08:00:07.332690Z", "kind": "sighting", "label": "Seen", "source": "Telegram/sprWXyedtoxouWXwgg6xBlxXBXXRcnp6sXhUuIgRs9IGANk", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "07f78e69-e391-41eb-90bc-ac96ae8239e8"}, {"timestamp": "2026-08-13T00:00:00Z", "date_only": true, "value": "2026-08-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1027", "record": "CERTFR-2026-AVI-1027", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-08-13T00:00:09.821Z", "date_only": false, "value": "2026-08-13T00:00:09.821213Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sprWXyedtoxouWXwgg6xBlxXBXXRcnp6sXhUuIgRs9IGANk", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "cab3b9ee-ab70-42e9-83cf-6f9960f0e482"}, {"timestamp": "2026-08-13T00:00:10.590Z", "date_only": false, "value": "2026-08-13T00:00:10.590704Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qgP_vo_Jvq2lEMuW-OWZBjJxYxBuu9oJoDKD06SudZJL_fI", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3ccf0f26-8715-4b0a-afba-1b0901e9da2c"}, {"timestamp": "2026-08-13T00:00:11.517Z", "date_only": false, "value": "2026-08-13T00:00:11.517438Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wDwm6-AY-JX6nhNni9OQWjE6Au1_mqn06OkP8toYPUyKP30", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8546a89f-b453-4630-a93b-d40424269991"}, {"timestamp": "2026-08-13T01:45:04Z", "date_only": false, "value": "2026-08-13T01:45:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 ESSA-2026:0154", "record": "ESSA-2026:0154", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-13T01:45:04Z", "date_only": false, "value": "2026-08-13T01:45:04Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 ESSA-2026:0154", "record": "ESSA-2026:0154", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-08-13T01:45:04Z", "date_only": false, "value": "2026-08-13T01:45:04Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 ESSA-2026:0154", "record": "ESSA-2026:0154", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-13T01:45:04Z", "date_only": false, "value": "2026-08-13T01:45:04Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 ESSA-2026:0154", "record": "ESSA-2026:0154", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-13T13:00:03.758Z", "date_only": false, "value": "2026-08-13T13:00:03.758376Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/97863", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c11b1901-bf35-4267-93e5-365ba409fc71", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a wzhdgithub\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-13 11:54:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 futex PI stack UAF \u672c\u5730\u63d0\u6743\u6f0f\u6d1e\u5229\u7528 - Android GKI 6.1~6.12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97863"}, {"timestamp": "2026-08-14T00:00:00Z", "date_only": false, "value": "2026-08-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1027", "record": "CERTFR-2026-AVI-1027", "field": "last_revision_date"}, {"timestamp": "2026-08-14T00:00:00Z", "date_only": false, "value": "2026-08-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1027", "record": "CERTFR-2026-AVI-1027", "field": "initial_release_date"}, {"timestamp": "2026-08-14T00:00:00Z", "date_only": false, "value": "2026-08-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1027", "record": "CERTFR-2026-AVI-1027", "field": "revisions.0.revision_date"}, {"timestamp": "2026-08-14T00:00:08.545Z", "date_only": false, "value": "2026-08-14T00:00:08.545049Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/97863", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ee4303e5-d25e-43d9-bb8c-951fa6ae4827", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a wzhdgithub\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-13 11:54:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 futex PI stack UAF \u672c\u5730\u63d0\u6743\u6f0f\u6d1e\u5229\u7528 - Android GKI 6.1~6.12\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97863"}, {"timestamp": "2026-08-14T12:47:54.602Z", "date_only": false, "value": "2026-08-14T12:47:54.602095Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/0xor0ne.bsky.social/post/3mt26xbsifs2h", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "0d4a2aeb-dd9e-42ec-a61e-e418af176a04", "content": "Analysis and exploitation of GhostLock (CVE-2026-43499) \n\nnebusec.ai/research/ion...\nnebusec.ai/research/ion...\n\n#infosec", "url": "https://bsky.app/profile/0xor0ne.bsky.social/post/3mt26xbsifs2h"}, {"timestamp": "2026-08-15T00:00:00Z", "date_only": false, "value": "2026-08-15T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-08-15T00:00:00Z", "date_only": false, "value": "2026-08-15T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-08-15T08:00:04.499Z", "date_only": false, "value": "2026-08-15T08:00:04.499038Z", "kind": "sighting", "label": "Seen", "source": "Telegram/D7rP6ICsyAnzGw7-Tdu_Kf10j5m8zqB5nGe6ewNa1y1vkas", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "38ed25f4-1033-4a53-8ecd-fac5a5111a35"}, {"timestamp": "2026-08-15T08:00:05.336Z", "date_only": false, "value": "2026-08-15T08:00:05.336783Z", "kind": "sighting", "label": "Seen", "source": "Telegram/bniALrx7AdcgJPuw6bEQwSykPfDH7ajMShoKjI_mPwBCqog", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e59ce3ac-f84e-40dd-aa44-0b5516dfdd3c"}, {"timestamp": "2026-08-15T08:00:06.238Z", "date_only": false, "value": "2026-08-15T08:00:06.238915Z", "kind": "sighting", "label": "Seen", "source": "Telegram/xINMrV1P3uzkQaEp3YbshoNNnD8RshvL3z1xc4hsDELyb0o", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ddea295d-000a-4d9a-b1b4-cbec5785443c"}, {"timestamp": "2026-08-15T08:00:08.005Z", "date_only": false, "value": "2026-08-15T08:00:08.005404Z", "kind": "sighting", "label": "Seen", "source": "Telegram/z0gzrCa3CJrXCwNopDj7QRmjKir0wDRnRghi1tuDuWgHZEI", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "167d0f4f-5747-4e14-82cd-14554d69f68d"}, {"timestamp": "2026-08-15T23:32:41.675Z", "date_only": false, "value": "2026-08-15T23:32:41.675356Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mt5tha3f242w", "record": "cve-2026-43499", "field": "creation_timestamp", "uuid": "cae72ebf-8026-4202-b3a7-fc2e8013f6f0", "content": "\ud83e\udd16 CVE-2026-43499 (GhostLock): rt_mutex stack use-after-free \u2192 local privilege escalation on Honor Magic6 Pro (SM8650, kernel 6.1.128). Public research with RE scripts, disassembly artifacts and exploit source.\n\nhttps://github.com/knowlily/cve-2026-43499-honor", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mt5tha3f242w"}, {"timestamp": "2026-08-16T00:00:15.123Z", "date_only": false, "value": "2026-08-16T00:00:15.123441Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/z0gzrCa3CJrXCwNopDj7QRmjKir0wDRnRghi1tuDuWgHZEI", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "45094429-331a-42b6-bd69-0127bea4067b"}, {"timestamp": "2026-08-16T00:00:38.059Z", "date_only": false, "value": "2026-08-16T00:00:38.059456Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/xINMrV1P3uzkQaEp3YbshoNNnD8RshvL3z1xc4hsDELyb0o", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ff59abc3-f1d4-42ea-8f14-f9b4bd08298b"}, {"timestamp": "2026-08-16T00:00:46.293Z", "date_only": false, "value": "2026-08-16T00:00:46.293345Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bniALrx7AdcgJPuw6bEQwSykPfDH7ajMShoKjI_mPwBCqog", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "41bc8c24-73cf-4eb9-8b1c-260cfd8fe579"}, {"timestamp": "2026-08-16T00:00:47.789Z", "date_only": false, "value": "2026-08-16T00:00:47.789599Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/D7rP6ICsyAnzGw7-Tdu_Kf10j5m8zqB5nGe6ewNa1y1vkas", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "31629549-481a-4f7e-bbfa-69b260020b67"}, {"timestamp": "2026-08-17T00:00:00Z", "date_only": true, "value": "2026-08-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1066", "record": "CERTFR-2026-AVI-1066", "field": "vendor_advisories.9.published_at"}, {"timestamp": "2026-08-17T18:00:04.906Z", "date_only": false, "value": "2026-08-17T18:00:04.906521Z", "kind": "sighting", "label": "Seen", "source": "Telegram/2uUwMFxsoKh_D8GaE8ocpIxirsxPfGRgU4xV4XjnGV-coGw", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "93cb2129-bc5e-42b1-b1bc-760998d0abd2"}, {"timestamp": "2026-08-17T18:00:06.354Z", "date_only": false, "value": "2026-08-17T18:00:06.354856Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mVcXaW5auzQ4JBLke65wzdbjFpDA7J1AVnLjzgWkNSxpfuo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e1851023-78c0-45a2-954f-e5ca851cdd6b"}, {"timestamp": "2026-08-17T18:00:07.405Z", "date_only": false, "value": "2026-08-17T18:00:07.405609Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SVlbGID4Hg-GGOxfYTkc70DQ3luF1TYIg75k4FSOGH60npM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "4c455643-0b88-4e38-bc84-6f5fc3b1cbd0"}, {"timestamp": "2026-08-18T00:00:00Z", "date_only": true, "value": "2026-08-18", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1066", "record": "CERTFR-2026-AVI-1066", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-08-18T00:00:08.557Z", "date_only": false, "value": "2026-08-18T00:00:08.557646Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SVlbGID4Hg-GGOxfYTkc70DQ3luF1TYIg75k4FSOGH60npM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "0d761480-010b-4a9b-8e9d-b39eaf2e87e3"}, {"timestamp": "2026-08-18T00:00:09.762Z", "date_only": false, "value": "2026-08-18T00:00:09.762037Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mVcXaW5auzQ4JBLke65wzdbjFpDA7J1AVnLjzgWkNSxpfuo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "378b29ef-9d60-4f94-a0de-cea05dab7609"}, {"timestamp": "2026-08-18T00:00:11.916Z", "date_only": false, "value": "2026-08-18T00:00:11.916927Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/2uUwMFxsoKh_D8GaE8ocpIxirsxPfGRgU4xV4XjnGV-coGw", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a8819d5a-07fc-4716-9fa0-b8507daa68ae"}, {"timestamp": "2026-08-18T05:30:09.044Z", "date_only": false, "value": "2026-08-18T05:30:09.044622Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/parkerlreed.bsky.social/post/3mtdie7ejwk2w", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "87002402-ca76-4500-84b1-6e37ca741f61", "content": "Ever since V74 (headset Camera2 API access), it was thought Meta broke USB webcam access on their headsets.\n\nThis may have been intentional...\n\nWith the recent CVE-2026-43499 / Ionstack / Singularity pancake exploit, I was able to frida into system_server.\n\nMeta has been denying all USB access.", "url": "https://bsky.app/profile/parkerlreed.bsky.social/post/3mtdie7ejwk2w"}, {"timestamp": "2026-08-18T05:30:09.521Z", "date_only": false, "value": "2026-08-18T05:30:09.521831Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/parkerlreed.bsky.social/post/3mtdie7n2fc2w", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "cdaa3d21-ed1c-4212-a195-ca8cb2bc2a9e", "content": "Ever since V74 (headset Camera2 API access), it was thought Meta broke USB webcam access on their headsets.\n\nThis may have been intentional...\n\nWith the recent CVE-2026-43499 / Ionstack / Singularity pancake exploit, I was able to frida into system_server.\n\nMeta has been denying all USB access.", "url": "https://bsky.app/profile/parkerlreed.bsky.social/post/3mtdie7n2fc2w"}, {"timestamp": "2026-08-19T02:42:36.563Z", "date_only": false, "value": "2026-08-19T02:42:36.563565Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtfphlrqnl22", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1be24f99-a5a8-4ca7-a0b7-cabf05816676", "content": "Top 3 CVE for last 7 days:\nCVE-2026-59310: 43 interactions\nCVE-2026-68820: 31 interactions\nCVE-2026-65400: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-19478: 6 interactions\nCVE-2026-43499: 6 interactions\nCVE-2025-62593: 5 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mtfphlrqnl22"}, {"timestamp": "2026-08-19T18:00:05.143Z", "date_only": false, "value": "2026-08-19T18:00:05.143730Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/androidMalware/2958", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "95a7f7a6-477d-405e-a9d9-e507048a90d1", "content": "Porting ghostlock (CVE-2026-43499) to the Samsung Galaxy A17: KDP, DEFEX, and the art of not panicking \nhttps://www.mobilehackinglab.com/blog/cve-2026-43499-ghostlock-a17-root-shell", "url": "https://t.me/androidMalware/2958"}, {"timestamp": "2026-08-20T00:00:00Z", "date_only": true, "value": "2026-08-20", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1066", "record": "CERTFR-2026-AVI-1066", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-08-20T03:00:03.322Z", "date_only": false, "value": "2026-08-20T03:00:03.322971Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/VqkK0eXOWhmRJZ90Bh3PqTJte1bxm7THA5YDoOUEdQFD0DQ", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "615eade8-2bd2-4f6e-a1ed-60fd064b3645"}, {"timestamp": "2026-08-20T03:00:05.914Z", "date_only": false, "value": "2026-08-20T03:00:05.914885Z", "kind": "sighting", "label": "Seen", "source": "Telegram/dEOxkW7Fjs9kyJNCqqh8nNQclw4OnMEUeVB0uRmPUXS8-vI", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "29a3a9fc-1a46-4b42-8804-cae06f0e5671"}, {"timestamp": "2026-08-21T00:00:00Z", "date_only": false, "value": "2026-08-21T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1066", "record": "CERTFR-2026-AVI-1066", "field": "last_revision_date"}, {"timestamp": "2026-08-21T00:00:00Z", "date_only": false, "value": "2026-08-21T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1066", "record": "CERTFR-2026-AVI-1066", "field": "initial_release_date"}, {"timestamp": "2026-08-21T00:00:00Z", "date_only": true, "value": "2026-08-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1093", "record": "CERTFR-2026-AVI-1093", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-08-21T00:00:00Z", "date_only": true, "value": "2026-08-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.9.published_at"}, {"timestamp": "2026-08-21T00:00:00Z", "date_only": false, "value": "2026-08-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1066", "record": "CERTFR-2026-AVI-1066", "field": "revisions.0.revision_date"}, {"timestamp": "2026-08-21T00:00:10.542Z", "date_only": false, "value": "2026-08-21T00:00:10.542039Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/dEOxkW7Fjs9kyJNCqqh8nNQclw4OnMEUeVB0uRmPUXS8-vI", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "2e3a3201-cfcd-44eb-8c80-79f60fcdfd15"}, {"timestamp": "2026-08-21T02:47:38.411Z", "date_only": false, "value": "2026-08-21T02:47:38.411856Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtkqogn7uj2v", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5aa642d6-fc21-432e-ad12-7084282e30db", "content": "Top 3 CVE for last 7 days:\nCVE-2026-65400: 28 interactions\nCVE-2026-59310: 25 interactions\nCVE-2026-43499: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-19490: 8 interactions\nCVE-2026-76404: 8 interactions\nCVE-2026-63030: 7 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mtkqogn7uj2v"}, {"timestamp": "2026-08-22T03:55:28.271Z", "date_only": false, "value": "2026-08-22T03:55:28.271423Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-43499", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-22T03:55:28.271Z", "date_only": false, "value": "2026-08-22T03:55:28.271423Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-43499", "record": "FKIE_CVE-2026-43499", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-22T19:00:04.002Z", "date_only": false, "value": "2026-08-22T19:00:04.002682Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/99049", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "6add3d45-a19e-4a76-9aa3-5bcf9bf48514", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e #\u590d\u73b0\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a s26-m1q-ghostlock-selinux\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xrzcc\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 3  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-21 09:47:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock CVE-2026-43499 research for Galaxy S26 (SM-S942U1/m1q): SELinux Permissive achieved, KASLR + tracefs port, uid=0 boundary documented\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99049"}, {"timestamp": "2026-08-22T19:00:04.725Z", "date_only": false, "value": "2026-08-22T19:00:04.725427Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/99161", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "223403bd-5b59-42dc-b74a-11d0226088f9", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-s26\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a snothin\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 05:59:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) for the Galaxy S26\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99161"}, {"timestamp": "2026-08-22T19:00:04.905Z", "date_only": false, "value": "2026-08-22T19:00:04.905108Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/99210", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ae95096d-a3fd-4ea8-b7c5-a78293efda77", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a root-my-s24\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NanoTurtle1145\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Kotlin\n\u2b50 Star\u6570\u91cf\uff1a 10  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 12:39:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUsing CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China / Hong Kong SAR / Taiwan))\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99210"}, {"timestamp": "2026-08-22T19:00:06.197Z", "date_only": false, "value": "2026-08-22T19:00:06.197617Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/98709", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "291a0412-7355-4e91-821f-cdfe158b873c", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499_HW-CLT-AL01\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zychen027\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 03:41:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u5c1d\u8bd5\u79fb\u690dCVE-2026-43499\u63d0\u6743\u6f0f\u6d1e\u5230HW P20Pro\u4e0a\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98709"}, {"timestamp": "2026-08-22T19:00:06.664Z", "date_only": false, "value": "2026-08-22T19:00:06.664984Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/98543", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d6bed86f-d2f1-4ade-a907-7858c4aff498", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock-5.10\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a R0rt1z2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-18 00:41:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nKernel root exploit (CVE-2026-43499) for some 5.X devices (mostly Amazon)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98543"}, {"timestamp": "2026-08-22T19:00:07.066Z", "date_only": false, "value": "2026-08-22T19:00:07.066933Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/98504", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "0ef19d43-d60b-4288-9193-9a270fc58d2e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e #\u590d\u73b0 #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-x200-root\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xiaohj233\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 17:55:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock-X200 v1.0 - temporary root toolchain for vivo X200 (PD2415 / b57 kernel) based on CVE-2026-43499. For authorized security research only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98504"}, {"timestamp": "2026-08-22T19:00:08.034Z", "date_only": false, "value": "2026-08-22T19:00:08.034918Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/98418", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9ca39aed-5af6-40c9-855b-ca97c63268cf", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a root-my-s9280\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NanoTurtle1145\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Kotlin\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 05:48:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUsing CVE-2026-43499 to root your Galaxy S24 Ultra(SM-S9280 ,(China / Hong Kong SAR / Taiwan))\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98418"}, {"timestamp": "2026-08-22T19:00:10.204Z", "date_only": false, "value": "2026-08-22T19:00:10.204237Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/98201", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "314d3b6e-5cbb-4c33-915b-72bf7b94273d", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-43499-honor\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a knowlily\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 15:19:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis docs, reverse-engineering scripts, disassembly artifacts, and exploit source with honor-BVL-AN16 target adaptation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98201"}, {"timestamp": "2026-08-22T22:00:05.131Z", "date_only": false, "value": "2026-08-22T22:00:05.131313Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3tVPXJuM7LHj7wQGlLopGnn2o3H1TovMxzDMFiSh-I5Wn30", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "6e8dee59-9587-4779-81dd-2f2287ba8498"}, {"timestamp": "2026-08-23T00:00:07.629Z", "date_only": false, "value": "2026-08-23T00:00:07.629308Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/98504", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "91eec3ef-cfe9-48e5-9f3f-aaaac4958ae9", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e #\u590d\u73b0 #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-x200-root\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xiaohj233\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 17:55:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock-X200 v1.0 - temporary root toolchain for vivo X200 (PD2415 / b57 kernel) based on CVE-2026-43499. For authorized security research only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98504"}, {"timestamp": "2026-08-23T00:00:11.059Z", "date_only": false, "value": "2026-08-23T00:00:11.059748Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/98543", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e79c285a-aa17-4a59-b80a-f53525400fdb", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock-5.10\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a R0rt1z2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-18 00:41:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nKernel root exploit (CVE-2026-43499) for some 5.X devices (mostly Amazon)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98543"}, {"timestamp": "2026-08-23T00:00:11.723Z", "date_only": false, "value": "2026-08-23T00:00:11.723748Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/98709", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "4660e5ab-b2d4-449c-9359-fb595909c290", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499_HW-CLT-AL01\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zychen027\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 03:41:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u5c1d\u8bd5\u79fb\u690dCVE-2026-43499\u63d0\u6743\u6f0f\u6d1e\u5230HW P20Pro\u4e0a\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98709"}, {"timestamp": "2026-08-23T05:00:04.193Z", "date_only": false, "value": "2026-08-23T05:00:04.193410Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/99294", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f8e48872-6f10-4c69-b3ae-49f121f55317", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock-H80GT\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yakidango-official\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-23 02:51:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHonor 80 GT (MagicOS 8.0.0.128, kernel 5.10.168) privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99294"}, {"timestamp": "2026-08-23T08:00:04.643Z", "date_only": false, "value": "2026-08-23T08:00:04.643787Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/99321", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "cec1b1e8-9fcc-44e7-8112-8f830e962510", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IonStack-S22U\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sarabpal-dev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 36  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 5\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-23 06:58:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99321"}, {"timestamp": "2026-08-24T00:00:00Z", "date_only": true, "value": "2026-08-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-08-24T00:00:07.783Z", "date_only": false, "value": "2026-08-24T00:00:07.783161Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/99321", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5f54d209-0d27-4100-a730-984c81fd5bdf", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IonStack-S22U\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sarabpal-dev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 36  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 5\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-23 06:58:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99321"}, {"timestamp": "2026-08-24T00:00:08.102Z", "date_only": false, "value": "2026-08-24T00:00:08.102198Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/99294", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "273ac597-008a-41ce-b62e-75810945fe68", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock-H80GT\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yakidango-official\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-23 02:51:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHonor 80 GT (MagicOS 8.0.0.128, kernel 5.10.168) privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99294"}, {"timestamp": "2026-08-24T00:00:09.440Z", "date_only": false, "value": "2026-08-24T00:00:09.440719Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/98201", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "21b5522a-49b3-4eea-bcdb-4fd12433f156", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-43499-honor\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a knowlily\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 15:19:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis docs, reverse-engineering scripts, disassembly artifacts, and exploit source with honor-BVL-AN16 target adaptation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98201"}, {"timestamp": "2026-08-24T00:00:11.119Z", "date_only": false, "value": "2026-08-24T00:00:11.119371Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/98418", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "19077b22-3e0d-4d57-a53b-d0962f0b4d8f", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a root-my-s9280\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NanoTurtle1145\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Kotlin\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 05:48:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUsing CVE-2026-43499 to root your Galaxy S24 Ultra(SM-S9280 ,(China / Hong Kong SAR / Taiwan))\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/98418"}, {"timestamp": "2026-08-24T17:48:17Z", "date_only": false, "value": "2026-08-24T17:48:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59142", "record": "RHSA-2026:59142", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-24T17:48:17Z", "date_only": false, "value": "2026-08-24T17:48:17+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:59142", "record": "RHSA-2026:59142", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-24T17:48:17Z", "date_only": false, "value": "2026-08-24T17:48:17+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:59142", "record": "RHSA-2026:59142", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-24T17:54:52Z", "date_only": false, "value": "2026-08-24T17:54:52+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-24T17:54:52Z", "date_only": false, "value": "2026-08-24T17:54:52+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-24T17:54:52Z", "date_only": false, "value": "2026-08-24T17:54:52+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-24T17:55:32Z", "date_only": false, "value": "2026-08-24T17:55:32+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-24T17:55:32Z", "date_only": false, "value": "2026-08-24T17:55:32+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-24T17:55:32Z", "date_only": false, "value": "2026-08-24T17:55:32+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-24T18:03:12Z", "date_only": false, "value": "2026-08-24T18:03:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-24T18:03:12Z", "date_only": false, "value": "2026-08-24T18:03:12+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-24T18:03:12Z", "date_only": false, "value": "2026-08-24T18:03:12+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-24T18:08:06Z", "date_only": false, "value": "2026-08-24T18:08:06+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59148", "record": "RHSA-2026:59148", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-24T18:08:06Z", "date_only": false, "value": "2026-08-24T18:08:06+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:59148", "record": "RHSA-2026:59148", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-24T18:08:06Z", "date_only": false, "value": "2026-08-24T18:08:06+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:59148", "record": "RHSA-2026:59148", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-24T18:24:59Z", "date_only": false, "value": "2026-08-24T18:24:59+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-24T18:24:59Z", "date_only": false, "value": "2026-08-24T18:24:59+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-24T18:24:59Z", "date_only": false, "value": "2026-08-24T18:24:59+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-24T18:38:17Z", "date_only": false, "value": "2026-08-24T18:38:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59146", "record": "RHSA-2026:59146", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-24T18:38:17Z", "date_only": false, "value": "2026-08-24T18:38:17+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:59146", "record": "RHSA-2026:59146", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-08-24T18:38:17Z", "date_only": false, "value": "2026-08-24T18:38:17+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:59146", "record": "RHSA-2026:59146", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-24T21:00:04.383Z", "date_only": false, "value": "2026-08-24T21:00:04.383000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9825cffa-a579-4dd8-9002-59fc050b1aad"}, {"timestamp": "2026-08-25T00:00:00Z", "date_only": true, "value": "2026-08-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1093", "record": "CERTFR-2026-AVI-1093", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2026-08-25T00:00:09.545Z", "date_only": false, "value": "2026-08-25T00:00:09.545540Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b2e8d23d-1d74-4382-bfaf-c7c969386912"}, {"timestamp": "2026-08-25T17:00:04.378Z", "date_only": false, "value": "2026-08-25T17:00:04.378501Z", "kind": "sighting", "label": "Seen", "source": "Telegram/rpxQrde5C3QRNvZwgV3wnpJTDTukLKxeiiPOPNL_I7MqRI0", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c624c5ce-b934-47ea-9bf0-002f5f581bbf"}, {"timestamp": "2026-08-26T00:00:00Z", "date_only": true, "value": "2026-08-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1093", "record": "CERTFR-2026-AVI-1093", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-08-26T00:00:00Z", "date_only": true, "value": "2026-08-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-08-26T00:00:07.136Z", "date_only": false, "value": "2026-08-26T00:00:07.136226Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/99705", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ac9dff11-b4f2-4f4a-bccf-3a100da24360", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #\u63d0\u6743 #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a vivo-root-build\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sgswzglwlx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-25 21:33:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nvivo/iQOO \u63d0\u6743 so \u7f16\u8bd1\uff08CVE-2026-43499\uff09\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99705"}, {"timestamp": "2026-08-26T00:00:09.796Z", "date_only": false, "value": "2026-08-26T00:00:09.796257Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rpxQrde5C3QRNvZwgV3wnpJTDTukLKxeiiPOPNL_I7MqRI0", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "986eeae5-7f80-4bbe-9729-4dd464f0c0ba"}, {"timestamp": "2026-08-26T14:00:05.530Z", "date_only": false, "value": "2026-08-26T14:00:05.530044Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/99799", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8b36d2f8-a33c-4886-8f4e-6e7437bbca1b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-infinix-hot70\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rsyzee\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-26 13:02:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof-of-concept kernel exploit for GhostLock (CVE-2026-43499) on the Infinix Hot 70.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99799"}, {"timestamp": "2026-08-26T19:01:26.917Z", "date_only": false, "value": "2026-08-26T19:01:26.917Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-43499", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-27T00:00:00Z", "date_only": true, "value": "2026-08-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1093", "record": "CERTFR-2026-AVI-1093", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-08-27T00:00:00Z", "date_only": true, "value": "2026-08-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-08-27T12:00:04.363Z", "date_only": false, "value": "2026-08-27T12:00:04.363230Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1f669501-e711-4f0a-9f06-c1cabe3de17c"}, {"timestamp": "2026-08-27T12:00:06.204Z", "date_only": false, "value": "2026-08-27T12:00:06.204349Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1RDfiYvrsmnO1GwdulIpRqcmzx_QFBcCsg-HKcZQ14O2mKw", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e3609a91-a18f-4d12-b1d6-08ae84b3d795"}, {"timestamp": "2026-08-27T12:00:10.009Z", "date_only": false, "value": "2026-08-27T12:00:10.009725Z", "kind": "sighting", "label": "Seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c451a0cd-ad3f-48e5-a5ef-3ba952efcfa7"}, {"timestamp": "2026-08-27T15:00:04.130Z", "date_only": false, "value": "2026-08-27T15:00:04.130018Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/99959", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c51c3060-96cb-4ada-80c9-6cb0167b3870", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a rmg-s9180-fzg1\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hackyangwen-lgtm\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 12:38:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRoot My Galaxy SM-S9180 (dm3q) S9180ZHS8FZG1 payload port - CVE-2026-43499 + KernelSU LKM\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99959"}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1093", "record": "CERTFR-2026-AVI-1093", "field": "last_revision_date"}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "last_revision_date"}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1093", "record": "CERTFR-2026-AVI-1093", "field": "initial_release_date"}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": true, "value": "2026-08-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1093", "record": "CERTFR-2026-AVI-1093", "field": "revisions.0.revision_date"}, {"timestamp": "2026-08-28T00:00:00Z", "date_only": false, "value": "2026-08-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1094", "record": "CERTFR-2026-AVI-1094", "field": "revisions.0.revision_date"}, {"timestamp": "2026-08-28T00:00:38.045Z", "date_only": false, "value": "2026-08-28T00:00:38.045734Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/99959", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ba01129f-b973-453c-8f41-511c60b37c4a", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a rmg-s9180-fzg1\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hackyangwen-lgtm\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 12:38:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRoot My Galaxy SM-S9180 (dm3q) S9180ZHS8FZG1 payload port - CVE-2026-43499 + KernelSU LKM\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99959"}, {"timestamp": "2026-08-28T00:00:42.541Z", "date_only": false, "value": "2026-08-28T00:00:42.541199Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1RDfiYvrsmnO1GwdulIpRqcmzx_QFBcCsg-HKcZQ14O2mKw", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "4e9e2c2f-bdb2-414d-bbfa-02ada22d5313"}, {"timestamp": "2026-08-28T01:00:04.727Z", "date_only": false, "value": "2026-08-28T01:00:04.727118Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100022", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "98638716-00fb-4063-8dd8-6bdaab271a48", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-pfem10\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a diyiqiuye\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 22:31:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499 / IonStack) research for OPPO Find X5 Pro (PFEM10): exploit chain, progress, blocker log, and OPPO 5-series kernel notes\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100022"}, {"timestamp": "2026-08-29T00:00:16.437Z", "date_only": false, "value": "2026-08-29T00:00:16.437067Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "14f2ec27-c125-49a6-a84a-473d22ea6d78"}, {"timestamp": "2026-08-29T23:00:16.822Z", "date_only": false, "value": "2026-08-29T23:00:16.822600Z", "kind": "sighting", "label": "Seen", "source": "Telegram/CcRo1gMZwWwNofZNwYOQ3d2hQNvA4xaZ28UNdx64Ma-ZFGg", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "6c83226a-db02-463b-b57f-5aaa103ff1b7"}, {"timestamp": "2026-08-29T23:00:20.859Z", "date_only": false, "value": "2026-08-29T23:00:20.859561Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Wo1B2qy3supRi9RLVnMbQ41knoxctT-bVTE1SmDL-J33mLU", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "4a310692-31c7-4822-9852-11fde249fce2"}, {"timestamp": "2026-08-30T13:00:04.056Z", "date_only": false, "value": "2026-08-30T13:00:04.056541Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/100350", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c0c6f7b3-0dc4-420a-8b17-6281154d1ee0", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-oppo-watch3pro\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ReBiliBin\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 08:11:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 on OPPO Watch 3 Pro\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100350"}, {"timestamp": "2026-08-31T00:00:12.261Z", "date_only": false, "value": "2026-08-31T00:00:12.261977Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100350", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "be3fa29b-85a3-4a62-9eb3-11c31eb531e4", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-oppo-watch3pro\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ReBiliBin\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-30 08:11:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 on OPPO Watch 3 Pro\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100350"}, {"timestamp": "2026-08-31T00:00:40.275Z", "date_only": false, "value": "2026-08-31T00:00:40.275254Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Wo1B2qy3supRi9RLVnMbQ41knoxctT-bVTE1SmDL-J33mLU", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a06ec38a-7604-4af1-abc9-52efba5a88a6"}, {"timestamp": "2026-08-31T00:00:44.147Z", "date_only": false, "value": "2026-08-31T00:00:44.147814Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CcRo1gMZwWwNofZNwYOQ3d2hQNvA4xaZ28UNdx64Ma-ZFGg", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "0171682f-d421-4207-874b-3e9395d63fc6"}, {"timestamp": "2026-09-01T10:00:03.881Z", "date_only": false, "value": "2026-09-01T10:00:03.881256Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/100611", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d8763587-a05e-48b9-b2ad-8fb61b73896f", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lkeld\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 07:34:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100611"}, {"timestamp": "2026-09-01T12:00:05.708Z", "date_only": false, "value": "2026-09-01T12:00:05.708247Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/100616", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7b192c4a-b8be-485c-8674-f19fc32754ce", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a k50g-pocof4gt-cve-2026-43499-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cxyofficial\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:32:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100616"}, {"timestamp": "2026-09-01T20:00:05.539Z", "date_only": false, "value": "2026-09-01T20:00:05.539329Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/191129", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1b16042e-6e03-4558-8adc-53b93182ec71", "content": "duchamp-root v52c8d05bcf\nhttps://kitploit.com/en/posts/github-colorful-glassblock-duchamp-root-release-52c8d05bcf\n\nXiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration", "url": "https://t.me/hacking_Attack/191129"}, {"timestamp": "2026-09-02T00:00:00Z", "date_only": true, "value": "2026-09-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1117", "record": "CERTFR-2026-AVI-1117", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-02T01:00:13.294Z", "date_only": false, "value": "2026-09-02T01:00:13.294469Z", "kind": "sighting", "label": "Seen", "source": "Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "121db430-7f2b-4298-8226-b4195e3f6da4"}, {"timestamp": "2026-09-02T01:00:13.688Z", "date_only": false, "value": "2026-09-02T01:00:13.688967Z", "kind": "sighting", "label": "Seen", "source": "Telegram/I58s2uZmAQqrY0Sc2S_LCSg9yo3yGDFMC-JsGWGbcm0eZ9o", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "97fc3a07-ab6d-4762-9b42-12596925bb04"}, {"timestamp": "2026-09-02T01:00:14.341Z", "date_only": false, "value": "2026-09-02T01:00:14.341358Z", "kind": "sighting", "label": "Seen", "source": "Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "0cbe00ba-df7d-4b1e-83b8-824988179e30"}, {"timestamp": "2026-09-02T01:00:14.907Z", "date_only": false, "value": "2026-09-02T01:00:14.907836Z", "kind": "sighting", "label": "Seen", "source": "Telegram/zg4wR79y8Xs5TR-sEF4ufViDE8nGerP6bqE6yl_hOH2_qzw", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "6a52e4b6-29e3-4961-b95a-248a572abca7"}, {"timestamp": "2026-09-02T01:00:19.102Z", "date_only": false, "value": "2026-09-02T01:00:19.102771Z", "kind": "sighting", "label": "Seen", "source": "Telegram/5kO5Q2wTOurnBwc-YFHOCZwVFJew3TejlXiqZK_FHnxdywk", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1bb273d9-84d2-4395-a387-4d9cb869e4a4"}, {"timestamp": "2026-09-02T01:00:25.764Z", "date_only": false, "value": "2026-09-02T01:00:25.764037Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/191129", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f417c3ff-2f3e-46eb-be7f-db0a25e62cd0", "content": "duchamp-root v52c8d05bcf\nhttps://kitploit.com/en/posts/github-colorful-glassblock-duchamp-root-release-52c8d05bcf\n\nXiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration", "url": "https://t.me/hacking_Attack/191129"}, {"timestamp": "2026-09-02T01:05:08.448Z", "date_only": false, "value": "2026-09-02T01:05:08.448749Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100616", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "be31e270-8015-44da-95a4-eb0f544ee2ac", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a k50g-pocof4gt-cve-2026-43499-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cxyofficial\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 09:32:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100616"}, {"timestamp": "2026-09-02T01:05:08.746Z", "date_only": false, "value": "2026-09-02T01:05:08.746766Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100611", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "806a357e-3919-4124-abad-85380aa46892", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lkeld\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-01 07:34:57\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100611"}, {"timestamp": "2026-09-02T06:00:06.565Z", "date_only": false, "value": "2026-09-02T06:00:06.565988Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingTeamGrupoOfficial/47324", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c9f33173-a6c2-4b4e-9cad-a1725657213a", "content": "GhostLock \u2014 CVE-2026-43499\n\nThis is a Linux kernel vulnerability found by\u00a0VEGA\u00a0that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in kernelCTF. This writeup covers the technical details of the exploit.\n\n\ud83d\udd17 Research:\nhttps://nebusec.ai/research/ionstack-part-2/\n\n\ud83d\udd17 Exploit:\nhttps://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499\n\n#linux #kernel #lpe #container #escape", "url": "https://t.me/HackingTeamGrupoOfficial/47324"}, {"timestamp": "2026-09-02T06:00:06.721Z", "date_only": false, "value": "2026-09-02T06:00:06.721601Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingTeamGrupoOfficial/47380", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8290f900-957c-4690-b4ae-473b6f0e15de", "content": "GhostLock \u2014 CVE-2026-43499\n\nThis is a Linux kernel vulnerability found by\u00a0VEGA\u00a0that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in kernelCTF. This writeup covers the technical details of the exploit.\n\n\ud83d\udd17 Research:\nhttps://nebusec.ai/research/ionstack-part-2/\n\n\ud83d\udd17 Exploit:\nhttps://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499\n\n#linux #kernel #lpe #container #escape", "url": "https://t.me/HackingTeamGrupoOfficial/47380"}, {"timestamp": "2026-09-02T14:00:05.002Z", "date_only": false, "value": "2026-09-02T14:00:05.002528Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ksw_2WSufg_ZzZKAWc_QpJTvjLIU1b4CHsBIzgYQ-ZNPfik", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "533a5da6-8cc3-48f0-b565-806c942062e6"}, {"timestamp": "2026-09-02T15:00:05.780Z", "date_only": false, "value": "2026-09-02T15:00:05.780681Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/100782", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e4e0ca6e-99cf-49e7-aad3-03d926a5f2e2", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a K50G-POCOF4GT-CVE-2026-43499-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cxyofficial\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 11:26:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100782"}, {"timestamp": "2026-09-03T00:00:37.072Z", "date_only": false, "value": "2026-09-03T00:00:37.072655Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/5kO5Q2wTOurnBwc-YFHOCZwVFJew3TejlXiqZK_FHnxdywk", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "067a50d5-9f4e-4a7a-8397-8ffa1914db49"}, {"timestamp": "2026-09-03T00:00:40.571Z", "date_only": false, "value": "2026-09-03T00:00:40.571291Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/zg4wR79y8Xs5TR-sEF4ufViDE8nGerP6bqE6yl_hOH2_qzw", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "0cafbab7-c20c-4127-9b57-47ef62815c43"}, {"timestamp": "2026-09-03T00:00:42.895Z", "date_only": false, "value": "2026-09-03T00:00:42.895156Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/geFIdEurthJC81uvedAy7Je7bmf61756WHWGo7im76vrTZM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "79852a4a-fa3a-46ec-b3f9-9489ec1269b7"}, {"timestamp": "2026-09-03T00:00:43.233Z", "date_only": false, "value": "2026-09-03T00:00:43.233361Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/I58s2uZmAQqrY0Sc2S_LCSg9yo3yGDFMC-JsGWGbcm0eZ9o", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "13b2c59d-8b39-40b7-8f7c-c549b8ddba78"}, {"timestamp": "2026-09-03T00:00:43.657Z", "date_only": false, "value": "2026-09-03T00:00:43.657501Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/100782", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f2012657-aca4-403f-ae0d-6f47eee6af7b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a K50G-POCOF4GT-CVE-2026-43499-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Cxyofficial\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 11:26:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/100782"}, {"timestamp": "2026-09-03T00:00:52.100Z", "date_only": false, "value": "2026-09-03T00:00:52.100114Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingTeamGrupoOfficial/47380", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "03c839a7-3177-4252-8f76-392da0bdb916", "content": "GhostLock \u2014 CVE-2026-43499\n\nThis is a Linux kernel vulnerability found by\u00a0VEGA\u00a0that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in kernelCTF. This writeup covers the technical details of the exploit.\n\n\ud83d\udd17 Research:\nhttps://nebusec.ai/research/ionstack-part-2/\n\n\ud83d\udd17 Exploit:\nhttps://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499\n\n#linux #kernel #lpe #container #escape", "url": "https://t.me/HackingTeamGrupoOfficial/47380"}, {"timestamp": "2026-09-03T00:00:52.185Z", "date_only": false, "value": "2026-09-03T00:00:52.185226Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingTeamGrupoOfficial/47324", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b2d6fbe3-3c5f-417b-a8ec-ef912314256e", "content": "GhostLock \u2014 CVE-2026-43499\n\nThis is a Linux kernel vulnerability found by\u00a0VEGA\u00a0that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in kernelCTF. This writeup covers the technical details of the exploit.\n\n\ud83d\udd17 Research:\nhttps://nebusec.ai/research/ionstack-part-2/\n\n\ud83d\udd17 Exploit:\nhttps://github.com/NebuSec/CyberMeowfia/tree/main/IonStack/CVE-2026-43499\n\n#linux #kernel #lpe #container #escape", "url": "https://t.me/HackingTeamGrupoOfficial/47324"}, {"timestamp": "2026-09-03T00:00:53.732Z", "date_only": false, "value": "2026-09-03T00:00:53.732254Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9f630f1e-453e-4088-99d2-ee4ad530f4ae"}, {"timestamp": "2026-09-04T00:00:00Z", "date_only": false, "value": "2026-09-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1117", "record": "CERTFR-2026-AVI-1117", "field": "last_revision_date"}, {"timestamp": "2026-09-04T00:00:00Z", "date_only": false, "value": "2026-09-04T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1117", "record": "CERTFR-2026-AVI-1117", "field": "initial_release_date"}, {"timestamp": "2026-09-04T00:00:00Z", "date_only": false, "value": "2026-09-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1117", "record": "CERTFR-2026-AVI-1117", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-06T14:00:04.977Z", "date_only": false, "value": "2026-09-06T14:00:04.977044Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/192735", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d3530439-5a32-4b74-960d-0fe07f322970", "content": "ghostlock \u2014 Updated!\n\nTracking GhostLock (CVE-2026-43499), the rtmutex/futex stack use-after-free\nRead more...", "url": "https://t.me/hacking_Attack/192735"}, {"timestamp": "2026-09-06T14:00:05.914Z", "date_only": false, "value": "2026-09-06T14:00:05.914595Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/192977", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "aaf6cafc-cf24-4bb0-95d2-b3bcc99e884b", "content": "Root-My-Device v0.0.7\nhttps://kitploit.com/en/posts/github-witaqua-tools-root-my-device-v007\n\nKSU installer for supported firmware with CVE-2026-43499", "url": "https://t.me/hacking_Attack/192977"}, {"timestamp": "2026-09-06T14:00:05.966Z", "date_only": false, "value": "2026-09-06T14:00:05.966021Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/192942", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "bba3dc16-ee98-48d7-8087-14c494867f16", "content": "Root-My-Device v0.0.7\n\nKSU installer for supported firmware with CVE-2026-43499\nRead more...", "url": "https://t.me/hacking_Attack/192942"}, {"timestamp": "2026-09-07T20:00:04.095Z", "date_only": false, "value": "2026-09-07T20:00:04.095618Z", "kind": "sighting", "label": "Seen", "source": "Telegram/e1Caytt7o3CU8fUDytk0bAna7P5-tN7kuZQtd1sYjUWP61A", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e175a15e-a876-40d1-8264-72043d8522b5"}, {"timestamp": "2026-09-08T00:00:00Z", "date_only": false, "value": "2026-09-08T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-019113", "record": "SSA-019113", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-08T00:00:24.674Z", "date_only": false, "value": "2026-09-08T00:00:24.674590Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/e1Caytt7o3CU8fUDytk0bAna7P5-tN7kuZQtd1sYjUWP61A", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f5c6cc6a-340b-4412-a3bb-dacc47d394b2"}, {"timestamp": "2026-09-09T05:00:05.592Z", "date_only": false, "value": "2026-09-09T05:00:05.592647Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/101663", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d1a45536-e4e4-484d-b25b-fc6945c6091e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a R0rt1z2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 18  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 3\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-08 12:40:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nKernel root exploit (CVE-2026-43499) for some 5.X devices (mostly Amazon)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101663"}, {"timestamp": "2026-09-09T05:00:07.117Z", "date_only": false, "value": "2026-09-09T05:00:07.117714Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/101481", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "20d00fe8-b5c7-4d94-b673-7320ddbbf40b", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a galaxy-a37-root\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdgalaxy36-code\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 07:59:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 exploit payload for Samsung Galaxy A37 (A376BXXS4AZG4, kernel 6.1.138-android14-11)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101481"}, {"timestamp": "2026-09-09T05:00:07.540Z", "date_only": false, "value": "2026-09-09T05:00:07.540257Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/101438", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c4959c5b-0a1e-4839-8b98-0773efcd9447", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a hazel-cve-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dorlow\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-06 21:18:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101438"}, {"timestamp": "2026-09-09T10:00:05.903Z", "date_only": false, "value": "2026-09-09T10:00:05.903248Z", "kind": "sighting", "label": "Seen", "source": "Telegram/S_xvhEYkSfwY-06pFLtOx1--AsX0A_rgUo_9aHBHntliw8A", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "487a1fb0-b368-43da-85ca-b5907cd64ed6"}, {"timestamp": "2026-09-10T00:00:45.084Z", "date_only": false, "value": "2026-09-10T00:00:45.084340Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/S_xvhEYkSfwY-06pFLtOx1--AsX0A_rgUo_9aHBHntliw8A", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b9c52b8f-38e9-494c-8ed2-e0a132bce722"}, {"timestamp": "2026-09-10T00:00:49.089Z", "date_only": false, "value": "2026-09-10T00:00:49.089204Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/101438", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c89a311b-c7cb-47e5-b01d-ee6249656ef2", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a hazel-cve-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dorlow\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-06 21:18:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101438"}, {"timestamp": "2026-09-10T00:00:49.439Z", "date_only": false, "value": "2026-09-10T00:00:49.439893Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/101481", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e332c319-1a4f-402d-83d2-d1d1c241f0aa", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a galaxy-a37-root\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abdgalaxy36-code\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-07 07:59:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 exploit payload for Samsung Galaxy A37 (A376BXXS4AZG4, kernel 6.1.138-android14-11)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101481"}, {"timestamp": "2026-09-10T00:00:50.571Z", "date_only": false, "value": "2026-09-10T00:00:50.571086Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/101663", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "510fa364-58a7-45e8-9984-fe69154ade8e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostLock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a R0rt1z2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 18  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 3\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-08 12:40:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nKernel root exploit (CVE-2026-43499) for some 5.X devices (mostly Amazon)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101663"}, {"timestamp": "2026-09-10T04:00:05.128Z", "date_only": false, "value": "2026-09-10T04:00:05.128676Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/101884", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "fcc67520-8389-4884-855a-281cd669aee2", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a RootMyVivo-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zenyxx-xd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 02:15:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) exploit fork for RootMyVivo Neo \u2014 iQOO Neo 11 (PD2520, SM8750, 6.6.89). For authorized research on own devices only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101884"}, {"timestamp": "2026-09-10T18:00:06.047Z", "date_only": false, "value": "2026-09-10T18:00:06.047996Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/9tAdOzEYIDvrG2QScNTZT7Kho_3KPCsfNn3jkCN_YtF0uDc", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "33966981-9331-46fb-aef9-91410bd8f819"}, {"timestamp": "2026-09-10T20:00:09.855Z", "date_only": false, "value": "2026-09-10T20:00:09.855703Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/101967", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "26993b79-5d1c-4365-b2e4-4c2f110d1437", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #\u63d0\u6743 #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a KSuRoot\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hmascs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Kotlin\n\u2b50 Star\u6570\u91cf\uff1a 10  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 17:48:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nKSuRoot 3.0 \u2014 \u57fa\u4e8e CVE-2026-43499(GhostLock) \u7684\u4e00\u952e KernelSU \u63d0\u6743\u5de5\u5177\u3002\u65b0\u589e\u300c\u8f7d\u8377\u6784\u5efa\u300d\uff1a\u7528\u672c\u673a boot.img \u89e3\u6790\u5185\u6838\u504f\u79fb\u5e76\u6253\u51fa\u9002\u914d\u672c\u673a\u7684\u8f7d\u8377\uff08\u901a\u7528\u65b9\u6848 / vivo \u4e13\u7528\uff09\uff1b\u5185\u6838 6.6+ \u514d ADB\uff1b\u5185\u7f6e\u8f7d\u8377\u56fa\u5b9a\u4e0a\u6e38 v1.0.0\u3002Mod by hmascs\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101967"}, {"timestamp": "2026-09-11T00:00:27.925Z", "date_only": false, "value": "2026-09-11T00:00:27.925388Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/101967", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "dc577ce9-5601-487c-a829-a873edf82608", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #\u63d0\u6743 #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a KSuRoot\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hmascs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Kotlin\n\u2b50 Star\u6570\u91cf\uff1a 10  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 17:48:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nKSuRoot 3.0 \u2014 \u57fa\u4e8e CVE-2026-43499(GhostLock) \u7684\u4e00\u952e KernelSU \u63d0\u6743\u5de5\u5177\u3002\u65b0\u589e\u300c\u8f7d\u8377\u6784\u5efa\u300d\uff1a\u7528\u672c\u673a boot.img \u89e3\u6790\u5185\u6838\u504f\u79fb\u5e76\u6253\u51fa\u9002\u914d\u672c\u673a\u7684\u8f7d\u8377\uff08\u901a\u7528\u65b9\u6848 / vivo \u4e13\u7528\uff09\uff1b\u5185\u6838 6.6+ \u514d ADB\uff1b\u5185\u7f6e\u8f7d\u8377\u56fa\u5b9a\u4e0a\u6e38 v1.0.0\u3002Mod by hmascs\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101967"}, {"timestamp": "2026-09-12T12:00:05.811Z", "date_only": false, "value": "2026-09-12T12:00:05.811215Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102113", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "612dce63-4b84-406e-a982-a4d96e195655", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-s26\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 1ndevelopment\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-12 09:35:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) app for the Galaxy S26 series\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102113"}, {"timestamp": "2026-09-14T03:00:07.820Z", "date_only": false, "value": "2026-09-14T03:00:07.820002Z", "kind": "sighting", "label": "Seen", "source": "Telegram/uk9yoRqcZiLOpAGjv24UEoeHuOZU_BlMWygh7B7a0pT6RpM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5f41ec04-b15f-4e3e-8489-acbc00d0ecfd"}, {"timestamp": "2026-09-14T03:00:08.722Z", "date_only": false, "value": "2026-09-14T03:00:08.722624Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-crZ7c2mXyDAnAi6cUoO6ZGLIobDD_pIiFk-5o6QD17WEzY", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "496cdd11-4d95-4e16-b8fb-dea09de132b2"}, {"timestamp": "2026-09-14T03:00:09.751Z", "date_only": false, "value": "2026-09-14T03:00:09.751735Z", "kind": "sighting", "label": "Seen", "source": "Telegram/iBj7RYtihqm6hIuCBk6vB4PmaU6fP95etshgJ7uPz9bghck", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "74611446-0e4f-4e61-bd83-2bc4680f9eac"}, {"timestamp": "2026-09-14T03:00:13.986Z", "date_only": false, "value": "2026-09-14T03:00:13.986092Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SISeOiJWiDHPKa0-EGjfIE-t_IZnqvMDmbIqcTRDP3O63UA", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "2679d4e1-c43e-4c4a-9416-669f50fd3949"}, {"timestamp": "2026-09-14T06:00:05.786Z", "date_only": false, "value": "2026-09-14T06:00:05.786663Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102257", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "546bb6c1-7726-4390-93a1-8ab8f12e445f", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-cve-2026-43499-4.19-k40\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ccp-p\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 00:50:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock CVE-2026-43499 Redmi K40 (alioth 4.19.157) adaptation\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102257"}, {"timestamp": "2026-09-14T10:00:04.347Z", "date_only": false, "value": "2026-09-14T10:00:04.347603Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cETmR6PmVA-Oz0aW9cR5toB5HzP84uGj8tzgORzgcaHdb5Y", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "64c2bc19-4268-4875-8d51-38da49a10f0c"}, {"timestamp": "2026-09-14T13:00:04.906Z", "date_only": false, "value": "2026-09-14T13:00:04.906016Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102281", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "0fd975a3-e7c7-4180-95b0-738d18c4b0c3", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghost-hoock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a genksome\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 09:37:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock stripped to one primitive: SELinux off on Galaxy A17 (BZA5) via futex PI UAF (CVE-2026-43499). No root, no cred patch, no rwforge.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102281"}, {"timestamp": "2026-09-14T16:00:06Z", "date_only": false, "value": "2026-09-14T16:00:06.000911Z", "kind": "sighting", "label": "Seen", "source": "Telegram/nUtgLh6502OLuiOIs3tpfONHzlPir0_S3whIg0M9zp0dVVU", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "afeb4739-f790-4921-b54d-0c1dbd34ddd7"}, {"timestamp": "2026-09-14T19:46:50.501Z", "date_only": false, "value": "2026-09-14T19:46:50.501003Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mviusypr3m2v", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f8e24a33-1d9f-4d6b-9e26-0d197ec5a982", "content": "ASUS I005 Linux Kernel CVE-2026-43499 Local Privilege Escalation https://packetstorm.news/files/231284 #exploit", "url": "https://bsky.app/profile/packetstorm.bsky.social/post/3mviusypr3m2v"}, {"timestamp": "2026-09-14T20:17:00.219Z", "date_only": false, "value": "2026-09-14T20:17:00.219988Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mviwiwn4wn2v", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ad81ea95-eb59-46e7-b72d-afa0bf1f0a49", "content": "Honor WIN RT AAK-AN00 CVE-2026-43499 Local Privilege Escalation https://packetstorm.news/files/231291 #exploit", "url": "https://bsky.app/profile/packetstorm.bsky.social/post/3mviwiwn4wn2v"}, {"timestamp": "2026-09-14T20:27:03.933Z", "date_only": false, "value": "2026-09-14T20:27:03.933079Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mvix2vy63q2l", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d8c34079-bd99-4762-ae55-5559c957cc40", "content": "Qualcomm Android 4.19 CVE-2026-43499 Local Privilege Escalation https://packetstorm.news/files/231294 #exploit", "url": "https://bsky.app/profile/packetstorm.bsky.social/post/3mvix2vy63q2l"}, {"timestamp": "2026-09-14T23:00:03.699Z", "date_only": false, "value": "2026-09-14T23:00:03.699149Z", "kind": "sighting", "label": "Seen", "source": "Telegram/x38-sxvf4qgSSEOQO0rIsdAof5ij13oL7xnEFNSRLy91YY4", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "fc8639c3-cb6c-4d26-a98a-0fd581a0ffdf"}, {"timestamp": "2026-09-15T00:00:00Z", "date_only": true, "value": "2026-09-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1203", "record": "CERTFR-2026-AVI-1203", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2026-09-15T00:00:08.744Z", "date_only": false, "value": "2026-09-15T00:00:08.744957Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102330", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "394221a5-265d-4179-96c7-0d9acbd23f07", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-sabrina\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a k-o-n-t-o-r\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 20:16:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 GhostLock root exploit for Chromecast with Google TV (sabrina)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102330"}, {"timestamp": "2026-09-15T00:00:20.068Z", "date_only": false, "value": "2026-09-15T00:00:20.068197Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/nUtgLh6502OLuiOIs3tpfONHzlPir0_S3whIg0M9zp0dVVU", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "fbf01c44-8a55-446b-9527-1f6a7414bca5"}, {"timestamp": "2026-09-15T00:00:22.262Z", "date_only": false, "value": "2026-09-15T00:00:22.262796Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SISeOiJWiDHPKa0-EGjfIE-t_IZnqvMDmbIqcTRDP3O63UA", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "fe6e5252-690c-413a-a081-60b326e73ddf"}, {"timestamp": "2026-09-15T00:00:23.995Z", "date_only": false, "value": "2026-09-15T00:00:23.995918Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cETmR6PmVA-Oz0aW9cR5toB5HzP84uGj8tzgORzgcaHdb5Y", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "bac47894-8a0f-43eb-ac13-b80cb4eef7ee"}, {"timestamp": "2026-09-15T00:00:24.584Z", "date_only": false, "value": "2026-09-15T00:00:24.584671Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iBj7RYtihqm6hIuCBk6vB4PmaU6fP95etshgJ7uPz9bghck", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ef70ee55-c225-4311-876b-04cf12c96994"}, {"timestamp": "2026-09-15T00:00:25.140Z", "date_only": false, "value": "2026-09-15T00:00:25.140157Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-crZ7c2mXyDAnAi6cUoO6ZGLIobDD_pIiFk-5o6QD17WEzY", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "082d498b-0d3f-43f6-a7bd-84d51c5b3e08"}, {"timestamp": "2026-09-15T00:00:27.220Z", "date_only": false, "value": "2026-09-15T00:00:27.220435Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/uk9yoRqcZiLOpAGjv24UEoeHuOZU_BlMWygh7B7a0pT6RpM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "db0aaaed-7d99-43ce-b0a3-0341dd57e036"}, {"timestamp": "2026-09-15T03:00:03.416Z", "date_only": false, "value": "2026-09-15T03:00:03.416896Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102337", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "06d67cb7-2aa2-4171-aa04-cd7f80867c3c", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a aquos-r6-ghostlock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mouseos\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 23:25:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTemporary root exploit for Sharp AQUOS R6 A101SH S0029 using GhostLock CVE-2026-43499\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102337"}, {"timestamp": "2026-09-15T13:00:05.371Z", "date_only": false, "value": "2026-09-15T13:00:05.371574Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/102378", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "373822c3-cc49-4d44-a5e4-cbe08825e22e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a asus_i005-CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a huaguiqi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 10:46:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102378"}, {"timestamp": "2026-09-15T22:00:05.136Z", "date_only": false, "value": "2026-09-15T22:00:05.136168Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/102427", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "dd875aaf-100d-4e7a-83f0-1575904c3920", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IonStack_S21\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kurtulusakyuz\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 19:58:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploit chain research targeting CVE-2026-43499 on Samsung Galaxy S21\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102427"}, {"timestamp": "2026-09-16T00:00:10.734Z", "date_only": false, "value": "2026-09-16T00:00:10.734922Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102427", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7b3f6542-e845-4c84-ba50-f4ae7f582f7d", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IonStack_S21\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kurtulusakyuz\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 19:58:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploit chain research targeting CVE-2026-43499 on Samsung Galaxy S21\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102427"}, {"timestamp": "2026-09-16T00:00:31.561Z", "date_only": false, "value": "2026-09-16T00:00:31.561201Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102378", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a6cfa76b-1acc-4dd8-9229-168e5012fce8", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #\u6f0f\u6d1e #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a asus_i005-CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a huaguiqi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 10:46:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102378"}, {"timestamp": "2026-09-16T16:05:45Z", "date_only": false, "value": "2026-09-16T16:05:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 ESSA-2026:0154", "record": "ESSA-2026:0154", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T17:56:43Z", "date_only": false, "value": "2026-09-16T17:56:43Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:39083", "record": "RHSA-2026:39083", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T17:56:52Z", "date_only": false, "value": "2026-09-16T17:56:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 ESSA-2026:0154", "record": "ESSA-2026:0154", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T18:11:27Z", "date_only": false, "value": "2026-09-16T18:11:27Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 ESSA-2026:0154", "record": "ESSA-2026:0154", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-16T18:37:24Z", "date_only": false, "value": "2026-09-16T18:37:24Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:39083", "record": "RHSA-2026:39083", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T19:06:09Z", "date_only": false, "value": "2026-09-16T19:06:09Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22043-1", "record": "SUSE-SU-2026:22043-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:06:14Z", "date_only": false, "value": "2026-09-16T19:06:14Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22048-1", "record": "SUSE-SU-2026:22048-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:06:42Z", "date_only": false, "value": "2026-09-16T19:06:42Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22076-1", "record": "SUSE-SU-2026:22076-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:06:52Z", "date_only": false, "value": "2026-09-16T19:06:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22087-1", "record": "SUSE-SU-2026:22087-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:07:10Z", "date_only": false, "value": "2026-09-16T19:07:10Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22108-1", "record": "SUSE-SU-2026:22108-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T19:07:28Z", "date_only": false, "value": "2026-09-16T19:07:28Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22137-1", "record": "SUSE-SU-2026:22137-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T19:12:09Z", "date_only": false, "value": "2026-09-16T19:12:09Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22433-1", "record": "SUSE-SU-2026:22433-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T19:12:35Z", "date_only": false, "value": "2026-09-16T19:12:35Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22458-1", "record": "SUSE-SU-2026:22458-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T19:23:20Z", "date_only": false, "value": "2026-09-16T19:23:20Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2310-1", "record": "SUSE-SU-2026:2310-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:24:28Z", "date_only": false, "value": "2026-09-16T19:24:28Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2317-1", "record": "SUSE-SU-2026:2317-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:26:51Z", "date_only": false, "value": "2026-09-16T19:26:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2331-1", "record": "SUSE-SU-2026:2331-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:27:00Z", "date_only": false, "value": "2026-09-16T19:27:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2332-1", "record": "SUSE-SU-2026:2332-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:31:36Z", "date_only": false, "value": "2026-09-16T19:31:36Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2421-1", "record": "SUSE-SU-2026:2421-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:31:54Z", "date_only": false, "value": "2026-09-16T19:31:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2450-1", "record": "SUSE-SU-2026:2450-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T19:33:09Z", "date_only": false, "value": "2026-09-16T19:33:09Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2591-1", "record": "SUSE-SU-2026:2591-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T19:55:23Z", "date_only": false, "value": "2026-09-16T19:55:23Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22043-1", "record": "SUSE-SU-2026:22043-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T19:55:23Z", "date_only": false, "value": "2026-09-16T19:55:23Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22043-1", "record": "SUSE-SU-2026:22043-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-16T19:55:27Z", "date_only": false, "value": "2026-09-16T19:55:27Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22048-1", "record": "SUSE-SU-2026:22048-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T19:55:57Z", "date_only": false, "value": "2026-09-16T19:55:57Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22076-1", "record": "SUSE-SU-2026:22076-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T19:55:57Z", "date_only": false, "value": "2026-09-16T19:55:57Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22076-1", "record": "SUSE-SU-2026:22076-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-16T19:56:06Z", "date_only": false, "value": "2026-09-16T19:56:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22087-1", "record": "SUSE-SU-2026:22087-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T19:56:06Z", "date_only": false, "value": "2026-09-16T19:56:06Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22087-1", "record": "SUSE-SU-2026:22087-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-16T19:56:22Z", "date_only": false, "value": "2026-09-16T19:56:22Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22108-1", "record": "SUSE-SU-2026:22108-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-16T19:56:40Z", "date_only": false, "value": "2026-09-16T19:56:40Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22137-1", "record": "SUSE-SU-2026:22137-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-16T20:01:25Z", "date_only": false, "value": "2026-09-16T20:01:25Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22433-1", "record": "SUSE-SU-2026:22433-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-16T20:01:44Z", "date_only": false, "value": "2026-09-16T20:01:44Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22458-1", "record": "SUSE-SU-2026:22458-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-16T20:11:15Z", "date_only": false, "value": "2026-09-16T20:11:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2310-1", "record": "SUSE-SU-2026:2310-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T20:11:57Z", "date_only": false, "value": "2026-09-16T20:11:57Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10859-1", "record": "OPENSUSE-SU-2026:10859-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T20:12:17Z", "date_only": false, "value": "2026-09-16T20:12:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2317-1", "record": "SUSE-SU-2026:2317-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T20:12:17Z", "date_only": false, "value": "2026-09-16T20:12:17Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2317-1", "record": "SUSE-SU-2026:2317-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-16T20:14:16Z", "date_only": false, "value": "2026-09-16T20:14:16Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2331-1", "record": "SUSE-SU-2026:2331-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T20:14:24Z", "date_only": false, "value": "2026-09-16T20:14:24Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2332-1", "record": "SUSE-SU-2026:2332-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T20:18:47Z", "date_only": false, "value": "2026-09-16T20:18:47Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2421-1", "record": "SUSE-SU-2026:2421-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T20:19:09Z", "date_only": false, "value": "2026-09-16T20:19:09Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2450-1", "record": "SUSE-SU-2026:2450-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T20:21:05Z", "date_only": false, "value": "2026-09-16T20:21:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2591-1", "record": "SUSE-SU-2026:2591-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-16T20:36:58Z", "date_only": false, "value": "2026-09-16T20:36:58Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20912-1", "record": "OPENSUSE-SU-2026:20912-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-16T21:12:58Z", "date_only": false, "value": "2026-09-16T21:12:58Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10859-1", "record": "OPENSUSE-SU-2026:10859-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T21:39:41Z", "date_only": false, "value": "2026-09-16T21:39:41Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20912-1", "record": "OPENSUSE-SU-2026:20912-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-17T12:33:38Z", "date_only": false, "value": "2026-09-17T12:33:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 ESSA-2026:0154", "record": "ESSA-2026:0154", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-17T13:02:08Z", "date_only": false, "value": "2026-09-17T13:02:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:39083", "record": "RHSA-2026:39083", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T15:52:38Z", "date_only": false, "value": "2026-09-17T15:52:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22048-1", "record": "SUSE-SU-2026:22048-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T15:53:34Z", "date_only": false, "value": "2026-09-17T15:53:34Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22108-1", "record": "SUSE-SU-2026:22108-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-17T15:54:06Z", "date_only": false, "value": "2026-09-17T15:54:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22137-1", "record": "SUSE-SU-2026:22137-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-17T15:58:54Z", "date_only": false, "value": "2026-09-17T15:58:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22433-1", "record": "SUSE-SU-2026:22433-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-17T15:59:15Z", "date_only": false, "value": "2026-09-17T15:59:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22458-1", "record": "SUSE-SU-2026:22458-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-17T16:11:00Z", "date_only": false, "value": "2026-09-17T16:11:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2310-1", "record": "SUSE-SU-2026:2310-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T16:18:54Z", "date_only": false, "value": "2026-09-17T16:18:54Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2331-1", "record": "SUSE-SU-2026:2331-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T16:18:54Z", "date_only": false, "value": "2026-09-17T16:18:54Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2331-1", "record": "SUSE-SU-2026:2331-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-17T16:19:01Z", "date_only": false, "value": "2026-09-17T16:19:01Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2332-1", "record": "SUSE-SU-2026:2332-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T16:19:01Z", "date_only": false, "value": "2026-09-17T16:19:01Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2332-1", "record": "SUSE-SU-2026:2332-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-17T16:23:25Z", "date_only": false, "value": "2026-09-17T16:23:25Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2421-1", "record": "SUSE-SU-2026:2421-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T16:23:45Z", "date_only": false, "value": "2026-09-17T16:23:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2450-1", "record": "SUSE-SU-2026:2450-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T16:23:45Z", "date_only": false, "value": "2026-09-17T16:23:45Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2450-1", "record": "SUSE-SU-2026:2450-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-17T16:25:04Z", "date_only": false, "value": "2026-09-17T16:25:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2591-1", "record": "SUSE-SU-2026:2591-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-17T17:06:37Z", "date_only": false, "value": "2026-09-17T17:06:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10859-1", "record": "OPENSUSE-SU-2026:10859-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T17:06:37Z", "date_only": false, "value": "2026-09-17T17:06:37Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10859-1", "record": "OPENSUSE-SU-2026:10859-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-17T17:34:26Z", "date_only": false, "value": "2026-09-17T17:34:26Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20912-1", "record": "OPENSUSE-SU-2026:20912-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-18T00:00:00Z", "date_only": false, "value": "2026-09-18T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "vulnerabilities.6.threats.0.date"}, {"timestamp": "2026-09-18T00:00:00Z", "date_only": false, "value": "2026-09-18T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1203", "record": "CERTFR-2026-AVI-1203", "field": "last_revision_date"}, {"timestamp": "2026-09-18T00:00:00Z", "date_only": true, "value": "2026-09-18", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1203", "record": "CERTFR-2026-AVI-1203", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-18T00:00:00Z", "date_only": false, "value": "2026-09-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1203", "record": "CERTFR-2026-AVI-1203", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-18T04:00:06.762Z", "date_only": false, "value": "2026-09-18T04:00:06.762980Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ur2Bn3bfhoLALRYtf_QQeiLvx6zF_jjvHXFzOmQHfaPkXXY", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ecc05dd9-889e-4564-9b06-995c53338498"}, {"timestamp": "2026-09-18T04:00:08.999Z", "date_only": false, "value": "2026-09-18T04:00:08.999041Z", "kind": "sighting", "label": "Seen", "source": "Telegram/c5SreYmrDkdJR1r3a8RFt1SI3OPNA8AQ129hesIQxK_5L6E", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "da24478b-d45d-426a-ad05-64b144f49539"}, {"timestamp": "2026-09-18T04:00:11.747Z", "date_only": false, "value": "2026-09-18T04:00:11.747464Z", "kind": "sighting", "label": "Seen", "source": "Telegram/pzh7h7hoJz31V2QRZno9v3T007nzYQ25wjQDTc8ZEaIAC7Q", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "84a60fef-ccd3-44e4-8d5c-d5e160eb54da"}, {"timestamp": "2026-09-18T04:00:12.894Z", "date_only": false, "value": "2026-09-18T04:00:12.894073Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ju4nXUcZ89SCb6DOoV0Fnk2-ohcFzBtu5nTPyHJPzCZSCZ0", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9da46e43-0dec-40b8-be5e-88341143f538"}, {"timestamp": "2026-09-18T04:00:14.805Z", "date_only": false, "value": "2026-09-18T04:00:14.805435Z", "kind": "sighting", "label": "Seen", "source": "Telegram/zcM4v2spcF0EkijX4Cz4Ur2XpodLtWLN5_97Ej2jDEPd2KU", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3a71a81a-6a59-4579-aec8-b4f0630ff79c"}, {"timestamp": "2026-09-18T04:00:15.569Z", "date_only": false, "value": "2026-09-18T04:00:15.569771Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "cc2b4f84-b722-4b6e-bf24-d831cadee2c3"}, {"timestamp": "2026-09-19T00:00:10.669Z", "date_only": false, "value": "2026-09-19T00:00:10.669931Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FpYk8ynVsvkUdXcoDEYgoRRt_8k7ZJGfsVgmeYKdLdl0tBg", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "07225d5c-7bed-4b8b-a3bf-a8e90b553516"}, {"timestamp": "2026-09-19T00:00:11.315Z", "date_only": false, "value": "2026-09-19T00:00:11.315378Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/zcM4v2spcF0EkijX4Cz4Ur2XpodLtWLN5_97Ej2jDEPd2KU", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ee3a34dd-9a8a-4d4d-afa8-8b223fe1c892"}, {"timestamp": "2026-09-19T00:00:23.393Z", "date_only": false, "value": "2026-09-19T00:00:23.393419Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pzh7h7hoJz31V2QRZno9v3T007nzYQ25wjQDTc8ZEaIAC7Q", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f1413106-ccc2-4ea0-8dbb-b8c7437bbbb7"}, {"timestamp": "2026-09-19T00:00:25.005Z", "date_only": false, "value": "2026-09-19T00:00:25.005805Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/c5SreYmrDkdJR1r3a8RFt1SI3OPNA8AQ129hesIQxK_5L6E", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "827373b1-6044-4a2d-891f-45beeba3b296"}, {"timestamp": "2026-09-19T15:40:55Z", "date_only": false, "value": "2026-09-19T15:40:55Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22108-1", "record": "SUSE-SU-2026:22108-1", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-09-19T15:41:04Z", "date_only": false, "value": "2026-09-19T15:41:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22433-1", "record": "SUSE-SU-2026:22433-1", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-09-20T17:00:04.569Z", "date_only": false, "value": "2026-09-20T17:00:04.569979Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/102873", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "0e4c3083-4162-45a4-9985-16d42f8aa4ed", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #\u6f0f\u6d1e #\u590d\u73b0 #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-aak-apk\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oopnv70-lab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 7  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 14:51:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock AAK Launcher - CVE-2026-43499 Linux kernel rtmutex stack UAF local privilege escalation trigger (GPLv3)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102873"}, {"timestamp": "2026-09-20T17:00:04.625Z", "date_only": false, "value": "2026-09-20T17:00:04.625356Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/102874", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5d3162b9-8b0d-4d84-8bfb-1977dbace7d1", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Fold8-Ultra-Root-F976N\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a coey0814\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Kotlin\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 14:51:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOne-tap KernelSU installer for the Galaxy Z Fold 8 Ultra (SM-F976N / q8q) using the CVE-2026-43499 late-load exploit via Shizuku. Supports F976NKSU1AZGI, F976NKSS2AZH7, F976NKSU3AZI5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102874"}, {"timestamp": "2026-09-20T18:39:21Z", "date_only": false, "value": "2026-09-20T18:39:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22108-1", "record": "SUSE-SU-2026:22108-1", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-09-20T18:39:40Z", "date_only": false, "value": "2026-09-20T18:39:40Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22433-1", "record": "SUSE-SU-2026:22433-1", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-09-20T22:00:04.833Z", "date_only": false, "value": "2026-09-20T22:00:04.833034Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102906", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "467a0619-caff-4caa-96f5-2cfb2d768798", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a humane-aipin-ghostlock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TheAndersMadsen\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 19:57:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGuarded, source-only Humane AI Pin root PoC for CVE-2026-43499\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102906"}, {"timestamp": "2026-09-21T00:00:00Z", "date_only": true, "value": "2026-09-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1229", "record": "CERTFR-2026-AVI-1229", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-09-21T00:00:04.510Z", "date_only": false, "value": "2026-09-21T00:00:04.510015Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102874", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "0dd399ee-163d-4ba7-a9ba-0c568fe10652", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Fold8-Ultra-Root-F976N\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a coey0814\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Kotlin\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 14:51:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOne-tap KernelSU installer for the Galaxy Z Fold 8 Ultra (SM-F976N / q8q) using the CVE-2026-43499 late-load exploit via Shizuku. Supports F976NKSU1AZGI, F976NKSS2AZH7, F976NKSU3AZI5\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102874"}, {"timestamp": "2026-09-21T00:00:04.563Z", "date_only": false, "value": "2026-09-21T00:00:04.563835Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102873", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e3d1a162-07a5-4f55-9293-4f2f1730a027", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #\u6f0f\u6d1e #\u590d\u73b0 #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-aak-apk\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a oopnv70-lab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 7  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-20 14:51:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock AAK Launcher - CVE-2026-43499 Linux kernel rtmutex stack UAF local privilege escalation trigger (GPLv3)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102873"}, {"timestamp": "2026-09-22T00:00:00Z", "date_only": true, "value": "2026-09-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1229", "record": "CERTFR-2026-AVI-1229", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-22T07:00:04.248Z", "date_only": false, "value": "2026-09-22T07:00:04.248077Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/N-PGdqpLovLlQNbFQgrQqO8zEkhxsB1txl4jHkkqUA3cCi4", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "1474cce2-c346-4e5b-850a-8b0ee2d88861"}, {"timestamp": "2026-09-22T07:00:04.738Z", "date_only": false, "value": "2026-09-22T07:00:04.738203Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/dT7yXvodNHrxcxQnkvpf_sJjdaGRQYlSk9Plw9VoLoilrXc", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "9aaf99e7-8117-4b08-89f0-35f6a25afc1a"}, {"timestamp": "2026-09-22T07:00:06.103Z", "date_only": false, "value": "2026-09-22T07:00:06.103617Z", "kind": "sighting", "label": "Seen", "source": "Telegram/F-nhc0ijtr3NaromnbizNbgs7TOvAKcStOoCvZVO5zQF_tg", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "337ef292-a91a-423b-ab68-ee910fde80f1"}, {"timestamp": "2026-09-23T00:00:24.912Z", "date_only": false, "value": "2026-09-23T00:00:24.912609Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/F-nhc0ijtr3NaromnbizNbgs7TOvAKcStOoCvZVO5zQF_tg", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "23651831-c630-496d-9fab-e3450c1535b5"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": true, "value": "2026-09-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1229", "record": "CERTFR-2026-AVI-1229", "field": "vendor_advisories.7.published_at"}, {"timestamp": "2026-09-24T03:00:06Z", "date_only": false, "value": "2026-09-24T03:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/casOb_urBwXkBUZvllR9Y1soseAr2u2g5tENUUxRQxBEAPw", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "881954fa-cdf2-4906-9228-391b7f1ee3df"}, {"timestamp": "2026-09-24T05:00:07Z", "date_only": false, "value": "2026-09-24T05:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103195", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "aaa775b3-f4e9-4d3b-a8a0-c42cba37658c", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Lenovo-TB365FC-GhostLock-CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a wonjj6768\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 04:25:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) root + KernelSU LKM for the Lenovo TB365FC (ZUXOS / Android 16, kernel 5.15.170)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103195"}, {"timestamp": "2026-09-24T05:00:07Z", "date_only": false, "value": "2026-09-24T05:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103195", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "2df598aa-06be-4e05-9864-1224483079b5", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Lenovo-TB365FC-GhostLock-CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a wonjj6768\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-24 04:25:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock (CVE-2026-43499) root + KernelSU LKM for the Lenovo TB365FC (ZUXOS / Android 16, kernel 5.15.170)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103195"}, {"timestamp": "2026-09-24T15:00:07Z", "date_only": false, "value": "2026-09-24T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/iG746djsmIzMu48gr8Lxw7u_Ihwxlekn36voptDfQgw0SJg", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "02566277-ff27-4cb8-a81f-19ad1fe4455f"}, {"timestamp": "2026-09-24T15:00:07Z", "date_only": false, "value": "2026-09-24T15:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/iG746djsmIzMu48gr8Lxw7u_Ihwxlekn36voptDfQgw0SJg", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3bc4d7bb-c329-42a8-b1e9-ab1084545d8f"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1229", "record": "CERTFR-2026-AVI-1229", "field": "last_revision_date"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1229", "record": "CERTFR-2026-AVI-1229", "field": "initial_release_date"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": true, "value": "2026-09-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1254", "record": "CERTFR-2026-AVI-1254", "field": "vendor_advisories.5.published_at"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1229", "record": "CERTFR-2026-AVI-1229", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-25T03:00:08Z", "date_only": false, "value": "2026-09-25T03:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103290", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "4afd20b7-1921-48f4-a2fc-cbe1fb6454fa", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AthBe1337\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 02:54:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103290"}, {"timestamp": "2026-09-25T03:00:08Z", "date_only": false, "value": "2026-09-25T03:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103290", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b7c8e250-b70b-44f8-b25c-0018043fee83", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AthBe1337\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 02:54:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103290"}, {"timestamp": "2026-09-25T10:00:08Z", "date_only": false, "value": "2026-09-25T10:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103321", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5388c151-67a2-493b-8b85-06893dce5e0c", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-mrx-w09\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0ch4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 09:50:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 (GhostLock) port: working root on the Huawei MatePad Pro MRX-W09 (Kirin 990, EMUI 11, Linux 4.14.116) - disassembly-proven write primitive, perf cred leak, and a source-derived HKIP bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103321"}, {"timestamp": "2026-09-25T10:00:08Z", "date_only": false, "value": "2026-09-25T10:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103321", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "547f68c4-e2db-4aad-85af-bde5d636b81d", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-mrx-w09\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0ch4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-25 09:50:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 (GhostLock) port: working root on the Huawei MatePad Pro MRX-W09 (Kirin 990, EMUI 11, Linux 4.14.116) - disassembly-proven write primitive, perf cred leak, and a source-derived HKIP bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103321"}, {"timestamp": "2026-09-25T21:00:04Z", "date_only": false, "value": "2026-09-25T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/a8U1k7btHIGqHAGEHYLVPTeSRnmRmJ_Q40mogIa7et_Q1Vw", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b8f03d7e-a3b3-4ee3-9e49-2168020fb1a5"}, {"timestamp": "2026-09-26T03:00:05Z", "date_only": false, "value": "2026-09-26T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/81ZxAi3drt5TdyCoeDwTgAnR6u7IKZ42DhAcDrRYmOpRijY", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "77a2392b-a38a-4242-b86f-eb30df3dc85f"}, {"timestamp": "2026-09-26T07:00:09Z", "date_only": false, "value": "2026-09-26T07:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103401", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "67690844-99ad-4d9e-81a1-7b3709ba20c6", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Root-My-Device\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a WitAqua-tools\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Kotlin\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 06:48:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nKSU installer for supported firmware with CVE-2026-43499\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103401"}, {"timestamp": "2026-09-26T07:00:09Z", "date_only": false, "value": "2026-09-26T07:00:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103401", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "078c1549-af0b-4796-a373-a034a234d39e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Root-My-Device\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a WitAqua-tools\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Kotlin\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 06:48:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nKSU installer for supported firmware with CVE-2026-43499\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103401"}, {"timestamp": "2026-09-26T08:27:07Z", "date_only": false, "value": "2026-09-26T08:27:07Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 ESSA-2026:0154", "record": "ESSA-2026:0154", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-09-26T12:00:08Z", "date_only": false, "value": "2026-09-26T12:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103428", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8b6d992c-1aab-4f9f-9c6e-9ce7610d3c94", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a zenfone9-ghostlock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CKwasd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 11:40:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 (GhostLock) exploit for ASUS Zenfone 9 (SM8475, GKI 5.10.205) + KernelSU late-load. \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103428"}, {"timestamp": "2026-09-26T12:00:08Z", "date_only": false, "value": "2026-09-26T12:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103428", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "39ae35f5-d70a-4586-8a86-554b0fbf6d8f", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a zenfone9-ghostlock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CKwasd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-26 11:40:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-43499 (GhostLock) exploit for ASUS Zenfone 9 (SM8475, GKI 5.10.205) + KernelSU late-load. \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103428"}, {"timestamp": "2026-09-26T15:00:07Z", "date_only": false, "value": "2026-09-26T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZwzTOKK99bJ7BFqHmsNQhcBtNpWeVQ50id2s1j08rwHDfjQ", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "58bb42a3-99ab-4f69-aa73-6a34e4dd7e19"}, {"timestamp": "2026-09-26T15:00:07Z", "date_only": false, "value": "2026-09-26T15:00:07.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ZwzTOKK99bJ7BFqHmsNQhcBtNpWeVQ50id2s1j08rwHDfjQ", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b17a29c4-9e68-4afd-ac2d-f4c82b226534"}, {"timestamp": "2026-09-26T21:00:05Z", "date_only": false, "value": "2026-09-26T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/aouElhUq9Ye3BGvbzz59jTMPBnYDztZUvud3qnXOw9ieT70", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a5ba1139-abdf-4827-90ff-4e42803d0cc5"}, {"timestamp": "2026-09-26T21:00:05Z", "date_only": false, "value": "2026-09-26T21:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/aouElhUq9Ye3BGvbzz59jTMPBnYDztZUvud3qnXOw9ieT70", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a25efc94-2c73-4809-b2a9-e87f07b53aa5"}, {"timestamp": "2026-09-28T00:00:00Z", "date_only": true, "value": "2026-09-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1254", "record": "CERTFR-2026-AVI-1254", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-09-28T16:00:08Z", "date_only": false, "value": "2026-09-28T16:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103670", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e8175617-f508-4eea-af9a-3f2560b5a5e2", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a RootMyVivo-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a L-1124\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 15:22:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHardened CVE-2026-43499 (GhostLock futex PI UAF) injection payload source tree for vivo and iQOO devices\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103670"}, {"timestamp": "2026-09-28T16:00:08Z", "date_only": false, "value": "2026-09-28T16:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103670", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "964c6b73-4b0d-4f77-9a13-3bcad56cd247", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a RootMyVivo-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a L-1124\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-28 15:22:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHardened CVE-2026-43499 (GhostLock futex PI UAF) injection payload source tree for vivo and iQOO devices\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103670"}, {"timestamp": "2026-09-28T22:00:00Z", "date_only": false, "value": "2026-09-28T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3623", "record": "WID-SEC-W-2026-3623", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-28T22:00:00Z", "date_only": false, "value": "2026-09-28T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3623", "record": "WID-SEC-W-2026-3623", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-28T22:00:00Z", "date_only": false, "value": "2026-09-28T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3623", "record": "WID-SEC-W-2026-3623", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-09-29T00:00:00Z", "date_only": true, "value": "2026-09-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1254", "record": "CERTFR-2026-AVI-1254", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-09-29T03:00:06Z", "date_only": false, "value": "2026-09-29T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1uJwokYASOhFEvXumwZlyb9njx9S5iDKk59JgSK2ay9CKvc", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7f9a5ad5-6021-4217-964c-4b1e5c205610"}, {"timestamp": "2026-09-29T03:00:06Z", "date_only": false, "value": "2026-09-29T03:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1uJwokYASOhFEvXumwZlyb9njx9S5iDKk59JgSK2ay9CKvc", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5ac1e459-54ae-413d-9a5e-f520f21b3ddd"}, {"timestamp": "2026-09-29T10:00:08Z", "date_only": false, "value": "2026-09-29T10:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103736", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "2c2b1894-36dc-44a2-b703-99af7d7be9fe", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shubhampathak65\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-29 09:53:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock futex-PI UAF LPE exploit for POCO M7 5G - kernel 5.10.226\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103736"}, {"timestamp": "2026-09-29T10:00:08Z", "date_only": false, "value": "2026-09-29T10:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103736", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "4d569d93-5559-495e-8735-27c42b13e278", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a shubhampathak65\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-29 09:53:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGhostLock futex-PI UAF LPE exploit for POCO M7 5G - kernel 5.10.226\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103736"}, {"timestamp": "2026-09-29T12:00:09Z", "date_only": false, "value": "2026-09-29T12:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103749", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5503e6c2-2946-49c0-9295-6c0c5e313573", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POCO-M7-Plus-Jailbreak\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aniketlab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-29 11:49:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTemporary Root Research on Poco M7 Plus (SM6375) via Qualcomm GBL Exploit (CVE-2026-24088) + GhostLock Kernel Analysis (CVE-2026-43499)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103749"}, {"timestamp": "2026-09-29T12:00:09Z", "date_only": false, "value": "2026-09-29T12:00:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103749", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "eef6e9bc-bda7-42ab-960c-404f0f3c40ec", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POCO-M7-Plus-Jailbreak\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a aniketlab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-29 11:49:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTemporary Root Research on Poco M7 Plus (SM6375) via Qualcomm GBL Exploit (CVE-2026-24088) + GhostLock Kernel Analysis (CVE-2026-43499)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103749"}, {"timestamp": "2026-09-29T12:32:18Z", "date_only": false, "value": "2026-09-29T12:32:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-29T12:32:18Z", "date_only": false, "value": "2026-09-29T12:32:18+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-09-29T12:32:18Z", "date_only": false, "value": "2026-09-29T12:32:18+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-29T16:53:44Z", "date_only": false, "value": "2026-09-29T16:53:44+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:37728", "record": "RHSA-2026:37728", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-29T16:53:44Z", "date_only": false, "value": "2026-09-29T16:53:44+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:37728", "record": "RHSA-2026:37728", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-29T16:53:44Z", "date_only": false, "value": "2026-09-29T16:53:44+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:37728", "record": "RHSA-2026:37728", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-29T16:53:46Z", "date_only": false, "value": "2026-09-29T16:53:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:38492", "record": "RHSA-2026:38492", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-29T16:53:46Z", "date_only": false, "value": "2026-09-29T16:53:46+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:38492", "record": "RHSA-2026:38492", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-29T16:53:46Z", "date_only": false, "value": "2026-09-29T16:53:46+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:38492", "record": "RHSA-2026:38492", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-29T16:53:49Z", "date_only": false, "value": "2026-09-29T16:53:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:39984", "record": "RHSA-2026:39984", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-29T16:53:49Z", "date_only": false, "value": "2026-09-29T16:53:49+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:39984", "record": "RHSA-2026:39984", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-29T16:53:49Z", "date_only": false, "value": "2026-09-29T16:53:49+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:39984", "record": "RHSA-2026:39984", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-29T16:53:53Z", "date_only": false, "value": "2026-09-29T16:53:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:41062", "record": "RHSA-2026:41062", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-29T16:53:53Z", "date_only": false, "value": "2026-09-29T16:53:53+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:41062", "record": "RHSA-2026:41062", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-29T16:53:53Z", "date_only": false, "value": "2026-09-29T16:53:53+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:41062", "record": "RHSA-2026:41062", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-29T16:53:54Z", "date_only": false, "value": "2026-09-29T16:53:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-29T16:53:54Z", "date_only": false, "value": "2026-09-29T16:53:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:41063", "record": "RHSA-2026:41063", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-29T16:53:54Z", "date_only": false, "value": "2026-09-29T16:53:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-29T16:53:54Z", "date_only": false, "value": "2026-09-29T16:53:54+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-29T16:53:54Z", "date_only": false, "value": "2026-09-29T16:53:54+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:41063", "record": "RHSA-2026:41063", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-29T16:53:54Z", "date_only": false, "value": "2026-09-29T16:53:54+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-29T16:53:54Z", "date_only": false, "value": "2026-09-29T16:53:54+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:41235", "record": "RHSA-2026:41235", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-29T16:53:54Z", "date_only": false, "value": "2026-09-29T16:53:54+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:41063", "record": "RHSA-2026:41063", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-29T16:53:54Z", "date_only": false, "value": "2026-09-29T16:53:54+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:41234", "record": "RHSA-2026:41234", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-29T16:53:55Z", "date_only": false, "value": "2026-09-29T16:53:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:40425", "record": "RHSA-2026:40425", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-29T16:53:55Z", "date_only": false, "value": "2026-09-29T16:53:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:41920", "record": "RHSA-2026:41920", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-29T16:53:55Z", "date_only": false, "value": "2026-09-29T16:53:55+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:40425", "record": "RHSA-2026:40425", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-29T16:53:55Z", "date_only": false, "value": "2026-09-29T16:53:55+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:41920", "record": "RHSA-2026:41920", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-29T16:53:55Z", "date_only": false, "value": "2026-09-29T16:53:55+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:40425", "record": "RHSA-2026:40425", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-29T16:53:55Z", "date_only": false, "value": "2026-09-29T16:53:55+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:41920", "record": "RHSA-2026:41920", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-29T21:00:04Z", "date_only": false, "value": "2026-09-29T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/lM6IiPde2gp6yF9c7PeyyUE557eYgP1ySYX_5N_0Ol2vx7Y", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "05dfefc1-ce94-4bd8-8016-0536645ea134"}, {"timestamp": "2026-09-29T21:00:04Z", "date_only": false, "value": "2026-09-29T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/lM6IiPde2gp6yF9c7PeyyUE557eYgP1ySYX_5N_0Ol2vx7Y", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "22ade97e-1314-459a-b88a-36375aece6c0"}, {"timestamp": "2026-09-30T00:00:00Z", "date_only": true, "value": "2026-09-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1254", "record": "CERTFR-2026-AVI-1254", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-30T21:00:09Z", "date_only": false, "value": "2026-09-30T21:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103904", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3ae4ef3f-3724-4fab-9ec3-6f86880c5379", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Root-My-Galaxy-Payloads-S938NKSUCDZIF\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HaSiyo\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 20:22:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFirmware-specific CVE-2026-43499 and KernelSU-Next payload for Samsung Galaxy S25 Ultra SM-S938N (KOO), S938NKSUCDZIF, Android 17 / kernel 6.6.127.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103904"}, {"timestamp": "2026-09-30T21:00:09Z", "date_only": false, "value": "2026-09-30T21:00:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103904", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "e849ef5d-ae57-4769-91e2-2fb68dc67a68", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Root-My-Galaxy-Payloads-S938NKSUCDZIF\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HaSiyo\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 20:22:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nFirmware-specific CVE-2026-43499 and KernelSU-Next payload for Samsung Galaxy S25 Ultra SM-S938N (KOO), S938NKSUCDZIF, Android 17 / kernel 6.6.127.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103904"}, {"timestamp": "2026-10-01T00:00:00Z", "date_only": true, "value": "2026-10-01", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1254", "record": "CERTFR-2026-AVI-1254", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-10-01T09:00:05Z", "date_only": false, "value": "2026-10-01T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mhtzfyktRP2Ic6gZ6eJOCaW7LBPMooIx2lI9A0HJzTzOjhQ", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d4b027bc-fa45-473f-9d19-1a8100b1c34f"}, {"timestamp": "2026-10-01T09:00:05Z", "date_only": false, "value": "2026-10-01T09:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mhtzfyktRP2Ic6gZ6eJOCaW7LBPMooIx2lI9A0HJzTzOjhQ", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7b45c005-4cfa-4bc8-84f1-a2b5b56d5fed"}, {"timestamp": "2026-10-01T11:06:13Z", "date_only": false, "value": "2026-10-01T11:06:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/103949", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a9d17528-48e1-4174-8cf7-9a1fd5f275af", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #\u63d0\u6743 #Kernel #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IQOO-neo7-ghostlock-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a YUE546\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-01 08:34:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u57fa\u4e8eCVE-2026-43499\uff08ghostlock\uff09\u7684 iQOO Neo7 \u63d0\u6743\u79fb\u690d\uff0c\u5e0c\u671b\u80fd\u4e3a5.10\u7cfb\u5185\u6838\u7684\u673a\u578b\u63d0\u4f9b\u4e00\u4e9b\u53c2\u8003\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103949"}, {"timestamp": "2026-10-01T11:06:13Z", "date_only": false, "value": "2026-10-01T11:06:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/103949", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "6e2a781b-d402-4054-bfba-a4fa85c70db1", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #\u63d0\u6743 #Kernel #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IQOO-neo7-ghostlock-43499\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a YUE546\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-01 08:34:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u57fa\u4e8eCVE-2026-43499\uff08ghostlock\uff09\u7684 iQOO Neo7 \u63d0\u6743\u79fb\u690d\uff0c\u5e0c\u671b\u80fd\u4e3a5.10\u7cfb\u5185\u6838\u7684\u673a\u578b\u63d0\u4f9b\u4e00\u4e9b\u53c2\u8003\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/103949"}, {"timestamp": "2026-10-01T15:00:06Z", "date_only": false, "value": "2026-10-01T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/M05jujIsWToE4MgSdGmdNSHprqvyhSxcJ2hVbHwq7Mr5qTM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "4ee9c7b4-9682-4d32-a180-8d248523984b"}, {"timestamp": "2026-10-01T15:00:06Z", "date_only": false, "value": "2026-10-01T15:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/M05jujIsWToE4MgSdGmdNSHprqvyhSxcJ2hVbHwq7Mr5qTM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3dd53878-d94d-439e-bad8-d0ddca696725"}, {"timestamp": "2026-10-01T18:00:00Z", "date_only": false, "value": "2026-10-01T18:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20261002", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a7e90401-b9cb-4183-b0d5-91ab3f9acb35", "url": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20261002"}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": false, "value": "2026-10-02T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1254", "record": "CERTFR-2026-AVI-1254", "field": "last_revision_date"}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": false, "value": "2026-10-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1254", "record": "CERTFR-2026-AVI-1254", "field": "initial_release_date"}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": false, "value": "2026-10-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1254", "record": "CERTFR-2026-AVI-1254", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-02T00:00:08Z", "date_only": false, "value": "2026-10-02T00:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104003", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "dcc643b7-2bb3-436a-8d4c-ff5deed591c4", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a rmg-s9110-research\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yexiaoqq\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-01 23:50:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRoot My Galaxy (CVE-2026-43499) exploit-grooming research log for Samsung Galaxy S23 SM-S9110 (dm1q / android13-5.15). Reverse-engineering notes, experiment journals, and step-by-step beginner-friendly docs.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104003"}, {"timestamp": "2026-10-02T00:00:08Z", "date_only": false, "value": "2026-10-02T00:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/104003", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "fbfef1b8-058d-43f5-a522-45539f245bc2", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a rmg-s9110-research\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a yexiaoqq\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-01 23:50:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRoot My Galaxy (CVE-2026-43499) exploit-grooming research log for Samsung Galaxy S23 SM-S9110 (dm1q / android13-5.15). Reverse-engineering notes, experiment journals, and step-by-step beginner-friendly docs.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104003"}, {"timestamp": "2026-10-02T09:00:05Z", "date_only": false, "value": "2026-10-02T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/177RkuJkwXry8NfDCq80KOXeXulGQb7VLEDtfHFepQoK-2w", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "59a75dd8-3555-4c75-b4b4-afa5322b37d1"}, {"timestamp": "2026-10-02T12:00:09Z", "date_only": false, "value": "2026-10-02T12:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104056", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "b878960e-2e7f-4e12-80a2-fbcef70dacdd", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a RootMyVivo-rs\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a L-1124\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Rust\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-02 09:46:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCross-platform pure-Rust toolchain for unlock-free temporary root and KernelSU late-loading on vivo/iQOO devices (CVE-2026-43499)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104056"}, {"timestamp": "2026-10-03T03:00:05Z", "date_only": false, "value": "2026-10-03T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/tPIIW1-bVGMQRqIAHywC_LQgF4V6Z18VSekeJ8F-XbxWxJY", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "7341046a-6a86-4625-a2a7-776b92978590"}, {"timestamp": "2026-10-03T03:00:05Z", "date_only": false, "value": "2026-10-03T03:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/tPIIW1-bVGMQRqIAHywC_LQgF4V6Z18VSekeJ8F-XbxWxJY", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "d37daba8-51a2-4f4c-bf1e-a2e8b3735a38"}, {"timestamp": "2026-10-03T13:00:08Z", "date_only": false, "value": "2026-10-03T13:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104173", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "26937e47-531e-4d52-b9fc-325244a007ef", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Ghostlock-Honor70Pro\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a litianyuan-91\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-03 12:59:35\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nHonor 70 Pro privilege escalation PoC: GhostLock (CVE-2026-43499)  but could not custom KernelSU module loading\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104173"}, {"timestamp": "2026-10-03T21:00:05Z", "date_only": false, "value": "2026-10-03T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ELm8PgQpllbXA_VH21iOqLKTsdjbs5AcKNDqc-vEf4a8Tt0", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "6fd1c3a6-033b-4a20-8293-54e651b436cb"}, {"timestamp": "2026-10-03T21:00:05Z", "date_only": false, "value": "2026-10-03T21:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ELm8PgQpllbXA_VH21iOqLKTsdjbs5AcKNDqc-vEf4a8Tt0", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "3ee7bdeb-f745-49a4-aeb9-fd37654fc985"}, {"timestamp": "2026-10-05T00:00:00Z", "date_only": true, "value": "2026-10-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1286", "record": "CERTFR-2026-AVI-1286", "field": "vendor_advisories.9.published_at"}, {"timestamp": "2026-10-06T00:00:00Z", "date_only": true, "value": "2026-10-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1286", "record": "CERTFR-2026-AVI-1286", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-06T01:00:08Z", "date_only": false, "value": "2026-10-06T01:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104408", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "dfb116d2-b0ae-4d7e-85f8-ecd242c59d11", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ghostlock-rmx5085\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Nixbones\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-06 00:57:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPorting CVE-2026-43499 (GhostLock) to the Realme GT 7T (RMX5085): device profile from the phone's own boot.img, KernelSU late-load, one-tap root via Anchor, and the four calibrations that made it work\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104408"}, {"timestamp": "2026-10-06T03:00:06Z", "date_only": false, "value": "2026-10-06T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/HHFBOwnUkdC9FFpBPQ9GSZWa-aKdXtVNya_rfbWKKoOFTR0", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "c986a65a-2dd2-40bf-b212-b91ca21d7f3e"}, {"timestamp": "2026-10-06T03:00:06Z", "date_only": false, "value": "2026-10-06T03:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/HHFBOwnUkdC9FFpBPQ9GSZWa-aKdXtVNya_rfbWKKoOFTR0", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "23d23e8b-2f9c-4431-b326-4912529c4363"}, {"timestamp": "2026-10-06T09:00:04Z", "date_only": false, "value": "2026-10-06T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/O7QylDWIptZONXEuPsqIMfiYsCbRi0BZoyF_J21d4yXsw7o", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "a95db3d8-250a-46bd-85bc-702653873ce9"}, {"timestamp": "2026-10-06T09:00:04Z", "date_only": false, "value": "2026-10-06T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/O7QylDWIptZONXEuPsqIMfiYsCbRi0BZoyF_J21d4yXsw7o", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "f4fc8b5c-2a42-480a-a0a3-f0dadecc2d6f"}, {"timestamp": "2026-10-07T00:00:00Z", "date_only": true, "value": "2026-10-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1286", "record": "CERTFR-2026-AVI-1286", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-10-07T03:48:16.708Z", "date_only": false, "value": "2026-10-07T03:48:16.708872Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/te9-dev.bsky.social/post/3mxazy4icry23", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "33a55736-8326-40ef-aed7-a965a40ddca2", "content": "CVE-2026-43499-popsicle | 97 stars | 37 forks\n\nCVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k", "url": "https://bsky.app/profile/te9-dev.bsky.social/post/3mxazy4icry23"}, {"timestamp": "2026-10-07T10:13:18Z", "date_only": false, "value": "2026-10-07T10:13:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59142", "record": "RHSA-2026:59142", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-07T10:13:18Z", "date_only": false, "value": "2026-10-07T10:13:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59146", "record": "RHSA-2026:59146", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-07T10:13:18Z", "date_only": false, "value": "2026-10-07T10:13:18+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:59142", "record": "RHSA-2026:59142", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-07T10:13:18Z", "date_only": false, "value": "2026-10-07T10:13:18+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:59146", "record": "RHSA-2026:59146", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-07T10:13:18Z", "date_only": false, "value": "2026-10-07T10:13:18+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:59142", "record": "RHSA-2026:59142", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-07T10:13:18Z", "date_only": false, "value": "2026-10-07T10:13:18+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:59146", "record": "RHSA-2026:59146", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-07T10:13:19Z", "date_only": false, "value": "2026-10-07T10:13:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59148", "record": "RHSA-2026:59148", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-07T10:13:19Z", "date_only": false, "value": "2026-10-07T10:13:19+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:59148", "record": "RHSA-2026:59148", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-07T10:13:19Z", "date_only": false, "value": "2026-10-07T10:13:19+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:59148", "record": "RHSA-2026:59148", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": true, "value": "2026-10-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1286", "record": "CERTFR-2026-AVI-1286", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-10-08T03:00:05Z", "date_only": false, "value": "2026-10-08T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rKD7aTXmU8rmpJnqvlRqgqPKMURUCH8RvOSayxu8507-eEM", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "2144f07f-bf01-4338-afe3-f5b5be69ba24"}, {"timestamp": "2026-10-08T09:35:39Z", "date_only": false, "value": "2026-10-08T09:35:39Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-43499", "record": "UBUNTU-CVE-2026-43499", "field": "modified"}, {"timestamp": "2026-10-08T17:52:16Z", "date_only": false, "value": "2026-10-08T17:52:16Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 ESSA-2026:0154", "record": "ESSA-2026:0154", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-10-08T22:00:00Z", "date_only": false, "value": "2026-10-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3623", "record": "WID-SEC-W-2026-3623", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-08T22:00:00Z", "date_only": false, "value": "2026-10-08T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3623", "record": "WID-SEC-W-2026-3623", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-08T22:49:06Z", "date_only": false, "value": "2026-10-08T22:49:06+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-08T22:49:06Z", "date_only": false, "value": "2026-10-08T22:49:06+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-08T22:49:06Z", "date_only": false, "value": "2026-10-08T22:49:06+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-08T22:49:06Z", "date_only": false, "value": "2026-10-08T22:49:06+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-08T22:49:06Z", "date_only": false, "value": "2026-10-08T22:49:06+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:59143", "record": "RHSA-2026:59143", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-08T22:49:06Z", "date_only": false, "value": "2026-10-08T22:49:06+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:59145", "record": "RHSA-2026:59145", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-08T22:49:07Z", "date_only": false, "value": "2026-10-08T22:49:07+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-08T22:49:07Z", "date_only": false, "value": "2026-10-08T22:49:07+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-08T22:49:07Z", "date_only": false, "value": "2026-10-08T22:49:07+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-08T22:49:07Z", "date_only": false, "value": "2026-10-08T22:49:07+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-08T22:49:07Z", "date_only": false, "value": "2026-10-08T22:49:07+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:59147", "record": "RHSA-2026:59147", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-08T22:49:07Z", "date_only": false, "value": "2026-10-08T22:49:07+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:59149", "record": "RHSA-2026:59149", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": false, "value": "2026-10-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1286", "record": "CERTFR-2026-AVI-1286", "field": "last_revision_date"}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": false, "value": "2026-10-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1286", "record": "CERTFR-2026-AVI-1286", "field": "initial_release_date"}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": false, "value": "2026-10-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1286", "record": "CERTFR-2026-AVI-1286", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-09T08:39:13.778Z", "date_only": false, "value": "2026-10-09T08:39:13.778+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3623", "record": "WID-SEC-W-2026-3623", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-09T09:00:04Z", "date_only": false, "value": "2026-10-09T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BTAp6fvTZe-RKAsBuOx8OqMyMDgEsSSX0Me0fK3pXbKebIc", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "0e760ec3-f527-4928-8612-9e5c47875352"}, {"timestamp": "2026-10-09T09:00:04Z", "date_only": false, "value": "2026-10-09T09:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/BTAp6fvTZe-RKAsBuOx8OqMyMDgEsSSX0Me0fK3pXbKebIc", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "13a156b9-026d-4ca7-8bbd-1c7f4777cdf3"}, {"timestamp": "2026-10-09T09:41:53Z", "date_only": false, "value": "2026-10-09T09:41:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 ESSA-2026:0154", "record": "ESSA-2026:0154", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2026-10-09T09:41:53Z", "date_only": false, "value": "2026-10-09T09:41:53Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 ESSA-2026:0154", "record": "ESSA-2026:0154", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-09T18:02:07Z", "date_only": false, "value": "2026-10-09T18:02:07Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22048-1", "record": "SUSE-SU-2026:22048-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-10-09T18:02:15Z", "date_only": false, "value": "2026-10-09T18:02:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22433-1", "record": "SUSE-SU-2026:22433-1", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2026-10-09T18:02:17Z", "date_only": false, "value": "2026-10-09T18:02:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22458-1", "record": "SUSE-SU-2026:22458-1", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-10-09T18:03:28Z", "date_only": false, "value": "2026-10-09T18:03:28Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2591-1", "record": "SUSE-SU-2026:2591-1", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-10-10T08:44:55Z", "date_only": false, "value": "2026-10-10T08:44:55Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20912-1", "record": "OPENSUSE-SU-2026:20912-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-10-10T16:00:08Z", "date_only": false, "value": "2026-10-10T16:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/104896", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "8deba579-a39c-459b-bbad-e22c2d9e901e", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a oppofindN2-ghostlock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pubglite55\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 66  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 27\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-10 15:45:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104896"}, {"timestamp": "2026-10-10T16:00:08Z", "date_only": false, "value": "2026-10-10T16:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/104896", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "0a4ed292-b669-498b-b7f9-df5c8b7e137d", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a oppofindN2-ghostlock\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pubglite55\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 66  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 27\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-10 15:45:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/104896"}, {"timestamp": "2026-10-12T17:25:25Z", "date_only": false, "value": "2026-10-12T17:25:25Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22048-1", "record": "SUSE-SU-2026:22048-1", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-10-12T17:28:15Z", "date_only": false, "value": "2026-10-12T17:28:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2310-1", "record": "SUSE-SU-2026:2310-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-10-12T17:28:15Z", "date_only": false, "value": "2026-10-12T17:28:15Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2310-1", "record": "SUSE-SU-2026:2310-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-12T17:30:53Z", "date_only": false, "value": "2026-10-12T17:30:53Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2421-1", "record": "SUSE-SU-2026:2421-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-10-12T17:30:53Z", "date_only": false, "value": "2026-10-12T17:30:53Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2421-1", "record": "SUSE-SU-2026:2421-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-12T17:33:25Z", "date_only": false, "value": "2026-10-12T17:33:25Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20912-1", "record": "OPENSUSE-SU-2026:20912-1", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-10-12T17:33:25Z", "date_only": false, "value": "2026-10-12T17:33:25Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:20912-1", "record": "OPENSUSE-SU-2026:20912-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-12T20:00:00Z", "date_only": false, "value": "2026-10-12T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20261013", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "ff83fbb6-bd2d-4914-8cc6-b9e1684c3aa9", "url": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20261013"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-295-11", "record": "ICSA-26-295-11", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-295-16", "record": "ICSA-26-295-16", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-019113", "record": "SSA-019113", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-457936", "record": "SSA-457936", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-784472", "record": "SSA-784472", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "last_revision_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-295-11", "record": "ICSA-26-295-11", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-295-16", "record": "ICSA-26-295-16", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-457936", "record": "SSA-457936", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-784472", "record": "SSA-784472", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1298", "record": "CERTFR-2026-AVI-1298", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-019113", "record": "SSA-019113", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-457936", "record": "SSA-457936", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-784472", "record": "SSA-784472", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T09:42:50Z", "date_only": false, "value": "2026-10-13T09:42:50Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:39083", "record": "RHSA-2026:39083", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-10-13T18:45:33Z", "date_only": false, "value": "2026-10-13T18:45:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-13T18:45:33Z", "date_only": false, "value": "2026-10-13T18:45:33+00:00", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-13T18:45:33Z", "date_only": false, "value": "2026-10-13T18:45:33+00:00", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:38491", "record": "RHSA-2026:38491", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T20:51:18Z", "date_only": false, "value": "2026-10-13T20:51:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-13T20:51:18Z", "date_only": false, "value": "2026-10-13T20:51:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-13T20:51:18Z", "date_only": false, "value": "2026-10-13T20:51:18+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-13T20:51:18Z", "date_only": false, "value": "2026-10-13T20:51:18+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-13T20:51:18Z", "date_only": false, "value": "2026-10-13T20:51:18+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:39983", "record": "RHSA-2026:39983", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T20:51:18Z", "date_only": false, "value": "2026-10-13T20:51:18+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:40082", "record": "RHSA-2026:40082", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-15T01:19:29.734Z", "date_only": false, "value": "2026-10-15T01:19:29.734Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-43499", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T01:19:29.734Z", "date_only": false, "value": "2026-10-15T01:19:29.734Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens-SADP", "record": "CVE-2026-43499", "field": "containers.adp.2.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T02:19:34.430Z", "date_only": false, "value": "2026-10-15T02:19:34.430", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-43499", "record": "FKIE_CVE-2026-43499", "field": "lastModified"}, {"timestamp": "2026-10-15T03:35:53Z", "date_only": false, "value": "2026-10-15T03:35:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CQC6-9F34-295V", "record": "GHSA-CQC6-9F34-295V", "field": "modified"}, {"timestamp": "2026-10-15T17:01:58Z", "date_only": false, "value": "2026-10-15T17:01:58Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:39083", "record": "RHSA-2026:39083", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-10-15T17:08:02Z", "date_only": false, "value": "2026-10-15T17:08:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22048-1", "record": "SUSE-SU-2026:22048-1", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-10-15T17:08:02Z", "date_only": false, "value": "2026-10-15T17:08:02Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22048-1", "record": "SUSE-SU-2026:22048-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T06:16:13.644Z", "date_only": false, "value": "2026-10-16T06:16:13.644286Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0431", "record": "NCSC-2026-0431", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-16T06:16:13.644Z", "date_only": false, "value": "2026-10-16T06:16:13.644286Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0431", "record": "NCSC-2026-0431", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-16T06:16:13.644Z", "date_only": false, "value": "2026-10-16T06:16:13.644286Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0431", "record": "NCSC-2026-0431", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T16:06:06Z", "date_only": false, "value": "2026-10-16T16:06:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22108-1", "record": "SUSE-SU-2026:22108-1", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2026-10-16T16:06:06Z", "date_only": false, "value": "2026-10-16T16:06:06Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22108-1", "record": "SUSE-SU-2026:22108-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T16:06:12Z", "date_only": false, "value": "2026-10-16T16:06:12Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22137-1", "record": "SUSE-SU-2026:22137-1", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-10-16T16:06:12Z", "date_only": false, "value": "2026-10-16T16:06:12Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22137-1", "record": "SUSE-SU-2026:22137-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T16:06:17Z", "date_only": false, "value": "2026-10-16T16:06:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22433-1", "record": "SUSE-SU-2026:22433-1", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2026-10-16T16:06:17Z", "date_only": false, "value": "2026-10-16T16:06:17Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22433-1", "record": "SUSE-SU-2026:22433-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T16:06:18Z", "date_only": false, "value": "2026-10-16T16:06:18Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:22458-1", "record": "SUSE-SU-2026:22458-1", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-10-16T16:06:18Z", "date_only": false, "value": "2026-10-16T16:06:18Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:22458-1", "record": "SUSE-SU-2026:22458-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T16:06:50Z", "date_only": false, "value": "2026-10-16T16:06:50Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2591-1", "record": "SUSE-SU-2026:2591-1", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-10-16T16:06:50Z", "date_only": false, "value": "2026-10-16T16:06:50Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2591-1", "record": "SUSE-SU-2026:2591-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T17:15:37Z", "date_only": false, "value": "2026-10-16T17:15:37+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-16T17:15:37Z", "date_only": false, "value": "2026-10-16T17:15:37+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-16T17:15:37Z", "date_only": false, "value": "2026-10-16T17:15:37+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:40760", "record": "RHSA-2026:40760", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T17:15:38Z", "date_only": false, "value": "2026-10-16T17:15:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-16T17:15:38Z", "date_only": false, "value": "2026-10-16T17:15:38+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-16T17:15:38Z", "date_only": false, "value": "2026-10-16T17:15:38+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:40068", "record": "RHSA-2026:40068", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T22:53:02Z", "date_only": false, "value": "2026-10-16T22:53:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-16T22:53:02Z", "date_only": false, "value": "2026-10-16T22:53:02+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-16T22:53:02Z", "date_only": false, "value": "2026-10-16T22:53:02+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:39082", "record": "RHSA-2026:39082", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-16T23:22:22Z", "date_only": false, "value": "2026-10-16T23:22:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-16T23:22:22Z", "date_only": false, "value": "2026-10-16T23:22:22+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-16T23:22:22Z", "date_only": false, "value": "2026-10-16T23:22:22+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:73187", "record": "RHSA-2026:73187", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-20T09:44:44Z", "date_only": false, "value": "2026-10-20T09:44:44Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 RHSA-2026:39083", "record": "RHSA-2026:39083", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-10-20T09:44:44Z", "date_only": false, "value": "2026-10-20T09:44:44Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 RHSA-2026:39083", "record": "RHSA-2026:39083", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-20T15:18:23.625Z", "date_only": false, "value": "2026-10-20T15:18:23.625088Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-295-11", "record": "ICSA-26-295-11", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-20T15:18:25.843Z", "date_only": false, "value": "2026-10-20T15:18:25.843168Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-295-16", "record": "ICSA-26-295-16", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-21T17:23:37Z", "date_only": false, "value": "2026-10-21T17:23:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/plomens/7e050e5c4d93fce848984a34b6e33937", "record": "CVE-2026-43499", "field": "creation_timestamp", "uuid": "5e9c0732-9e81-4769-99d5-daef24a4b499", "content": "# [ROOT] [SM-F956B] [One UI 9] Locked bit-4 Galaxy Z Fold 6 \u2014 Temporary Root via CVE-2026-43499 + KernelSU-Next\n\n**Full technical report \u2014 summary version posted separately in the thread.**\n\n**No bootloader unlock. No TWRP. No downgrade. No boot-image patch.**\n\n> **\u26a0\ufe0f CRITICAL WARNING:** This exploit relies on vulnerabilities present in the September 2026 Security Patch Level (SPL). Samsung patches CVE-2026-43499 in the **October 2026 SMR**. Do not take OTA updates if you intend to test or use this method.\n\nLast verified: 2026-10-22 \u00b7 SM-F956B/DS (q6q) \u00b7 Android 17 / One UI 9 \u00b7 SPL 2026-09-05\n\n---\n\n## TL;DR\n\n* **Root works** on a locked, bit-4 Fold 6 running One UI 9, via CVE-2026-43499 (\"GhostLock\", a futex PI use-after-free).\n* The payload late-loads a **KernelSU-Next** LKM. SELinux stays **Enforcing**. No unlock, no recovery, no boot patch.\n* Root is **temporary** \u2014 a real reboot loses it. **`ksud soft-reboot`** keeps it.\n* Zygisk works via **Zygisk Next 1.5.2**. OnyxZygisk v1.09 crash-looped every app process on this build and is disabled.\n* Play Integrity BASIC still fails \u2014 cause **not proven**. \"sys_call_table detection\" is wrong for this chain.\n* Samsung fixes the bug in the **October 2026 SMR**. Block OTA before it lands.\n\n---\n\n## Device and Build (Live)\n\n```text\nModel            SM-F956B/DS (q6q, Snapdragon 8 Gen 3 for Galaxy)\nBuild            CP2A.260605.016.F956BXXU4EZIH\nOS               Android 17 / One UI 9.0.0 (90000)\nSecurity patch   2026-09-05        <- CVE-2026-43499 still unpatched\nKernel           6.1.162-android14-11-34343818-abF956BXXU4EZIH\nBootloader       locked, bit 4, stock BL, verifiedbootstate=green\nWarranty bit     0 (see caveat below)\nKG state         knox.kg.state=Error (not KG-managed)\nSELinux          Enforcing\nRoot             CVE-2026-43499 -> KernelSU-Next late-loaded LKM\nksud             3.3.0-57-gbad09b19 (uapi 4)\nManager          KernelSU-Next v3.4.2 (com.rifsxd.ksunext)\n```\n\n**Warranty-bit caveat.** The device reads `warranty_bit=0` today. Earlier phases of this project, on a patched DZI1 bootloader, reported 1. The mechanism that changed it is **not proven**. Do not assume Samsung Pay / Pass / Secure Folder work \u2014 test them on your own unit. Nothing in this write-up trips or resets the fuse; the exploit does not touch it.\n\n---\n\n## Why Bootloader Unlock is Dead\n\nOne UI 8 removed OEM-unlock across regions; One UI 9 keeps it removed and re-locks on update. On this device:\n\n* the bootloader passes `androidboot.other.locked=1`;\n* the unlock code is stripped from `abl`;\n* the rollback fuse is at **bit 4** \u2014 last unlock-capable F956B firmware was One UI 7 (bit 2);\n* a bit-2 abl is rejected with `SW_REV -5` by Odin and Thor blupdate.\n\nNo toggle, no downgrade, no abl swap. That is a bootloader property, not something a root tool can patch around.\n\n---\n\n## What Works / What Does Not\n\n```text\nsu root (uid=0, u:r:ksu:s0)              YES\nSELinux Enforcing                       YES\nsurvives ksud soft-reboot               YES\nsurvives a real reboot                  NO  (re-run the exploit)\nbootloader unlock / TWRP / RW system    NO  (hardware)\npersistent root                         NO\nZygisk / PIF                            YES (Zygisk Next 1.5.2, PIF loaded)\nPlay Integrity BASIC                    NO  (cause unproven)\nmodule content mounts                   untested (metamodule is idle, not broken)\n```\n\n---\n\n## How the Chain Actually Works\n\n```text\nadb shell\n  -> payload (v4)                      kernel write primitive, ~50% per attempt\n  -> pompomsu-helper (UMH context)\n  -> exec ksud as /system/bin/logcat   DEFEX-safe bind mount in a private mnt namespace\n  -> ksud late-load\n       stage_daemon()  -> copies ksud to /data/adb/ksud\n       load kernelsu.ko via patched init_module\n                        (manual relocation, so vermagic is NOT enforced)\n       finish_install -> late-load stage -> system.prop\n       -> metamodule mount -> post-mount -> service -> boot-completed\n```\n\nThe bind-mount-over-logcat step is the DEFEX bypass: the exec path looks like a system binary, so the LSM hook does not block it. The exploit never patches `sys_call_table`, and it never disables DEFEX \u2014 it steps around it.\n\n**Why soft reboot matters.** Late-load does **not** run the kernel-side post-fs-data hook. `ksud soft-reboot` replays the userspace stages:\n\n```text\nemulated-soft-reboot -> stop -> post-fs-data -> start -> services\n-> wait sys.boot_completed -> boot-completed\n```\n\nConsequences: every module's `service.sh runs a second time` (duplicate daemons if a module is not single-instance), and module scripts/system.prop replay, but the kernel is not re-initialised. This is a property of ksud, not of any one module.\n\n---\n\n## The Device-Specific Fix: MTE Tag 15\n\nThe q6q payload (`unreliablecode/Root-My-Galaxy-Payloads`, PR #395) worked offline but its `mm_struct` leak failed deterministically on hardware. The fix is one line: the MTE tag loop was `tag < 15`, so it never tested tag `15` (the canonical untagged form), while `mte_enabled=0` was hardcoded. Building with `mte_enabled=1` and tags `0..15` made the leak succeed in about 12 seconds, and the write stage landed on a retry.\n\nExpected failure mode during retries: Qualcomm watchdog reboot. Harmless, just run it again.\n\n---\n\n## Run Recipe\n\n```bash\nadb push payload        /data/local/tmp/\nadb push pompomsu-helper /data/local/tmp/\nadb push ksud           /data/local/tmp/\nadb shell chmod 755 /data/local/tmp/payload /data/local/tmp/pompomsu-helper /data/local/tmp/ksud\n\nadb shell \"cd /data/local/tmp && \\\n  GHOSTLOCK_HOME=/data/local/tmp \\\n  GHOSTLOCK_HELPER_PATH=/data/local/tmp/pompomsu-helper \\\n  GHOSTLOCK_KSUD_PATH=/data/local/tmp/ksud \\\n  ./payload\"\n```\n\nSuccess = `su` works. Automate the retry loop (the payload rotates a timing index in `.ghostlock_fops_delay_index` each run). I do not redistribute the payload; build it from the upstream fork plus the tag-loop change above.\n\n---\n\n## Live Evidence (This Unit)\n\n```bash\n$ su -c id\nuid=0(root) gid=0(root) groups=0(root) context=u:r:ksu:s0\n\n$ getenforce\nEnforcing\n\n$ /data/adb/ksud -V\nksud 3.3.0-57-gbad09b19 (uapi: 4)\n\n$ grep -i kernelsu /proc/modules\nkernelsu 327680 2 - Live 0x0000000000000000 (O)\n\n$ getprop ro.boot.warranty_bit\n0\n$ getprop ro.boot.verifiedbootstate\ngreen\n```\n\n---\n\n## Modules\n\n```text\nzygisksu (Zygisk Next 1.5.2)   enabled  \u2014 zygote injected, PIF loaded\nplayintegrityfix v4.9-inject-s  enabled  \u2014 1/1 modules preloaded\ntricky_store v1.4.1             enabled\nhybrid_mount 6.2.5              enabled  \u2014 metamodule, phase: ready\nbindhosts v2.1.5 mode 2         enabled  \u2014 194,806 hosts blocked\nonyxzygisk v1.09                DISABLED \u2014 SIGSEGV crash-looped every app process\n```\n\nbindhosts mount verified in init (`/proc/1/mountinfo`) and in Chrome/Securify processes. 0 active module mounts is correct \u2014 every module is `mode: ignore` (nothing to overlay), not a fault.\n\n---\n\n## Modules: What \"0 Mounts\" Actually Means\n\nThe earlier story \u2014 \"module mounting is structurally impossible after late-load\" \u2014 was wrong, and I want to correct it publicly.\n\nKernelSU core contains **no mount code**. Mounting is delegated to the active metamodule. Here that is `hybrid_mount 6.2.5`; its ledger is healthy (`phase: ready`), and the mount count is 0 because every installed module is `mode: ignore` \u2014 there is nothing to overlay. PIF is a **Zygisk module** and injects without a module mount at all.\n\nWhat is genuinely untested is a module that ships real `system/` content (a hosts module is the obvious test). \"0 mounts\" is not the same as \"mounts are broken\".\n\n---\n\n## Play Integrity: Honest Status\n\n* SM-F956B is on Google's certified list.\n* PIF (v4.9-inject-s) injects into DroidGuard's process and rewrites Build fields when Zygisk is active.\n* TrickyStore v1.4.1 is installed; it affects key attestation (DEVICE/STRONG), not BASIC.\n* BASIC still fails. No cause is proven. A kernel-side signal is a hypothesis: `/proc/modules` is world-readable and lists `kernelsu`. That is a lead, not a finding. No primary DroidGuard analysis supports it.\n\n**Do not run `ksud unload`** as an A/B test. It is linked to a documented kernel panic (KernelSU-Next #1642). The only safe discriminator is a real reboot \u2014 root disappears anyway \u2014 check stock, re-root, check again. It is confounded because PIF disappears too. State that honestly.\n\n---\n\n## Stability Note: OnyxZygisk v1.09 App Crash Loop (2026-10-22)\n\nThis is worth its own section because it looks like \"the manager is broken\" and it is not.\n\n**Symptom.** Every newly forked app process died with:\n\n```text\nFatal signal 11 (SIGSEGV), code 1, fault addr 0x841e0\n#01 pc ... /data/adb/onyxzygisk/lib64/libzygisk.so\nApplicationExitInfo: reason=5 (APP CRASH(NATIVE))\n```\n\nGMS, Bluetooth, the eUICC service, Settings and the KernelSU manager all crashed the same way. The manager was the visible one because it was being launched repeatedly.\n\n**What did not fix it:** clearing the manager's data, force-stopping it, or reinstalling it. The crash happens during injection, before any app code runs.\n\n**What did:**\n\n```bash\nsu -c 'touch /data/adb/modules/onyxzygisk/disable'\nsu -c 'touch /data/adb/onyxzygisk/injection_disabled'\nsu -c '/data/adb/ksud soft-reboot'\n```\n\nKilling the monitor processes alone was not enough \u2014 the running zygote had already loaded libzygisk, so every fork inherited it. The soft reboot gave a clean zygote, the module is disabled, and the crash loop stopped.\n\n**Replacement.** Zygisk Next 1.5.2 was already installed but disabled. It was re-enabled instead of Onyx:\n\n```bash\nsu -c 'rm -f /data/adb/modules/zygisksu/disable'\nsu -c '/data/adb/ksud soft-reboot'\n```\n\nZN starts in the soft-reboot service stage, injects zygote and preloads PIF:\n\n```text\nzn-daemon64: Zygisk Next Daemon 1.5.2-864-a4a72ce-release\nzn-daemon64: loaded 64bit zygisk module playintegrityfix\nzn-daemon64: ** inject success for 26917\nzn-daemon64: preloaded 1/1 modules\n```\n\nAfter the switch, Settings, Chrome and the manager stayed up with no app crashes, and root survived the soft reboot. PIF is loaded; Play Integrity itself was not re-tested because no checker is installed on this unit.\n\n**Takeaway.** OnyxZygisk v1.09 is not usable on this EZIH build right now; Zygisk Next 1.5.2 is. The Onyx trigger is not proven \u2014 its monitor had re-initialised at 01:19 and the crashes began the same minute \u2014 but the failure is reproducible enough to avoid it.\n\n---\n\n## Hardening: Block the OTA, Skip the Debloat Myths\n\nThe October 2026 SMR patches CVE-2026-43499. This unit is on the September patch, so the window is open. Auto-update was already off (`ota_disable_automatic_update=1`); I also disabled the two update agents:\n\n```bash\nadb shell su -c 'pm disable-user --user 0 com.wssyncmldm'\nadb shell su -c 'pm disable-user --user 0 com.sec.android.soagent'\n```\n\nBoth packages are labelled **\"Software update\"** on-device (`FotaAgent.apk` and `SOAgent77.apk`). They are the OTA client and its staging companion. They are **not** security scanners, and disabling them does not hide root.\n\nA correction that keeps circulating: those two packages are recommended in the Root-My-Galaxy thread to block auto-updates. That is the real reason to disable them here. Disabling them does not fix Play Integrity and does not reduce root detection.\n\n* Do not disable `com.samsung.android.kgclient`. It is Knox Guard (\"Device Services\"). Disabling it can force the device into KG lock mode. This unit is not KG-managed, but there is no upside.\n* Disabling `diagmonagent`, `daagent`, `kmxservice`, `knox.attestation` or `sm.devicesecurity` is privacy/battery only. No root or PI effect. Knox is already in an unclear state on this unit.\n* All `pm disable-user` changes persist across reboot and are reversible with `pm enable`.\n\n---\n\n## Do Not Do\n\n* Do not install the October 2026 SMR.\n* Do not run `ksud unload` (panic risk, KernelSU-Next #1642).\n* Do not `ksud insmod` a prebuilt SUSFS module with a different KMI (6.1.166 vs 6.1.162) \u2014 it panicked here.\n* Do not enable \"Block kernel modules\" in the manager \u2014 root **is** kernelsu.ko.\n* Do not full-reboot casually; root is gone and must be re-exploited.\n* Do not expect mounts to be visible to Chrome/GMS until `umount_modules` is disabled per app.\n* Do not publish \"sys_call_table detection\" as the PI cause. It is not how this chain works.\n* Do not install Vector 2.2 / AFWall+ as KernelSU modules \u2014 #878 duplicate-daemon bug on this build, and AFWall+ is an APK not a module zip.\n\n---\n\n## Corrections to My Earlier Draft\n\n* ksud is `3.3.0-57-gbad09b19`, not 3.4.0. `33294` is the versionCode the driver advertises, not the binary version.\n* ZygiskNext 1.5.2 was disabled in the v2 draft; OnyxZygisk v1.09 replaced it, then crash-looped. ZN is now re-enabled and Onyx is disabled.\n* Module mount wall was a misdiagnosis. Mounting is metamodule-owned; 0 mounts is the correct state when every module is mode: ignore.\n* PIF never injects was wrong \u2014 it does inject when Zygisk is active.\n* The warrant bit was reported as 1 in the first draft; the device currently reports 0. Mechanism unproven.\n* soagent is a security agent was wrong. It is the software-update agent.\n* PIF/TrickyStore/LSPosed cannot work was too strong. PIF works; mounts are a separate layer.\n\n---\n\n## Credits\n\n**Exploit chain:** NebuSec (IonStack / CVE-2026-43499) \u00b7 BuSung-dev (Root-My-Galaxy) \u00b7 unreliablecode (q6q payload, PR #395) \u00b7 StarMaker765 (S928B-EZIF sibling proof) \u00b7 KernelSnitch (TU Graz IAIK) for the leak primitive.\n\n**KernelSU:** KernelSU-Next team, including the Samsung KDP/RKP/DEFEX work (PR #1507 family) and the samsung-lateload branch.\n\n**Prior art referenced:** salvo_giangri (XDA 4751904, unlock-removal reverse engineering) \u00b7 \u767d\u3044\u718a (XDA 4761732, keep-unlock abl swap) \u00b7 jrkruse (BL_PATCHER / USERDATA_AIO) \u00b7 LeeGarChat (RO2RW) \u00b7 TheAirBlow (Thor) \u00b7 YuKongA (ghostlock-app) \u00b7 rushiranpise (Root-My-Galaxy-Next) \u00b7 kuuky29 (UniRoot V5 / DirtyFrag).\n\n**This device:** the MTE tag-15 fix and, as far as I am aware, the first F956B/EZIH confirmation.\n\n---\n\n## Changelog\n\n* 2026-10-22 \u2014 v2: corrected the mount diagnosis, the ksud version, the Zygisk provider and the PI mechanism; added the OnyxZygisk crash-loop fix, the OTA block and the debloat corrections.\n* 2026-10-21 \u2014 v1: first working root on F956B/EZIH.\n\n---\n\n**Disclaimer:** this is a research write-up for your own hardware. Bootloader unlocking and Knox behaviour are your risk. A locked bootloader is not a challenge to bypass \u2014 the exploit only works because this specific build is unpatched, and Samsung is fixing it.", "url": "https://gist.github.com/plomens/7e050e5c4d93fce848984a34b6e33937"}, {"timestamp": "2026-10-22T06:00:00Z", "date_only": false, "value": "2026-10-22T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-295-11", "record": "ICSA-26-295-11", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-22T06:00:00Z", "date_only": false, "value": "2026-10-22T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-295-16", "record": "ICSA-26-295-16", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-22T06:00:00Z", "date_only": false, "value": "2026-10-22T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-295-11", "record": "ICSA-26-295-11", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-22T06:00:00Z", "date_only": false, "value": "2026-10-22T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-295-16", "record": "ICSA-26-295-16", "field": "document.tracking.current_release_date"}]}