https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 11:27:36 +0000 https://vulnerability.circl.lu/sighting/32aa0953-3504-4b85-a3f9-619264061b05/export {"uuid": "32aa0953-3504-4b85-a3f9-619264061b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://t.me/hackeronereports/405", "content": "\ud83c\udfaf New Report #3255707: Windows Device Names Still Allow Path Traversal in UNC Paths After CVE-2025-27210 Fix\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: oblivionsage\n\u2b50\ufe0f Reputation: 248\n\ud83d\udee0 State: informative\n\ud83d\udcbc Team: Node.js\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-07-16\n\u23f0 Disclosed: 2025-07-28 18:56:39\n\ud83d\udcdd Summary: null\n\ud83d\udcc2 Report JSON File: 3255707\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.499136Z"} {"uuid": "32aa0953-3504-4b85-a3f9-619264061b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://t.me/hackeronereports/405", "content": "\ud83c\udfaf New Report #3255707: Windows Device Names Still Allow Path Traversal in UNC Paths After CVE-2025-27210 Fix\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: oblivionsage\n\u2b50\ufe0f Reputation: 248\n\ud83d\udee0 State: informative\n\ud83d\udcbc Team: Node.js\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-07-16\n\u23f0 Disclosed: 2025-07-28 18:56:39\n\ud83d\udcdd Summary: null\n\ud83d\udcc2 Report JSON File: 3255707\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.499136Z"} https://vulnerability.circl.lu/sighting/32aa0953-3504-4b85-a3f9-619264061b05/export Tue, 15 Sep 2026 00:00:28 +0000 https://vulnerability.circl.lu/sighting/e6b47f6b-efb5-48c9-861c-8d5d43bf3caa/export {"uuid": "e6b47f6b-efb5-48c9-861c-8d5d43bf3caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/hackeronereports/244", "content": "\ud83c\udfaf New Report #3090123: insecure deserilize object leads to RCE On Sitecore (CVE-\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588-27218)\n\ud83d\udd3aSeverity: Critical\n\ud83d\udc7d Reporter: reinhardtthe\n\ud83d\udcbc Team: Mars\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-04-12\n\u23f0 Disclosed: 2025-05-12 16:04:46\n\ud83d\udcdd Summary: This critical vulnerability involved an insecure deserialization issue in Sitecore implementation, which was assigned CVE-2025-27218. The vulnerability allowed remote code execution through unsanitized user input in the ThumbnailsAccessToken header. The vulnerability was remediated by removing public access to the affected site, which was then protected behind Cloudflare WAF.\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.206400Z"} {"uuid": "e6b47f6b-efb5-48c9-861c-8d5d43bf3caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/hackeronereports/244", "content": "\ud83c\udfaf New Report #3090123: insecure deserilize object leads to RCE On Sitecore (CVE-\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588-27218)\n\ud83d\udd3aSeverity: Critical\n\ud83d\udc7d Reporter: reinhardtthe\n\ud83d\udcbc Team: Mars\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-04-12\n\u23f0 Disclosed: 2025-05-12 16:04:46\n\ud83d\udcdd Summary: This critical vulnerability involved an insecure deserialization issue in Sitecore implementation, which was assigned CVE-2025-27218. The vulnerability allowed remote code execution through unsanitized user input in the ThumbnailsAccessToken header. The vulnerability was remediated by removing public access to the affected site, which was then protected behind Cloudflare WAF.\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.206400Z"} https://vulnerability.circl.lu/sighting/e6b47f6b-efb5-48c9-861c-8d5d43bf3caa/export Tue, 15 Sep 2026 00:00:28 +0000 https://vulnerability.circl.lu/sighting/19a888f2-ae4d-414d-937a-5c6ff25f91b8/export {"uuid": "19a888f2-ae4d-414d-937a-5c6ff25f91b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/216", "content": "\ud83c\udfaf New Report #3013913: [CVE-2025-27219 Denial of Service in CGI::Cookie.parse](https://hackerone.com/reports/3013913)\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: lio346\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-26\n\u23f0 Disclosed: 2025-04-27 14:27:52\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in the CGI::Cookie.parse method of the Ruby cgi gem. The vulnerability was caused by the method taking super-linear time to parse a maliciously crafted cookie string. This could have led to service disruptions. The vulnerability was assigned the CVE identifier CVE-2025-27219.\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:27.982065Z"} {"uuid": "19a888f2-ae4d-414d-937a-5c6ff25f91b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/216", "content": "\ud83c\udfaf New Report #3013913: [CVE-2025-27219 Denial of Service in CGI::Cookie.parse](https://hackerone.com/reports/3013913)\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: lio346\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-26\n\u23f0 Disclosed: 2025-04-27 14:27:52\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in the CGI::Cookie.parse method of the Ruby cgi gem. The vulnerability was caused by the method taking super-linear time to parse a maliciously crafted cookie string. This could have led to service disruptions. The vulnerability was assigned the CVE identifier CVE-2025-27219.\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:27.982065Z"} https://vulnerability.circl.lu/sighting/19a888f2-ae4d-414d-937a-5c6ff25f91b8/export Tue, 15 Sep 2026 00:00:27 +0000 https://vulnerability.circl.lu/sighting/9a7ac58f-ceeb-47a7-89c3-2f327bd25ee3/export {"uuid": "9a7ac58f-ceeb-47a7-89c3-2f327bd25ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:00:03.205168Z"} {"uuid": "9a7ac58f-ceeb-47a7-89c3-2f327bd25ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:00:03.205168Z"} https://vulnerability.circl.lu/sighting/9a7ac58f-ceeb-47a7-89c3-2f327bd25ee3/export Mon, 14 Sep 2026 10:00:03 +0000 https://vulnerability.circl.lu/sighting/c4950275-fccd-44de-a16c-07a0b22dfa3b/export {"uuid": "c4950275-fccd-44de-a16c-07a0b22dfa3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://t.me/hackeronereports/405", "content": "\ud83c\udfaf New Report #3255707: Windows Device Names Still Allow Path Traversal in UNC Paths After CVE-2025-27210 Fix\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: oblivionsage\n\u2b50\ufe0f Reputation: 248\n\ud83d\udee0 State: informative\n\ud83d\udcbc Team: Node.js\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-07-16\n\u23f0 Disclosed: 2025-07-28 18:56:39\n\ud83d\udcdd Summary: null\n\ud83d\udcc2 Report JSON File: 3255707\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:05.173512Z"} {"uuid": "c4950275-fccd-44de-a16c-07a0b22dfa3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://t.me/hackeronereports/405", "content": "\ud83c\udfaf New Report #3255707: Windows Device Names Still Allow Path Traversal in UNC Paths After CVE-2025-27210 Fix\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: oblivionsage\n\u2b50\ufe0f Reputation: 248\n\ud83d\udee0 State: informative\n\ud83d\udcbc Team: Node.js\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-07-16\n\u23f0 Disclosed: 2025-07-28 18:56:39\n\ud83d\udcdd Summary: null\n\ud83d\udcc2 Report JSON File: 3255707\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:05.173512Z"} https://vulnerability.circl.lu/sighting/c4950275-fccd-44de-a16c-07a0b22dfa3b/export Mon, 14 Sep 2026 06:00:05 +0000 https://vulnerability.circl.lu/sighting/88752d32-b3e2-413f-be5c-6ec2e498b08c/export {"uuid": "88752d32-b3e2-413f-be5c-6ec2e498b08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/hackeronereports/244", "content": "\ud83c\udfaf New Report #3090123: insecure deserilize object leads to RCE On Sitecore (CVE-\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588-27218)\n\ud83d\udd3aSeverity: Critical\n\ud83d\udc7d Reporter: reinhardtthe\n\ud83d\udcbc Team: Mars\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-04-12\n\u23f0 Disclosed: 2025-05-12 16:04:46\n\ud83d\udcdd Summary: This critical vulnerability involved an insecure deserialization issue in Sitecore implementation, which was assigned CVE-2025-27218. The vulnerability allowed remote code execution through unsanitized user input in the ThumbnailsAccessToken header. The vulnerability was remediated by removing public access to the affected site, which was then protected behind Cloudflare WAF.\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.871227Z"} {"uuid": "88752d32-b3e2-413f-be5c-6ec2e498b08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/hackeronereports/244", "content": "\ud83c\udfaf New Report #3090123: insecure deserilize object leads to RCE On Sitecore (CVE-\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588-27218)\n\ud83d\udd3aSeverity: Critical\n\ud83d\udc7d Reporter: reinhardtthe\n\ud83d\udcbc Team: Mars\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-04-12\n\u23f0 Disclosed: 2025-05-12 16:04:46\n\ud83d\udcdd Summary: This critical vulnerability involved an insecure deserialization issue in Sitecore implementation, which was assigned CVE-2025-27218. The vulnerability allowed remote code execution through unsanitized user input in the ThumbnailsAccessToken header. The vulnerability was remediated by removing public access to the affected site, which was then protected behind Cloudflare WAF.\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.871227Z"} https://vulnerability.circl.lu/sighting/88752d32-b3e2-413f-be5c-6ec2e498b08c/export Mon, 14 Sep 2026 06:00:04 +0000 https://vulnerability.circl.lu/sighting/74229fa8-a58d-41f1-bec8-be4d49e2bd20/export {"uuid": "74229fa8-a58d-41f1-bec8-be4d49e2bd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/216", "content": "\ud83c\udfaf New Report #3013913: [CVE-2025-27219 Denial of Service in CGI::Cookie.parse](https://hackerone.com/reports/3013913)\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: lio346\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-26\n\u23f0 Disclosed: 2025-04-27 14:27:52\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in the CGI::Cookie.parse method of the Ruby cgi gem. The vulnerability was caused by the method taking super-linear time to parse a maliciously crafted cookie string. This could have led to service disruptions. The vulnerability was assigned the CVE identifier CVE-2025-27219.\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.590734Z"} {"uuid": "74229fa8-a58d-41f1-bec8-be4d49e2bd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/216", "content": "\ud83c\udfaf New Report #3013913: [CVE-2025-27219 Denial of Service in CGI::Cookie.parse](https://hackerone.com/reports/3013913)\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: lio346\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-26\n\u23f0 Disclosed: 2025-04-27 14:27:52\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in the CGI::Cookie.parse method of the Ruby cgi gem. The vulnerability was caused by the method taking super-linear time to parse a maliciously crafted cookie string. This could have led to service disruptions. The vulnerability was assigned the CVE identifier CVE-2025-27219.\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.590734Z"} https://vulnerability.circl.lu/sighting/74229fa8-a58d-41f1-bec8-be4d49e2bd20/export Mon, 14 Sep 2026 06:00:04 +0000 https://vulnerability.circl.lu/sighting/264a9f84-e723-4bce-8451-63ff2fe3cc51/export {"uuid": "264a9f84-e723-4bce-8451-63ff2fe3cc51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:04.703220Z"} {"uuid": "264a9f84-e723-4bce-8451-63ff2fe3cc51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:04.703220Z"} https://vulnerability.circl.lu/sighting/264a9f84-e723-4bce-8451-63ff2fe3cc51/export Sat, 12 Sep 2026 10:00:04 +0000 https://vulnerability.circl.lu/sighting/bedb5f9e-7d06-43e6-a73b-c0848d2a5f9e/export {"uuid": "bedb5f9e-7d06-43e6-a73b-c0848d2a5f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101875", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-27636-RCE-in-Apache-Camel\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AC8999\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 00:00:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-27636 PoC written in Python\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:53.308609Z"} {"uuid": "bedb5f9e-7d06-43e6-a73b-c0848d2a5f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101875", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-27636-RCE-in-Apache-Camel\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AC8999\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 00:00:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-27636 PoC written in Python\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:53.308609Z"} https://vulnerability.circl.lu/sighting/bedb5f9e-7d06-43e6-a73b-c0848d2a5f9e/export Fri, 11 Sep 2026 00:00:53 +0000 https://vulnerability.circl.lu/sighting/3e8d32ec-d642-4312-8bcf-28465d093a8d/export {"uuid": "3e8d32ec-d642-4312-8bcf-28465d093a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101876", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-27636-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AC8999\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 23:33:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC written in python for CVE-2025-27636\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:53.265824Z"} {"uuid": "3e8d32ec-d642-4312-8bcf-28465d093a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101876", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-27636-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AC8999\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 23:33:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC written in python for CVE-2025-27636\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:53.265824Z"} https://vulnerability.circl.lu/sighting/3e8d32ec-d642-4312-8bcf-28465d093a8d/export Fri, 11 Sep 2026 00:00:53 +0000