<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 30 Jun 2026 00:55:12 +0000</lastBuildDate>
    <item>
      <title>f4fafc5c-379c-4f80-92d2-81ea1e2ba079</title>
      <link>https://vulnerability.circl.lu/sighting/f4fafc5c-379c-4f80-92d2-81ea1e2ba079/export</link>
      <description>{"uuid": "f4fafc5c-379c-4f80-92d2-81ea1e2ba079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-32202", "type": "seen", "source": "https://bsky.app/profile/kttkbrands.bsky.social/post/3mp4szg3cxd2l", "content": "&amp;gt; NTLM ECHO \u2014 CVE-2026-32202 -- $34\n\n\n\nAI pipeline. Hacker-culture-native. Trend to product in &amp;lt;24h.\n\nkttkstore.com/products/ntlm-echo-cve-2026-32202.html?utm_source=mastodon&amp;amp;utm_medium=organic&amp;amp;utm_campaign=launch_ntlm-echo-cve-2026-3220\u2026\n\nhttps://kttkstore.com/products/ntlm-echo-cve-2026-32202.html", "creation_timestamp": "2026-06-25T16:11:31.902255Z"}</description>
      <content:encoded>{"uuid": "f4fafc5c-379c-4f80-92d2-81ea1e2ba079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-32202", "type": "seen", "source": "https://bsky.app/profile/kttkbrands.bsky.social/post/3mp4szg3cxd2l", "content": "&amp;gt; NTLM ECHO \u2014 CVE-2026-32202 -- $34\n\n\n\nAI pipeline. Hacker-culture-native. Trend to product in &amp;lt;24h.\n\nkttkstore.com/products/ntlm-echo-cve-2026-32202.html?utm_source=mastodon&amp;amp;utm_medium=organic&amp;amp;utm_campaign=launch_ntlm-echo-cve-2026-3220\u2026\n\nhttps://kttkstore.com/products/ntlm-echo-cve-2026-32202.html", "creation_timestamp": "2026-06-25T16:11:31.902255Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f4fafc5c-379c-4f80-92d2-81ea1e2ba079/export</guid>
      <pubDate>Thu, 25 Jun 2026 16:11:31 +0000</pubDate>
    </item>
    <item>
      <title>ea37086a-e50f-451a-b53a-cc2e18bd1a9c</title>
      <link>https://vulnerability.circl.lu/sighting/ea37086a-e50f-451a-b53a-cc2e18bd1a9c/export</link>
      <description>{"uuid": "ea37086a-e50f-451a-b53a-cc2e18bd1a9c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/51e6fa4f-6d2d-4115-bd66-5870b74a2a52", "content": "", "creation_timestamp": "2026-06-23T14:03:38.693944Z"}</description>
      <content:encoded>{"uuid": "ea37086a-e50f-451a-b53a-cc2e18bd1a9c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/51e6fa4f-6d2d-4115-bd66-5870b74a2a52", "content": "", "creation_timestamp": "2026-06-23T14:03:38.693944Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ea37086a-e50f-451a-b53a-cc2e18bd1a9c/export</guid>
      <pubDate>Tue, 23 Jun 2026 14:03:38 +0000</pubDate>
    </item>
    <item>
      <title>d7a02ebf-3cf0-4c0e-9940-8c0ee29243ec</title>
      <link>https://vulnerability.circl.lu/sighting/d7a02ebf-3cf0-4c0e-9940-8c0ee29243ec/export</link>
      <description>{"uuid": "d7a02ebf-3cf0-4c0e-9940-8c0ee29243ec", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3a90376b-1cdb-4339-b317-b17c36233a2b", "content": "", "creation_timestamp": "2026-06-19T12:45:12.530384Z"}</description>
      <content:encoded>{"uuid": "d7a02ebf-3cf0-4c0e-9940-8c0ee29243ec", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3a90376b-1cdb-4339-b317-b17c36233a2b", "content": "", "creation_timestamp": "2026-06-19T12:45:12.530384Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d7a02ebf-3cf0-4c0e-9940-8c0ee29243ec/export</guid>
      <pubDate>Fri, 19 Jun 2026 12:45:12 +0000</pubDate>
    </item>
    <item>
      <title>474682e4-f213-48c3-b016-64e6ed2e81ed</title>
      <link>https://vulnerability.circl.lu/sighting/474682e4-f213-48c3-b016-64e6ed2e81ed/export</link>
      <description>{"uuid": "474682e4-f213-48c3-b016-64e6ed2e81ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-32202", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/116737451993730791", "content": "Broken official patches for Windows Shell Spoofing Vulnerability (CVE-2026-32202)https://0patch.com/blog/micropatches-released-for-windows-shell-spoofing-vulnerability-cve-2026-32202", "creation_timestamp": "2026-06-12T13:49:20.407150Z"}</description>
      <content:encoded>{"uuid": "474682e4-f213-48c3-b016-64e6ed2e81ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-32202", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/116737451993730791", "content": "Broken official patches for Windows Shell Spoofing Vulnerability (CVE-2026-32202)https://0patch.com/blog/micropatches-released-for-windows-shell-spoofing-vulnerability-cve-2026-32202", "creation_timestamp": "2026-06-12T13:49:20.407150Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/474682e4-f213-48c3-b016-64e6ed2e81ed/export</guid>
      <pubDate>Fri, 12 Jun 2026 13:49:20 +0000</pubDate>
    </item>
    <item>
      <title>37eec13a-f9c7-4567-9912-255384bfbd39</title>
      <link>https://vulnerability.circl.lu/sighting/37eec13a-f9c7-4567-9912-255384bfbd39/export</link>
      <description>{"uuid": "37eec13a-f9c7-4567-9912-255384bfbd39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-32202", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mn2sjusew623", "content": "\ud83d\udccc Microsoft Confirms Active Exploitation of Windows Shell Spoofing Vulnerability CVE-2026-32202 https://www.cyberhub.blog/article/24969-microsoft-confirms-active-exploitation-of-windows-shell-spoofing-vulnerability-cve-2026-32202", "creation_timestamp": "2026-05-30T10:07:08.016153Z"}</description>
      <content:encoded>{"uuid": "37eec13a-f9c7-4567-9912-255384bfbd39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-32202", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mn2sjusew623", "content": "\ud83d\udccc Microsoft Confirms Active Exploitation of Windows Shell Spoofing Vulnerability CVE-2026-32202 https://www.cyberhub.blog/article/24969-microsoft-confirms-active-exploitation-of-windows-shell-spoofing-vulnerability-cve-2026-32202", "creation_timestamp": "2026-05-30T10:07:08.016153Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/37eec13a-f9c7-4567-9912-255384bfbd39/export</guid>
      <pubDate>Sat, 30 May 2026 10:07:08 +0000</pubDate>
    </item>
    <item>
      <title>21c6194c-22a5-42e3-93e1-077325b1dbbe</title>
      <link>https://vulnerability.circl.lu/sighting/21c6194c-22a5-42e3-93e1-077325b1dbbe/export</link>
      <description>{"uuid": "21c6194c-22a5-42e3-93e1-077325b1dbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmtgmvb2sj2d", "content": "Proofpoint reports 12 CVE-2026 flaws under active exploitation, with opportunistic actors reusing familiar tactics. AI-assisted discovery is increasing new flaws, but abuse is already seen in CVE-2026-21509 and CVE-2026-32202. #CVE2026 #APT28", "creation_timestamp": "2026-05-27T11:45:26.356311Z"}</description>
      <content:encoded>{"uuid": "21c6194c-22a5-42e3-93e1-077325b1dbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmtgmvb2sj2d", "content": "Proofpoint reports 12 CVE-2026 flaws under active exploitation, with opportunistic actors reusing familiar tactics. AI-assisted discovery is increasing new flaws, but abuse is already seen in CVE-2026-21509 and CVE-2026-32202. #CVE2026 #APT28", "creation_timestamp": "2026-05-27T11:45:26.356311Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/21c6194c-22a5-42e3-93e1-077325b1dbbe/export</guid>
      <pubDate>Wed, 27 May 2026 11:45:26 +0000</pubDate>
    </item>
    <item>
      <title>50f8d18c-5520-47ed-b039-8c9c9cfa5d27</title>
      <link>https://vulnerability.circl.lu/sighting/50f8d18c-5520-47ed-b039-8c9c9cfa5d27/export</link>
      <description>{"uuid": "50f8d18c-5520-47ed-b039-8c9c9cfa5d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "seen", "source": "https://bsky.app/profile/patchdayalert.bsky.social/post/3mlp4cxasyc2q", "content": "A CVSS 4.3 can still be the ticket that matters. CVE-2026-32202 had a low-looking score, a vendor flag gap, and APT28 already using it. Triage by score alone loses this one. patchdayalert.com/blog/cve-202...", "creation_timestamp": "2026-05-13T01:05:05.741909Z"}</description>
      <content:encoded>{"uuid": "50f8d18c-5520-47ed-b039-8c9c9cfa5d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "seen", "source": "https://bsky.app/profile/patchdayalert.bsky.social/post/3mlp4cxasyc2q", "content": "A CVSS 4.3 can still be the ticket that matters. CVE-2026-32202 had a low-looking score, a vendor flag gap, and APT28 already using it. Triage by score alone loses this one. patchdayalert.com/blog/cve-202...", "creation_timestamp": "2026-05-13T01:05:05.741909Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/50f8d18c-5520-47ed-b039-8c9c9cfa5d27/export</guid>
      <pubDate>Wed, 13 May 2026 01:05:05 +0000</pubDate>
    </item>
    <item>
      <title>ae0afd47-61aa-457a-8457-65a4471d5e26</title>
      <link>https://vulnerability.circl.lu/sighting/ae0afd47-61aa-457a-8457-65a4471d5e26/export</link>
      <description>{"uuid": "ae0afd47-61aa-457a-8457-65a4471d5e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mlh5r2sm6s2x", "content": "\u7c73\u5f53\u5c40\u3001\u60aa\u7528\u30ea\u30b9\u30c8\u306b\u8106\u5f31\u60273\u4ef6\u3092\u8ffd\u52a0 - \u6700\u77ed\u30675\u67083\u65e5\u5bfe\u5fdc\u671f\u9650\n\n\u7c73\u5f53\u5c40\u306f\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f3\u4ef6\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\u7279\u306b\u300ccPanel &amp;amp; WHM\u300d\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u306f\u3001\u65e9\u6025\u306a\u5bfe\u7b56\u304c\u6c42\u3081\u3089\u308c\u3066\u3044\u308b\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u304c\u73fe\u5730\u6642\u95932026\u5e744\u670828\u65e5\u306b2\u4ef6\u300130\u65e5\u306b1\u4ef6\u306e\u8106\u5f31\u6027\u3092\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u8ffd\u52a0\u3057\u305f\u3082\u306e\u3002\n\n...\n\n\u540c\u670828\u65e5\u306b\u306f2\u4ef6\u306e\u8106\u5f31\u6027\u3092\u8ffd\u52a0\u3057\u305f\u3002\u300cCVE-2026-32202\u300d\u306f\u300cWindows Shell\u300d\u306b\u304a\u3051\u308b\u4fdd\u8b77\u6a5f\u69cb\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3002\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u3053\u3068\u3067\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b...", "creation_timestamp": "2026-05-09T21:09:34.380157Z"}</description>
      <content:encoded>{"uuid": "ae0afd47-61aa-457a-8457-65a4471d5e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mlh5r2sm6s2x", "content": "\u7c73\u5f53\u5c40\u3001\u60aa\u7528\u30ea\u30b9\u30c8\u306b\u8106\u5f31\u60273\u4ef6\u3092\u8ffd\u52a0 - \u6700\u77ed\u30675\u67083\u65e5\u5bfe\u5fdc\u671f\u9650\n\n\u7c73\u5f53\u5c40\u306f\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f3\u4ef6\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\u7279\u306b\u300ccPanel &amp;amp; WHM\u300d\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u306f\u3001\u65e9\u6025\u306a\u5bfe\u7b56\u304c\u6c42\u3081\u3089\u308c\u3066\u3044\u308b\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u304c\u73fe\u5730\u6642\u95932026\u5e744\u670828\u65e5\u306b2\u4ef6\u300130\u65e5\u306b1\u4ef6\u306e\u8106\u5f31\u6027\u3092\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u8ffd\u52a0\u3057\u305f\u3082\u306e\u3002\n\n...\n\n\u540c\u670828\u65e5\u306b\u306f2\u4ef6\u306e\u8106\u5f31\u6027\u3092\u8ffd\u52a0\u3057\u305f\u3002\u300cCVE-2026-32202\u300d\u306f\u300cWindows Shell\u300d\u306b\u304a\u3051\u308b\u4fdd\u8b77\u6a5f\u69cb\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3002\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u3053\u3068\u3067\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b...", "creation_timestamp": "2026-05-09T21:09:34.380157Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ae0afd47-61aa-457a-8457-65a4471d5e26/export</guid>
      <pubDate>Sat, 09 May 2026 21:09:34 +0000</pubDate>
    </item>
    <item>
      <title>b773bc31-17cf-43d8-9b27-62612d6dd878</title>
      <link>https://vulnerability.circl.lu/sighting/b773bc31-17cf-43d8-9b27-62612d6dd878/export</link>
      <description>{"uuid": "b773bc31-17cf-43d8-9b27-62612d6dd878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "seen", "source": "https://t.me/codeby_sec/10098", "content": "Windows - \u0412 \u0421 \u0401!\n\n\ud83c\udf10 Microsoft \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-32202 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows Shell, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 SMB-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e. \u042d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-21510, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n\ud83d\udd78 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 spoofing (CVSS 4.3), \u043d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0438\u0441\u043a \u0432\u044b\u0448\u0435 \u0438\u0437-\u0437\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043b\u0430\u0442\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u0438. \u041f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u043f\u0430\u043f\u043a\u0438 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c LNK-\u0444\u0430\u0439\u043b\u043e\u043c (\u044f\u0440\u043b\u044b\u043a\u043e\u043c) Windows Shell \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 UNC-\u043f\u0443\u0442\u044c \u0432 \u0444\u0430\u0439\u043b\u0435, \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044f SMB-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 NTLMv2-\u0445\u0435\u0448 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0431\u0435\u0437 \u043a\u043b\u0438\u043a\u0430 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0444\u0430\u0439\u043b\u0430 \u2014 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u043f\u0430\u043f\u043a\u0443.\n\n\ud83e\uddff \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e CVE-2026-21510 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0423\u043a\u0440\u0430\u0438\u043d\u0443 \u0438 \u0415\u0421 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430; \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b RCE, \u043d\u043e \u043e\u0441\u0442\u0430\u0432\u0438\u043b \u0432\u0435\u043a\u0442\u043e\u0440 \u043a\u0440\u0430\u0436\u0438 credentials. \u041f\u043e\u043b\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u0448\u043b\u043e 14 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u0432 Patch Tuesday (KB5083769 \u0434\u043b\u044f Windows 11 24H2/25H2), \u043d\u043e Microsoft 27 \u0430\u043f\u0440\u0435\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0442\u0430\u0442\u0443\u0441, \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0432 exploitation \u0432 wild. 28 \u0430\u043f\u0440\u0435\u043b\u044f CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE \u0432 KEV-\u043a\u0430\u0442\u0430\u043b\u043e\u0433.\n\n\u2197\ufe0f \u0412\u0435\u043a\u0442\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-32202 \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0438 UNC-\u043f\u0443\u0442\u0435\u0439 \u0432 Windows Shell \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u043f\u0430\u043f\u043a\u0438 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c LNK-\u0444\u0430\u0439\u043b\u043e\u043c (\u044f\u0440\u043b\u044b\u043a\u043e\u043c), \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 SMB-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430. \u042d\u0442\u043e zero-click \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439: \u0436\u0435\u0440\u0442\u0432\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u043f\u0430\u043f\u043a\u0443 \u0432 \u041f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u0435, \u0447\u0442\u043e\u0431\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043b\u0430 NTLM-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440: \n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a\u0438: \n1\ufe0f\u20e3 \u0414\u043e\u0441\u0442\u0430\u0432\u043a\u0430 payload: \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442 LNK-\u0444\u0430\u0439\u043b \u0441 UNC-\u043f\u0443\u0442\u0451\u043c \u0432\u0438\u0434\u0430 \\\\server\\share\\file.lnk \u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0435 \u2014 \u0447\u0435\u0440\u0435\u0437 email-\u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 SMB-\u0448\u0430\u0440 \u0438\u043b\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0440\u0435\u0441\u0443\u0440\u0441.\n2\ufe0f\u20e3 \u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435: \u0416\u0435\u0440\u0442\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0430\u043f\u043a\u0443 \u0432 \u041f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u0435; Windows Shell \u043f\u0430\u0440\u0441\u0438\u0442 LNK \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0435\u0437\u043e\u043b\u0432\u0438\u0442 UNC-\u043f\u0443\u0442\u044c, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044f SMB-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 server \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n3\ufe0f\u20e3 \u041a\u0440\u0430\u0436\u0430 NTLMv2-\u0445\u0435\u0448\u0430: \u0421\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 NTLMv2-\u0447\u0435\u043b\u043b\u0435\u043d\u0434\u0436/\u0440\u0435\u0441\u043f\u043e\u043d\u0441 (\u0445\u0435\u0448 \u043f\u0430\u0440\u043e\u043b\u044f), \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044f \u043a\u043b\u0438\u043a\u0430 \u043f\u043e \u0444\u0430\u0439\u043b\u0443 \u2014 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0432\u044b\u0437\u043e\u0432.\n4\ufe0f\u20e3 \u041f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f: \u0425\u0435\u0448 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f relay-\u0430\u0442\u0430\u043a\u0438 (NTLM relay \u043d\u0430 DC \u0434\u043b\u044f DCSync \u0438\u043b\u0438 lateral movement), \u043e\u0444\u0444\u043b\u0430\u0439\u043d brute-force \u0438\u043b\u0438 Pass-the-Hash\n\n\u2b07\ufe0f \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows KB5083769, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SMBv1 \u0438 \u0441\u043f\u0440\u044f\u0442\u0430\u0442\u044c\u0441\u044f \u043f\u043e\u0434 \u043e\u0434\u0435\u044f\u043b\u043e  \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c UNC/LNK-\u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u0435\n\n#windows #cve #smb #lnk\n\n\ud83d\udd17 \u0412\u0441\u0435 \u043d\u0430\u0448\u0438 \u043a\u0430\u043d\u0430\u043b\u044b \ud83d\udd01 \u0412\u0441\u0435 \u043d\u0430\u0448\u0438 \u0447\u0430\u0442\u044b \ud83e\udea7 \u0414\u043b\u044f \u0441\u0432\u044f\u0437\u0438 \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u043c", "creation_timestamp": "2026-05-07T16:02:14.000000Z"}</description>
      <content:encoded>{"uuid": "b773bc31-17cf-43d8-9b27-62612d6dd878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "seen", "source": "https://t.me/codeby_sec/10098", "content": "Windows - \u0412 \u0421 \u0401!\n\n\ud83c\udf10 Microsoft \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-32202 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Windows Shell, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 SMB-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e. \u042d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-21510, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2026 \u0433\u043e\u0434\u0430.\n\n\ud83d\udd78 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 spoofing (CVSS 4.3), \u043d\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0438\u0441\u043a \u0432\u044b\u0448\u0435 \u0438\u0437-\u0437\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043b\u0430\u0442\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u0438. \u041f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u043f\u0430\u043f\u043a\u0438 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c LNK-\u0444\u0430\u0439\u043b\u043e\u043c (\u044f\u0440\u043b\u044b\u043a\u043e\u043c) Windows Shell \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 UNC-\u043f\u0443\u0442\u044c \u0432 \u0444\u0430\u0439\u043b\u0435, \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044f SMB-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 NTLMv2-\u0445\u0435\u0448 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0431\u0435\u0437 \u043a\u043b\u0438\u043a\u0430 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0444\u0430\u0439\u043b\u0430 \u2014 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u043f\u0430\u043f\u043a\u0443.\n\n\ud83e\uddff \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e CVE-2026-21510 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0423\u043a\u0440\u0430\u0438\u043d\u0443 \u0438 \u0415\u0421 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430; \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u0439 \u043f\u0430\u0442\u0447 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b RCE, \u043d\u043e \u043e\u0441\u0442\u0430\u0432\u0438\u043b \u0432\u0435\u043a\u0442\u043e\u0440 \u043a\u0440\u0430\u0436\u0438 credentials. \u041f\u043e\u043b\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u0448\u043b\u043e 14 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u0432 Patch Tuesday (KB5083769 \u0434\u043b\u044f Windows 11 24H2/25H2), \u043d\u043e Microsoft 27 \u0430\u043f\u0440\u0435\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0442\u0430\u0442\u0443\u0441, \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0432 exploitation \u0432 wild. 28 \u0430\u043f\u0440\u0435\u043b\u044f CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE \u0432 KEV-\u043a\u0430\u0442\u0430\u043b\u043e\u0433.\n\n\u2197\ufe0f \u0412\u0435\u043a\u0442\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-32202 \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0438 UNC-\u043f\u0443\u0442\u0435\u0439 \u0432 Windows Shell \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u043f\u0430\u043f\u043a\u0438 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c LNK-\u0444\u0430\u0439\u043b\u043e\u043c (\u044f\u0440\u043b\u044b\u043a\u043e\u043c), \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 SMB-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430. \u042d\u0442\u043e zero-click \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439: \u0436\u0435\u0440\u0442\u0432\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u043f\u0430\u043f\u043a\u0443 \u0432 \u041f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u0435, \u0447\u0442\u043e\u0431\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043b\u0430 NTLM-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440: \n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a\u0438: \n1\ufe0f\u20e3 \u0414\u043e\u0441\u0442\u0430\u0432\u043a\u0430 payload: \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442 LNK-\u0444\u0430\u0439\u043b \u0441 UNC-\u043f\u0443\u0442\u0451\u043c \u0432\u0438\u0434\u0430 \\\\server\\share\\file.lnk \u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u043f\u0430\u043f\u043a\u0435 \u2014 \u0447\u0435\u0440\u0435\u0437 email-\u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 SMB-\u0448\u0430\u0440 \u0438\u043b\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0440\u0435\u0441\u0443\u0440\u0441.\n2\ufe0f\u20e3 \u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435: \u0416\u0435\u0440\u0442\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0430\u043f\u043a\u0443 \u0432 \u041f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a\u0435; Windows Shell \u043f\u0430\u0440\u0441\u0438\u0442 LNK \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0440\u0435\u0437\u043e\u043b\u0432\u0438\u0442 UNC-\u043f\u0443\u0442\u044c, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044f SMB-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 server \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n3\ufe0f\u20e3 \u041a\u0440\u0430\u0436\u0430 NTLMv2-\u0445\u0435\u0448\u0430: \u0421\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 NTLMv2-\u0447\u0435\u043b\u043b\u0435\u043d\u0434\u0436/\u0440\u0435\u0441\u043f\u043e\u043d\u0441 (\u0445\u0435\u0448 \u043f\u0430\u0440\u043e\u043b\u044f), \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044f \u043a\u043b\u0438\u043a\u0430 \u043f\u043e \u0444\u0430\u0439\u043b\u0443 \u2014 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0432\u044b\u0437\u043e\u0432.\n4\ufe0f\u20e3 \u041f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f: \u0425\u0435\u0448 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f relay-\u0430\u0442\u0430\u043a\u0438 (NTLM relay \u043d\u0430 DC \u0434\u043b\u044f DCSync \u0438\u043b\u0438 lateral movement), \u043e\u0444\u0444\u043b\u0430\u0439\u043d brute-force \u0438\u043b\u0438 Pass-the-Hash\n\n\u2b07\ufe0f \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows KB5083769, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SMBv1 \u0438 \u0441\u043f\u0440\u044f\u0442\u0430\u0442\u044c\u0441\u044f \u043f\u043e\u0434 \u043e\u0434\u0435\u044f\u043b\u043e  \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c UNC/LNK-\u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u0435\n\n#windows #cve #smb #lnk\n\n\ud83d\udd17 \u0412\u0441\u0435 \u043d\u0430\u0448\u0438 \u043a\u0430\u043d\u0430\u043b\u044b \ud83d\udd01 \u0412\u0441\u0435 \u043d\u0430\u0448\u0438 \u0447\u0430\u0442\u044b \ud83e\udea7 \u0414\u043b\u044f \u0441\u0432\u044f\u0437\u0438 \u0441 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u043c", "creation_timestamp": "2026-05-07T16:02:14.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b773bc31-17cf-43d8-9b27-62612d6dd878/export</guid>
      <pubDate>Thu, 07 May 2026 16:02:14 +0000</pubDate>
    </item>
    <item>
      <title>01444aff-02d3-44da-b912-cfc5437f8aec</title>
      <link>https://vulnerability.circl.lu/sighting/01444aff-02d3-44da-b912-cfc5437f8aec/export</link>
      <description>{"uuid": "01444aff-02d3-44da-b912-cfc5437f8aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3ml5su4t3d624", "content": "CISA warns of active exploitation of Windows Shell zero-day vulnerability CVE-2026-32202. Organizations urged to apply patches immediately. #CyberSecurity #WindowsVulnerability #CISAAlert Link: thedailytechfeed.com/critical-zer...", "creation_timestamp": "2026-05-06T04:00:27.690016Z"}</description>
      <content:encoded>{"uuid": "01444aff-02d3-44da-b912-cfc5437f8aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-32202", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3ml5su4t3d624", "content": "CISA warns of active exploitation of Windows Shell zero-day vulnerability CVE-2026-32202. Organizations urged to apply patches immediately. #CyberSecurity #WindowsVulnerability #CISAAlert Link: thedailytechfeed.com/critical-zer...", "creation_timestamp": "2026-05-06T04:00:27.690016Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/01444aff-02d3-44da-b912-cfc5437f8aec/export</guid>
      <pubDate>Wed, 06 May 2026 04:00:27 +0000</pubDate>
    </item>
  </channel>
</rss>
