{"vulnerability": "2026-19", "sightings": [{"uuid": "852ea495-3433-4982-81db-3bdcdeb2b226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1994", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf7yscbiz22h", "content": "", "creation_timestamp": "2026-02-19T16:20:58.276246Z"}, {"uuid": "ef1d331b-5fcb-4db0-93fa-5399ab72e6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1945", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg7h7d64uv2u", "content": "", "creation_timestamp": "2026-03-04T04:31:19.356330Z"}, {"uuid": "72eb285e-8c8c-460e-a12a-6d2e78a51d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1980", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg7hibm4kz2x", "content": "", "creation_timestamp": "2026-03-04T04:36:20.173771Z"}, {"uuid": "66223152-fb13-4dc7-ad01-c051aca277ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1937", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mf4k5rfaio2x", "content": "", "creation_timestamp": "2026-02-18T07:20:58.111188Z"}, {"uuid": "8a408c33-a103-4634-aa42-c6b4fa4b750f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1988", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116068517992447814", "content": "", "creation_timestamp": "2026-02-14T10:30:33.635877Z"}, {"uuid": "f8659cda-b0de-4fd8-8d53-fce7ce45ab23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1988", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3messv5sdeb2h", "content": "", "creation_timestamp": "2026-02-14T10:30:35.430404Z"}, {"uuid": "4dab42ba-4799-4985-bbdd-5b6edc4f5d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1937", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116090459262209792", "content": "", "creation_timestamp": "2026-02-18T07:30:30.748256Z"}, {"uuid": "13ac66ae-6b4d-4182-91b2-0fb18e7cd65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1937", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mf4kova4s525", "content": "", "creation_timestamp": "2026-02-18T07:30:32.464874Z"}, {"uuid": "44c9c67e-5263-439f-a05a-df330a933e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1937", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mf4ksi7yvj2q", "content": "", "creation_timestamp": "2026-02-18T07:32:32.680880Z"}, {"uuid": "59f29e56-ad1e-4d28-a885-b0f67e49ad85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1902", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgguj34uut2v", "content": "", "creation_timestamp": "2026-03-07T03:18:06.858228Z"}, {"uuid": "666923a7-be38-44cc-a946-f4a271ada6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1994", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mffjijm6eq2m", "content": "", "creation_timestamp": "2026-02-21T21:03:03.447546Z"}, {"uuid": "4153972c-c460-437d-a092-491e770b663f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1981", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mggwpnlpxe2u", "content": "", "creation_timestamp": "2026-03-07T03:57:32.305042Z"}, {"uuid": "62e9dce1-acc7-4b87-b095-20cd5c7e9d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1916", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfoezmuju42h", "content": "", "creation_timestamp": "2026-02-25T09:37:05.118590Z"}, {"uuid": "7cfff7d1-35e2-42f4-a337-d0e036a96889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1929", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfof3dsrvs2h", "content": "", "creation_timestamp": "2026-02-25T09:38:02.938640Z"}, {"uuid": "74aa4a9e-ff93-447f-8cf9-ba6488851ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1916", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfofcn3xjv2k", "content": "", "creation_timestamp": "2026-02-25T09:42:07.644071Z"}, {"uuid": "44458b55-f2cd-451e-ad2b-01ab37119170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1929", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfog5ienmq2x", "content": "", "creation_timestamp": "2026-02-25T09:57:08.594123Z"}, {"uuid": "30ed7b39-dad5-416d-a871-f77a57146afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1994", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116096121651199027", "content": "", "creation_timestamp": "2026-02-19T07:30:32.284026Z"}, {"uuid": "4404c643-8d6d-44c2-b66a-c5ca6c574d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1994", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mf735tuyvq2n", "content": "", "creation_timestamp": "2026-02-19T07:30:34.587277Z"}, {"uuid": "d59c9829-d56b-4504-ad08-e15a2f9d3c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1965", "type": "seen", "source": "https://mastodon.social/users/bagder/statuses/116209232848968463", "content": "", "creation_timestamp": "2026-03-11T06:56:16.465608Z"}, {"uuid": "e17886b0-61ee-479d-afb3-18258cdb5fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1916", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfogfbqrbe2c", "content": "", "creation_timestamp": "2026-02-25T10:01:30.565975Z"}, {"uuid": "ef1fb4f4-d667-4b65-ad35-55c7ea16303b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1929", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfogeuqhmc2v", "content": "", "creation_timestamp": "2026-02-25T10:01:16.821641Z"}, {"uuid": "bbb5a4d1-2c00-43f7-8891-8dd570d2d644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1988", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mesi63vgu72g", "content": "", "creation_timestamp": "2026-02-14T07:18:44.112984Z"}, {"uuid": "1c752c36-39e7-455e-a279-3b1f0807059e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1965", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mgtwpmo6wf2y", "content": "", "creation_timestamp": "2026-03-12T08:02:07.462428Z"}, {"uuid": "147e76f6-7c35-4c13-8b45-efdb5fc1ba71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1965", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mgtwpnplhc2d", "content": "", "creation_timestamp": "2026-03-12T08:02:08.585636Z"}, {"uuid": "e282f25e-546e-4002-9144-ec9893fa7d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1947", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116231073126882425", "content": "", "creation_timestamp": "2026-03-15T03:30:33.677100Z"}, {"uuid": "fd059919-b21c-4e56-ae21-11864941d5eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1965", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mhdgyeaii22s", "content": "", "creation_timestamp": "2026-03-18T12:03:19.080924Z"}, {"uuid": "76a7430d-f247-4aa5-8f30-13722dd30b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1961", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhxtm4mvff2t", "content": "", "creation_timestamp": "2026-03-26T14:42:19.122866Z"}, {"uuid": "1d866aec-ee89-4419-851c-b8c3c38cc8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1969", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhq264g4iw2o", "content": "", "creation_timestamp": "2026-03-23T12:18:27.433170Z"}, {"uuid": "4c3c4b10-a26c-4c4f-964e-c35e1b9ed9f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1947", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116234139193218069", "content": "", "creation_timestamp": "2026-03-15T16:30:20.491217Z"}, {"uuid": "8ab5d70e-4c3b-45d1-8bd3-94c60516c427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1995", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mi264ootpj22", "content": "", "creation_timestamp": "2026-03-27T12:55:52.169147Z"}, {"uuid": "b5caa758-9384-4410-9e3f-fd97b206a02e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1986", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwwau2siz27", "content": "", "creation_timestamp": "2026-03-26T05:57:05.836439Z"}, {"uuid": "e64a9ff7-38a3-4dc1-874d-ac4380d32180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1965", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "06da8e55-ce47-4464-8fe9-0f9a693186c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1961", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mi2h4hgqp52s", "content": "", "creation_timestamp": "2026-03-27T15:36:47.879043Z"}, {"uuid": "9daf1718-3b2b-4b52-a02d-4c7b7cd02316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1961", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyqp42p5b2h", "content": "", "creation_timestamp": "2026-03-26T23:22:58.165364Z"}, {"uuid": "c2c099c5-9cfa-4c8b-8ae2-e28adfbfd383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1993", "type": "seen", "source": "https://bsky.app/profile/secqube.com/post/3mhndukbn3d22", "content": "", "creation_timestamp": "2026-03-22T10:34:04.578696Z"}, {"uuid": "eb80fc38-9d61-4d47-a99d-6eb1cbf5858d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1965", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "8f7024ba-20ad-48e0-b378-f539cec61300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1995", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mi6fe3r6es2g", "content": "", "creation_timestamp": "2026-03-29T05:15:56.554580Z"}, {"uuid": "2b2d5714-8134-45ae-87c3-5276f00f5fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1958", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhqd4gktwy2n", "content": "", "creation_timestamp": "2026-03-23T14:58:34.563522Z"}, {"uuid": "b75eff22-23de-428a-9897-6f388e8bbda1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1958", "type": "seen", "source": "https://cert.pl/en/posts/2026/03/CVE-2026-1958/", "content": "", "creation_timestamp": "2026-03-23T10:55:00.000000Z"}, {"uuid": "b0cde3b5-370d-498f-88a0-da0c0ce11902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1924", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj4aaogmjc2s", "content": "", "creation_timestamp": "2026-04-10T02:04:24.386556Z"}, {"uuid": "3d44f79c-711c-42c3-88df-ea80158c4105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1924", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mj4tailig62r", "content": "", "creation_timestamp": "2026-04-10T07:44:20.416946Z"}, {"uuid": "d156accf-48e0-4e2b-b184-8639bcde1df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1965", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mkn4vufiap2k", "content": "\ud83d\udd17 CVE : CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7009, CVE-2026-7168, CVE-2024-11053, CVE-2026-1965, CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7009, CVE-2026-7168", "creation_timestamp": "2026-04-29T12:45:08.630678Z"}, {"uuid": "4f7eabad-d752-4336-a550-368e22bc5029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1924", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjuvqr6gdd2c", "content": "", "creation_timestamp": "2026-04-19T21:33:06.908322Z"}, {"uuid": "e8d6e11b-eeba-4c7d-ba92-c30b5b21eda5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1930", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk3koddyex2p", "content": "", "creation_timestamp": "2026-04-22T13:03:32.154234Z"}, {"uuid": "de59ff3d-30da-4f0c-8db4-399454789952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1913", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk3laa6wof2r", "content": "", "creation_timestamp": "2026-04-22T13:13:32.485483Z"}, {"uuid": "7a01897c-ba3b-4b06-892a-2c2059b18dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1949", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mk7wcyzbd22n", "content": "", "creation_timestamp": "2026-04-24T06:42:35.993475Z"}, {"uuid": "cc7b6837-ce7c-43a5-9fd0-4cb2921ef584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1951", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116458509219616758", "content": "", "creation_timestamp": "2026-04-24T07:30:27.708320Z"}, {"uuid": "995bce9b-4160-49f6-8224-c8c1f217a828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1951", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mk7yyn3gto2v", "content": "", "creation_timestamp": "2026-04-24T07:30:29.463841Z"}, {"uuid": "863f5b2f-1702-4e20-bf2a-9165857ed68f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1949", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mka2fuf5pv23", "content": "", "creation_timestamp": "2026-04-24T07:55:46.569802Z"}, {"uuid": "0b4f2bf3-fb05-42fa-9035-7e3034da49e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1951", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mka3h3cidd2n", "content": "", "creation_timestamp": "2026-04-24T08:14:21.538491Z"}, {"uuid": "cef6fc25-6af4-48be-b14f-198107ccaa12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1952", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mka3hcifxf2t", "content": "", "creation_timestamp": "2026-04-24T08:14:28.976612Z"}, {"uuid": "b172dcee-7d46-4ac8-b50e-0a88688d3d0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1950", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mka3hjof4t2n", "content": "", "creation_timestamp": "2026-04-24T08:14:36.952125Z"}, {"uuid": "52dd5183-707a-4b11-a065-97c13f4763fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1952", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116458863177154548", "content": "", "creation_timestamp": "2026-04-24T09:00:29.853136Z"}, {"uuid": "71d6c28e-3412-4842-b2d8-a7c0570b534f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-1952", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mka5zm5ra62y", "content": "", "creation_timestamp": "2026-04-24T09:00:31.302537Z"}, {"uuid": "9f4ce402-8319-4b66-8c4c-f0aa8b8e77c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1930", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkagkip72a24", "content": "", "creation_timestamp": "2026-04-24T11:33:06.941246Z"}, {"uuid": "c6488c1b-5dea-4451-ae2f-a91460ffc21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1923", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkajvrseyu2s", "content": "", "creation_timestamp": "2026-04-24T12:33:07.032183Z"}, {"uuid": "beebcf1c-1f07-4658-9f68-74ee92c14048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1913", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkatxnvegv2q", "content": "", "creation_timestamp": "2026-04-24T15:33:07.038531Z"}, {"uuid": "f5d557c4-e38c-435a-8221-2a3712cc2864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1937", "type": "published-proof-of-concept", "source": "Telegram/56SNjB68nyULYTdkaeIILQI4ytkQLoACBGmTDoXIf258Id4", "content": "", "creation_timestamp": "2026-04-18T11:00:12.000000Z"}, {"uuid": "b3c103cd-d3ad-4b60-932d-675cd73c86e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1937", "type": "published-proof-of-concept", "source": "Telegram/O7yR2b4OLQp6kid0WdGHPQvQVIbLyZOFm8IdlAgSGDL0FUM", "content": "", "creation_timestamp": "2026-04-18T15:00:07.000000Z"}, {"uuid": "0fbec10b-6a12-4a5d-9eb5-12d12f4223b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1949", "type": "seen", "source": "Telegram/wW_QtDkhRnA9qn3zMxBPWcdzUosuSeXfPe_xeyw8Vo0UIcA", "content": "", "creation_timestamp": "2026-04-24T07:15:43.000000Z"}, {"uuid": "a9ca9020-2120-4476-bf87-f2c44d61b78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1951", "type": "published-proof-of-concept", "source": "Telegram/X1JyBiiNx_oSYu-ldDRrQFjaq89QLca8O12-lN-DTEtiPeU", "content": "", "creation_timestamp": "2026-04-24T09:16:19.000000Z"}, {"uuid": "bbca3269-b9ad-48d6-81bf-75059a4ac1ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1950", "type": "published-proof-of-concept", "source": "Telegram/X1JyBiiNx_oSYu-ldDRrQFjaq89QLca8O12-lN-DTEtiPeU", "content": "", "creation_timestamp": "2026-04-24T09:16:19.000000Z"}, {"uuid": "5cfc38c6-f766-4a90-999f-7207a86b2ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1949", "type": "published-proof-of-concept", "source": "Telegram/X1JyBiiNx_oSYu-ldDRrQFjaq89QLca8O12-lN-DTEtiPeU", "content": "", "creation_timestamp": "2026-04-24T09:16:19.000000Z"}, {"uuid": "2d18cc66-8832-4225-a5f0-0f4caa8e7fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1952", "type": "published-proof-of-concept", "source": "Telegram/X1JyBiiNx_oSYu-ldDRrQFjaq89QLca8O12-lN-DTEtiPeU", "content": "", "creation_timestamp": "2026-04-24T09:16:19.000000Z"}, {"uuid": "ec76d45e-3ebe-407d-8f5f-6895e89b9d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1982", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dyvqkny6lwujo", "content": "CVE-2026-1982 - Persian Elementor (\u0627\u0644\u0645\u0646\u062a\u0648\u0631 \u0641\u0627\u0631\u0633\u06cc)\nCVE ID : CVE-2026-1982\n \n Published : July 30, 2026, 3:16 a.m. | 28\u00a0minutes ago\n \n Description : The Persian Elementor (\u0627\u0644\u0645\u0646\u062a\u0648\u0631 \u0641\u0627\u0631\u0633\u06cc) plugin for WordPress is vulnerable to Price Manipulation in all versions up to, and includin...", "creation_timestamp": "2026-07-30T04:08:19.914599Z"}, {"uuid": "4660d750-d82d-4cfd-80c8-2a26987d8523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19313", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muabsjixgd25", "content": "CVE-2026-19313 - fireware os\nThe core software that controls WatchGuard firewalls can be tricked by specially crafted network traffic, allowing an outsider to run their own programs on the device. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firewareos #watchguard #CVE #infosec", "creation_timestamp": "2026-08-29T16:20:10.876097Z"}, {"uuid": "580d3a12-5319-4077-8204-c943ab1398e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19315", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muabskywa22m", "content": "CVE-2026-19315 - fireware os\nThe iked component of WatchGuard Fireware OS can be tricked by specially crafted network traffic, allowing an external attacker to run any code on the device without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firewareos #watchguard #CVE #infosec", "creation_timestamp": "2026-08-29T16:20:14.892807Z"}, {"uuid": "0d4a9aa2-3465-42e5-8bc1-f40720ca5f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19318", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muaelxz5dm2j", "content": "CVE-2026-19318 - fireware os\nThe WatchGuard Fireware operating system's iked component can be tricked by specially formatted network messages to run any code an attacker wants. This can happen without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#firewareos #watchguard #CVE #infosec", "creation_timestamp": "2026-08-29T17:10:05.958358Z"}, {"uuid": "f589f2f6-9188-44c2-8c72-c3aa772db81a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19745", "type": "seen", "source": "Telegram/25UzGBv5U41Up4gIz_3r2lNykNtWwaYPpQSQB5sUlEcEi44", "content": "", "creation_timestamp": "2026-08-29T23:00:03.938060Z"}, {"uuid": "8e761574-c8df-446d-a8e3-6a5ba5d79b5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1921", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mldx5bfdxt2g", "content": "CVE-2026-1921 loco-translate (CVSS Score 4.9) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-08T14:33:07.520786Z"}, {"uuid": "16b84df9-c550-42fb-86bc-19577b55f7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1951", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mllxtybizq2s", "content": "\ud83d\udccc CVE-2026-1951 - Delta Electronics AS320T has no checking of the length of the buffer with the directory name\n\n vulnerability. https://www.cyberhub.blog/cves/CVE-2026-1951", "creation_timestamp": "2026-05-11T19:07:07.600694Z"}, {"uuid": "1f3806cd-7a38-4641-a11a-0efbd620ba67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1951", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mllxtybizq2s", "content": "\ud83d\udccc CVE-2026-1951 - Delta Electronics AS320T has no checking of the length of the buffer with the directory name\n\n vulnerability. https://www.cyberhub.blog/cves/CVE-2026-1951", "creation_timestamp": "2026-05-11T19:07:07.616126Z"}, {"uuid": "fe5e3ae5-628e-4fc4-8469-0b4a3ef836ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1950", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mllzjmqk7c2h", "content": "\ud83d\udccc CVE-2026-1950 - Delta Electronics AS320T has \nNo checking of the length of the buffer with the file name vulnerability. https://www.cyberhub.blog/cves/CVE-2026-1950", "creation_timestamp": "2026-05-11T19:37:07.794589Z"}, {"uuid": "98d91d44-42a8-401c-923e-5a73c284517e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1950", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mllzjmqk7c2h", "content": "\ud83d\udccc CVE-2026-1950 - Delta Electronics AS320T has \nNo checking of the length of the buffer with the file name vulnerability. https://www.cyberhub.blog/cves/CVE-2026-1950", "creation_timestamp": "2026-05-11T19:37:07.792345Z"}, {"uuid": "8ae4bb33-5600-444a-ad75-1bfebedfaf82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1934", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlp5v3jg5j2c", "content": "CVE-2026-1934 motors-car-dealership-classified-listings (CVSS Score 4.3) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-13T01:33:06.191058Z"}, {"uuid": "c26ed7e9-055e-4a08-b2e4-62e61a930bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/CyberDispatch/2585", "content": "Critical GitLab vulnerability could let unauthenticated attackers delete public projects.\n\nCVE-2026-19478 affects self-managed CE and EE under certain conditions. Fixes are in 19.2.4, 19.1.6, 19.0.8, and 18.11.11.", "creation_timestamp": "2026-08-30T00:00:38.512419Z"}, {"uuid": "278e2ad6-09fd-4e2b-9bdd-ee83f0591753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://t.me/CyberDispatch/2640", "content": "Critical NetScaler flaw can bypass authentication on certain Gateway and AAA configurations.\n\nCitrix patched CVE-2026-19490 (CVSS 9.3). Exposure depends on the NetScaler version and configuration, with SAML required in some cases.", "creation_timestamp": "2026-08-30T00:00:38.748391Z"}, {"uuid": "79d86236-995e-4ced-a22f-6bd1b038b3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/CyberDispatch/2636", "content": "Attackers are exploiting a GitLab flaw days after disclosure.\n\nCVE-2026-19478 lets unauthenticated attackers modify or delete public projects and rewrite their data under certain conditions. watchTowr says it saw in-the-wild exploitation against its honeypots.", "creation_timestamp": "2026-08-30T00:00:38.814458Z"}, {"uuid": "7132ac01-5137-4346-9b4f-a7cfbb3ef3c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-1933", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ef598036-eda2-4311-807e-ebbdfb04a51d", "content": "", "creation_timestamp": "2026-05-26T14:33:00.800801Z"}, {"uuid": "7eb35f54-d3cb-44e5-a414-2e9d7375de81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1933", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfyjytqj2i", "content": "5/9\n\nUnauthenticated Remote Code Execution in Samba printing subsystem.\n  For more information, see:\n    https://www.cve.org/CVERecord?id=CVE-2026-1933\n    https://www.cve.org/CVERecord?id=CVE-2026-2340\n    https://www.cve.org/CVERecord?id=CVE-2026-3012", "creation_timestamp": "2026-05-27T02:01:27.219505Z"}, {"uuid": "ca1863dc-29d7-45ae-a2d5-e05f2b08cc19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1933", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfyl27rh2e", "content": "6/9\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-3238\n    https://www.cve.org/CVERecord?id=CVE-2026-4408\n    https://www.cve.org/CVERecord?id=CVE-2026-4480\n    https://www.samba.org/samba/security/CVE-2026-1933.html\n    https://www.samba.org/samba/security/CVE-2026-2340.html", "creation_timestamp": "2026-05-27T02:01:29.313135Z"}, {"uuid": "cc692575-5f74-49e7-a86a-7cb9c61c2501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1933", "type": "seen", "source": "https://www.acn.gov.it/portale/w/nuove-vulnerabilita-in-samba", "content": "", "creation_timestamp": "2026-05-27T02:24:19.000000Z"}, {"uuid": "6fc61840-c8a0-49c0-8446-76c0c305ba30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1933", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4rm6nz2c", "content": "\ud83d\udd17 CVE : CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480, CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480", "creation_timestamp": "2026-05-27T14:35:21.915318Z"}, {"uuid": "50d290bd-81df-41e3-90d8-feb5c0efb178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mte6ywejz72r", "content": "\ud83d\udd17 CVE : CVE-2026-19478, CVE-2026-19650", "creation_timestamp": "2026-08-18T12:15:24.455819Z"}, {"uuid": "ba67a9e1-499a-4ad7-973c-c02940bd8d3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19650", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mte6ywejz72r", "content": "\ud83d\udd17 CVE : CVE-2026-19478, CVE-2026-19650", "creation_timestamp": "2026-08-18T12:15:24.508314Z"}, {"uuid": "cc798fa9-fef6-4c81-a0f3-db031e6022e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mte76yfqas2y", "content": "Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)\n\nwww.helpnetsecurity.com/2026/08/18/g...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-08-18T12:18:49.768084Z"}, {"uuid": "4fa9296b-2625-4dc6-b5a0-2df055fc0a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1933", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmuy3mednn24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-46333: 18 interactions\nCVE-2026-69: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48095: 11 interactions\nCVE-2026-48710: 4 interactions\nCVE-2026-1933: 3 interactions\n", "creation_timestamp": "2026-05-28T02:30:33.167587Z"}, {"uuid": "536a07a5-c055-4fa0-93e9-b281f2502bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19791", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/c6i6vldk4gvwo", "content": "CVE-2026-19791 - Tenda G0 httpd web management interface module addStaticRoute stack-based overflow\nCVE ID : CVE-2026-19791\n \n Published : Aug. 14, 2026, 3:45 a.m. | 46\u00a0minutes ago\n \n Description : A weakness has been identified in Tenda G0 up to 20260625. The affected element...", "creation_timestamp": "2026-08-14T04:59:47.803661Z"}, {"uuid": "d3ca1215-cdd4-42db-9781-fb637ef12b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19792", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/irpjjxlwma7fv", "content": "CVE-2026-19792 - Tenda G0 httpd web management interface module setPortMapping buffer overflow\nCVE ID : CVE-2026-19792\n \n Published : Aug. 14, 2026, 4 a.m. | 31\u00a0minutes ago\n \n Description : A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the functio...", "creation_timestamp": "2026-08-14T05:04:51.091647Z"}, {"uuid": "67cd4dfa-8d66-4847-8a03-fed8c2a901d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19788", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/25gjwczuxakuf", "content": "CVE-2026-19788 - Tenda AC1206 httpd web management interface SetOnlineDevName set_device_name stack-based overflow\nCVE ID : CVE-2026-19788\n \n Published : Aug. 14, 2026, 4:16 a.m. | 14\u00a0minutes ago\n \n Description : A vulnerability was found in Tenda AC1206 15.03.06.23_multi_TD01...", "creation_timestamp": "2026-08-14T05:10:51.306530Z"}, {"uuid": "d0627160-2997-4a30-9327-cd02f421b6bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19790", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6jy6xesckm53x", "content": "CVE-2026-19790 - Tenda G0 httpd Web Management module formSetPortMirror stack-based overflow\nCVE ID : CVE-2026-19790\n \n Published : Aug. 14, 2026, 4:16 a.m. | 14\u00a0minutes ago\n \n Description : A vulnerability was identified in Tenda G0 up to 20260625. This issue affects the func...", "creation_timestamp": "2026-08-14T05:16:51.416387Z"}, {"uuid": "fac670da-39f2-4578-af7a-0b08de2843bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19789", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j7ezipcix54gl", "content": "CVE-2026-19789 - Tenda AC1206 httpd web management interface WifiGuestSet set_wl_guest_iplist stack-based overflow\nCVE ID : CVE-2026-19789\n \n Published : Aug. 14, 2026, 4:16 a.m. | 14\u00a0minutes ago\n \n Description : A vulnerability was determined in Tenda AC1206 15.03.06.23_multi...", "creation_timestamp": "2026-08-14T05:18:51.314393Z"}, {"uuid": "b8a7f6d2-2210-469f-a58e-172067c87ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mto6etks4u2t", "content": "GitLab released security updates for CVE-2026-19478, a critical flaw (CVSS 9.4) that could let attackers remotely modify or delete public projects and user data in CE & EE. Update now!", "creation_timestamp": "2026-08-22T11:30:48.158763Z"}, {"uuid": "d59eb019-c02f-466b-89f7-8fba9de6bd71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19198", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtikfqi2nf2c", "content": "CVE-2026-19198\nAkaunting version 3.1.21 has a security issue that allows an attacker to access features they shouldn't be able to. This can happen if an attacker is logged in and knows how to manipulate the system. To fix\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-20T05:50:04.893535Z"}, {"uuid": "47b65f5f-e254-463d-aa5f-9109b6fe13cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/captainsmok3r_official/456", "content": "CVE-2026-19478 - GitLab GraphQL @ gl_introduced directive authorization bypass\nAffected: GitLab CE/EE 18.2-18.11.10, 19.0-19.0.7, 19.1-19.1.5, 19.2-19.2.3\nType: Auth bypass (unauthenticated arbitrary zero-arity Ruby method invocation)", "creation_timestamp": "2026-08-21T20:00:03.152911Z"}, {"uuid": "56bd594e-7220-4912-a9bc-ba819ef88d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/457", "content": "", "creation_timestamp": "2026-08-21T20:00:03.249308Z"}, {"uuid": "57134a7f-5243-4383-8b91-4b8a993f4ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/uutis.bsky.social/post/3mtebytuwwl2y", "content": "GitLab on julkaissut h\u00e4t\u00e4p\u00e4ivityksen, joka korjaa kriittisen GraphQL-haavoittuvuuden (CVE-2026-19478, CVSS 9,4).\n\n#kyberturvallisuus", "creation_timestamp": "2026-08-18T13:09:03.958496Z"}, {"uuid": "7f63159b-70da-43d9-830e-dd7287e7e08f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19791", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mszo34i42m2q", "content": "Tenda G0\uff0820260625\u307e\u3067\uff09\u306ehttpd web\u7ba1\u7406\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3067\u3001\u30b9\u30bf\u30c3\u30af\u30d9\u30fc\u30b9\u306e\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19791 CVSS 8.8 | HIGH", "creation_timestamp": "2026-08-14T07:45:47.287951Z"}, {"uuid": "587452f7-dc37-4833-849e-17bdc5a98bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19792", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mszo44e42t2z", "content": "Tenda G0\uff08v20260625\u307e\u3067\uff09\u306e httpd web\u7ba1\u7406\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3067\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u304c\u767a\u898b\u3055\u308c\u305f\u3002\u30dd\u30fc\u30c8\u30de\u30c3\u30d4\u30f3\u30b0\u8a2d\u5b9a\u306e\u64cd\u4f5c\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u653b\u6483\u304c\u53ef\u80fd\u3002\nCVE-2026-19792 CVSS 8.8 | HIGH", "creation_timestamp": "2026-08-14T07:46:20.470696Z"}, {"uuid": "9b95ea14-48c1-45de-9837-2b2c71f075dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/62e6117f-a479-4d22-91a0-5d7cdda9ca0b", "content": "", "creation_timestamp": "2026-08-20T06:31:52.482701Z"}, {"uuid": "1d7cee9a-cb54-41a4-a71e-4afd875b91be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/62e6117f-a479-4d22-91a0-5d7cdda9ca0b", "content": "", "creation_timestamp": "2026-08-20T06:31:52.482701Z"}, {"uuid": "a21a93f3-aea6-4991-a45c-a38cb74da586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mtgu422mv22l", "content": "NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490\n\n#CRITICAL\n\nsupport.citrix.com/support-home...", "creation_timestamp": "2026-08-19T13:38:22.176162Z"}, {"uuid": "e897d6e6-ea7f-416e-888d-1bc62ee2b596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mtgu422mv22l", "content": "NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490\n\n#CRITICAL\n\nsupport.citrix.com/support-home...", "creation_timestamp": "2026-08-19T13:38:22.243953Z"}, {"uuid": "23fd1a15-4b46-4e0f-b8bb-abb92bc79976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19556", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msu7p2kakh2h", "content": "Google's new Chrome security update patches 5 high-severity use-after-free bugs, including CVE-2026-19556 and CVE-2026-19560. Update now.\n\n#Chrome #Google #UseAfterFree #CVE #BrowserSecurity #PatchNow #Cybersecurity", "creation_timestamp": "2026-08-12T03:45:11.767220Z"}, {"uuid": "77ba55f7-3127-4103-84ce-999954ec68ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19560", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msu7p2kakh2h", "content": "Google's new Chrome security update patches 5 high-severity use-after-free bugs, including CVE-2026-19556 and CVE-2026-19560. Update now.\n\n#Chrome #Google #UseAfterFree #CVE #BrowserSecurity #PatchNow #Cybersecurity", "creation_timestamp": "2026-08-12T03:45:11.833395Z"}, {"uuid": "5f1314b8-cdf6-417e-aba6-e303e55396c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19001", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mted7l7cab2v", "content": "MongoDB Patches 32 Vulnerabilities, Including CVE-2026-19001 Arbitrary Code Execution Flaw (CVSS 9.5)", "creation_timestamp": "2026-08-18T13:30:49.815567Z"}, {"uuid": "6a550eec-1c57-4303-883a-1eea5cbf7cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19582", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtiobzd5mw2b", "content": "binutils 2.46.1\u4ee5\u524d\u3067\u3001\u7d30\u5de5\u3055\u308c\u305fPE\u30d5\u30a1\u30a4\u30eb\u3092\u958b\u304f\u3068\u3001\u30b9\u30bf\u30c3\u30af\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306b\u3088\u308a\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u304c\u5b9f\u884c\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19582 CVSS 7.8 | HIGH", "creation_timestamp": "2026-08-20T06:59:34.907478Z"}, {"uuid": "bbd88d2c-fc19-4414-8a21-ece64d8ec4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtnanrolbg2r", "content": "Top 3 CVE for last 7 days:\nCVE-2026-65400: 27 interactions\nCVE-2026-69836: 27 interactions\nCVE-2026-64849: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-69836: 27 interactions\nCVE-2026-19490: 3 interactions\nCVE-2026-74866: 3 interactions\n", "creation_timestamp": "2026-08-22T02:38:55.930229Z"}, {"uuid": "27343b51-d6ff-4cd1-89b4-994463a5c6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19670", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-cisa-security-advisory-av26-841", "content": "", "creation_timestamp": "2026-08-21T20:15:14.280084Z"}, {"uuid": "873b0453-7e97-4447-ad8b-32c8a5bcf9ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19671", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-cisa-security-advisory-av26-841", "content": "", "creation_timestamp": "2026-08-21T20:15:16.560023Z"}, {"uuid": "6dedd42a-947b-4b6f-ae0d-c047c910cecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0318", "content": "Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway. De kwetsbaarheid met kenmerk CVE-2026-19489 betreft een memory overflow in NetScaler ADC en NetScaler Gateway, wanneer de producten zijn geconfigureerd als SIP ALG binnen een Large Scale NAT (LSN) groep. Deze fout in de geheugenallocatie kan leiden tot onvoorspelbaar gedrag of een denial of service, waardoor de normale werking van het systeem verstoord kan worden.\n\nDe kwetsbaarheid met kenmerk CVE-2026-19490 maakt het voor een aanvaller mogelijk om via een alternatieve route de normale authenticatiemechanismen te omzeilen, om zodoende ongeautoriseerde toegang tot het systeem te verkrijgen. Om kwetsbaar te zijn moeten de producten in combinatie met specifieke versies geconfigureerd zijn als Gateway (VPN-virtuele server, ICA Proxy, CVPN, RDP Proxy), AAA virtual server of configureerd zijn als SAML Identity Provider. Dit laatste is geen gebruikelijke configuratie.", "creation_timestamp": "2026-08-21T01:00:34.756474Z"}, {"uuid": "7c7f646e-1b38-4331-808e-a92ade04b66e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0318", "content": "Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway. De kwetsbaarheid met kenmerk CVE-2026-19489 betreft een memory overflow in NetScaler ADC en NetScaler Gateway, wanneer de producten zijn geconfigureerd als SIP ALG binnen een Large Scale NAT (LSN) groep. Deze fout in de geheugenallocatie kan leiden tot onvoorspelbaar gedrag of een denial of service, waardoor de normale werking van het systeem verstoord kan worden.\n\nDe kwetsbaarheid met kenmerk CVE-2026-19490 maakt het voor een aanvaller mogelijk om via een alternatieve route de normale authenticatiemechanismen te omzeilen, om zodoende ongeautoriseerde toegang tot het systeem te verkrijgen. Om kwetsbaar te zijn moeten de producten in combinatie met specifieke versies geconfigureerd zijn als Gateway (VPN-virtuele server, ICA Proxy, CVPN, RDP Proxy), AAA virtual server of configureerd zijn als SAML Identity Provider. Dit laatste is geen gebruikelijke configuratie.", "creation_timestamp": "2026-08-21T01:00:34.811250Z"}, {"uuid": "d3cf072d-0601-4b4f-9430-e34cec107169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/captainsmok3r_official/436", "content": "vulnerability: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html\ncve: CVE-2026-19478\nsomeone published poc in github: https://github.com/davkharrr/cve-2026-19478-poc", "creation_timestamp": "2026-08-18T14:00:03.510900Z"}, {"uuid": "188c86a9-738f-4005-9860-b70fb1e3c7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19812", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mszsbswha72o", "content": "\ud83d\udfe0 CVE-2026-19812 - High (8.8)\n\nA weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the functio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19812/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T09:01:07.571844Z"}, {"uuid": "9a3eab22-2dd0-437d-9290-9ebe45166fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19813", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mszsbznr3s2m", "content": "\ud83d\udfe0 CVE-2026-19813 - High (8.8)\n\nA security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. This impacts...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19813/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T09:01:16.263105Z"}, {"uuid": "22092bd1-1b83-499d-b72b-d06ba0b31ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19811", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mszscanxsn27", "content": "\ud83d\udfe0 CVE-2026-19811 - High (8.8)\n\nA security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted elemen...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19811/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T09:01:21.962417Z"}, {"uuid": "3902019f-523a-4aef-b902-d0f4608e7290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19588", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bqkrn7c4lme5f", "content": "CVE-2026-19588 - Samsung rlottie Integer Overflow to Buffer Overflow\nCVE ID : CVE-2026-19588\n \n Published : 2026\u5e748\u670812\u65e5 03:16 | 1\u00a0\u5c0f\u65f6\uff0c15\u00a0\u5206\u949f ago\n \n Description : Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.\n \n Severity:...", "creation_timestamp": "2026-08-12T04:55:07.204661Z"}, {"uuid": "887e970d-2db9-42de-82ca-84378269d104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19979", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117105870334291690", "content": "There is a new vulnerability with elevated criticality in GL.iNet A1300 and other products (CVE-2026-19979) https://vuldb.com/vuln/391161", "creation_timestamp": "2026-08-16T15:22:53.832877Z"}, {"uuid": "d4916f05-f8a5-4266-8906-c863e7fc5905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mtirmd3ovw25", "content": "\u30c7\u30a3\u30b9\u30af\u30ed\u30fc\u30b8\u30e3\u30fc\u76f4\u5f8c\u306b\u60aa\u7528\u3055\u308c\u305f\u3001GitLab\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\n\n\u653b\u6483\u5074\u306e\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u306f\u3001GitLab\u306e\u91cd\u5927\u5ea6\u306e\u8106\u5f31\u6027\u304c\u516c\u958b\u3055\u308c\u3066\u304b\u3089\u308f\u305a\u304b2\u65e5\u307b\u3069\u3067\u60aa\u7528\u3092\u958b\u59cb\u3057\u3066\u3044\u305f\u3068\u3001\u653b\u6483\u5bfe\u8c61\u9818\u57df\u7ba1\u7406\u4f01\u696d\u306eWatchTowr\u304c\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 CVE-2026-19478(CVSS\u30b9\u30b3\u30a29.4)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u6b20\u9665\u306f8\u670817\u65e5\u306b\u30d1\u30c3\u30c1\u304c\u63d0\u4f9b\u3055\u308c\u3001GitLab\u306f\u3053", "creation_timestamp": "2026-08-20T07:59:01.834969Z"}, {"uuid": "b0982bdb-c4bc-4eb5-8a45-b283b88eb329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19961", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117105922480674258", "content": "A severe vulnerability was disclosed for Edimax EW-7478APC (CVE-2026-19961) https://vuldb.com/vuln/391138", "creation_timestamp": "2026-08-16T15:36:09.503632Z"}, {"uuid": "d62ad1ae-0915-4060-a533-f66f5f3c95f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117122601747823700", "content": "Critical and High-Severity GraphQL CVEs in GitLab: Code Injection and CSRF via One Directive#GitLab #CVE_2026_19478 #CVE_2026_19650 https://www.ox.security/blog/gitlab-graphql-cve-2026-19478-19650/", "creation_timestamp": "2026-08-19T14:17:54.939121Z"}, {"uuid": "049e5a0e-efe1-4dab-a8a6-9df9ad533449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19883", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtnek7zciz2h", "content": "WPeMatico RSS Feed Fetcher\uff08v2.8.24\u307e\u3067\uff09\u306f\u3001\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u8cfc\u8aad\u8005\u4ee5\u4e0a\u306e\u6a29\u9650\u3092\u6301\u3064\u653b\u6483\u8005\u304c\u3001\u30b5\u30a4\u30c8\u8a2d\u5b9a\u3092\u6539\u3056\u3093\u3057\u3001\u7ba1\u7406\u8005\u6a29\u9650\u3092\u53d6\u5f97\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19883 CVSS 8.8 | HIGH", "creation_timestamp": "2026-08-22T03:48:32.460034Z"}, {"uuid": "c3842759-b56b-41d1-a3af-1fc4cdd5e72b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mtirpmsgr32e", "content": "CVE-2026-19478 enables unauthenticated remote code injection in GitLab, allowing deletion and modification of public projects; attackers began exploiting within two days.\n", "creation_timestamp": "2026-08-20T08:00:53.301716Z"}, {"uuid": "dd10fd09-1642-46c3-a355-dbfe7e53f8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtirq2oyl62n", "content": "CVE-2026-19478 enables unauthenticated remote code injection in GitLab, allowing deletion and modification of public projects; attackers began exploiting within two days.\n", "creation_timestamp": "2026-08-20T08:01:08.049809Z"}, {"uuid": "41da0ce3-5983-41af-ab08-39c78723f5f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtgza5tnvr2m", "content": "CVE-2026-19490 - adc\nNetScaler ADC and Gateway software versions 14.1 to 73.32 and 13.1 to 63.21 are affected. This means that if you're using these versions, you may be leaving your system open to potential\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adc #netscaler #CVE #infosec", "creation_timestamp": "2026-08-19T15:10:10.628605Z"}, {"uuid": "b35dc533-762a-41da-b60f-80487e5dc38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19883", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnf6vth7x27", "content": "\ud83d\udfe0 CVE-2026-19883 - High (8.8)\n\nThe WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to unauthorized modification of...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19883/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T04:00:12.603788Z"}, {"uuid": "eb25e471-dc42-4131-86d1-d1abd2315313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/24147", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-08-22T04:00:20.798630Z"}, {"uuid": "50424eb2-7d7b-4c80-be5b-23f5d28c5f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtgzxwiulf26", "content": "CVE-2026-19490 (CVSS 9.3) is a critical NetScaler authentication bypass in NetScaler Gateway and ADC. Patch now to block unauthenticated access.\n\n#NetScaler #Citrix #CVE202619490 #AuthBypass #InfoSec", "creation_timestamp": "2026-08-19T15:23:22.425635Z"}, {"uuid": "af3d737b-4b8b-436e-95e0-623387556ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0318", "content": "", "creation_timestamp": "2026-08-20T08:15:03.838201Z"}, {"uuid": "01650e6b-0de0-4c51-9c3d-5e53761711f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0318", "content": "", "creation_timestamp": "2026-08-20T08:15:06.084291Z"}, {"uuid": "30c8ccb2-1a61-4296-be50-c3e2fcd99aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19794", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mszwgn5n332q", "content": "WP-Stats\u30d7\u30e9\u30b0\u30a4\u30f3\uff08\u30d0\u30fc\u30b8\u30e7\u30f32.56\u307e\u3067\uff09\u306bStored XSS\u8106\u5f31\u6027\u3002\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u30a2\u30af\u30bb\u30b9\u3059\u308b\u30da\u30fc\u30b8\u306b\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u633f\u5165\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19794 CVSS 7.2 | HIGH", "creation_timestamp": "2026-08-14T10:15:23.835512Z"}, {"uuid": "9a119129-eb88-4f76-8ea3-093a493b872e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19812", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mszwhtbtfr2z", "content": "TOTOLINK A800R 4.1.2cu.5137_B20200730\u306eUploadCustomModule\u6a5f\u80fd\u306b\u30b9\u30bf\u30c3\u30af\u30d9\u30fc\u30b9\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u653b\u6483\u3067\u60aa\u7528\u2026\nCVE-2026-19812 CVSS 8.8 | HIGH", "creation_timestamp": "2026-08-14T10:16:03.638971Z"}, {"uuid": "c80ae2f7-d800-47ab-920c-38a5bb4831d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19813", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mszwjkdt4k2h", "content": "TOTOLINK A800R 4.1.2cu.5137_B20200730\u306esetMacFilterRules\u95a2\u6570\u306b\u30b9\u30bf\u30c3\u30af\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\u53ef\u2026\nCVE-2026-19813 CVSS 8.8 | HIGH", "creation_timestamp": "2026-08-14T10:17:01.185602Z"}, {"uuid": "ae839074-59c3-424e-8f37-8a8e7a545d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtelii7uiq2m", "content": "Emergency patch time if you're managing your own #GitLab instance! Out of band patch was released for CVE-2026-19478 (CVSS=9.4), a code-injection vulnerability in GraphQL directive handling that can be exploited without authentication.\n\nFull advisory: buff.ly/zO3C6Bj \n\n#GitLab #DevSecOps", "creation_timestamp": "2026-08-18T15:58:52.354683Z"}, {"uuid": "79a6c321-1926-44cb-bcfa-cba97923a088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19650", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtelij4raj2x", "content": "The patch also covers a less-severe CVE-2026-19650 (CVSS=7.1) CSRF issue, but since it requires user interaction, it's a pretty normal \"eval against your risk tolerance\" type thing.", "creation_timestamp": "2026-08-18T15:58:52.989750Z"}, {"uuid": "bfd7ad1e-c9a9-4351-86df-26782c21e842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19814", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gwo3ewz53l26n", "content": "CVE-2026-19814 - TOTOLINK A800R firewall.so cstecgi.cgi setMacQos stack-based overflow\nCVE ID : CVE-2026-19814\n \n Published : Aug. 14, 2026, 9:16 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is t...", "creation_timestamp": "2026-08-14T10:54:23.460928Z"}, {"uuid": "3026cf48-8b90-4d59-8d24-1023395f8d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "Telegram/yna2SgiXqU8Yl76-ls-5XNafbPbcL6XsZZAFlQw-z_g2N4Y", "content": "", "creation_timestamp": "2026-08-18T16:00:04.270460Z"}, {"uuid": "29dc92c2-a99c-4e27-a7a6-80e766f083a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/bdufstecru/3390", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 git \u0434\u043b\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430\u0434 \u043a\u043e\u0434\u043e\u043c GitLab EE/ CE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-11879\nCVE-2026-19478\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/", "creation_timestamp": "2026-08-19T16:00:03.939269Z"}, {"uuid": "59fabee3-b9de-4cef-98a0-63820f7748d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19815", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bkwfxxumpek7a", "content": "CVE-2026-19815 - TOTOLINK A800R firewall.so cstecgi.cgi setParentalRules stack-based overflow\nCVE ID : CVE-2026-19815\n \n Published : Aug. 14, 2026, 9:16 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : A flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected by t...", "creation_timestamp": "2026-08-14T10:56:23.089797Z"}, {"uuid": "4c37bbf8-190a-4d54-b919-29cef5e259ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19815", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mszyynsfc72l", "content": "\ud83d\udfe0 CVE-2026-19815 - High (8.8)\n\nA flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected by this vulnerability is...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19815/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T11:01:16.608629Z"}, {"uuid": "86efcf6d-361e-475e-9ab7-cdf36c0d9a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19814", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mszyyumhuh2o", "content": "\ud83d\udfe0 CVE-2026-19814 - High (8.8)\n\nA vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137_B20200730. Affected is the function s...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19814/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T11:01:23.666776Z"}, {"uuid": "577efb93-6fe1-4860-abc6-7f19155444c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19788", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117093540420813747", "content": "CVE-2026-19788 \u2013 Critical stack buffer overflow in Tenda AC1206 router via /goform/SetOnlineDevName. Remote RCE possible. CVSS 8.8. Unpatched \u2013 update firmware or restrict access now. #CVE #Tenda #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19788/", "creation_timestamp": "2026-08-14T11:07:27.202271Z"}, {"uuid": "51102c3d-1f11-4df4-a171-180bca58ccd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19586", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtkqajzw6i2k", "content": "CVE-2026-19586 (CVSS 9.3) is a pre-authentication OS command injection flaw in Omada gateways. TP-Link has released fixed firmware.\n\n#Omada #TPLink #CVE202619586 #CommandInjection #OpenVPN #NetworkSecurity", "creation_timestamp": "2026-08-21T02:39:52.841658Z"}, {"uuid": "84b085e5-f7d8-4021-8d61-40c28d34cb6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19788", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mszzd5iy3y2k", "content": "CVE-2026-19788 \u2013 Critical stack buffer overflow in Tenda AC1206 router via /goform/SetOnlineDevName. Remote RCE possible. CVSS 8.8. Unpatched \u2013 update firmware or restrict access now. #CVE #Tenda #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-19788/", "creation_timestamp": "2026-08-14T11:07:07.828102Z"}, {"uuid": "9a459bc0-7ba5-416c-bf3d-adfd0c2bb5a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mtix4og37c2w", "content": "\ud83d\udea8  #NetScaler bypass exposed\n\nCVE-2026-19490 grants remote unauthenticated access to Gateway and AAA deployments.\n\ud83d\udd17 read more: www.securityweek.com...\n\n#ransomNews #cyberthreats #Citrix \n", "creation_timestamp": "2026-08-20T09:37:40.140795Z"}, {"uuid": "0d8a5867-fd8f-43fa-b40e-261f74681952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19958", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d5mhygmj7sk3d", "content": "CVE-2026-19958 - iatsiuk pptr-mcp execute Tool vm-executor.ts executeCode code injection\nCVE ID : CVE-2026-19958\n \n Published : Aug. 16, 2026, 10:15 p.m. | 20\u00a0minutes ago\n \n Description : A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element...", "creation_timestamp": "2026-08-16T22:52:06.743934Z"}, {"uuid": "f190f28d-3e3f-4f9b-a538-b3bb6bc1b9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtkqogn7uj2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-65400: 28 interactions\nCVE-2026-59310: 25 interactions\nCVE-2026-43499: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-19490: 8 interactions\nCVE-2026-76404: 8 interactions\nCVE-2026-63030: 7 interactions\n", "creation_timestamp": "2026-08-21T02:47:38.464027Z"}, {"uuid": "b3354298-d18e-4bd8-8e99-8ff903ffbe79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19957", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cms5luh2p4cjg", "content": "CVE-2026-19957 - graphlit graphlit-mcp-server ssrf-test Endpoint tools.ts fetch server-side request forgery\nCVE ID : CVE-2026-19957\n \n Published : Aug. 16, 2026, 10:16 p.m. | 19\u00a0minutes ago\n \n Description : A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. ...", "creation_timestamp": "2026-08-16T22:54:06.586317Z"}, {"uuid": "5f4bab10-0250-4aa0-b21f-2a51451f261d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/lemagit.bsky.social/post/3mtktdvhivm2a", "content": "\"Citrix NetScaler : la CVE-2026-19490 permet de contourner l'authentification sur les passerelles NetScaler (VPN [lire]", "creation_timestamp": "2026-08-21T03:35:28.925959Z"}, {"uuid": "4ed0d323-c4f2-4d7d-8d16-4ec0dc458fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19959", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtad7lvri325", "content": "CVE-2026-19959 - ew-7478apc\nThe Edimax EW-7478APC Wi-Fi router has a security issue that could allow an attacker to disrupt its functionality. This is because the router's software does not properly handle\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ew7478apc #edimax #CVE #infosec", "creation_timestamp": "2026-08-16T23:20:04.818047Z"}, {"uuid": "20589c09-b750-411b-8817-c7868b8e467f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19961", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtad7nbugt2p", "content": "CVE-2026-19961 - ew-7478apc\nA security flaw in Edimax EW-7478APC's software allows hackers to send malicious data that can cause the system to behave unexpectedly. This can happen remotely, which means it's\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ew7478apc #edimax #CVE #infosec", "creation_timestamp": "2026-08-16T23:20:05.871682Z"}, {"uuid": "6f9aa913-619a-42b3-bb2c-068a60c5d36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19264", "type": "seen", "source": "Telegram/wDwm6-AY-JX6nhNni9OQWjE6Au1_mqn06OkP8toYPUyKP30", "content": "", "creation_timestamp": "2026-08-12T08:00:05.628855Z"}, {"uuid": "c1c3ec8a-0b86-46fa-898f-48d9ab93a037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19264", "type": "seen", "source": "Telegram/5EfCxBLTvg1-4rhqcfrC1PK14OSv695QzdRUE8Ybl_gFPSI", "content": "", "creation_timestamp": "2026-08-12T08:00:06.104943Z"}, {"uuid": "fe571e12-3663-47bb-b0f0-02d70775bb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://www.ncsc.nl/alerts/ernstige-kwetsbaarheden-in-gitlab-producten-ontdekt-update-nu", "content": "", "creation_timestamp": "2026-08-18T16:15:05.878288Z"}, {"uuid": "e9a9902a-ebe4-471a-b9cb-c5a0652f3ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19650", "type": "seen", "source": "https://www.ncsc.nl/alerts/ernstige-kwetsbaarheden-in-gitlab-producten-ontdekt-update-nu", "content": "", "creation_timestamp": "2026-08-18T16:15:08.113171Z"}, {"uuid": "9e8509fc-56a6-49e9-8ea1-b9aa82870ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mtkuoz6n5j2f", "content": "On August 19, 2026, a security advisory was published for CVE-2026-19490, a critical authentication bypass vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. The vulnerability carries a CVSS v4.0 base score of 9.3 and can be exploited remotely by an unauthenticated attacke..", "creation_timestamp": "2026-08-21T03:59:32.654293Z"}, {"uuid": "6aed9158-bb7f-458d-9121-d3c129e86609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19961", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117107906275422387", "content": "CVE-2026-19961: CRITICAL buffer overflow in Edimax EW-7478APC v1.04 via /goform/formWlSiteSurvey (selSSID). Remote code execution is possible; no patch, public exploit exists. Isolate affected devices. https://radar.offseq.com/threat/cve-2026-19961-buffer-overflow-in-edimax-ew-7478apc-657492e4d05158fa #OffSeq #CVE202619961 #IoTSecurity", "creation_timestamp": "2026-08-17T00:00:40.237037Z"}, {"uuid": "3a254d99-5270-4b1b-980e-b77960c7b943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mtnjt7qdus2q", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure\n\nA newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr.\n\nThe vulnerability in question is CVE-2026-19478 (CVSS score: 9.4\u2026\n#hackernews #news", "creation_timestamp": "2026-08-22T05:23:01.931646Z"}, {"uuid": "29c62347-4072-49c8-b4eb-3df435c28b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19961", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtafia4hfa2y", "content": "Edimax EW-7478APC v1.04 faces a CRITICAL buffer overflow (CVE-2026-19961). Remote attackers can execute code using public exploits. No patch \u2014 restrict access & monitor devices. https://radar.offseq.com/threat/cve-2026-19961-buffer-overflow-in-edimax-ew-7478apc-657492e4d05158fa #OffSeq #CVE202619...", "creation_timestamp": "2026-08-17T00:00:42.460926Z"}, {"uuid": "1482b597-837b-4e3e-8a9e-1f1154130ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19961", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtafitbpbg27", "content": "\ud83d\udd34 CVE-2026-19961 - Critical (9.9)\n\nA vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19961/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-17T00:01:03.158937Z"}, {"uuid": "dfba574a-75d9-41aa-8b3a-83dfb06b5d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19426", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3dnrlt47wnofx", "content": "CVE-2026-19426 - FitSoft\uff5cPOS Sytstem - Missing Authentication\nCVE ID : CVE-2026-19426\n \n Published : Aug. 12, 2026, 7:07 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers ...", "creation_timestamp": "2026-08-12T08:38:23.379232Z"}, {"uuid": "5e85e604-c343-4c2c-9b5e-66c117e5cf54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19959", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtafj27yjp2z", "content": "\ud83d\udd34 CVE-2026-19959 - Critical (9.9)\n\nA weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipS...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19959/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-17T00:01:09.982211Z"}, {"uuid": "ce4353bd-aa2b-4034-84ea-3ab5f6dbc0f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1933", "type": "seen", "source": "https://t.me/bdufstecru/3205", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 NTFS reparse points \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Samba \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b\n\nBDU:2026-07419\nCVE-2026-1933\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Samba:\nhttps://www.samba.org/samba/security/CVE-2026-1933.html\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-1933\n\n\u0414\u043b\u044f Ubuntu:\nhttps://ubuntu.com/security/notices/USN-8306-1\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2026-1933\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043e\u0431\u0449\u0435\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \"\u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f = \u0434\u0430\"", "creation_timestamp": "2026-05-29T13:10:07.000000Z"}, {"uuid": "4e0bbcc6-a094-43a8-aa83-cb6e4f34b574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19959", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6wdshx6cxdecr", "content": "CVE-2026-19959 - Edimax EW-7478APC formWanTcpipSetup stack-based overflow\nCVE ID : CVE-2026-19959\n \n Published : Aug. 16, 2026, 11:16 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpip...", "creation_timestamp": "2026-08-17T01:06:11.918221Z"}, {"uuid": "1863b0dc-7892-4fda-9e2d-5d942b6f2457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19961", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gx2pxvxbphyat", "content": "CVE-2026-19961 - Edimax EW-7478APC formWlSiteSurvey buffer overflow\nCVE ID : CVE-2026-19961\n \n Published : Aug. 16, 2026, 11:16 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of t...", "creation_timestamp": "2026-08-17T01:08:11.199312Z"}, {"uuid": "c7178994-bd2c-445a-82bf-b8587050059e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19961", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtajo7erpw25", "content": "Edimax Router Turns Remote Overflow Into Another Budget Museum Exhibit\nPANIC 42% | Lag 0.0h | CVE-2026-19961 affects Edimax EW-7478APC and allows remote attackers to send malicious data that can\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-17T01:15:37.042254Z"}, {"uuid": "13ca9f86-57fd-49e4-a0a3-89a2947b7e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19959", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117108259159228390", "content": "CVE-2026-19959: CRITICAL stack buffer overflow in Edimax EW-7478APC v1.04 (CVSS 9.4). Remote code execution possible. Public exploit out, no fix from vendor. Restrict access or replace device. https://radar.offseq.com/threat/cve-2026-19959-stack-based-buffer-overflow-in-edimax-ew-7478apc-5dd669bf84d8d7ec #OffSeq #CVE #IoTSecurity #infosec", "creation_timestamp": "2026-08-17T01:30:24.699168Z"}, {"uuid": "d5e53c9d-060f-49b2-9035-0a6e0a8bda63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19286", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muak6tutth2p", "content": "CVE-2026-19286\nVersions 1.0.0 through 1.11.1 of IBM Langflow OSS do not properly restrict access to a public interface that allows one system to talk to another. This gap could let a remote attacker send specially crafted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T18:50:07.467809Z"}, {"uuid": "1d516df0-3eca-412d-9093-68bf2c1afddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19959", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtakip7bs52r", "content": "CRITICAL stack-based buffer overflow (CVE-2026-19959) in Edimax EW-7478APC v1.04. Exploit code public, no vendor patch. Limit device exposure or replace now. https://radar.offseq.com/threat/cve-2026-19959-stack-based-buffer-overflow-in-edimax-ew-7478apc-5dd669bf84d8d7ec #OffSeq #IoTSecurity #CVE", "creation_timestamp": "2026-08-17T01:30:27.616193Z"}, {"uuid": "a2abe085-9288-4685-bed4-ba795d440a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19959", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtalmuhhy22b", "content": "Edimax EW-7478APC 1.04\u306eformWanTcpipSetup\u3067\u3001pppUserName\u5f15\u6570\u64cd\u4f5c\u306b\u3088\u308a\u30b9\u30bf\u30c3\u30af\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u304c\u767a\u751f\u3059\u308b\u53ef\u80fd\u6027\u3002\u9060\u9694\u304b\u3089\u306e\u653b\u6483\u304c\u53ef\u80fd\u3002\nCVE-2026-19959 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-08-17T01:50:39.741097Z"}, {"uuid": "689ab70a-cbc4-44a9-ad6c-bcb48283ff09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19974", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/b5dpjvdviost2", "content": "CVE-2026-19974 - treefrogframework treefrog-framework Session Cookie tsessioncookiestore.cpp strncmp improper authentication\nCVE ID : CVE-2026-19974\n \n Published : Aug. 17, 2026, 2:15 a.m. | 20\u00a0minutes ago\n \n Description : A security flaw has been discovered in treefrogframewo...", "creation_timestamp": "2026-08-17T02:51:16.012302Z"}, {"uuid": "bee87b4f-cfc8-4c4d-83c1-1bcae82fbd3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19972", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/73tv6j6jvzabg", "content": "CVE-2026-19972 - itsourcecode Hospital Management System viewpatient.php sql injection\nCVE ID : CVE-2026-19972\n \n Published : Aug. 17, 2026, 2:16 a.m. | 19\u00a0minutes ago\n \n Description : A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is a...", "creation_timestamp": "2026-08-17T02:57:15.998510Z"}, {"uuid": "66c43c74-e7f4-4b96-813d-6a7573436b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19971", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j7av7immdnoxn", "content": "CVE-2026-19971 - LB-Link WR1210M Backup Endpoint backup.cgi main missing authentication\nCVE ID : CVE-2026-19971\n \n Published : Aug. 17, 2026, 2:16 a.m. | 19\u00a0minutes ago\n \n Description : A flaw has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file ...", "creation_timestamp": "2026-08-17T03:03:15.751654Z"}, {"uuid": "3dc2d15e-e26a-4bd3-9b13-b213569f0dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19970", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2fm7hixsdebgh", "content": "CVE-2026-19970 - Open Asset Import Library Assimp Node MDLLoader.cpp AddBonesToNodeGraph_3DGS_MDL7 heap-based overflow\nCVE ID : CVE-2026-19970\n \n Published : Aug. 17, 2026, 2:16 a.m. | 19\u00a0minutes ago\n \n Description : A vulnerability was detected in Open Asset Import Library As...", "creation_timestamp": "2026-08-17T03:09:21.211201Z"}, {"uuid": "4aec653e-3f56-42ce-95f0-58f681a49936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19263", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fx2vcreprd6es", "content": "CVE-2026-19263 - INQUIRELAB mcp-bridge-api Servers Endpoint mcp-bridge.js command injection\nCVE ID : CVE-2026-19263\n \n Published : Aug. 8, 2026, 7:17 a.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de...", "creation_timestamp": "2026-08-08T08:32:06.861631Z"}, {"uuid": "720641d0-8379-405c-9611-130e5adea04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19977", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtaqmqjrnc2e", "content": "CVE-2026-19977 - iptime a3004t\nA security issue exists in EFM ipTIME A3004T 14.19.0 that allows unauthorized access. This could happen if an attacker manipulates the session validation process. We recommend\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#iptimea3004t #efm #CVE #infosec", "creation_timestamp": "2026-08-17T03:20:04.218250Z"}, {"uuid": "550173ab-50da-41b9-9421-fe279af928a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19821", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt2bbfjm642h", "content": "Tenda AC12 15.03.06.23_multi_TD01\u306e`httpd`Web\u7ba1\u7406\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306b\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u3055\u308c\u3001\u30b7\u30b9\u30c6\u30e0\u304c\u4fb5\u5bb3\u3055\u308c\u308b\u53ef\u80fd\u2026\nCVE-2026-19821 CVSS 8.8 | HIGH", "creation_timestamp": "2026-08-14T13:29:19.175889Z"}, {"uuid": "23d91d57-6267-4c4c-8dfb-2e6a139c0374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19977", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtatavck6m2t", "content": "\ud83d\udea8 CVE-2026-19977 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_che...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19977\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T04:07:07.879621Z"}, {"uuid": "175fabca-b7a3-48ad-9777-4114809e7598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mtnm3jhmsc26", "content": "\ud83d\udea8 BREAKING: GitLab CVE-2026-19478 (CVSS 9.4) under active exploitation within days of disclosure. Unauthenticated attackers can modify/delete public projects and forge merge records. Patch to 19.2.4/19.1.6/19.0.8/18.11.11 immediately. Source: thehackernews.com #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T06:03:28.125188Z"}, {"uuid": "166cdf5d-235e-4855-b9d2-e8bb5ff827b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19295", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muakqnttcv2b", "content": "CVE-2026-19295 - langflow oss\nVersions 1.0.0 through 1.11.1 of IBM Langflow allow someone who has a regular account to make the software run any command on the server. This can let an attacker take control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-08-29T19:00:05.020162Z"}, {"uuid": "fdc3695b-1867-4e61-a042-dae3288780db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19822", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt2bdfwneg2z", "content": "Tenda W20E v15.11.0.6(1068_1546_841)_CN_TDC\u306eQoS Edit\u6a5f\u80fd\u306b\u30b9\u30bf\u30c3\u30af\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u53ef\u80fd\u3002\nCVE-2026-19822 CVSS 8.8 | HIGH", "creation_timestamp": "2026-08-14T13:30:26.430479Z"}, {"uuid": "771b3740-177c-43b7-939b-a537a4852719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19559", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260817", "content": "", "creation_timestamp": "2026-08-17T04:45:07.136499Z"}, {"uuid": "1eadfcd1-849b-4616-8c84-e7e5bd4ce8ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19560", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260817", "content": "", "creation_timestamp": "2026-08-17T04:45:09.354969Z"}, {"uuid": "be559625-1e78-459b-bfd7-65fe347ce832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19556", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260817", "content": "", "creation_timestamp": "2026-08-17T04:45:11.589905Z"}, {"uuid": "86ca5401-5ef8-475b-a183-286a0a7b147f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19557", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260817", "content": "", "creation_timestamp": "2026-08-17T04:45:13.820956Z"}, {"uuid": "d40b4fcf-39f1-4902-9efb-08eec31817b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19558", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260817", "content": "", "creation_timestamp": "2026-08-17T04:45:16.016938Z"}, {"uuid": "d1b4e7cb-04eb-494a-b35d-66e3bfe4ed35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mtj6uzcgp52s", "content": "To nobody's surprise, threat actors wasted zero seconds exploiting CVE-2026-19478 in GitLab immediately following its disclosure. Anyone managing public repositories and user data on the platform is on the hook as attackers merrily modify or wipe out projects without needing to a...\n\nRead full story", "creation_timestamp": "2026-08-20T11:56:32.127097Z"}, {"uuid": "16316a2a-e108-4cff-b905-163fb39d3678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://t.me/pphm_HackerNews/2757", "content": "\ud83d\udd34 Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler\n\nCitrix on Wednesday announced patches for two vulnerabilities in NetScaler ADC and NetScaler Gateway, including a critical-severity flaw.\n\nThe critical bug, tracked as CVE-2026-19490 (CVSS score of 9.3), is described as an authentication bypass using an alternative path, and impacts NetScaler appliances configured as a gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or an AAA virtual server.\n\nIt can be exploited by remote, unauthenticated attackers without user interaction, cybersecurity firm Rapid7 says.", "creation_timestamp": "2026-08-21T23:00:05.358535Z"}, {"uuid": "b9125807-d2b8-48f4-9e62-2be2bf92c501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19977", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3jshxw2j5gxuj", "content": "CVE-2026-19977 - EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication\nCVE ID : CVE-2026-19977\n \n Published : Aug. 17, 2026, 3:16 a.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affe...", "creation_timestamp": "2026-08-17T05:05:27.680005Z"}, {"uuid": "15679c3c-1e9a-4b7e-92b3-61d67e9cd426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19792", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mt2dmrbblk2a", "content": "CVE-2026-19792 \u2013 Critical buffer overflow in Tenda G0 httpd via setPortMapping. Remote RCE risk. CVSS 8.8. Exploit public, no patch yet. Disable access or update ASAP. #CVE #Tenda #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-19792/", "creation_timestamp": "2026-08-14T14:11:28.433705Z"}, {"uuid": "4a7dfbfd-6cdd-434e-9db3-7fb1484a1a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/pphm_HackerNews/2685", "content": "\ud83d\udd34 GitLab Patches Critical Unauthenticated GraphQL Vulnerability\n\nGitLab patched a critical GraphQL flaw that let unauthenticated attackers remotely modify or delete public projects on self-managed servers.\n\nGitLab pushed out an emergency patch this week to address a critical flaw, tracked as CVE-2026-19478 (CVSS score of 9.4), that could let an attacker with zero credentials remotely modify or delete public projects and user data.\n\n\u201cGitLab has remediated an issue that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.\u201d reads the advisory.", "creation_timestamp": "2026-08-21T23:00:05.782262Z"}, {"uuid": "36284887-4f70-49c4-aba1-faff678a009c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19792", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117094264990198115", "content": "CVE-2026-19792 \u2013 Critical buffer overflow in Tenda G0 httpd via setPortMapping. Remote RCE risk. CVSS 8.8. Exploit public, no patch yet. Disable access or update ASAP. #CVE #Tenda #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19792/", "creation_timestamp": "2026-08-14T14:11:34.504978Z"}, {"uuid": "8ca77235-1618-4a2f-a6b3-853992b3bbf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19426", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msuy3wrwht2u", "content": "\ud83d\udfe0 CVE-2026-19426 - High (8.2)\n\nPOS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remot...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19426/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T11:01:54.089401Z"}, {"uuid": "eba08c3f-ed3d-422f-ac89-98cacef810e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtl7d7usqt2d", "content": "GitLab CVE-2026-19478 under active exploit \u2014 update or block GraphQL endpoints immediately. #GitLab #CVE2026-19478 #CodeInjection #DevSecOps #SecurityNews #AIThreats https://thedailytechfeed.com/gitlab-flaw-cve-2026-19478-targeted-in-active-exploits-days-after-disclosure/", "creation_timestamp": "2026-08-21T07:09:49.616460Z"}, {"uuid": "be3cc8c1-19da-43ff-bb42-c42c16ad41d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19792", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117094347270532273", "content": "Attention, elevated activities detected targeting Tenda G0 (CVE-2026-19792) https://vuldb.com/vuln/389758/cti", "creation_timestamp": "2026-08-14T14:32:25.797182Z"}, {"uuid": "05f2edbe-3243-425c-a49e-72f56d56bf45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/georgesl.bsky.social/post/3mtl7pjuklk2u", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure thehackernews.com/2026/08/gitl...", "creation_timestamp": "2026-08-21T07:16:44.499955Z"}, {"uuid": "991851bb-99fa-4e00-a0d0-364244684730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19815", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117094347299511701", "content": "A lot of offensive activities were identified targeting TOTOLINK A800R (CVE-2026-19815) https://vuldb.com/vuln/389951/cti", "creation_timestamp": "2026-08-14T14:32:26.344901Z"}, {"uuid": "9724bdde-e34c-4370-8caa-1b4767ad02c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19993", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2tde3uheontes", "content": "CVE-2026-19993 - Webkul Bagisto RMA State Validation update-status behavioral workflow\nCVE ID : CVE-2026-19993\n \n Published : Aug. 17, 2026, 6:17 a.m. | 18\u00a0minutes ago\n \n Description : A vulnerability has been found in Webkul Bagisto up to 2.4.4. Affected by this vulnerability...", "creation_timestamp": "2026-08-17T06:45:38.588152Z"}, {"uuid": "7200721c-40ed-4807-b326-4c649ebb33ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://www.cert.se/2026/08/kritisk-sarbarhet-i-citrix.html", "content": "", "creation_timestamp": "2026-08-20T12:15:22.064809Z"}, {"uuid": "ebfd0a8a-8c58-493f-aeb6-f3b25b6fa11b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19791", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mt2gfdy6li2o", "content": "CVE-2026-19791 - Critical stack buffer overflow in Tenda G0 router web interface. Remote RCE via staticRouteNet param. CVSS 8.8. Unpatched, exploit public. Disable remote management now. #CVE #Tenda #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-19791/", "creation_timestamp": "2026-08-14T15:01:00.894373Z"}, {"uuid": "7b178c8a-d2f8-439d-b5fe-d2bdc68fcf2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19791", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117094459644819990", "content": "CVE-2026-19791 - Critical stack buffer overflow in Tenda G0 router web interface. Remote RCE via staticRouteNet param. CVSS 8.8. Unpatched, exploit public. Disable remote management now. #CVE #Tenda #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19791/", "creation_timestamp": "2026-08-14T15:01:38.795805Z"}, {"uuid": "7aa2fcdc-b342-4a80-91f3-cdd902ddfc17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19992", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/anbtts7vlfgla", "content": "CVE-2026-19992 - Orange View Limited DualSafe Password Manager & Digital Vault Extension postMessage-based Bridge information disclosure\nCVE ID : CVE-2026-19992\n \n Published : Aug. 17, 2026, 6:17 a.m. | 18\u00a0minutes ago\n \n Description : A flaw has been found in Orange View Limit...", "creation_timestamp": "2026-08-17T06:51:37.917336Z"}, {"uuid": "e6796f62-f5ed-400d-b0d4-9958f66cb2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mtlc72pfgr2q", "content": "Citrix\u304c\u7dca\u6025\u5bfe\u5fdc\u3092\u547c\u3073\u304b\u3051\u3001NetScaler\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306b\u95a2\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-19490\uff09\u3092\u4fee\u6b63\n\nCitrix\u306f\u3001NetScaler ADC\u304a\u3088\u3073NetScaler Gateway\u306b\u304a\u3051\u308b2\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u4e2d\u306b\u306f\u3001\u91cd\u5927\u306a\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u6b20\u9665\u3067\u3042\u308bCVE-2026-19490\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3082\u306e\u3082\u542b\u307e\u308c\u3066\u304a\u308a\u3001\u540c\u793e\u306f\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u3064\u3044\u3066\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u304f\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u3059\u308b...", "creation_timestamp": "2026-08-21T08:01:11.148916Z"}, {"uuid": "05da0d66-672f-4591-a3c9-f3e73c57dd43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19988", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bthz7irhnqpii", "content": "CVE-2026-19988 - Alaev SEO Tools Extension Popup UI popup.html addDiv cross site scripting\nCVE ID : CVE-2026-19988\n \n Published : Aug. 17, 2026, 6:17 a.m. | 18\u00a0minutes ago\n \n Description : A vulnerability was detected in Alaev SEO Tools Extension up to 1.0.10 on Chrome. This i...", "creation_timestamp": "2026-08-17T06:57:37.887348Z"}, {"uuid": "e3c91755-0aeb-4178-bad3-c8d886dd9d2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19500", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtevf6ucex2r", "content": "SureForms v2.1.3\u672a\u6e80\u3067\u3001\u30d5\u30a9\u30fc\u30e0\u5165\u529b\u306e\u5236\u9650\u4e0d\u5099\u306b\u3088\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u30b5\u30fc\u30d0\u30fc\u30ea\u30bd\u30fc\u30b9\u3092\u67af\u6e07\u3055\u305b\u3001\u7ba1\u7406\u753b\u9762\u30a2\u30af\u30bb\u30b9\u3084\u6b63\u5e38\u306a\u52d5\u4f5c\u3092\u59a8\u5bb3\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-19500 CVSS 7.5 | HIGH", "creation_timestamp": "2026-08-18T18:55:58.596154Z"}, {"uuid": "0b3c5b17-178d-493b-a81f-681606617316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19987", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j5qwgjwaft5ch", "content": "CVE-2026-19987 - SourceCodester Best Employee Management System Profile exposure of information through directory listing\nCVE ID : CVE-2026-19987\n \n Published : Aug. 17, 2026, 6:17 a.m. | 18\u00a0minutes ago\n \n Description : A security vulnerability has been detected in SourceCodes...", "creation_timestamp": "2026-08-17T07:02:38.690457Z"}, {"uuid": "226fddef-c3f0-46b2-92da-3a3e5eae6e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19871", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt2hhgvr4i25", "content": "CVE-2026-19871 - prospero flow crm\nProspero Flow CRM's employee onboarding process in older versions uses a default password for all employees, making it easy for unauthorized users to access employee accounts if they\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#roskus #CVE #infosec", "creation_timestamp": "2026-08-14T15:20:04.281269Z"}, {"uuid": "9047aef1-ee62-470a-8f96-793f01c205dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19871", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jk3r623duz3in", "content": "CVE-2026-19871 - Use of hard-coded credentials in Prospero Flow CRM employee onboarding\nCVE ID : CVE-2026-19871\n \n Published : Aug. 14, 2026, 2:16 p.m. | 18\u00a0minutes ago\n \n Description : Use of Hard-coded Credentials in the human resources component in Roskus Prospero Flow CRM ...", "creation_timestamp": "2026-08-14T15:22:07.445894Z"}, {"uuid": "96791cc3-03e7-403e-8f0f-716e8ea84e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19830", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/c76kleuynmibw", "content": "CVE-2026-19830 - TRENDnet TEW-816DRM bftpd bftpd.conf allocation of resources\nCVE ID : CVE-2026-19830\n \n Published : Aug. 14, 2026, 2:16 p.m. | 18\u00a0minutes ago\n \n Description : A vulnerability was found in TRENDnet TEW-816DRM GURNC4.OT182B-C-TN-R1B028-US.EN. This impacts an unk...", "creation_timestamp": "2026-08-14T15:24:06.662515Z"}, {"uuid": "79c82675-ee7c-4800-a58d-9d8a4416102d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19594", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msv3fcihoh2h", "content": "\ud83d\udfe0 CVE-2026-19594 - High (8.1)\n\nInsufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19594/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T12:00:50.275174Z"}, {"uuid": "ec5e9c19-e268-4126-af0f-424b20d56ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19979", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtb5iyxh3g2q", "content": "GL.iNet\u30eb\u30fc\u30bf\u30fc\uff08A1300\u7b49\u30014.8.x\u307e\u3067\uff09\u306eWebDAV\u30b5\u30fc\u30d3\u30b9\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u653b\u6483\u304c\u53ef\u80fd\u3002\nCVE-2026-19979 CVSS 8.3 | HIGH", "creation_timestamp": "2026-08-17T07:10:37.370337Z"}, {"uuid": "f771a971-b4c8-4332-ad12-3ce3c02e435e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19980", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtb5l4e5gz2n", "content": "GL.iNet\u30eb\u30fc\u30bf\u30fc\uff08A1300\u7b49\uff09\u306eUI\u6a5f\u80fd\u306b\u30b3\u30fc\u30c9\u6ce8\u5165\u306e\u8106\u5f31\u6027\u3002\u9060\u9694\u304b\u3089\u306e\u64cd\u4f5c\u3067\u3001\u8a00\u8a9e\u66f4\u65b0\u6642\u306e\u5f15\u6570\u64cd\u4f5c\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3068\u306a\u308b\u6050\u308c\u304c\u3042\u308b\u3002\nCVE-2026-19980 CVSS 7.4 | HIGH", "creation_timestamp": "2026-08-17T07:11:48.188825Z"}, {"uuid": "677a9b12-8f83-4f90-a6a9-1b07847a8306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19556", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msv4r2uhci23", "content": "\ud83d\udd17 CVE : CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560", "creation_timestamp": "2026-08-12T12:25:17.178744Z"}, {"uuid": "3466cad8-4458-48ed-a737-933141853315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19557", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msv4r2uhci23", "content": "\ud83d\udd17 CVE : CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560", "creation_timestamp": "2026-08-12T12:25:17.227831Z"}, {"uuid": "391fe6ff-ec05-478c-8fab-5b6cddced73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19558", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msv4r2uhci23", "content": "\ud83d\udd17 CVE : CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560", "creation_timestamp": "2026-08-12T12:25:17.276920Z"}, {"uuid": "4ec910f8-1aad-4d62-bf6d-2f7baddea8d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19559", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msv4r2uhci23", "content": "\ud83d\udd17 CVE : CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560", "creation_timestamp": "2026-08-12T12:25:17.322880Z"}, {"uuid": "8eab962b-6d3b-4a78-9fae-d8a9c01468db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19560", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msv4r2uhci23", "content": "\ud83d\udd17 CVE : CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560", "creation_timestamp": "2026-08-12T12:25:17.365223Z"}, {"uuid": "8c27644a-2a29-4b82-b0dc-819753370125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19977", "type": "seen", "source": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mtb7ywhz772c", "content": "Today's CyberGeoDigest \u2014 18 stories\n\nTop: EFM ipTIME A3004T Auth Bypass CVE-2026-19977 Exploits Now Public\n\n#InfoSec #CVE #CyberSecurity", "creation_timestamp": "2026-08-17T07:55:19.395526Z"}, {"uuid": "c180cb9f-f11a-4f77-97b4-0c468bdcda90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://nsm.no/fagomrader/digital-sikkerhet/nasjonalt-cybersikkerhetssenter/varsler-fra-nsm/kritisk-sarbarhet-i-citrix-netscaler", "content": "", "creation_timestamp": "2026-08-20T12:45:07.324000Z"}, {"uuid": "e613a7b8-ec77-4259-a0c4-d083e6106680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gsonz3z7eagiq", "content": "CVE-2026-19435 - Copy & Delete Posts\nCVE ID : CVE-2026-19435\n \n Published : Aug. 21, 2026, 7:16 a.m. | 39\u00a0minutes ago\n \n Description : The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a dele...", "creation_timestamp": "2026-08-21T08:07:26.918774Z"}, {"uuid": "03041d0c-e75d-4d6c-8a62-31d087bf0251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19426", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11101-4f85c-2.html", "content": "", "creation_timestamp": "2026-08-12T12:45:02.940643Z"}, {"uuid": "934943de-39e2-4f5e-a63c-5ff12786a5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://nsm.no/fagomrader/digital-sikkerhet/nasjonalt-cybersikkerhetssenter/varsler-fra-nsm/kritisk-sarbarhet-i-citrix-netscaler", "content": "", "creation_timestamp": "2026-08-20T12:45:09.982115Z"}, {"uuid": "13750b73-7d50-442f-8ab6-b5f82bb4535a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mtlcksh4g22e", "content": "Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/08/21/c... \n\n#Citrix #vulnerability #cybersecurity", "creation_timestamp": "2026-08-21T08:07:46.371680Z"}, {"uuid": "06357107-0afd-487a-a65c-7564d2378a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19730", "type": "seen", "source": "https://bsky.app/profile/mfahlandt.bsky.social/post/3mtbbv6cf6l2q", "content": "\u2601\ufe0f Cloud Native Buildpacks graduates from CNCF.\nAntrea v2.7.0 changes default: Agent gossip traffic now authenticated/encrypted.\nPodman v5.8.6 fixes CVE-2026-19730 (file truncation).\ncontainerd v2.3.4 disables checkpoint restore in CreateContainer by defau\u2026\n\nhttps://lwcn.dev/newsletter/2026-week-34/", "creation_timestamp": "2026-08-17T08:29:00.929699Z"}, {"uuid": "266feca4-62b5-4d29-9b53-817a9ef49004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/tierrasapiens.bsky.social/post/3mtlclwrob62l", "content": "\ud83d\uddb2\ufe0f #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia\n\nGitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure\n\nLeer M\u00e1s / Read More...", "creation_timestamp": "2026-08-21T08:08:22.352297Z"}, {"uuid": "eaff705f-f0f0-4a7a-b020-d12434f6e13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19195", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117059799868254552", "content": "CVE-2026-19195 - Local privilege escalation in V-Secure Jingyun Antivirus via ZyArk.sys improper access controls. CVSS 7.8. Exploit public, no patch. Update or isolate now. #CVE #infosec #cybersecurity\nhttps://www.valtersit.com/cve/CVE-2026-19195/", "creation_timestamp": "2026-08-08T12:06:35.685705Z"}, {"uuid": "4e6fa796-da42-430a-9ee6-032b327f1eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19338", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117060127407448485", "content": "Some increased actor activities are shown targeting automateyournetwork MCPyATS (CVE-2026-19338) https://vuldb.com/vuln/387174/cti", "creation_timestamp": "2026-08-08T13:29:52.185689Z"}, {"uuid": "61bb6377-5698-4b6f-9919-11cf2fb750ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19341", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117060966342443793", "content": "A new vulnerability with increased severity was disclosed for UTT HiPER 1200GW (CVE-2026-19341) https://vuldb.com/vuln/387177", "creation_timestamp": "2026-08-08T17:03:13.277112Z"}, {"uuid": "4a4fc7b5-5a9b-46e4-8498-4656f316d056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19768", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt2jqhra4x2l", "content": "\ud83d\udfe0 CVE-2026-19768 - High (8.1)\n\nImproper control of generation of code ('Code Injection') in the settings feature in Devolutions ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19768/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T16:00:55.747036Z"}, {"uuid": "4cba7f21-020f-4a7a-b0b2-08a944c2caae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19085", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/heoddbfwkkzeu", "content": "CVE-2026-19085 - Copy & Delete Posts\nCVE ID : CVE-2026-19085\n \n Published : Aug. 21, 2026, 7:16 a.m. | 39\u00a0minutes ago\n \n Description : The Duplicate Post WordPress plugin before 1.5.6 does not check that a user may read the content of a post before duplicating it, allowing use...", "creation_timestamp": "2026-08-21T08:13:27.209746Z"}, {"uuid": "f61a851f-b956-4831-8077-7482cbfc33fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtlcvaaeez2i", "content": "CVE-2026-19478 enables unauthenticated code injection in GitLab to modify or delete public projects and rewrite data, with rapid real-world exploitation after disclosure.\n", "creation_timestamp": "2026-08-21T08:13:34.274794Z"}, {"uuid": "d7d8685a-c7a5-439d-bb43-d0778ccc9fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mtlcvbk2pz27", "content": "CVE-2026-19478 enables unauthenticated code injection in GitLab to modify or delete public projects and rewrite data, with rapid real-world exploitation after disclosure.\n", "creation_timestamp": "2026-08-21T08:13:36.266430Z"}, {"uuid": "ef348819-d51a-4395-8ad5-4c6863ef6ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19768", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt2jt2aj3k2n", "content": "Devolutions PowerShell Universal 2026.2.3\u4ee5\u524d\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u8a2d\u5b9a\u7ba1\u7406\u8005\u304c\u4e0d\u6b63\u306a\u8a2d\u5b9a\u5024\u3067PowerShell\u30b3\u30fc\u30c9\u3092\u6ce8\u5165\u3057\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19768 CVSS 8.1 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-19768", "creation_timestamp": "2026-08-14T16:02:21.558163Z"}, {"uuid": "80e028dd-ab33-45da-aba6-1670e8984363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19884", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mt2jtuj4xd2p", "content": "Opening a booby-trapped code repository can run an attacker's commands in editors built on Eclipse Theia (the framework under Arduino IDE 2.x and other tools).\n\nA crafted git config runs on folder open, no trust prompt. CVE-2026-19884, CVSS 8.4.\n\nFix: update to Theia 1.70.0.", "creation_timestamp": "2026-08-14T16:02:49.077193Z"}, {"uuid": "d38373b4-ee73-4834-a317-6b5a24baa649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mtldbi5ims23", "content": "Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490)\n\nwww.helpnetsecurity.com/2026/08/21/c...\n\n#Kyberturvallisuus #Haavoittuvuus #AktiivinenHyv\u00e4ksik\u00e4ytt\u00f6", "creation_timestamp": "2026-08-21T08:20:26.483961Z"}, {"uuid": "b794aa75-794e-486c-a533-51d762fbaa3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mtldg7ivb52e", "content": "A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-19478 (CVS...\n\n\ud83d\udd17 https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html", "creation_timestamp": "2026-08-21T08:23:04.521512Z"}, {"uuid": "dcf5f166-1420-4ed7-9abb-8ded1cefc95f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/qubblelabs.com/post/3mtjdbnn5hk2f", "content": "GitLab\u2019s CVE-2026-19478 is a zero-click flaw with no technical details, leaving self-managed instances defenseless. Like XZ Utils, this breach erodes trust\u2014silently. The next backdoor is already in. (Source: DarkReading)", "creation_timestamp": "2026-08-20T13:15:11.933892Z"}, {"uuid": "68205e77-4273-4d44-a633-55420863c9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19884", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2l5gf2j3lvsj3", "content": "CVE-2026-19884 - Eclipse Theia Git Extension Arbitrary Command Execution Vulnerability\nCVE ID : CVE-2026-19884\n \n Published : Aug. 14, 2026, 3:32 p.m. | 40\u00a0minutes ago\n \n Description : In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control...", "creation_timestamp": "2026-08-14T16:27:12.658930Z"}, {"uuid": "0008cf0f-cb41-476c-926d-4794af848720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mthbul4xax2l", "content": "CVE-2026-19478 is trending. Hype score 5, currently #10 on cvemon.\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19478", "creation_timestamp": "2026-08-19T17:44:39.178787Z"}, {"uuid": "df3ba1f5-46c5-4f19-a04f-b3020c50851a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19790", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mt2nngi7wu2o", "content": "CVE-2026-19790 - Critical RCE in Tenda G0 router via stack buffer overflow in formSetPortMirror. Remote exploit public. CVSS 8.8. Unpatched\u2014disable WAN management or isolate now. #CVE #Tenda #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-19790/", "creation_timestamp": "2026-08-14T17:10:47.621890Z"}, {"uuid": "736daae2-a866-4dc0-8f90-c34141bc5966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19790", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117094970204634455", "content": "CVE-2026-19790 - Critical RCE in Tenda G0 router via stack buffer overflow in formSetPortMirror. Remote exploit public. CVSS 8.8. Unpatched\u2014disable WAN management or isolate now. #CVE #Tenda #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19790/", "creation_timestamp": "2026-08-14T17:10:52.461751Z"}, {"uuid": "adc07493-05ac-4ac6-8ac9-3f92ab7e223a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19626", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt2ptnxcbr25", "content": "CVE-2026-19626 - security center\nA security flaw in Tenable Security Center's report generation feature could allow an authorized user to execute malicious code on the system. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#securitycenter #tenable #CVE #infosec", "creation_timestamp": "2026-08-14T17:50:04.368917Z"}, {"uuid": "a8f9dddb-93f8-4ae4-b05a-a60c3e87b3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19983", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtbkztffkq2m", "content": "CVE-2026-19983 - Critical OS command injection in GL.iNet routers (A1300, AX1800, MT3000, etc.) via NAS service. CVSS 8.3. Remote exploitation possible. Unpatched in 4.8.x - upgrade to 4.9.0 now. #CVE #infosec #GLiNet\n\nhttps://www.valtersit.com/cve/CVE-2026-19983/", "creation_timestamp": "2026-08-17T11:12:41.204852Z"}, {"uuid": "ac55444c-816a-4713-93a0-6ddd000a32d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19983", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117110548754057423", "content": "CVE-2026-19983 - Critical OS command injection in GL.iNet routers (A1300, AX1800, MT3000, etc.) via NAS service. CVSS 8.3. Remote exploitation possible. Unpatched in 4.8.x - upgrade to 4.9.0 now. #CVE #infosec #GLiNet\nhttps://www.valtersit.com/cve/CVE-2026-19983/", "creation_timestamp": "2026-08-17T11:12:42.844264Z"}, {"uuid": "f5c59cf4-ee5f-4aca-9834-945fce3b59da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19195", "type": "seen", "source": "https://t.me/GithubRedTeam/97246", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19195-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a patrickt2017\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-09 03:40:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19195 Proof of Concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-09T05:00:03.613000Z"}, {"uuid": "0bd90286-9619-4cb4-a06f-7023fd55a2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19193", "type": "seen", "source": "https://t.me/GithubRedTeam/97247", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19193-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a patrickt2017\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-09 03:13:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19193 Proof of Concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-09T05:00:03.674605Z"}, {"uuid": "ae0680ab-f853-4b23-a9e0-3c3311f87c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19579", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117083361056333185", "content": "Broadcom has a new advisory for five vulnerabilities, two of them critical https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nPosted yesterday:\nTenable Research advisories: CVE-2026-19579: Snipe-IT Checkout Request Cancellation IDOR https://www.tenable.com/security/research/tra-2026-54 @tenable $infosec #vulnerability", "creation_timestamp": "2026-08-12T15:58:29.583168Z"}, {"uuid": "44bb0420-f083-453d-8a46-16eaf33af927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19844", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt2qgnnl262l", "content": "\ud83d\udfe0 CVE-2026-19844 - High (8.8)\n\nA vulnerability was found in TOTOLINK A800R 4.1.2cu.5137_B20200730. The impacted element is the f...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19844/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T18:00:42.148131Z"}, {"uuid": "b60db5df-c05d-47a7-99af-2a19fb9f3bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mtnofnux7c2q", "content": "Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490)\n\nCitrix has patched two vulnerabilities in NetScaler ADC and NetScaler Gateway, including a critical authentication bypass flaw tracked as CVE-2026-19490, and is urging customers to upgrade aff\u2026\n#hackernews #news", "creation_timestamp": "2026-08-22T06:44:56.148545Z"}, {"uuid": "c863097c-ec07-4f62-8fdf-1cdbd776383a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19845", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt2qguq7zv2o", "content": "\ud83d\udfe0 CVE-2026-19845 - High (8.8)\n\nA vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the functio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19845/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T18:00:49.795877Z"}, {"uuid": "0c52aed5-2b99-4f64-af26-89d9719d0b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19811", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mt2qlh2amg2t", "content": "CVE-2026-19811 - Critical stack buffer overflow in TOTOLINK A800R routers via setIpQosRules. Remote RCE possible, CVSS 8.8. Public exploit available, unpatched. Update firmware or isolate device now. #CVE #IoT #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-19811/", "creation_timestamp": "2026-08-14T18:03:22.354171Z"}, {"uuid": "4937ba6d-bd93-4718-baeb-181a05d49033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19811", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117095176751829032", "content": "CVE-2026-19811 - Critical stack buffer overflow in TOTOLINK A800R routers via setIpQosRules. Remote RCE possible, CVSS 8.8. Public exploit available, unpatched. Update firmware or isolate device now. #CVE #IoT #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19811/", "creation_timestamp": "2026-08-14T18:03:24.659536Z"}, {"uuid": "47c659c9-c56f-457b-96b9-9c2ee9b6e037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtjfg43cln2l", "content": "NetScaler\u2019s CVE-2026-19490 lets attackers bypass auth\u2014update now if using Gateway or AAA configs. #NetScaler #Citrix #Vulnerability #AuthBypass #Security #VPN #CVE #ZeroTrust https://thedailytechfeed.com/critical-netscaler-flaw-lets-attackers-bypass-authentication/", "creation_timestamp": "2026-08-20T13:53:28.664637Z"}, {"uuid": "8308e2a3-4595-4baf-90c9-c6449ed25d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mteytxefll2h", "content": "GitLab CVE-2026-19478: a critical vulnerability lets unauthenticated attackers modify or delete public projects in one request. watchTowr reproduced it within minutes using Project Red, before any public exploit exis\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2089798514662363151)", "creation_timestamp": "2026-08-18T19:57:55.590191Z"}, {"uuid": "772ca0a4-3f36-4d82-bce5-411bb5b49021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/ctinow/255488", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure\nhttps://ift.tt/ue9k2NB", "creation_timestamp": "2026-08-21T09:00:04.763041Z"}, {"uuid": "6120677c-0a49-4df4-94e2-4ce1c6f011d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mtlfklgdzd2q", "content": "GitLab CVE-2026-19478 \u304c\u516c\u958b\u76f4\u5f8c\u304b\u3089\u60aa\u7528\u3055\u308c\u308b\n\nGitLab CVE-2026-19478 \u304c\u3059\u3067\u306b\u5b9f\u969b\u306e\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3002\u8a8d\u8a3c\u306a\u3057\u3067\u7279\u5b9a\u6761\u4ef6\u4e0b\u306e\u30d1\u30d6\u30ea\u30c3\u30af\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3092\u6539\u3056\u3093\u30fb\u524a\u9664\u53ef\u80fd\u3002\u65e9\u6025\u306a\u30d1\u30c3\u30c1\u9069\u7528\u304c\u5fc5\u9808\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-08-21T09:01:37.193150Z"}, {"uuid": "b510cddf-05d5-4116-8b95-92231bf35590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19681", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt2tqtsflm25", "content": "CVE-2026-19681 - security center\nAdobe Security Center has a vulnerability that allows attackers to execute arbitrary commands on the system if a malicious file is uploaded. This could potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#securitycenter #tenable #CVE #infosec", "creation_timestamp": "2026-08-14T19:00:04.661935Z"}, {"uuid": "fe1fd8d8-cae4-4dac-9b55-49ec3e3e8779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19682", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt2tqv4xvx24", "content": "CVE-2026-19682 - security center\nAdobe Security Center is at risk of attackers executing unauthorized commands on its system. This could lead to sensitive data exposure or system compromise. Adobe\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#securitycenter #tenable #CVE #infosec", "creation_timestamp": "2026-08-14T19:00:06.622071Z"}, {"uuid": "cbd0efd1-6019-4bd0-867f-2f05d6c3823d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mtlgmyoxwa2d", "content": "GitLab CVE-2026-19478 Under Active Exploitation \u2014 Patch Immediately\n\nhttps://blindthoughts.com/gitlab-cve-2026-19478-active-exploitation\n\n#gitlab #cve #codeinjection #vulnerability #patchnow", "creation_timestamp": "2026-08-21T09:20:32.629061Z"}, {"uuid": "ebfc0f78-2b45-4291-ad3f-e8746369b69b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19385", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtjg6j5euc24", "content": "\ud83d\udccc CVE-2026-19385 - Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system... https://www.cyberhub.blog/cves/CVE-2026-19385", "creation_timestamp": "2026-08-20T14:07:06.945119Z"}, {"uuid": "50a2bbff-33ee-4961-a60e-6b2ac7e9e028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html", "content": "A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr.\n\nThe vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring", "creation_timestamp": "2026-08-21T10:00:49.423920Z"}, {"uuid": "751de32e-3d9e-4d94-8543-165c9f3d0a4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19188", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt2ucr7hjs24", "content": "CVE-2026-19188 - haiwell iot cloud hmi gateway\nAn attacker can exploit a weakness in the Haiwell IoT Cloud HMI Gateway, potentially allowing them to access sensitive areas of the system. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#haiwell #CVE #infosec", "creation_timestamp": "2026-08-14T19:10:05.784078Z"}, {"uuid": "ee9af98a-e5bd-4416-a10a-2c51c211ad53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19164", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msmwmj3aar27", "content": "CVE-2026-19164 - chromium\nGoogle Chrome's security feature to isolate malicious code was bypassed by a crafted HTML page. This allowed a hacker to potentially escape the isolated area and access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#chromium #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-09T06:16:14.966626Z"}, {"uuid": "324f732c-fd82-44a1-9ef6-e3f905b41093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19560", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-67", "content": "", "creation_timestamp": "2026-08-12T16:45:02.752874Z"}, {"uuid": "68094dba-7b6f-42b5-bc87-12a9f0bde525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19981", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtbnv5ky6e2q", "content": "CVE-2026-19981 - OS Command Injection in GL.iNet routers (Wi-Fi Timer feature). Remote attack, CVSS 7.4. Affects many models up to 4.8.x. Unpatched - update immediately. #CVE #GLiNet #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-19981/", "creation_timestamp": "2026-08-17T12:03:44.724110Z"}, {"uuid": "707b7a15-3a20-4ddf-afa7-d8218123c85d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19175", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msmwtnl3h22n", "content": "CVE-2026-19175 - chromium\nA security issue in Google Chrome's payment system could allow an attacker to escape the browser's security sandbox. This could potentially allow the attacker to access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#chromium #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-09T06:18:04.448761Z"}, {"uuid": "b2c16789-4ecf-409c-9aee-b9ab00a8cce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19559", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-67", "content": "", "creation_timestamp": "2026-08-12T16:45:05.234153Z"}, {"uuid": "0690b5ef-94a5-4859-95b4-0cc01900b918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19558", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-67", "content": "", "creation_timestamp": "2026-08-12T16:45:07.430458Z"}, {"uuid": "f5d5136a-e48f-429b-951a-579314cf4995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19557", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-67", "content": "", "creation_timestamp": "2026-08-12T16:45:09.757327Z"}, {"uuid": "003109ae-876a-4f8e-a8a4-c94558bfbc69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19556", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-67", "content": "", "creation_timestamp": "2026-08-12T16:45:12.025265Z"}, {"uuid": "529cbe2c-79c2-4dec-9745-f9e35f97ae00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19981", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117110749563253877", "content": "CVE-2026-19981 - OS Command Injection in GL.iNet routers (Wi-Fi Timer feature). Remote attack, CVSS 7.4. Affects many models up to 4.8.x. Unpatched - update immediately. #CVE #GLiNet #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19981/", "creation_timestamp": "2026-08-17T12:03:52.744283Z"}, {"uuid": "faa2be7a-410f-4bef-bc40-43e6b997741e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19188", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g5i4mtqg57jvs", "content": "CVE-2026-19188 - Haiwell IoT Cloud HMI Gateway OS Command Injection\nCVE ID : CVE-2026-19188\n \n Published : Aug. 14, 2026, 6:20 p.m. | 14\u00a0minutes ago\n \n Description : A critical OS command injection vulnerability has been identified in the\n Haiwell IoT Cloud HMI Gateway product...", "creation_timestamp": "2026-08-14T19:24:33.380869Z"}, {"uuid": "c0728389-af18-4647-b8b5-24355c92cf76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mtlj47afss2f", "content": "A critical GitLab vulnerability (CVE-2026-19478, CVSS 9.4) enables unauthenticated attackers to modify or delete public projects via GraphQL injection. Exploitation [\u2026]", "creation_timestamp": "2026-08-21T10:04:50.717262Z"}, {"uuid": "48e0b1bc-d5da-4e3a-a92a-22898b51eb22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mtjh4pdrvw2f", "content": "Citrix released updates for NetScaler ADC/Gateway to fix CVE-2026-19489 and CVE-2026-19490, including a critical authentication bypass under specific SIP ALG and SAML conditions.\n", "creation_timestamp": "2026-08-20T14:24:00.838588Z"}, {"uuid": "b4f7065c-c6de-473c-aa1c-773d68f52b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mtjh4pdrvw2f", "content": "Citrix released updates for NetScaler ADC/Gateway to fix CVE-2026-19489 and CVE-2026-19490, including a critical authentication bypass under specific SIP ALG and SAML conditions.\n", "creation_timestamp": "2026-08-20T14:24:00.890916Z"}, {"uuid": "dd941e8d-8ca2-49d4-b1fc-ccd61ad218f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19190", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msn7wj4u3225", "content": "\ud83d\udfe0 CVE-2026-19190 - High (7.8)\n\nA weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19190/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-09T09:00:46.525194Z"}, {"uuid": "063c9174-3f0e-4b72-aa14-320de58add0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mtjh5ysq6j2a", "content": "Citrix released updates for NetScaler ADC/Gateway to fix CVE-2026-19489 and CVE-2026-19490, including a critical authentication bypass under specific SIP ALG and SAML conditions.\n", "creation_timestamp": "2026-08-20T14:24:48.999992Z"}, {"uuid": "c009c5fd-c669-4707-9449-17b9f165ce00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mtjh5ysq6j2a", "content": "Citrix released updates for NetScaler ADC/Gateway to fix CVE-2026-19489 and CVE-2026-19490, including a critical authentication bypass under specific SIP ALG and SAML conditions.\n", "creation_timestamp": "2026-08-20T14:24:49.049635Z"}, {"uuid": "f54437ee-9353-4c43-8cb0-1e9cbf4b23b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6ty4r42d", "content": "\ud83d\udd17 CVE : CVE-2026-19489, CVE-2026-19490", "creation_timestamp": "2026-08-20T14:25:11.902716Z"}, {"uuid": "86e5678f-d12e-4992-9be5-a947b2133f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6ty4r42d", "content": "\ud83d\udd17 CVE : CVE-2026-19489, CVE-2026-19490", "creation_timestamp": "2026-08-20T14:25:11.982350Z"}, {"uuid": "e1f1f5dc-1221-442f-bfe3-1bb34c71092b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtjh7ftf4b2n", "content": "Citrix released updates for NetScaler ADC/Gateway to fix CVE-2026-19489 and CVE-2026-19490, including a critical authentication bypass under specific SIP ALG and SAML conditions.\n", "creation_timestamp": "2026-08-20T14:25:31.660522Z"}, {"uuid": "99e43b62-839d-4284-816a-b8218240fccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtjh7ftf4b2n", "content": "Citrix released updates for NetScaler ADC/Gateway to fix CVE-2026-19489 and CVE-2026-19490, including a critical authentication bypass under specific SIP ALG and SAML conditions.\n", "creation_timestamp": "2026-08-20T14:25:31.722779Z"}, {"uuid": "65dfff28-ab86-4fb3-b757-0a7a30e35d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/CyberDispatch/2636", "content": "Attackers are exploiting a GitLab flaw days after disclosure.\n\nCVE-2026-19478 lets unauthenticated attackers modify or delete public projects and rewrite their data under certain conditions. watchTowr says it saw in-the-wild exploitation against its honeypots.", "creation_timestamp": "2026-08-29T20:00:04.750224Z"}, {"uuid": "a95c6c1b-12b6-4d10-8725-ccf39799e1fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://t.me/CyberDispatch/2640", "content": "Critical NetScaler flaw can bypass authentication on certain Gateway and AAA configurations.\n\nCitrix patched CVE-2026-19490 (CVSS 9.3). Exposure depends on the NetScaler version and configuration, with SAML required in some cases.", "creation_timestamp": "2026-08-29T20:00:04.841071Z"}, {"uuid": "ec01aee2-ddee-413c-8deb-79450fa5678b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8be740f7-f66c-4c6a-a3a2-807efdee9625", "content": "", "creation_timestamp": "2026-08-22T08:00:30.766385Z"}, {"uuid": "d295c556-0d87-46ce-a4b9-3fcda43faf10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/artia13city.bsky.social/post/3mtmv73yvgd2c", "content": "Vuln\u00e9rabilit\u00e9 Citrix NetScaler (CVE-2026-19490) : contournement de l'authentification d\u00e9tect\u00e9. \nLire l'article complet sur : artia13.city \n#artia13\u00a0#Technologie  ", "creation_timestamp": "2026-08-21T23:13:52.206302Z"}, {"uuid": "495d5361-e4ef-4dd9-b84a-8214c11cc2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mtodeoeyyx2q", "content": "\ud83d\udce2 [VULN] Citrix NetScaler (CVE-2026-19490) : cette faille permet de contourner l'authentification\n\nLe 19 ao\u00fbt 2026, Citrix a publi\u00e9 un nouveau bulletin de s\u00e9curit\u00e9 pour NetScaler ADC et NetScaler Gateway.\n\n#CVE #Cyberveille", "creation_timestamp": "2026-08-22T13:00:11.192885Z"}, {"uuid": "14f87b8d-087c-4f65-82ac-dd3842f2e97e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19188", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtbqvgsxo32e", "content": "A critical Haiwell HMI Gateway flaw (CVE-2026-19188) allows remote attackers to execute arbitrary OS commands with root privileges.\n\n#Haiwell #CVE202619188 #Vulnerability #CISA", "creation_timestamp": "2026-08-17T12:57:36.418520Z"}, {"uuid": "6ed7f1cf-bd8a-4d90-830c-7579d2fff55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19089", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvssyzrsq25", "content": "CVE-2026-19089 - product input fields for woocommerce\nThe WooCommerce Product Input Fields plugin for WordPress allows attackers to upload any type of file, potentially allowing them to execute malicious code on a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-12T19:00:04.755214Z"}, {"uuid": "ab3b9c9a-657e-4a89-825b-d941323602b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19188", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt34b2hdnq2j", "content": "Haiwell IoT Cloud HMI Gateway\u306eOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u306b\u3088\u308a\u3001root\u6a29\u9650\u3067\u306e\u4efb\u610f\u306e\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\u306a\u308b\u6050\u308c\u304c\u3042\u308b\u3002\nCVE-2026-19188 CVSS 10.0 | CRITICAL", "creation_timestamp": "2026-08-14T21:32:18.369018Z"}, {"uuid": "1b2f1039-172b-441b-88f3-bed42e6ca356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19281", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3msnisozdov2l", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-19281\n\nA security flaw has been discovered in adolfosalasgomez3011 slidev-builder-mcp 2.1.0. This affects the function generateChart of the file src/tools...", "creation_timestamp": "2026-08-09T11:39:39.032375Z"}, {"uuid": "5e94c469-da48-4bca-b6bf-25864c9d7ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19883", "type": "seen", "source": "https://gist.github.com/ichintu/949a60d8b386934bcc70d3af45608090", "content": "**CVE-2026-19883 \u2013 WPeMatico RSS Feed Fetcher (\u2264\u202f2.8.24)**  \n- **Flaw:** Unchecked capability in `wpematico_import_settings` lets any authenticated user (Subscriber+) change any plugin option.  \n- **Impact:** An attacker can alter critical settings\u2014e.g., set default user role to Administrator or enable registration\u2014to gain administrative access.  \n- **Severity:** 8.8 (High)  \n- **Published:** Aug\u202f22\u202f2026, 3:16\u202fa.m.", "creation_timestamp": "2026-08-22T08:01:31.137319Z"}, {"uuid": "b1132a35-db16-44a4-9642-ef81db2b273f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19847", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117096138473317703", "content": "Attention, elevated activities detected targeting TOTOLINK A800R (CVE-2026-19847) https://vuldb.com/vuln/389983/cti", "creation_timestamp": "2026-08-14T22:07:57.372563Z"}, {"uuid": "d678fbb7-3713-4d1b-aac2-5af590469e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19348", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msnjxultsu2k", "content": "Shenzhen Aitemi M300 Wi-Fi Repeater hit by CRITICAL command injection (CVE-2026-19348). Public exploit code, no patch. Restrict management access & monitor endpoints. https://radar.offseq.com/threat/cve-2026-19348-command-injection-in-shenzhen-aitemi-m300-wi-fi-repeater-50170c9de7b315c0 #OffSeq #...", "creation_timestamp": "2026-08-09T12:00:26.923419Z"}, {"uuid": "c4e51488-719e-4a6b-9fe7-27463e674e80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19311", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msvw7f5fq224", "content": "\ud83d\udfe0 CVE-2026-19311 - High (8.1)\n\nMissing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19311/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T20:00:41.963715Z"}, {"uuid": "6ecd1b73-7cfe-4990-9daf-fb5a14468ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19348", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msnjy52jnm23", "content": "\ud83d\udd34 CVE-2026-19348 - Critical (9.8)\n\nA security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19348/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-09T12:00:36.110240Z"}, {"uuid": "18958480-1aa0-4e12-ae0b-e9105a915258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19351", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3msnmvbvrda2j", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-19351](https://github.com/dresende/node-sql-query/)\nA vulnerability was found in dresen...\nhttps://github.com/dresende/node-sql-query/ #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-08-09T12:52:41.093956Z"}, {"uuid": "e6d995ce-26b1-4a72-9550-44ba4bee152d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19195", "type": "published-proof-of-concept", "source": "Telegram/VAAzSGKzAQvYxwRme_wz7wzWwcveJmhSJJnhaglxzv2vacM", "content": "", "creation_timestamp": "2026-08-09T14:02:14.822796Z"}, {"uuid": "204c2132-230f-4c32-a829-726512b3e522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19193", "type": "published-proof-of-concept", "source": "Telegram/VAAzSGKzAQvYxwRme_wz7wzWwcveJmhSJJnhaglxzv2vacM", "content": "", "creation_timestamp": "2026-08-09T14:02:14.920165Z"}, {"uuid": "f9ff89ae-3040-4f4d-b925-9cd0b4c2d918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19354", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/a4ovjan3ipnsr", "content": "CVE-2026-19354 - lock-upme OPMS IN Clause message.go sql injection\nCVE ID : CVE-2026-19354\n \n Published : Aug. 9, 2026, 1:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09. The impacted ...", "creation_timestamp": "2026-08-09T14:47:00.026227Z"}, {"uuid": "6011ed1d-3e34-4a5c-853a-acd3b9fe2c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19353", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6xlhftogh2yzv", "content": "CVE-2026-19353 - DedeCMS Installation Wizard index.php _4_Setup file inclusion\nCVE ID : CVE-2026-19353\n \n Published : Aug. 9, 2026, 1:16 p.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : A vulnerability has been found in DedeCMS up to 5.7.118 UTF8SP2. The affected element is the ...", "creation_timestamp": "2026-08-09T14:52:59.275657Z"}, {"uuid": "cb76997f-52d2-4a32-bf90-6ab6d721ce7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19355", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/42rettehsnsh2", "content": "CVE-2026-19355 - MingSoft MCMS ms-mdiy list.do ModelDataImpl.queryDiyFormData sql injection\nCVE ID : CVE-2026-19355\n \n Published : Aug. 9, 2026, 1:30 p.m. | 58\u00a0minutes ago\n \n Description : A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affects the function M...", "creation_timestamp": "2026-08-09T14:58:59.074973Z"}, {"uuid": "9e7b7f13-9606-4023-b371-37ceb57af2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19348", "type": "seen", "source": "https://gist.github.com/ichintu/1098501537dbd22f32fe457de414c0b1", "content": "**Cyber Threat Summary \u2013 Aug\u202f9\u202f2026**  \n- **CVE-2026-19348** \u2013 Command injection in the `sprintf` call of `/protocol.csp` on the Shenzhen Aitemi M300 Wi\u2011Fi Repeater (r0\u2011ea7890a).  \n- Attack vectors: tampering with `enable`, `name`, or `mac` parameters in the SMAC filter configuration URL.  \n- Enables arbitrary remote command execution; public exploit available.  \n- Severity: 10.0 (Critical).", "creation_timestamp": "2026-08-09T16:00:46.130248Z"}, {"uuid": "915d6cab-e819-42e3-aaa6-53718cc3045d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19362", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gln62n3nhkkk3", "content": "CVE-2026-19362 - lmammino oidc-authorizer Authorization Header Parsing parse_token_from_header.rs parse_token_from_header denial of service\nCVE ID : CVE-2026-19362\n \n Published : Aug. 9, 2026, 5:30 p.m. | 58\u00a0minutes ago\n \n Description : A vulnerability has been found in lmammi...", "creation_timestamp": "2026-08-09T18:42:08.651748Z"}, {"uuid": "cb3fa87a-f63f-437e-94bf-d54a7a5d456e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19363", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3qfltwirughs3", "content": "CVE-2026-19363 - lmammino oidc-authorizer Fixed Message handler.rs unwrap deserialization\nCVE ID : CVE-2026-19363\n \n Published : Aug. 9, 2026, 5:45 p.m. | 43\u00a0minutes ago\n \n Description : A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impacted is the functio...", "creation_timestamp": "2026-08-09T18:48:07.371415Z"}, {"uuid": "7cd1fdcd-4812-4352-82f3-86774e49ff2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/a6vkzdqkulrsw", "content": "CVE-2026-19364 - itsourcecode Hospital Management System viewdoctorconsultancycharge.php sql injection\nCVE ID : CVE-2026-19364\n \n Published : Aug. 9, 2026, 6 p.m. | 28\u00a0minutes ago\n \n Description : A vulnerability was determined in itsourcecode Hospital Management System 1.0. T...", "creation_timestamp": "2026-08-09T18:59:09.135046Z"}, {"uuid": "4314af7c-290b-4f75-a611-de1a38d199a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19358", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-19358", "content": "", "creation_timestamp": "2026-08-09T20:15:03.965673Z"}, {"uuid": "6f2fa4ba-649e-487e-b23d-bf55cb79e367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19369", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dzrqtrm37fwwb", "content": "CVE-2026-19369 - KS-GEN-AI jira-mcp-server add_attachment_from_public_url index.ts axios.get server-side request forgery\nCVE ID : CVE-2026-19369\n \n Published : Aug. 9, 2026, 9:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : A vulnerability was found in KS-GEN-AI jira-mcp-ser...", "creation_timestamp": "2026-08-09T22:42:17.875857Z"}, {"uuid": "838accc3-4516-4370-95dd-4d05ffe1aa18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19368", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/idhvgetbit6xd", "content": "CVE-2026-19368 - PV-Bhat gemsuite-mcp gemini_search unified-gemini.ts path traversal\nCVE ID : CVE-2026-19368\n \n Published : Aug. 9, 2026, 9:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Affected by this issue is some...", "creation_timestamp": "2026-08-09T22:48:16.655303Z"}, {"uuid": "e5ed7368-5adb-4819-bf18-9b89ef5fe823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19370", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jea32iuljgabn", "content": "CVE-2026-19370 - bartekke8it56w2 new-mcp geminithinking index.ts fs.readFileSync path traversal\nCVE ID : CVE-2026-19370\n \n Published : Aug. 9, 2026, 10 p.m. | 29\u00a0minutes ago\n \n Description : A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the func...", "creation_timestamp": "2026-08-09T22:50:16.356731Z"}, {"uuid": "2446e579-38d7-4251-9b05-227c04b64487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19909", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt3b7jezcq2u", "content": "\ud83d\udfe0 CVE-2026-19909 - High (7.5)\n\nPAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vuln...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19909/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-14T23:00:56.707000Z"}, {"uuid": "2b04d2de-be59-4e38-be43-04019fd5aee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19789", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mt3bfyqdiz2t", "content": "CVE-2026-19789 \u2013 Critical stack buffer overflow in Tenda AC1206 via /goform/WifiGuestSet. Remote RCE possible. CVSS 8.8. Unpatched. Update or isolate now. #CVE #Tenda #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-19789/", "creation_timestamp": "2026-08-14T23:04:33.117859Z"}, {"uuid": "54140197-fa9e-4c6a-888d-8b4b2b480de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19789", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117096361035902727", "content": "CVE-2026-19789 \u2013 Critical stack buffer overflow in Tenda AC1206 via /goform/WifiGuestSet. Remote RCE possible. CVSS 8.8. Unpatched. Update or isolate now. #CVE #Tenda #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19789/", "creation_timestamp": "2026-08-14T23:04:39.369992Z"}, {"uuid": "59b8e8cb-017f-409e-9c61-9c153e04cbba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19846", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117096362627838188", "content": "It is possible to see elevated activities targeting TOTOLINK A800R (CVE-2026-19846) https://vuldb.com/vuln/389982/cti", "creation_timestamp": "2026-08-14T23:04:57.823145Z"}, {"uuid": "ed05da59-f713-45ac-a72e-3a22601d9a37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "Telegram/vEbmjoRYt04v0ZC0euMZdfrOphLUWqQQy7SM_HrVY46dKQ", "content": "", "creation_timestamp": "2026-08-21T11:00:03.986897Z"}, {"uuid": "48549d67-a3a8-451d-9167-a37e90bcf5d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19195", "type": "published-proof-of-concept", "source": "Telegram/VAAzSGKzAQvYxwRme_wz7wzWwcveJmhSJJnhaglxzv2vacM", "content": "", "creation_timestamp": "2026-08-10T00:00:09.293324Z"}, {"uuid": "593ac9f4-d9c2-4135-8dd5-d43008611270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19193", "type": "published-proof-of-concept", "source": "Telegram/VAAzSGKzAQvYxwRme_wz7wzWwcveJmhSJJnhaglxzv2vacM", "content": "", "creation_timestamp": "2026-08-10T00:00:09.343477Z"}, {"uuid": "a96139e8-ab5a-463e-899a-aa7aefe0f273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19193", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97247", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19193-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a patrickt2017\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-09 03:13:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19193 Proof of Concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-10T00:00:30.805238Z"}, {"uuid": "1c7db578-b1e6-464d-b335-fcbfdcb0a3c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mtlmqin76v2t", "content": "Citrix is urging NetScaler ADC/Gateway admins to patch now: CVE-2026-19490, a critical authentication bypass (CVSS 9.3), lets remote attackers skip login checks with no credentials on SSL VPN, ICA Proxy or AAA server setups. No active exploitation confirmed yet, per Rapid7.", "creation_timestamp": "2026-08-21T11:09:52.295873Z"}, {"uuid": "80e0de69-1ee3-4c77-95e2-0cac10ea956c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19656", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvzjlmxpg2b", "content": "CVE-2026-19656 - scadalts\nA flaw in ScadaLTS 2.7.8.1 allows any authenticated user to execute system commands on the host, potentially leading to a complete system compromise. This affects any system running\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#scadalts #CVE #infosec", "creation_timestamp": "2026-08-12T21:00:05.016458Z"}, {"uuid": "e971e0fd-9c7c-4c5a-ae4c-f5a7531052ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19478.yaml", "content": "", "creation_timestamp": "2026-08-22T00:00:08.435627Z"}, {"uuid": "4658b284-2765-4246-9866-0dcda8faa034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19195", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97246", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19195-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a patrickt2017\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-09 03:40:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19195 Proof of Concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-10T00:00:30.867135Z"}, {"uuid": "1fbfb5bf-fa93-416d-a19e-f7271affc725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19490", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mtjk7rpuj42o", "content": "\ud83d\udcf0 Citrix Minta Admin Segera Patch Dua Celah Baru di NetScaler\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/20/celah-keamanan-netscaler-cve-2026-19490-19489/\n\n#citrix #cybersecurity #keamananSiber #netscaler #vpn #vulnerability", "creation_timestamp": "2026-08-20T15:19:24.527837Z"}, {"uuid": "39aa9d69-6b60-4f26-ad9d-49564ceca95e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtlnrqt3i72y", "content": "\ud83e\udd16 CVE-2026-19478 (CVSS 9.4): code injection in GitLab under active exploitation within days of disclosure. Unauthenticated attackers can modify or delete public GitLab projects and rewrite data.\nhttps://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html", "creation_timestamp": "2026-08-21T11:28:28.205167Z"}, {"uuid": "7c7c3941-39b3-4bc5-b097-3f573c319be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19001", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msw37annab2e", "content": "CVE-2026-19001 - bi connector odbc driver\nA security flaw in the MongoDB BI Connector ODBC driver could cause the program using it to crash or behave unexpectedly. This is because the driver doesn't handle very long\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mongodb #CVE #infosec", "creation_timestamp": "2026-08-12T21:30:05.278908Z"}, {"uuid": "8909b995-4685-44ca-9858-75281ee7a6ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/threadlinqs.bsky.social/post/3mtjkk2wmgh2n", "content": "NetScaler CVE-2026-19490: Critical auth bypass (CVSS 9.3) -- 22K+ exposed gateways with no workaround. https://intel.threadlinqs.com/threat/TL-2026-2080 #ThreatIntel #CVE_2026_19490 #CVE_2026_19489 #Web", "creation_timestamp": "2026-08-20T15:25:10.430828Z"}, {"uuid": "11e5ee43-e571-4bae-9244-123935384291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19381", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117068623277375334", "content": "Kingston FURY CTRL RGB Control Software v2.0.65.0 hit by HIGH severity vuln (CVE-2026-19381, CVSS 8.5). Local attackers can escalate privileges via NTIOLib_KSFX.sys. Exploit code is public; no patch yet. Restrict local access, monitor systems. https://radar.offseq.com/threat/cve-2026-19381-improper-privilege-management-in-kingston-fury-ctrl-rgb-control-software-9a62169aad70214d #OffSeq #Vuln #Kingston", "creation_timestamp": "2026-08-10T01:30:29.340777Z"}, {"uuid": "3aaa3b28-1e42-4ad7-aae4-d0d1722cbae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19381", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msoxaf46yl2v", "content": "Kingston FURY CTRL RGB Control Software 2.0.65.0 faces a HIGH severity (CVSS 8.5) local privilege escalation flaw \u2014 CVE-2026-19381. Exploit code is public, no patch yet. Limit local access & monitor activity. https://radar.offseq.com/threat/cve-2026-19381-improper-privilege-management-in-kingston...", "creation_timestamp": "2026-08-10T01:30:31.382849Z"}, {"uuid": "c0868c8f-3d66-4c4e-ad1e-2849788754c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19654", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msw4z5fc5o24", "content": "\ud83d\udfe0 CVE-2026-19654 - High (7.5)\n\nA unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp mod...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19654/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T22:02:28.820167Z"}, {"uuid": "5d97f509-0def-45c3-9343-4e8333e72e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19001", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msw4zemw7z2l", "content": "\ud83d\udd34 CVE-2026-19001 - Critical (9.8)\n\nThe MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19001/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T22:02:36.473035Z"}, {"uuid": "9db09ee4-2251-477d-816a-26dd921e649f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19381", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msoyuzvrrh2m", "content": "\ud83d\udfe0 CVE-2026-19381 - High (7.8)\n\nA security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19381/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T02:00:02.815129Z"}, {"uuid": "33d42c7a-cadd-462f-a343-151d0c96793b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msw4zlhs4y26", "content": "\ud83d\udfe0 CVE-2026-19002 - High (8.1)\n\nA missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connect...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19002/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T22:02:44.056090Z"}, {"uuid": "1fdb5286-6b2c-42e8-be8f-c00f88edd9f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19381", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3msoyv33icn24", "content": "\ud83d\udfe0 CVE-2026-19381 - High (7.8)\n\nA security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impa...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-19381/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T02:00:03.369157Z"}, {"uuid": "5d9d7e27-4e06-4321-8214-3b5a1663800c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19383", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2fofomjudpidj", "content": "CVE-2026-19383 - saithink/saigroup SaiAdmin Plugin Upload Endpoint upload shell_exec unrestricted upload\nCVE ID : CVE-2026-19383\n \n Published : Aug. 10, 2026, 1 a.m. | 1\u00a0hour, 29\u00a0minutes ago\n \n Description : A security vulnerability has been detected in saithink/saigroup SaiAd...", "creation_timestamp": "2026-08-10T02:37:20.174105Z"}, {"uuid": "6f8f9d83-abf7-4355-85fa-1e7f541d18c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19379", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dembu6ms245lz", "content": "CVE-2026-19379 - EFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injection\nCVE ID : CVE-2026-19379\n \n Published : Aug. 10, 2026, 1:16 a.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function po...", "creation_timestamp": "2026-08-10T02:43:19.316202Z"}, {"uuid": "b078cbbe-e387-440f-bc9e-5076ea565d48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19382", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5tt34kegco3un", "content": "CVE-2026-19382 - Almico Speedfan MSR Index speedfan.sys KiSystemCall64 memory leak\nCVE ID : CVE-2026-19382\n \n Published : Aug. 10, 2026, 1:16 a.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSyst...", "creation_timestamp": "2026-08-10T02:49:19.786230Z"}, {"uuid": "bd7e4f73-ce5f-4383-bd14-9fa107a429eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19381", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/homumerbalmfr", "content": "CVE-2026-19381 - Kingston FURY CTRL RGB Control Software Driver NTIOLib_KSFX.sys privileges management\nCVE ID : CVE-2026-19381\n \n Published : Aug. 10, 2026, 1:16 a.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : A security flaw has been discovered in Kingston FURY CTRL RGB Contro...", "creation_timestamp": "2026-08-10T02:55:19.544886Z"}, {"uuid": "61cf4aac-f11b-4f3d-90b3-766d9b758273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19380", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j3s7fc7zkx4aa", "content": "CVE-2026-19380 - Mullvad wireguard.sys IOCTL AdapterState reference count\nCVE ID : CVE-2026-19380\n \n Published : Aug. 10, 2026, 1:16 a.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the funct...", "creation_timestamp": "2026-08-10T02:57:19.655363Z"}, {"uuid": "cd8e3adb-5176-44ab-b3eb-0c4e83546854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mtjlafuefs2o", "content": "\ud83d\udea8 \ud83e\udd8a  GitLab flaw exploited within two days\n\nCVE-2026-19478 lets unauthenticated attackers alter or delete public projects via #GraphQL.\n\ud83d\udd17 read more: www.securityweek.com...\n\n#ransomNews #cyberthreats #GitLab \n", "creation_timestamp": "2026-08-20T15:37:39.864301Z"}, {"uuid": "8d78a690-8659-497d-a542-d2d602351fa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19387", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117069065622079893", "content": "The severity is increased for this new vulnerability affecting Red Hat Enterprise Linux (CVE-2026-19387) https://vuldb.com/vuln/387289", "creation_timestamp": "2026-08-10T03:22:58.516652Z"}, {"uuid": "17f14790-c100-4424-943d-eedb45e237b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19387", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msp7loglun2y", "content": "\ud83d\udfe0 CVE-2026-19387 - High (7.6)\n\nA heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec elem...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19387/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T04:00:00.707297Z"}, {"uuid": "bda1c032-eb2f-4423-91ff-68818d06e813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19387", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3msp7lq2num2u", "content": "\ud83d\udfe0 CVE-2026-19387 - High (7.6)\n\nA heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec elem...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-19387/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T04:00:01.331482Z"}, {"uuid": "7c089b71-b809-4a5a-a43d-cc46f14d1af8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19556", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtbx6tdl5o2j", "content": "\ud83d\udd17 CVE : CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560, CVE-2026-72970, CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560, CVE-2026-72970", "creation_timestamp": "2026-08-17T14:50:13.180429Z"}, {"uuid": "3723b5ba-bb0d-4a3c-8290-565289a4bb13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19557", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtbx6tdl5o2j", "content": "\ud83d\udd17 CVE : CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560, CVE-2026-72970, CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560, CVE-2026-72970", "creation_timestamp": "2026-08-17T14:50:13.243850Z"}, {"uuid": "83c06f3d-4eef-4f9f-9660-cdc5be332c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19558", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtbx6tdl5o2j", "content": "\ud83d\udd17 CVE : CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560, CVE-2026-72970, CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560, CVE-2026-72970", "creation_timestamp": "2026-08-17T14:50:13.292714Z"}, {"uuid": "7ba9cc24-46a3-45e9-8540-ac448590286a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19559", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtbx6tdl5o2j", "content": "\ud83d\udd17 CVE : CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560, CVE-2026-72970, CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560, CVE-2026-72970", "creation_timestamp": "2026-08-17T14:50:13.346796Z"}, {"uuid": "455910a3-e687-4c46-b1f5-bafa43019f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19560", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtbx6tdl5o2j", "content": "\ud83d\udd17 CVE : CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560, CVE-2026-72970, CVE-2026-19556, CVE-2026-19557, CVE-2026-19558, CVE-2026-19559, CVE-2026-19560, CVE-2026-72970", "creation_timestamp": "2026-08-17T14:50:13.403447Z"}, {"uuid": "4f382343-4ae7-4aec-8f0c-300e93ea04c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19389", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117069331015574957", "content": "GStreamer gst-plugins-ugly (asfdemux) in Red Hat Enterprise Linux 10 is affected by CVE-2026-19389 (HIGH, CVSS 7.1). Parsing crafted ASF/WMV/WMA files may lead to DoS or info leaks. No patch yet \u2014 avoid untrusted media. https://radar.offseq.com/threat/cve-2026-19389-integer-overflow-or-wraparound-in-red-hat-red-hat-enterprise-linux-10-8bd45ea7a574114c #OffSeq #Linux #CVE #GStreamer", "creation_timestamp": "2026-08-10T04:30:28.437405Z"}, {"uuid": "c1bf2da0-eedb-4c8f-9783-19c8fde104d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19389", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mspbca4pis24", "content": "Red Hat Enterprise Linux 10 faces HIGH severity integer overflows in GStreamer asfdemux (CVE-2026-19389). Crafted ASF/WMV/WMA files can cause crashes/info leaks. No fix yet \u2014 avoid untrusted media. https://radar.offseq.com/threat/cve-2026-19389-integer-overflow-or-wraparound-in-red-hat-red-hat-en...", "creation_timestamp": "2026-08-10T04:30:30.309670Z"}, {"uuid": "854b8cf9-efac-474b-807f-5ab2b70a7510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19003", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mswacxxisb27", "content": "\ud83d\udfe0 CVE-2026-19003 - High (7.8)\n\nA data source definition containing an over-length file path setting may cause the MongoDB BI Con...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19003/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T23:01:39.640589Z"}, {"uuid": "1f0ecd47-17aa-4820-a06e-4405020b2d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19384", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mspcaigjkv2f", "content": "SourceCodester Simple Doctors Appointment System 1.0\u306ephp\u30d5\u30a1\u30a4\u30eb\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089ID\u5f15\u6570\u3092\u64cd\u4f5c\u3055\u308c\u3001\u60aa\u7528\u3055\u2026\nCVE-2026-19384 CVSS 7.3 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-19384", "creation_timestamp": "2026-08-10T04:47:25.550447Z"}, {"uuid": "74c99ec6-cf1e-4334-b1b3-9c45e9ab643f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19387", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mspccg57gv25", "content": "GStreamer\u306eadpcmdec\u8981\u7d20\u3067\u3001\u4e0d\u6b63\u306aWAV\u30d5\u30a1\u30a4\u30eb\u306b\u3088\u308a\u30d0\u30c3\u30d5\u30a1\u5916\u3078\u306e\u66f8\u304d\u8fbc\u307f\u304c\u767a\u751f\u3059\u308b\u53ef\u80fd\u6027\u3002\u30a2\u30d7\u30ea\u306e\u30af\u30e9\u30c3\u30b7\u30e5\u3084\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u6050\u308c\u304c\u3042\u308b\u3002\nCVE-2026-19387 CVSS 7.6 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-19387", "creation_timestamp": "2026-08-10T04:48:30.101403Z"}, {"uuid": "1296e942-5c40-4c6a-995f-46d5ad0d86fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19389", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mspce4zalf2g", "content": "GStreamer\u306eASF demuxer\u306b\u6574\u6570\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc/\u30a2\u30f3\u30c0\u30fc\u30d5\u30ed\u30fc\u8106\u5f31\u6027\u3002\u7d30\u5de5\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3067\u30a2\u30d7\u30ea\u304c\u30af\u30e9\u30c3\u30b7\u30e5\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u3001\u60c5\u5831\u6f0f\u6d29\u306e\u53ef\u80fd\u6027\u3002\nCVE-2026-19389 CVSS 7.1 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-19389", "creation_timestamp": "2026-08-10T04:49:27.157211Z"}, {"uuid": "efb6d863-43a7-46d7-a183-7746d911434d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19264", "type": "published-proof-of-concept", "source": "Telegram/5EfCxBLTvg1-4rhqcfrC1PK14OSv695QzdRUE8Ybl_gFPSI", "content": "", "creation_timestamp": "2026-08-13T00:00:10.915806Z"}, {"uuid": "2e852493-14a0-42e1-8d50-470ce770888b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-23", "content": "", "creation_timestamp": "2026-08-19T18:17:43.688661Z"}, {"uuid": "cfba7912-f34f-49cf-8960-d89b4bf41c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-23", "content": "", "creation_timestamp": "2026-08-19T18:17:45.882417Z"}, {"uuid": "25e2569a-ea05-477b-ae42-8a408ba3aa74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19264", "type": "published-proof-of-concept", "source": "Telegram/wDwm6-AY-JX6nhNni9OQWjE6Au1_mqn06OkP8toYPUyKP30", "content": "", "creation_timestamp": "2026-08-13T00:00:43.508883Z"}, {"uuid": "92113d9b-a79e-4677-88b6-ea8e6c19431a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/07b77452-0e39-4141-9d36-78ce09d36b06", "content": "", "creation_timestamp": "2026-08-21T11:38:29.129670Z"}, {"uuid": "bce5ea89-b52c-468c-8c58-548d39c5b49c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/pphm_HackerNews/2685", "content": "\ud83d\udd34 GitLab Patches Critical Unauthenticated GraphQL Vulnerability\n\nGitLab patched a critical GraphQL flaw that let unauthenticated attackers remotely modify or delete public projects on self-managed servers.\n\nGitLab pushed out an emergency patch this week to address a critical flaw, tracked as CVE-2026-19478 (CVSS score of 9.4), that could let an attacker with zero credentials remotely modify or delete public projects and user data.\n\n\u201cGitLab has remediated an issue that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.\u201d reads the advisory.", "creation_timestamp": "2026-08-22T00:00:08.778102Z"}, {"uuid": "ad46161f-8b8f-444f-b3a7-cd4933bd674d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19351", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mspzbq3juj2w", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-19351\n\nA vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this vulnerability is the function SelectQuery.from/S...", "creation_timestamp": "2026-08-10T11:39:42.837852Z"}, {"uuid": "6c25072a-cec5-4e1a-b529-d73b56889c97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19020", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gbgegon2uzx2u", "content": "CVE-2026-19020 - itsourcecode Hospital Management System servicetype.php sql injection\nCVE ID : CVE-2026-19020\n \n Published : Aug. 6, 2026, 7:45 a.m. | 35\u00a0minutes ago\n \n Description : A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by th...", "creation_timestamp": "2026-08-06T08:46:34.193488Z"}, {"uuid": "4c672625-d1ce-4601-b7f3-8548c7533404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19021", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cqhoz3infbyc4", "content": "CVE-2026-19021 - SourceCodester Computer Repair Shop Management System Master.php delete_product sql injection\nCVE ID : CVE-2026-19021\n \n Published : Aug. 6, 2026, 8 a.m. | 20\u00a0minutes ago\n \n Description : A security vulnerability has been detected in SourceCodester Computer Re...", "creation_timestamp": "2026-08-06T08:48:33.753749Z"}, {"uuid": "1c444bab-f54a-403f-bff7-6792c63e0b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19349", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcaokgnej2p", "content": "CVE-2026-19349\nCertain versions of Lemonldap::NG::Portal allow unauthorized users to bypass authentication by reusing a session cookie from the GitHub or LinkedIn backends. This only affects deployments that use these\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-17T17:40:04.993714Z"}, {"uuid": "3fac88ee-9cd7-4026-b181-855845b99780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "content": "", "creation_timestamp": "2026-08-17T18:00:05.311482Z"}, {"uuid": "836f5304-b659-4470-841c-1e8f28e77298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtfbduc6sm2v", "content": "\ud83e\udd16 CVE-2026-19478 (CVSS 9.4): unauthenticated remote modification/deletion of public projects in GitLab CE/EE via GraphQL directive. Affects 18.2-19.2, fixed in 19.2.4. Zero-click.\n\nhttps://www.darkreading.com/application-security/critical-gitlab-zero-click-flaw-mitigation-challenges", "creation_timestamp": "2026-08-18T22:29:58.793096Z"}, {"uuid": "be793d28-14e2-4f72-93bd-f51a90bc2bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19694", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g3tipdfejpl6q", "content": "CVE-2026-19694 - Heap-based Buffer Overflow in Wireshark\nCVE ID : CVE-2026-19694\n \n Published : Aug. 13, 2026, 8:04 a.m. | 30\u00a0minutes ago\n \n Description : TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service\n \n Severity: 4.7 | MEDIUM\n \n Visit the link for mo...", "creation_timestamp": "2026-08-13T08:39:33.145970Z"}, {"uuid": "51eba80b-4eb9-4358-84d5-77b3bc99ee7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19481", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3msxamlgd722l", "content": "\ud83d\udea8 High-severity security fix in @fastify/busboy@3.2.1 just released!\n\nPatches CVE-2026-19481: @fastify/busboy vulnerable to denial of service via prototype-named multipart part header\n\ngithub.com/fastify/busb...", "creation_timestamp": "2026-08-13T08:39:42.961130Z"}, {"uuid": "450cee4b-0878-43dd-bd8d-aeb33d9e7e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19429", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqgt4gzcu2u", "content": "CVE-2026-19429 - jenkins\nA security patch for Jenkins Project Jenkins is incomplete, allowing an authenticated attacker to access sensitive files on the server. This can happen because the patch does\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jenkins #jenkinsproject #CVE #infosec", "creation_timestamp": "2026-08-10T15:42:05.043999Z"}, {"uuid": "f668db9c-bc1e-48df-b0b7-a5d692cca051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2757", "content": "\ud83d\udd34 Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler\n\nCitrix on Wednesday announced patches for two vulnerabilities in NetScaler ADC and NetScaler Gateway, including a critical-severity flaw.\n\nThe critical bug, tracked as CVE-2026-19490 (CVSS score of 9.3), is described as an authentication bypass using an alternative path, and impacts NetScaler appliances configured as a gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or an AAA virtual server.\n\nIt can be exploited by remote, unauthenticated attackers without user interaction, cybersecurity firm Rapid7 says.", "creation_timestamp": "2026-08-22T00:00:09.426384Z"}, {"uuid": "40ef3a8a-d463-4c59-8aad-e592b6d300b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/20v2IoyFQshDHts5_7Yn4T7Cia_Iss1KLurhB1ZSh0DbW1c", "content": "", "creation_timestamp": "2026-08-22T00:00:09.601939Z"}, {"uuid": "5350048c-599f-4f6e-a847-c58c74d0c2b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19424", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11097-ee412-2.html", "content": "", "creation_timestamp": "2026-08-13T08:47:11.007031Z"}, {"uuid": "ad28da17-6257-4b9c-9db4-1c8ad3de1543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19433", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/c6iqylihfbjx7", "content": "CVE-2026-19433 - Authorization Bypass Through User-Controlled Key in Prospero Flow CRM contact save and vCard export\nCVE ID : CVE-2026-19433\n \n Published : Aug. 10, 2026, 3:17 p.m. | 42\u00a0minutes ago\n \n Description : Authorization Bypass Through User-Controlled Key in the contac...", "creation_timestamp": "2026-08-10T16:13:50.048299Z"}, {"uuid": "486d2c1f-a53c-4e8b-89bd-feaa673e9684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://www.cert.se/2026/08/cert-se-veckobrev-v34.html", "content": "", "creation_timestamp": "2026-08-21T12:15:08.516072Z"}, {"uuid": "a31d9d0b-4513-42eb-8717-a5deb22ddd41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19970", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtcgya5cl32q", "content": "\ud83d\udc1b VULNERABILITIES (CVSS 6.3) CVE-2026-19970:  \u2014 severity moderate \u2014 Red Hat Security Data (JSON)\nhttps://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-19970.json #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-08-17T19:32:51.604082Z"}, {"uuid": "e114d313-71b7-4ed0-9657-b0a7b2d3f3c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19967", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtch2i3rf52t", "content": "\ud83d\udc1b VULNERABILITIES (CVSS 6.3) CVE-2026-19967:  \u2014 severity moderate \u2014 Red Hat Security Data (JSON)\nhttps://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-19967.json #CVE #ZeroDay #PatchManagement", "creation_timestamp": "2026-08-17T19:34:07.285046Z"}, {"uuid": "0bdfe258-9340-42ef-add5-a65cec7c9b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117133461734366713", "content": "A critical GraphQL vulnerability identified as CVE-2026-19478 is currently under active exploitation, allowing unauthenticated attackers to modify or delete public projects on self-managed GitLab installations. Users are urged to patch their systems immediately by upgrading to the latest secure versions.https://securityaffairs.com/197622/uncategorized/gitlab-warns-of-active-exploitation-of-critical-graphql-flaw.html", "creation_timestamp": "2026-08-21T12:19:45.155525Z"}, {"uuid": "179b6967-e88c-4703-afe5-453c7df5ee54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-833", "content": "", "creation_timestamp": "2026-08-19T20:15:06.127523Z"}, {"uuid": "07d9f715-9542-49c0-987c-8a8949af665a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-833", "content": "", "creation_timestamp": "2026-08-19T20:15:08.399157Z"}, {"uuid": "a9366a75-4de1-45e6-bb57-f32c83d47176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19900", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19900.yaml", "content": "", "creation_timestamp": "2026-08-19T00:00:03.776782Z"}, {"uuid": "175acdab-c28e-4aae-8d68-f35d01ee25f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/yna2SgiXqU8Yl76-ls-5XNafbPbcL6XsZZAFlQw-z_g2N4Y", "content": "", "creation_timestamp": "2026-08-19T00:00:10.488031Z"}, {"uuid": "ba35d935-0c6e-490d-a463-df68cf9e097b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/m_mWdLfn7AzxtutPwUwFotcuCU2as0PFXRgnVVXbxrPnDrU", "content": "", "creation_timestamp": "2026-08-19T00:00:26.282240Z"}, {"uuid": "dbffc940-8f0f-4b75-bdad-e603466135b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/ZxcQ6RVn-5sFAZ4qkLho0f4GJRaaxyJWc-8e0k9Lah5Vjrw", "content": "", "creation_timestamp": "2026-08-19T00:00:27.185436Z"}, {"uuid": "1452876c-4906-4cea-86d6-d9e2cf831625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/12950", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-08-21T13:00:03.500064Z"}, {"uuid": "f5c19b14-7ca9-433f-b49c-114b3cdf4173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19035", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5zzhrkd3qttpp", "content": "CVE-2026-19035 - Shibby Tomato qoslimit new_qoslimit_start os command injection\nCVE ID : CVE-2026-19035\n \n Published : Aug. 6, 2026, 11:30 a.m. | 50\u00a0minutes ago\n \n Description : A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function n...", "creation_timestamp": "2026-08-06T12:46:36.062670Z"}, {"uuid": "1433d15f-dc45-453b-bfff-ae62d1b89a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19484", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3msxbtcdfrk2l", "content": "\ud83d\udea8 High-severity security fix in @fastify/busboy@3.2.1 just released!\n\nPatches CVE-2026-19484: @fastify/busboy vulnerable to denial of service via oversized multipart boundary\n\ngithub.com/fastify/busb...", "creation_timestamp": "2026-08-13T09:01:22.471026Z"}, {"uuid": "1fcf655d-68dc-45b5-a927-754ef698db8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://threatintel.cc/2026/08/21/gitlab-warns-of-active-exploitation.html", "content": "GitLab Warns of Active Exploitation of Critical GraphQL Flaw\n\nA critical GraphQL vulnerability identified as CVE-2026-19478 is currently under active exploitation, allowing unauthenticated attackers to modify or delete public projects on self-managed GitLab installations. Users are urged to patch their systems immediately by upgrading to the latest secure versions.", "creation_timestamp": "2026-08-21T13:00:40.345149Z"}, {"uuid": "6fc704c1-15e3-45ae-aa0d-b7a32c766e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19900", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19900.yaml", "content": "", "creation_timestamp": "2026-08-22T00:00:10.965901Z"}, {"uuid": "a4c8e66c-99eb-42b8-9fb4-0e4b66092bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/436", "content": "vulnerability: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html\ncve: CVE-2026-19478\nsomeone published poc in github: https://github.com/davkharrr/cve-2026-19478-poc", "creation_timestamp": "2026-08-19T00:00:11.775110Z"}, {"uuid": "a69032ae-ae8c-4859-bf7e-171c1ae22992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mtltynmvdr2u", "content": "NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490 #patchmanagement", "creation_timestamp": "2026-08-21T13:19:42.222280Z"}, {"uuid": "d0df10cb-f629-487a-93d9-b3350501deb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mtltynmvdr2u", "content": "NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490 #patchmanagement", "creation_timestamp": "2026-08-21T13:19:42.288541Z"}, {"uuid": "c721961b-4f4e-4289-ac34-95fc0d77cd67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19961", "type": "published-proof-of-concept", "source": "Telegram/PDH6Qm397GES1C7WrPIcs2HrLYR1fpSjDGOrD1JLYj3kg2c", "content": "", "creation_timestamp": "2026-08-19T00:00:27.573757Z"}, {"uuid": "7cd1bb48-1fff-414c-9855-e2d7bb887f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19959", "type": "published-proof-of-concept", "source": "Telegram/PDH6Qm397GES1C7WrPIcs2HrLYR1fpSjDGOrD1JLYj3kg2c", "content": "", "creation_timestamp": "2026-08-19T00:00:27.659898Z"}, {"uuid": "3d86dbb2-382f-4020-a927-58759312de98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktH_wo", "content": "", "creation_timestamp": "2026-08-19T00:00:26.978099Z"}, {"uuid": "98de571c-9660-48be-9a75-7a6ef96129f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19650", "type": "published-proof-of-concept", "source": "Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktH_wo", "content": "", "creation_timestamp": "2026-08-19T00:00:27.067986Z"}, {"uuid": "23856c50-0eb8-4c60-b071-7f500246e971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtcno7wuqs2j", "content": "GitLab CE/EE\u306b\u516c\u958b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3084\u30e6\u30fc\u30b6\u30fc\u30c7\u30fc\u30bf\u3092\u524a\u9664\u30fb\u6539\u5909\u53ef\u80fd\u306a\u8a8d\u8a3c\u306a\u3057\u306e\u8106\u5f31\u6027\uff08CVE-2026-19478\uff09\u304c\u78ba\u8a8d\u3055\u308c\u307e\u3057\u305f\u3002", "creation_timestamp": "2026-08-17T21:32:33.028896Z"}, {"uuid": "73f7c634-65a9-49d7-9831-d169d06e3d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19714", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcp7jjkkd24", "content": "CVE-2026-19714 - simple jwt login\nThe Simple JWT Login WordPress plugin, used for Google sign-in, allows unauthorized users to access any account, including administrator accounts, if they have the correct email\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-17T22:00:06.259057Z"}, {"uuid": "d762acc7-b287-4390-8809-e6008da7bc93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "content": "GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data.\n\nThe flaw, tracked as CVE-2026-19478, has been rated Critical by GitLab and assigned a CVSS score of 9.4.\n\nReleased on", "creation_timestamp": "2026-08-17T22:00:44.357516Z"}, {"uuid": "6faa30b9-1049-47be-85e9-3136848baf35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtcpnfeuaz25", "content": "\ud83d\udea8 CVE-2026-19478 \u2014 CVSS 9.4 CRITICAL\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 befor...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19478\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T22:07:51.678926Z"}, {"uuid": "d2a81629-21bf-4055-b502-ff4140a71f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtcpnk3p652v", "content": "\ud83e\udd16 CVE-2026-19478 (CVSS 9.4): Critical GitLab GraphQL flaw lets unauthenticated attackers modify or delete public projects and user data. Patches released, update now.\nhttps://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "creation_timestamp": "2026-08-17T22:07:56.706081Z"}, {"uuid": "4cb7dd10-1f2d-43c4-8a9c-f82387873f68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19725", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcprcy4lw2t", "content": "CVE-2026-19725 - wpvivid \u2014 backup, migration & staging\nAn attacker can create log files in any directory they choose on a WordPress site using WPvivid Backup & Migration. This can lead to sensitive information being\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-17T22:10:03.909517Z"}, {"uuid": "37db94ea-8eb1-4915-8319-792d39693f3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/alejandxr.bsky.social/post/3mtfimg6u3z2c", "content": "GraphQL decouples auth from routing. Checking permissions only in your global HTTP middleware is a trap\u2014if one resolver lacks a check, you leak data.\n\nGitLab's CVE-2026-19478 (CVSS 9.4) is exactly this: unauthenticated project deletion via a bypassed resolver.", "creation_timestamp": "2026-08-19T00:40:02.165268Z"}, {"uuid": "7c3aea3d-1666-4c89-95b5-455cca2cf833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19139", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:25.949781Z"}, {"uuid": "2d0805c2-d1ca-4cab-b797-84f40180ecda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19140", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:29.193242Z"}, {"uuid": "599c3a30-a147-483b-a847-05e311cb9bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19144", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:33.776944Z"}, {"uuid": "55d1cfe0-7e8e-42c1-8c87-f6bd0b161146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19145", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:36.024531Z"}, {"uuid": "20547074-43a7-4de9-9d10-9c5797bba259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19053", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqwlexxzk2o", "content": "CVE-2026-19053 - prosolution wp client\nAn attacker can use the ProSolution WP Client WordPress plugin to inject malicious SQL code, potentially allowing them to access sensitive information. This affects all versions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#unknown #CVE #infosec", "creation_timestamp": "2026-08-10T20:24:05.153038Z"}, {"uuid": "028306ae-d3c3-4739-8aaa-04a270b3ec6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/CyberDispatch/2585", "content": "Critical GitLab vulnerability could let unauthenticated attackers delete public projects.\n\nCVE-2026-19478 affects self-managed CE and EE under certain conditions. Fixes are in 19.2.4, 19.1.6, 19.0.8, and 18.11.11.", "creation_timestamp": "2026-08-29T20:00:05.443016Z"}, {"uuid": "23d64574-326b-4fdb-b0b3-6eb2449b7bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19137", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:21.249244Z"}, {"uuid": "daed1242-98c1-48fc-b85b-bdd2d11566a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19138", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:23.712249Z"}, {"uuid": "4144180e-2f0d-4dc5-9dce-e3cfd9c924e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19146", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:38.480877Z"}, {"uuid": "5a3b1607-0c63-4b8c-9150-08a5a37c1597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19142", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:31.519164Z"}, {"uuid": "1a6801ae-4129-4412-9a53-876aa3a6bb0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19147", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:40.712996Z"}, {"uuid": "76398a0a-5d4b-45f1-bc1b-4cd50ce70a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcryungao2c", "content": "CVE-2026-19478 - gitlab\nGitLab versions 18.2 to 19.2 are affected. An attacker could access and modify or delete public projects and user data without authentication. Update to a fixed version to protect against this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitlab #CVE #infosec", "creation_timestamp": "2026-08-17T22:50:04.573259Z"}, {"uuid": "fb62ca5f-90ba-40e3-9937-06a1267ffd38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7x7cmjle23", "content": "~Checkpoint~\nCritical flaws, AI-assisted attacks and Cl0p exploitation drive this week\u2019s threats.\n-\nIOCs: CVE-2026-19478, CVE-2026-12569\n-\n#AIThreats #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-29T13:10:22.640588Z"}, {"uuid": "fb8766a5-2302-4530-9def-e8c300be9b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19148", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:43.139699Z"}, {"uuid": "211e253d-9eb3-45b8-84cd-74bdd9b67b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://www.darkreading.com/application-security/critical-gitlab-zero-click-flaw-mitigation-challenges", "content": "A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential exploitation of CVE-2026-19478.", "creation_timestamp": "2026-08-19T01:00:34.123115Z"}, {"uuid": "a1c5bf09-ec68-467d-a229-8f8274ffe97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19149", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:45.469657Z"}, {"uuid": "f0faddd2-f849-4b8b-aa3f-ab4a0fe12fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19151", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:49.964696Z"}, {"uuid": "07983e9e-89d1-4c87-9c08-a9860ebb38a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19152", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:52.191403Z"}, {"uuid": "dab1bd1c-b777-4c22-9620-c684ca82f9e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19165", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:20.018346Z"}, {"uuid": "5bc52380-a968-4fd2-95c4-094aa27860d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19173", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:38.649788Z"}, {"uuid": "f672867c-f59a-4bc5-b114-6053fb4f941a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19175", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:43.206311Z"}, {"uuid": "0dff4b5b-bd28-460b-bb3e-fb1ba661d935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19177", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T09:53:02.383208Z"}, {"uuid": "5f7e619e-4894-493d-aaf7-f105c595b7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19150", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:47.734156Z"}, {"uuid": "28839062-7233-4af0-aeb5-d33df77ea7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19161", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:10.860115Z"}, {"uuid": "44526848-df64-4f18-afcb-57062f0c851a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19164", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:17.777542Z"}, {"uuid": "6a3fb239-9406-470d-bf6d-be3dc9f0a1c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19168", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:27.114442Z"}, {"uuid": "94e62380-abd3-49b0-825e-690aae062285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19153", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:54.541038Z"}, {"uuid": "e1eeb26e-57e4-4628-88e3-376465a2f93e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19159", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:06.359225Z"}, {"uuid": "89b7d466-3ace-4b8f-8920-07c0e7f3154e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19162", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:13.114498Z"}, {"uuid": "6062a0b1-5c09-45aa-8095-902af040b3c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19170", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:31.601814Z"}, {"uuid": "9c27a20f-3a4d-4bf4-a13e-e6aebc10be10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19155", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:56.805368Z"}, {"uuid": "55320658-c319-4baf-a6d5-a7ea167a0d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19156", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:46:59.134757Z"}, {"uuid": "8b7dcfd3-e966-484c-bb2a-6be0ced32359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19157", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:01.530563Z"}, {"uuid": "5610f5a1-eee1-437c-abe6-b74369dd73c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19163", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:15.330751Z"}, {"uuid": "b1b86afb-405d-420b-a6b0-2c23acb19f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19158", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:04.010112Z"}, {"uuid": "88329c29-bd79-4585-8fd0-e230b0d9107f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19171", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:33.830250Z"}, {"uuid": "cf007c59-febc-404b-b523-c11f1ef192db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19160", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:08.622489Z"}, {"uuid": "2e21c01b-3d9b-4617-b75b-a04056e24b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19558", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1008", "content": "", "creation_timestamp": "2026-08-13T09:48:23.691169Z"}, {"uuid": "453db42c-6374-4e30-9a72-19e0403f1a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19166", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:22.464099Z"}, {"uuid": "6a99e7ec-49ca-46c1-9f6e-b8dbeb819d93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19167", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:24.897096Z"}, {"uuid": "1a2464d4-2cc2-4bea-9644-0f31f56e1461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19169", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:29.348296Z"}, {"uuid": "beb73761-b8e7-4dc5-be32-22c9fafb0ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19172", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:36.163681Z"}, {"uuid": "738e50e3-2ccc-45f8-ae3d-0ba18c3daffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19177", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:47.937128Z"}, {"uuid": "b8032624-be38-40d5-8615-2a5f37dca4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19174", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:40.866472Z"}, {"uuid": "f6919bab-3ac0-4307-91d0-caab0924f8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19557", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1008", "content": "", "creation_timestamp": "2026-08-13T09:48:21.427771Z"}, {"uuid": "3fef8f66-05cc-4cb9-a401-acf6eeb6c793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19176", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0999", "content": "", "creation_timestamp": "2026-08-13T09:47:45.472180Z"}, {"uuid": "068612d5-6ce5-4de4-994a-f220537b1790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19556", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1008", "content": "", "creation_timestamp": "2026-08-13T09:48:19.098910Z"}, {"uuid": "92de31dd-6e2c-4ae0-891f-dd26056a33f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtfljh4jrf2j", "content": "GitLab\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u304c\u516c\u958b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3092\u5909\u66f4\u307e\u305f\u306f\u524a\u9664\u3067\u304d\u308b\uff08CVE-2026-19478\uff09 \n\nCritical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)  #HelpNetSecurity (Aug 18)\n\nwww.helpnetsecurity.com/2026/08/18/g...", "creation_timestamp": "2026-08-19T01:32:04.208165Z"}, {"uuid": "d41e0529-441d-482e-a031-b9114b017f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19559", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1008", "content": "", "creation_timestamp": "2026-08-13T09:48:26.029200Z"}, {"uuid": "1b841a46-2777-4e9a-9799-eb94e4049341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19560", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1008", "content": "", "creation_timestamp": "2026-08-13T09:48:28.294129Z"}, {"uuid": "10228040-bfb3-4612-b3ba-3dc6682efaf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19155", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T09:52:59.980226Z"}, {"uuid": "e1577aa6-babe-46b9-9451-69006dfd0305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19001", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtfluj5vpv2f", "content": "MongoDB\u304c32\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3001CVE-2026-19001\uff08\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u3001CVSS 9.5\uff09\u3092\u542b\u3080 \n\nMongoDB Patches 32 Vulnerabilities, Including CVE-2026-19001 Arbitrary Code Execution Flaw (CVSS 9.5)  #DailyCyberSecurity (Aug 18)\n\nsecurityonline.info/mongodb-vuln...", "creation_timestamp": "2026-08-19T01:38:15.174559Z"}, {"uuid": "3298238a-7849-4bf2-91d4-6b2f688042bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19560", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2011", "content": "", "creation_timestamp": "2026-08-13T09:52:24.255869Z"}, {"uuid": "36964516-706d-460e-b533-add06b0d4fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/pno4qgE4SZQiQo8fq1NZyMaJw7LGofB6B2FJdOg13udntKs", "content": "", "creation_timestamp": "2026-08-18T00:00:11.081731Z"}, {"uuid": "54335d48-bb41-4596-b08c-bb8bfd7cc29c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19556", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2011", "content": "", "creation_timestamp": "2026-08-13T09:52:21.712302Z"}, {"uuid": "5564acd1-1432-4e48-9bb0-f2763d9f9889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19137", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T09:52:48.203512Z"}, {"uuid": "5a43d4c2-8e8b-4d8d-8624-22afc30ae74f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19140", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T09:52:50.590883Z"}, {"uuid": "63d59a6f-ae81-4835-804b-d8c8d002ed6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19142", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T09:52:52.819763Z"}, {"uuid": "3393ba5b-3073-4f38-83ce-afa396c1eb51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19144", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T09:52:55.055871Z"}, {"uuid": "ee37ef6f-6eb0-43a0-a604-2c6b8549d4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19429", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msrcbmtv622n", "content": "CVE-2026-19429 is trending. Hype score 2, currently #9 on cvemon.\n\nJenkins FilePath.untarFrom() in all versions, including those with the CVE-2026-33001 patch applied, validates symlink destinations but not targets. The CVE-2026-33001 fix enforces\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19429", "creation_timestamp": "2026-08-10T23:53:23.245050Z"}, {"uuid": "5f1adaa7-268a-4643-9828-2fef9d78c91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19153", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T09:52:57.596867Z"}, {"uuid": "80f5d7be-b8d2-47ac-9df9-4422d2509b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19516", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117075347103329501", "content": "Grafana MCP Server hit by CRITICAL SSRF (CVE-2026-19516, CVSS 9.1) via X-Grafana-URL header. Attackers can access internal endpoints and metadata. Restrict access & monitor usage until patch available. https://radar.offseq.com/threat/cve-2026-19516-cwe-918-in-grafana-grafana-mcp-server-3995ac1dff45c6f5 #OffSeq #Grafana #SSRF #Vuln", "creation_timestamp": "2026-08-11T06:00:26.535949Z"}, {"uuid": "49dbf790-36c2-46d8-8bb9-421cb5db6827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19516", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msrwrzr6an25", "content": "Grafana MCP Server faces CRITICAL SSRF (CVE-2026-19516, CVSS 9.1). Unrestricted outbound requests risk internal data exposure. Restrict access & monitor X-Grafana-URL header. Details: https://radar.offseq.com/threat/cve-2026-19516-cwe-918-in-grafana-grafana-mcp-server-3995ac1dff45c6f5 #OffSeq #Gr...", "creation_timestamp": "2026-08-11T06:00:28.585100Z"}, {"uuid": "ffbc7f99-8211-484f-994b-0414621e406f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtfphlrqnl22", "content": "Top 3 CVE for last 7 days:\nCVE-2026-59310: 43 interactions\nCVE-2026-68820: 31 interactions\nCVE-2026-65400: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-19478: 6 interactions\nCVE-2026-43499: 6 interactions\nCVE-2025-62593: 5 interactions\n", "creation_timestamp": "2026-08-19T02:42:36.517778Z"}, {"uuid": "f856018e-f34c-4a82-9ce3-e3b531073794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mtjvq34kva2e", "content": "Citrix flags urgent NetScaler patching for CVE-2026-19490 and CVE-2026-19489, which can enable auth bypass and denial of service on specific setups. CISA still tracks prior Citrix flaws in KEV. #Citrix #NetScaler #CISA", "creation_timestamp": "2026-08-20T18:45:22.931255Z"}, {"uuid": "8d21789b-bcf4-48f8-b7b6-6e3ab16a0622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mtjvq34kva2e", "content": "Citrix flags urgent NetScaler patching for CVE-2026-19490 and CVE-2026-19489, which can enable auth bypass and denial of service on specific setups. CISA still tracks prior Citrix flaws in KEV. #Citrix #NetScaler #CISA", "creation_timestamp": "2026-08-20T18:45:22.977846Z"}, {"uuid": "0b4c07ef-7c9c-4d25-9015-33a96d54e514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mtnvbns6cc2q", "content": "GitLab Warns of Active Exploitation of Critical GraphQL Flaw\n\nGitLab flaw CVE-2026-19478 is now under active exploitation, allowing unauthenticated attackers to modify or delete public projects. WatchTowr researchers warn of active exploitation of critical GitLab flaw CVE-2026-194\u2026\n#hackernews #news", "creation_timestamp": "2026-08-22T08:47:57.834792Z"}, {"uuid": "783efe7a-4b59-441b-9afb-6fda8254e1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19425", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-11099-56aa8-2.html", "content": "", "creation_timestamp": "2026-08-11T08:45:03.677833Z"}, {"uuid": "5db4b61c-743b-4a79-853c-950368eae26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19611", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtjwbnthmj2r", "content": "WildFly Elytron\u306bUnicode NFKC\u6b63\u898f\u5316\u306e\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u306fASCII\u8f9e\u66f8\u3067\u30d1\u30b9\u30ef\u30fc\u30c9\u63a8\u6e2c\u30fb\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u304c\u53ef\u80fd\u3002\nCVE-2026-19611 CVSS 7.4 | HIGH", "creation_timestamp": "2026-08-20T18:55:12.732249Z"}, {"uuid": "1d898947-3746-43cd-a186-3c8c25387044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19961", "type": "published-proof-of-concept", "source": "Telegram/PDH6Qm397GES1C7WrPIcs2HrLYR1fpSjDGOrD1JLYj3kg2c", "content": "", "creation_timestamp": "2026-08-18T01:00:04.092074Z"}, {"uuid": "67522fa1-a20f-4075-8e1d-5358336a58f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19425", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117076054927533100", "content": "Win Men Intermational Travel Agency Management System has a CRITICAL SQL Injection flaw (CVE-2026-19425, CVSS 9.8). Unauthenticated attackers may fully compromise databases. No patch yet: restrict access & monitor for SQLi. https://radar.offseq.com/threat/cve-2026-19425-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-c590b6d3eb66ff09 #OffSeq #CVE202619425 #SQLInjection #InfoSec", "creation_timestamp": "2026-08-11T09:00:27.087157Z"}, {"uuid": "5ac6a4d3-7095-4a09-86cb-0896aad99625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19959", "type": "published-proof-of-concept", "source": "Telegram/PDH6Qm397GES1C7WrPIcs2HrLYR1fpSjDGOrD1JLYj3kg2c", "content": "", "creation_timestamp": "2026-08-18T01:00:04.192838Z"}, {"uuid": "16509398-cd2e-4989-9266-b45a656fb68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19425", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mssatwo7hm2s", "content": "Critical SQL Injection (CVE-2026-19425) in Win Men Intermational Travel Agency Management System \u26a0\ufe0f allows unauthenticated DB compromise. No patch yet \u2014 restrict access & monitor systems. https://radar.offseq.com/threat/cve-2026-19425-cwe-89-improper-neutralization-of-special-elements-used-in-an-...", "creation_timestamp": "2026-08-11T09:00:30.938534Z"}, {"uuid": "a90e4746-6fbf-447b-96d6-53aa67e296b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "content": "GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data.\n\nThe flaw, tracked as CVE-2026-19478, has been rated Critical by GitLab and assigned a CVSS score of 9.4.\n\nReleased on", "creation_timestamp": "2026-08-18T01:00:32.802273Z"}, {"uuid": "2c9ba4c3-0258-4182-a8b5-5c37c02e1129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mtjxc2k3mt2w", "content": "On August 19, 2026, CVE-2026-19490, a critical authentication bypass vulnerability affecting Citrix NetScaler ADC and Gateway, was disclosed, with a CVSS score of 9.3. It allows remote exploitation by unauthenticated attackers. Affected versions include NetScaler ADC and Gateway 14.1 (prior to 14.", "creation_timestamp": "2026-08-20T19:13:19.563389Z"}, {"uuid": "54783ced-53f1-4064-8a46-236a8adc2242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19228", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-20", "content": "", "creation_timestamp": "2026-08-13T10:21:57.370082Z"}, {"uuid": "469765c9-4fd1-4b73-8cba-f98a9506337a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/kindtech.bsky.social/post/3mthrbs4p3v2m", "content": "GitLab patched CVE-2026-19478, a 9.4 severity GraphQL flaw that let unauthenticated attackers modify or delete public project and user data. Self hosted instances are often the slowest to patch, so check your deployment before the weekend. #GitLab #Security #DevOps", "creation_timestamp": "2026-08-19T22:20:28.577782Z"}, {"uuid": "30727bfc-60aa-4b4a-9491-8cf61dc5e9ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ceapl2yiykvox", "content": "CVE-2026-19424 - Inventec Appliances\uff5cChiline Cloud - Insecure Direct Object Reference\nCVE ID : CVE-2026-19424\n \n Published : Aug. 11, 2026, 1:56 a.m. | 34\u00a0minutes ago\n \n Description : Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnera...", "creation_timestamp": "2026-08-11T03:07:12.701884Z"}, {"uuid": "e3c23624-8dd3-4f04-8e42-6cd9c61e5b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtd3kigicg2y", "content": "GitLab patched CVE-2026-19478, a CVSS 9.4 GraphQL code injection flaw letting unauthenticated users alter or delete project data.\n\n#CVE202619478 #GitLab #CodeInjection #GraphQL #CVE202619650 #PatchNow", "creation_timestamp": "2026-08-18T01:40:59.877401Z"}, {"uuid": "1085e0b6-7097-457c-9627-25b101bb0326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19433", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msrnwhptkf2b", "content": "Top 3 CVE for last 7 days:\nCVE-2026-64564: 28 interactions\nCVE-2026-64638: 18 interactions\nCVE-2026-18577: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2021-34501: 2 interactions\nCVE-2026-19433: 2 interactions\nCVE-2026-65545: 2 interactions\n", "creation_timestamp": "2026-08-11T03:21:54.207123Z"}, {"uuid": "2a281ea2-f83c-4e36-93dd-14ec9bec66ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/rmcholewa.bsky.social/post/3mtlxsugxv72s", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure thehackernews.com/2026/08/gitl...", "creation_timestamp": "2026-08-21T14:28:03.316949Z"}, {"uuid": "1aa86d9a-a933-4374-98c6-326526974779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19424", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msrrkbor4i26", "content": "Inventec Appliances\u88fdChiline Cloud\u306bIDOR\u8106\u5f31\u6027\u3002\u672a\u8a8d\u8a3c\u306e\u9060\u9694\u653b\u6483\u8005\u304c\u30d1\u30e9\u30e1\u30fc\u30bf\u6539\u5909\u3067\u4ed6\u30e6\u30fc\u30b6\u30fc\u306e\u6a5f\u5bc6\u30c7\u30fc\u30bf\u3092\u8aad\u307f\u53d6\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19424 CVSS 7.5 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-19424", "creation_timestamp": "2026-08-11T04:26:39.255029Z"}, {"uuid": "c6997214-faf8-4f34-8e07-0c44111c9582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cryptolab.re/post/3mtlzaakwa22i", "content": "Weekly #28 :\n\n- GitLab : CVE-2026-19478, mise \u00e0 jour prioritaire\n- Linux 7.2 et le cache-aware scheduling\n- WordPress 7.1 et le traitement local des images\n- Firefox 154 corrige 58 CVE\n- Retour sur les 7 h 47 de panne GitHub\n\ncryptolab.re/posts/2026/w...\n\n#GitLab #Linux #SelfHosting", "creation_timestamp": "2026-08-21T14:53:26.306705Z"}, {"uuid": "44cdd9fe-5cda-4b69-a9be-3540caaea75e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mtlznouu2c2u", "content": "\ud83d\udea8 GitLab sous pression\n\nLa faille CVE-2026-19478, corrig\u00e9e le 17 ao\u00fbt 2026 par une mise \u00e0 jour publi\u00e9e en urgence... serait d\u00e9j\u00e0 exploit\u00e9e\n\n\u27a1\ufe0f D\u00e9couvrez l'article pour comprendre cette vuln\u00e9rabilit\u00e9 :\nwww.it-connect.fr/gitlab-cve-2...\n\n#Cybers\u00e9curit\u00e9 #GitLab", "creation_timestamp": "2026-08-21T15:00:57.413491Z"}, {"uuid": "29803bb7-1622-4a91-b015-833bf782d14b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "Telegram/ob4slkn-WSHlfG8wbUuZhe2QU-kdKboFrHP2rc_qVZkNJw", "content": "", "creation_timestamp": "2026-08-19T23:00:04.976829Z"}, {"uuid": "43c86e3d-7702-496d-bc02-d85ea514d855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19654", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3msxjfgtbte2j", "content": "rsyslog: fix CVE-2026-19654\n\nhttps://github.com/NixOS/nixpkgs/pull/552215\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2403\n\n#security", "creation_timestamp": "2026-08-13T11:16:45.472181Z"}, {"uuid": "a87db54e-4f3f-4cce-833d-0fde1297b0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mtfvrhlgpd2g", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-19478) GitLab Unauthenticated Project Deletion via #GraphQL Directive\" and \"Emerging Threat: GeoServer Zero-Day SQL Injection via jsonArrayContains\".\n \n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-08-19T04:35:30.533718Z"}, {"uuid": "b1839c09-1f69-4550-8fe5-7650295fee5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19586", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtk2ezjnaj2p", "content": "\ud83d\udea8 CVE-2026-19586 \u2014 CVSS 9.3 CRITICAL\n\nA pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19586\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T20:08:40.163874Z"}, {"uuid": "e92b4866-7e51-4f87-95a0-c39cc948c143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19586", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtk2hjjoud2u", "content": "CVE-2026-19586 - er7212pc v2\nIf your Omada gateway is set up as an OpenVPN server, an attacker on the internet can send specially crafted connection requests that run commands on the device before logging\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#er7212pcv2 #tplink #CVE #infosec", "creation_timestamp": "2026-08-20T20:10:05.159646Z"}, {"uuid": "10a8fcea-06d4-4d7d-b556-e424392eb4c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/captainsmok3r_official/456", "content": "CVE-2026-19478 - GitLab GraphQL @ gl_introduced directive authorization bypass\nAffected: GitLab CE/EE 18.2-18.11.10, 19.0-19.0.7, 19.1-19.1.5, 19.2-19.2.3\nType: Auth bypass (unauthenticated arbitrary zero-arity Ruby method invocation)", "creation_timestamp": "2026-08-22T00:00:28.141456Z"}, {"uuid": "ac61adfe-401c-4dac-a78d-0b2eec0e8d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/457", "content": "", "creation_timestamp": "2026-08-22T00:00:28.187346Z"}, {"uuid": "7527a73a-62c0-48b6-ad0a-0536e6a594bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "Telegram/vEbmjoRYt04v0ZC0euMZdfrOphLUWqQQy7SM_HrVY46dKQ", "content": "", "creation_timestamp": "2026-08-22T00:00:28.510699Z"}, {"uuid": "67de4b69-1496-4961-baf3-c5150ba44ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19654", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3msxkz2kkwl2n", "content": "[Backport release-26.05] rsyslog: fix CVE-2026-19654\n\nhttps://github.com/NixOS/nixpkgs/pull/552242\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2403\n\n#security", "creation_timestamp": "2026-08-13T11:45:37.474360Z"}, {"uuid": "dcfcd93c-1480-41e3-9556-d476f3be132c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/ctinow/255488", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure\nhttps://ift.tt/ue9k2NB", "creation_timestamp": "2026-08-22T00:00:28.825023Z"}, {"uuid": "0681d6ee-7d5b-4cfc-9f11-63dedcd0bb32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/12950", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-08-22T00:00:28.413173Z"}, {"uuid": "34ae3dbd-3436-4a67-aa22-8db4a769bb48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktH_wo", "content": "", "creation_timestamp": "2026-08-18T04:00:03.528717Z"}, {"uuid": "7ab9e170-a3d7-42bd-9f02-88a8c693a763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19650", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mthvsbyaxt26", "content": "CVE-2026-19650 is trending. Hype score 1, currently #10 on cvemon.\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19650", "creation_timestamp": "2026-08-19T23:41:17.196932Z"}, {"uuid": "3793f18c-7367-408a-bfb4-3cd3da149caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19650", "type": "published-proof-of-concept", "source": "Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktH_wo", "content": "", "creation_timestamp": "2026-08-18T04:00:03.627034Z"}, {"uuid": "4e661d38-37b3-435d-a408-49299b9134d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/ZxcQ6RVn-5sFAZ4qkLho0f4GJRaaxyJWc-8e0k9Lah5Vjrw", "content": "", "creation_timestamp": "2026-08-18T04:00:03.778771Z"}, {"uuid": "319ef04d-e6bb-4497-adf5-6ba38f161139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mtddoas2hi2s", "content": "CVE-2026-19478: GitLab Patches Critical GraphQL Flaw CVSS 9.4 for Self-Managed Instances", "creation_timestamp": "2026-08-18T04:06:15.781839Z"}, {"uuid": "f0584652-a23f-4fa9-9eb9-dad0422da61d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19900", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19900.yaml", "content": "", "creation_timestamp": "2026-08-20T00:00:10.569420Z"}, {"uuid": "70c945ec-6109-404d-9ae4-fa168772cf8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19474", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mt4sdb3lgc2i", "content": "\ud83d\udea8 High-severity security fix in @fastify/multipart@10.1.1 just released!\n\nPatches CVE-2026-19474: @fastify/multipart vulnerable to denial of service via temporary file leak on aborted upload\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-08-15T13:39:56.150755Z"}, {"uuid": "0f3b859c-bc4e-423b-b985-75631c2577de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "Telegram/ob4slkn-WSHlfG8wbUuZhe2QU-kdKboFrHP2rc_qVZkNJw", "content": "", "creation_timestamp": "2026-08-20T00:00:06.852417Z"}, {"uuid": "7d690c6e-8a5b-4022-b9d1-1acbb200e8f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19478.yaml", "content": "", "creation_timestamp": "2026-08-20T00:00:07.268190Z"}, {"uuid": "63ed99c8-b5f5-4fc0-ad93-b8e3dccfe516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19004", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-2", "content": "", "creation_timestamp": "2026-08-13T12:45:03.069765Z"}, {"uuid": "e842cdd5-271f-4a64-bf73-3053abe79d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19003", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-2", "content": "", "creation_timestamp": "2026-08-13T12:45:05.637426Z"}, {"uuid": "073c56f5-bf84-409b-9e29-87144a7c17b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19002", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-2", "content": "", "creation_timestamp": "2026-08-13T12:45:07.926684Z"}, {"uuid": "8efe0ed7-f64e-4ea9-bbe8-355a2e151e3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19001", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-2", "content": "", "creation_timestamp": "2026-08-13T12:45:10.379375Z"}, {"uuid": "7ddacaf1-4929-40e0-9d1d-a2da5decad6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19679", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtk3xuwcze2c", "content": "\ud83d\udccc CVE-2026-19679 - An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contri... https://www.cyberhub.blog/cves/CVE-2026-19679", "creation_timestamp": "2026-08-20T20:37:06.913178Z"}, {"uuid": "7e1db022-562f-4d37-96a6-ab6052244621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19137", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117051083590682909", "content": "There is a new vulnerability with elevated criticality in Google Chrome (CVE-2026-19137) https://vuldb.com/vuln/386756", "creation_timestamp": "2026-08-06T23:09:54.724198Z"}, {"uuid": "d0c0e575-e178-4e58-ab8d-b7e7663707d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19138", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117051134731540251", "content": "A new vulnerability with increased severity was disclosed for Google Chrome (CVE-2026-19138) https://vuldb.com/vuln/386757", "creation_timestamp": "2026-08-06T23:24:57.383769Z"}, {"uuid": "4fc000df-0415-47d9-8010-f892034ee1bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtm5vbvylg27", "content": "CVE-2026-19598, a CVSS 9.8 flaw in the Pods WordPress plugin, enables complete site takeover. Wordfence is already blocking attacks in the wild.\n\n#Pods #CVE202619598 #WordPress #PrivilegeEscalation #SiteTakeover #WebSecurity", "creation_timestamp": "2026-08-21T16:16:46.858222Z"}, {"uuid": "3ddff7fb-e2ef-4147-9a87-641a3340aaed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19145", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117051188055584250", "content": "A new vulnerability with increased severity was disclosed for Google Chrome (CVE-2026-19145) https://vuldb.com/vuln/386772", "creation_timestamp": "2026-08-06T23:36:33.675943Z"}, {"uuid": "1b61e486-6f7a-44b6-b8b4-d1ab8ddb324e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19175", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117051240113170047", "content": "We have just added an important vulnerability affecting Google Chrome (CVE-2026-19175) https://vuldb.com/vuln/386795", "creation_timestamp": "2026-08-06T23:49:42.843947Z"}, {"uuid": "d6ab41f0-6d70-4417-98d7-c9e97c52ac64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19474", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt4wtfk7zr2l", "content": "\ud83d\udfe0 CVE-2026-19474 - High (7.5)\n\n@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19474/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T15:00:31.665711Z"}, {"uuid": "985f4947-1ced-49c4-90c0-796fdd850129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xjn3nwj2g", "content": "~Cybergcca~\nPaperCut CVE-2026-81578 and CVE-2026-82078 are exploited in the wild; patch affected products.\n-\nIOCs: CVE-2026-81578, CVE-2026-82078, CVE-2026-19516\n-\n#PaperCut #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-29T13:16:08.083570Z"}, {"uuid": "4120f02e-e620-4082-af2b-87b8a65bb4c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19484", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msxrglp6u42g", "content": "@fastify/busboy 3.1.0-3.2.0\u3067\u3001\u7d30\u5de5\u3055\u308c\u305f\u5883\u754c\u9577\u3092\u6301\u3064\u30ea\u30af\u30a8\u30b9\u30c8\u306b\u3088\u308a\u3001Node.js\u30a4\u30d9\u30f3\u30c8\u30eb\u30fc\u30d7\u304c\u505c\u6b62\u3059\u308b\u53ef\u80fd\u6027\u3002CPU\u3092\u5360\u6709\u3057\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u3092\u5f15\u304d\u8d77\u3053\u3059\u3002\nCVE-2026-19484 CVSS 7.5 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-19484", "creation_timestamp": "2026-08-13T13:40:34.038933Z"}, {"uuid": "9db73ef0-5b5e-4b91-8281-3c236bc84e7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mtm73qa4ns2p", "content": "CVE-2026-19478: Critical GitLab GraphQL Flaw Enables Unauthenticated Data Modification\n\n", "creation_timestamp": "2026-08-21T16:38:17.764624Z"}, {"uuid": "4f4c6962-29f9-42ec-a0ca-f2afab5b893e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/bdufstecru/3390", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 git \u0434\u043b\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430\u0434 \u043a\u043e\u0434\u043e\u043c GitLab EE/ CE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-11879\nCVE-2026-19478\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/", "creation_timestamp": "2026-08-20T00:00:28.061303Z"}, {"uuid": "92285e4f-0659-4e7e-b1b3-e62f55eaaaf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19896", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bk2achsvzt7er", "content": "CVE-2026-19896 - mangroup dtale Flask Session Cookie app.py build_secret_key random values\nCVE ID : CVE-2026-19896\n \n Published : Aug. 15, 2026, 3:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : A flaw has been found in mangroup dtale up to 3.22.0. This vulnerability affects...", "creation_timestamp": "2026-08-15T16:55:32.940470Z"}, {"uuid": "ee881122-2b2f-4103-a2d5-da01a658d39a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19897", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6o2zccgfutckp", "content": "CVE-2026-19897 - mangroup dtale Login Endpoint auth.py login excessive authentication\nCVE ID : CVE-2026-19897\n \n Published : Aug. 15, 2026, 3:30 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A vulnerability has been found in mangroup dtale up to 3.22.0. This issue affects the ...", "creation_timestamp": "2026-08-15T16:57:32.133043Z"}, {"uuid": "ee7f0630-f809-46f4-b13b-16a13c88c9ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/xakep_ru/19903", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GitLab \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0440\u043e\u0447\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f Community Edition (CE) \u0438 Enterprise Edition (EE), \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-19478 (9,4 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS). \u042d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\nhttps://xakep.ru/2026/08/19/cve-2026-19478/", "creation_timestamp": "2026-08-20T00:00:28.445464Z"}, {"uuid": "51cc7922-629c-42ac-ad92-2a1ce93a38ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19942", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtg2jgznjh24", "content": "\ud83d\udfe0 CVE-2026-19942 - High (8.1)\n\nThe Atarim \u2013 AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedba...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19942/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-19T06:00:30.380704Z"}, {"uuid": "49bb5042-03b3-47a2-ac55-df6feaa22092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19900", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19900.yaml", "content": "", "creation_timestamp": "2026-08-18T06:00:03.907464Z"}, {"uuid": "391b9b45-5d0a-4faf-a0fa-e6962c5d8533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19900", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5auaw4h526", "content": "\ud83d\udfe0 CVE-2026-19900 - High (8.1)\n\nA vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unkno...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19900/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T17:59:58.358064Z"}, {"uuid": "adb2a1be-79b3-4baa-b9bc-c2222ada55f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19228", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msxssijrld2m", "content": "\ud83d\udd17 CVE : CVE-2025-9486, CVE-2026-15216, CVE-2026-15217, CVE-2026-15423, CVE-2026-16494, CVE-2026-16627, CVE-2026-18244, CVE-2026-18433, CVE-2026-19228, CVE-2026-4879, CVE-2026-6821, CVE-2026-7427, CVE-2026-8667", "creation_timestamp": "2026-08-13T14:05:08.196828Z"}, {"uuid": "4b848ef0-2ed2-49ad-ae20-3ff5cc2c5d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mssyhz6atn2c", "content": "~Cybergcca~\n4 advisories covering Grafana, HashiCorp Vault, SAP, and AMD EPYC vulnerabilities\u2014apply updates promptly.\n-\nIOCs: CVE-2026-19516\n-\n#PatchNow #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-11T16:03:19.255963Z"}, {"uuid": "3118fe8e-5173-4223-aa37-9fb8d29ce137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-796", "content": "", "creation_timestamp": "2026-08-11T16:15:03.642509Z"}, {"uuid": "192892bc-3294-422b-bd74-c463ba04f27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5bgdy5vm23", "content": "CVE-2026-19598 - pods \u2013 custom content types and fields\nThe Pods plugin for WordPress has a security flaw that lets attackers take control of your site without needing a password. This could let them change\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sc0ttkclark #CVE #infosec", "creation_timestamp": "2026-08-15T18:10:04.721037Z"}, {"uuid": "8229985d-0bde-4611-a94b-5e902affdc49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19899", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt5d45sf2g2z", "content": "SourceCodester Class and Exam Timetabling System 1.0\u306e/edit_teacher.php\u3067SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089ID\u5f15\u6570\u64cd\u4f5c\u2026\nCVE-2026-19899 CVSS 7.3 | HIGH", "creation_timestamp": "2026-08-15T18:40:09.886181Z"}, {"uuid": "b2928c50-ede5-4931-81fb-2a328722800c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19901", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5e7ud37627", "content": "\ud83d\udfe0 CVE-2026-19901 - High (8.1)\n\nA security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown fun...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19901/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T19:00:09.036883Z"}, {"uuid": "42dac3e4-02ee-448f-b1c0-8b62632531d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5ea3j2qc22", "content": "\ud83d\udd34 CVE-2026-19598 - Critical (9.8)\n\nThe Pods \u2013 Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Esca...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19598/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T19:00:16.059388Z"}, {"uuid": "589e5542-7687-4f46-8334-a5f2d147c798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19629", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtkayt6wbp24", "content": "\ud83d\udccc CVE-2026-19629 - A privilege escalation vulnerability exists in Tenable Security Center that allows a user with \"Security Manager\" role and \"manage user\" permission on... https://www.cyberhub.blog/cves/CVE-2026-19629", "creation_timestamp": "2026-08-20T22:07:07.362862Z"}, {"uuid": "68a772b3-48ae-42d1-830c-e58e48572ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-22T01:00:02.976754Z"}, {"uuid": "5fe61377-ed09-45d6-8e01-93adf1f45748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-22T01:00:03.239673Z"}, {"uuid": "1c0bf300-7ee7-4254-acb1-b408e51c00ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19730", "type": "seen", "source": "https://bsky.app/profile/releaseport.com/post/3mt5hvftt5m2w", "content": "Podman 5.8.6 patches CVE-2026-19730\nThe update addresses CVE-2026-19730 by ensuring podman quadlet's install --replace\nUpgrade carefully.\n\n\u2192 releaseport.com/r/containers-podman/v5-8-6", "creation_timestamp": "2026-08-15T20:05:52.741018Z"}, {"uuid": "07a223cf-6d7d-4e42-bade-74565b18537c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19942", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtg5rrb3mr2b", "content": "Atarim WordPress\u30d7\u30e9\u30b0\u30a4\u30f3(v5.1.1\u4ee5\u524d)\u306e\u30d5\u30a1\u30a4\u30eb\u30d1\u30b9\u691c\u8a3c\u4e0d\u5099\u306b\u3088\u308a\u3001\u4f5c\u8005\u6a29\u9650\u3092\u6301\u3064\u653b\u6483\u8005\u306f\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\u3057\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19942 CVSS 8.1 | HIGH\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-19942", "creation_timestamp": "2026-08-19T06:58:50.183057Z"}, {"uuid": "ee57b2c5-0963-424a-83be-8ce51480f2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19628", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtkcohhj7l2h", "content": "\ud83d\udccc CVE-2026-19628 - A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify application configuration values to a... https://www.cyberhub.blog/cves/CVE-2026-19628", "creation_timestamp": "2026-08-20T22:37:06.948601Z"}, {"uuid": "662a1c15-8dcd-45a2-8a38-953d0fcb2e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19905", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt5mlcgmbu2r", "content": "Jinher OA 1.0 \u306e /C6/JHSoft.Web.HrmAttendance/attendance_out_approve.aspx \u3067SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u653b\u6483\u53ef\u2026\nCVE-2026-19905 CVSS 7.3 | HIGH", "creation_timestamp": "2026-08-15T21:29:42.058144Z"}, {"uuid": "92d54263-50b7-4a16-bb42-6970aa626537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html", "content": "A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr.\n\nThe vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring", "creation_timestamp": "2026-08-22T01:00:32.488532Z"}, {"uuid": "e44e869e-9445-4a1d-a4c0-3884e16bce7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/artia13city.bsky.social/post/3mtmcxcobwi2a", "content": "Vuln\u00e9rabilit\u00e9 Citrix NetScaler (CVE-2026-19490) : contournement de l'authentification d\u00e9tect\u00e9. \nLire l'article complet sur : artia13.city \n#artia13\u00a0#Technologie  ", "creation_timestamp": "2026-08-21T17:47:23.598104Z"}, {"uuid": "aa4b3423-94f0-450b-b785-84bcfbe6ecec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://threatintel.cc/2026/08/21/gitlab-warns-of-active-exploitation.html", "content": "GitLab Warns of Active Exploitation of Critical GraphQL Flaw\n\nA critical GraphQL vulnerability identified as CVE-2026-19478 is currently under active exploitation, allowing unauthenticated attackers to modify or delete public projects on self-managed GitLab installations. Users are urged to patch their systems immediately by upgrading to the latest secure versions.", "creation_timestamp": "2026-08-22T01:00:32.847019Z"}, {"uuid": "c1726eaa-5952-4440-a491-4acf0c46456e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117115547555307021", "content": "\u203c\ufe0fCritical GitLab vulnerability could let unauthenticated attackers delete public projects.\nCVE-2026-19478 affects self-managed CE and EE under certain conditions. Fixes are in 19.2.4, 19.1.6, 19.0.8, and 18.11.11.\nWhat admins need to know: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "creation_timestamp": "2026-08-18T08:23:56.466034Z"}, {"uuid": "08648b26-7fc3-4de9-bd42-32927ecdb9fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mtdsuuqpxw27", "content": "Critical GitLab GraphQL Vulnerability CVE-2026-19478: Patch Now to Prevent Unauthenticated Project\u00a0Modification\n\nGitLab patched critical CVE-2026-19478, a CVSS 9.4 GraphQL flaw allowing unauthenticated attackers to\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-19478-gitlab-graphql-vulnerability/", "creation_timestamp": "2026-08-18T08:38:24.376399Z"}, {"uuid": "bf124f73-cf83-459d-b06f-827577a825aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19149", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mshkmnjejr2z", "content": "CVE-2026-19149\nA security issue in Google Chrome on Linux allows a hacker to create a malicious web page that could break out of the security sandbox, potentially allowing them to access sensitive information or take control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-07T02:56:05.153089Z"}, {"uuid": "2b56c467-c54d-4d1f-a11f-4745922078bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mtn4nu7eqa2k", "content": "100.000 sitios WordPress expuestos por fallo en plugin Pods\n\n\u00bfTu WordPress usa Pods? La falla CVE-2026-19598 deja 100.000 sitios WordPress expuestos: un atacante puede tomar el control en minutos. Cheque\u00e1 tu versi\u00f3n\n\n#pods #cve202619598 #escaladadeprivilegios #seguridadwordpress #pluginswordpress", "creation_timestamp": "2026-08-22T01:27:25.352409Z"}, {"uuid": "290fa89d-50a9-4c6b-b469-fbd5368812b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19189", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gi32l2zwypa4l", "content": "CVE-2026-19189 - Power Sofware PowerISO Kernel Driver scdemu.sys privileges management\nCVE ID : CVE-2026-19189\n \n Published : Aug. 7, 2026, 3:16 a.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by thi...", "creation_timestamp": "2026-08-07T04:31:48.180343Z"}, {"uuid": "deb0f01b-14b9-4185-8e8f-deb69b89a410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19137", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:45:39.059358Z"}, {"uuid": "70680549-4927-418d-9182-2728693a548e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19158", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:28.635140Z"}, {"uuid": "e20a0404-cb9a-4440-bb34-100c972650be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19138", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:45:41.572123Z"}, {"uuid": "eb911aee-105e-40b9-a41f-9b7cf12d0fca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19142", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:45:51.051625Z"}, {"uuid": "995716f8-e962-4e99-b3cb-6003ec8c1212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19146", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:00.018770Z"}, {"uuid": "b2674a6b-cbf0-4b81-b81e-9ebab5e4628d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19150", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:10.075352Z"}, {"uuid": "02c66451-5fcf-40ce-9509-934e034270b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19156", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:23.916705Z"}, {"uuid": "d6d40bb4-202c-4f4f-8a3a-1ac1036026d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19157", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:26.186371Z"}, {"uuid": "78979c6d-4ef2-4172-83d4-adec98b3ede4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19139", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:45:44.116130Z"}, {"uuid": "d2982d8d-4bed-4f7e-b6d4-986713d5b87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mtdu3pgedm2g", "content": "\ud83d\udce2 [VULN] GitLab - la faille qui a fait rouvrir une version morte CVE-2026-19478\n\n1) GitLab a publi\u00e9 un correctif d'urgence le 17 ao\u00fbt pour une faille CVSS 9,4 permettant de modifier ou supprimer projets publics et donn\u00e9es utilisateur sans compte ni mot de passe, affectant les\u2026\n\n#CVE #Cyberveille", "creation_timestamp": "2026-08-18T09:00:07.103650Z"}, {"uuid": "6ec1d79a-bbf4-4557-885c-4a7408c36cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1946", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqc3kha2x42k", "content": "CVE-2026-1946 - GW AI Website Builder\nCVE ID : CVE-2026-1946\n \n Published : July 10, 2026, 9:16 a.m. | 2\u00a0hours, 32\u00a0minutes ago\n \n Description : The GW AI Website Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o...", "creation_timestamp": "2026-07-10T11:52:43.499132Z"}, {"uuid": "ac92e2a9-b1b0-441f-87bc-d69c15ee21d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1946", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4purzdp2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-1946 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 GW AI Website Builder: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress-\u0441\u0430\u0439\u0442\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/4A39477C-D3F2-4132-90B8-CB630DC586BD", "creation_timestamp": "2026-07-10T12:13:39.009548Z"}, {"uuid": "f41090ed-87e6-4be2-a0f2-d5b1a9cb51f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19140", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:45:46.496909Z"}, {"uuid": "985189b0-35cc-4ac7-a548-d12ca991242b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19141", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:45:48.806227Z"}, {"uuid": "6c0e916e-d79a-474b-ad82-fc34626e13d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19152", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:14.832928Z"}, {"uuid": "06e3df58-e281-48df-9a00-9f4828ffe8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19161", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:35.456807Z"}, {"uuid": "3ecf1589-7152-40b1-ae22-4c21cd90bcc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mtdu3tvmcj2s", "content": "GitLab\u304c\u7dca\u6025\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u306b\u30d1\u30c3\u30c1\u3092\u9069\u7528\n\nGitLab\u306f\u6708\u66dc\u65e5\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u60aa\u7528\u53ef\u80fd\u306a\u7dca\u6025\u5ea6\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u6b20\u9665\u3092\u542b\u30802\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002 CVE-2026-19478(CVSS\u30b9\u30b3\u30a29.4)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f\u3001\u653b\u6483\u8005\u304cGraphQL\u30c7\u30a3\u30ec\u30af\u30c6\u30a3\u30d6\u3092\u4ecb\u3057\u3066\u30e6\u30fc\u30b6\u30fc\u30c7\u30fc\u30bf\u3084\u516c\u958b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3092\u6539\u3056\u3093\u30fb\u524a...", "creation_timestamp": "2026-08-18T09:00:11.657127Z"}, {"uuid": "970639a6-c572-41bc-aa03-8bb87143a4cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19143", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:45:53.298065Z"}, {"uuid": "51d90c8f-5f54-47b3-8e6a-a462f66605d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19147", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:02.258740Z"}, {"uuid": "4b05b74b-ece5-46d3-aedf-a8d042552986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19151", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:12.356972Z"}, {"uuid": "71d7427b-63b5-42dc-b1ca-58d609f2b509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19165", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:47:15.180115Z"}, {"uuid": "90660303-3348-4469-9bb4-173364c0e0a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117115691222589671", "content": "CRITICAL: GitLab CE/EE (v18.2+ to 19.2.4) patched CVE-2026-19478, a code injection bug allowing unauthenticated data modification/deletion via GraphQL. CSRF (CVE-2026-19650) also fixed. Upgrade to safe versions ASAP. https://radar.offseq.com/threat/gitlab-patches-critical-code-injection-vulnerability-ce00fcde61cd1cd5 #OffSeq #GitLab #Infosec #CVE", "creation_timestamp": "2026-08-18T09:00:28.928427Z"}, {"uuid": "81d2c3f6-a49c-4d45-9394-a9f29854a3c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19144", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:45:55.538189Z"}, {"uuid": "6e77e0d7-a2b4-4638-bb33-34ac2e5ec872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19145", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:45:57.785624Z"}, {"uuid": "7b2f1221-c328-4ffe-9a5e-6b15e6f285e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19155", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:21.648278Z"}, {"uuid": "68dc02b8-0f62-46f1-95fa-388b6616bb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19160", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:33.190778Z"}, {"uuid": "33bc7bfc-7895-4564-af9f-5074719e9ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19163", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:47:10.068081Z"}, {"uuid": "a6ae54c2-5d3b-445f-ad56-5352873bef89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19650", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117115691222589671", "content": "CRITICAL: GitLab CE/EE (v18.2+ to 19.2.4) patched CVE-2026-19478, a code injection bug allowing unauthenticated data modification/deletion via GraphQL. CSRF (CVE-2026-19650) also fixed. Upgrade to safe versions ASAP. https://radar.offseq.com/threat/gitlab-patches-critical-code-injection-vulnerability-ce00fcde61cd1cd5 #OffSeq #GitLab #Infosec #CVE", "creation_timestamp": "2026-08-18T09:00:28.980534Z"}, {"uuid": "f7b61e67-c295-4cab-83f4-aac09969eacd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19148", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:04.549372Z"}, {"uuid": "b7319b14-bc82-4912-8766-75ca05534e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19153", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:17.093260Z"}, {"uuid": "25f5bfdc-2231-4366-8441-71bff13055ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19162", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:37.830349Z"}, {"uuid": "573cec9c-895f-4759-aa37-72df9acc7718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19164", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:47:12.307128Z"}, {"uuid": "2405b8e3-c04a-4da3-8ec2-3b177c5d1198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtdu4fzq3r2n", "content": "CVE-2026-19478: GitLab CE/EE v18.2+ to 19.2.4 hit by CRITICAL code injection. Self-managed users must upgrade now to prevent data loss. Cloud users are auto-patched. https://radar.offseq.com/threat/gitlab-patches-critical-code-injection-vulnerability-ce00fcde61cd1cd5 #OffSeq #GitLab #Security", "creation_timestamp": "2026-08-18T09:00:30.889033Z"}, {"uuid": "0777f0f4-493b-4373-8a02-41b3b70cc0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19149", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:06.832729Z"}, {"uuid": "2e0393f7-e6ac-46c8-87c7-a5ff23134a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19154", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:19.347544Z"}, {"uuid": "390135b5-16c8-4acc-a46d-a444cd903cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19159", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:46:30.878896Z"}, {"uuid": "b0e7c571-a271-42bd-8c3d-219e5e18d921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19167", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:47:49.703850Z"}, {"uuid": "543d3c1e-89bc-422c-8ad4-3051c2901cb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtdunvdvms23", "content": "A GitLab flaw (CVE-2026-19478, CVSS 9.4) lets someone who never logged in delete public projects and user data on self-managed servers. GitLab.com is safe. Patch self-hosted to 19.2.4, 19.1.6, 19.0.8 or 18.11.11 now.", "creation_timestamp": "2026-08-18T09:10:17.580267Z"}, {"uuid": "251c343e-dbac-47c7-a95f-059f069d11aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1946", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd2xfu5fh2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-1946 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 GW AI Website Builder: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u043d\u0430 WordPress\n\n\n\nhttps://kripta.biz/posts/087C9460-B0E6-4AE8-9F51-8D5081EB8E5D", "creation_timestamp": "2026-07-10T21:14:43.954907Z"}, {"uuid": "e525c6f0-1937-4e22-aa09-78944759719a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19168", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:47:52.839458Z"}, {"uuid": "19f16f2d-cadb-45d7-bdaa-337e1c1caf1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19169", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:47:55.401532Z"}, {"uuid": "89a9e283-7098-4c54-b65b-b5aab6866cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19171", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:48:30.163886Z"}, {"uuid": "14924517-f8ff-4814-a719-a11b4516adda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19172", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:48:32.453569Z"}, {"uuid": "4e504a00-e40d-475e-8a35-2e4caf0a4e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19176", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:48:41.542049Z"}, {"uuid": "ca4d1efd-ba37-4ead-b299-aa11f63970bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19173", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:48:34.688689Z"}, {"uuid": "bb6ed92a-37a8-4fdc-8fd9-7a90a4be919e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19175", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:48:39.291511Z"}, {"uuid": "486f3f6f-e543-45ed-ae6c-bb29dbc57c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19177", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:48:43.793250Z"}, {"uuid": "1ff84f12-1d2f-48bd-8325-60ceb94e95e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19174", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T04:48:36.948360Z"}, {"uuid": "ffe53e9e-fa11-40a1-9fbe-2eb9ceb85fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19166", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T05:15:16.142893Z"}, {"uuid": "a5b51bfc-7193-4cb5-99db-b7c579353bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19170", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260807", "content": "", "creation_timestamp": "2026-08-07T05:15:18.598862Z"}, {"uuid": "771faa6b-b183-4b38-94be-a676409ac85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19635", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtkfzqjwti2x", "content": "\ud83d\udccc CVE-2026-19635 - A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could achieve arb... https://www.cyberhub.blog/cves/CVE-2026-19635", "creation_timestamp": "2026-08-20T23:37:07.319765Z"}, {"uuid": "25395918-bcaf-4fa3-bad9-66ee75edb7c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19349", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdxgweemd2e", "content": "CVE-2026-19349 - lemonldap-ng\nA critical vulnerability in Debian's Samba package allows attackers to execute malicious code on a system without needing a password. This affects any Debian system\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lemonldapng #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-18T10:00:04.452990Z"}, {"uuid": "c48a8924-732e-44fe-a9e3-9a450ea1466f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19079", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ppz2ygcs73pe", "content": "CVE-2026-19079 - Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation\nCVE ID : CVE-2026-19079\n \n Published : Aug. 7, 2026, 7:21 a.m. | 49\u00a0minutes ago\n \n Description : A TOCTOU (Time-of-Check-Time-of-Use) race condition...", "creation_timestamp": "2026-08-07T08:37:54.971681Z"}, {"uuid": "0ce227cb-070d-407c-b10b-52561f337211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mtgclrxooc2q", "content": "Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)\n\nGitLab has released patches for two vulnerabilities, including a critical-severity code injection flaw that can be exploited without authentication. The vulnerabilities affect GitLab Commun\u2026\n#hackernews #news", "creation_timestamp": "2026-08-19T08:24:58.336282Z"}, {"uuid": "39d39ab3-2b3f-4186-bf02-99bb618dabce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19710", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msye7kwjau2q", "content": "SourceCodester Simple Student Information System\u306eapp/admin/departments/view_department.php\u3067SQL\u30a4\u30f3\u30b8\u30a7\u30af\u2026\nCVE-2026-19710 CVSS 7.3 | HIGH", "creation_timestamp": "2026-08-13T19:16:39.162713Z"}, {"uuid": "72151186-81b5-477d-9671-af3da99d9f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19111", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3msyf5w6t7e2e", "content": "CVE-2026-19111 - Insecure direct object reference in Strands Agents Tools memory tools #patchmanagement", "creation_timestamp": "2026-08-13T19:33:37.876038Z"}, {"uuid": "2411369c-cffd-41d2-9e86-48eb7436c7fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19642", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3msyfcpx4ny2u", "content": "CVE-2026-19642 & CVE-2026-19643 - Memory-safety issues in the Base64 decoder in the AWS SDK for C++ #patchmanagement", "creation_timestamp": "2026-08-13T19:36:18.861720Z"}, {"uuid": "8b4b1896-5bbf-45af-9921-f2cceebd001f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19311", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3msyfcmozai25", "content": "CVE-2026-19311- Missing Authorization in OpenSearch Alerting Plugin #patchmanagement", "creation_timestamp": "2026-08-13T19:36:15.461751Z"}, {"uuid": "92e90aae-a765-4951-92c4-026482134319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19643", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3msyfcpx4ny2u", "content": "CVE-2026-19642 & CVE-2026-19643 - Memory-safety issues in the Base64 decoder in the AWS SDK for C++ #patchmanagement", "creation_timestamp": "2026-08-13T19:36:18.950220Z"}, {"uuid": "5bc0b67b-c591-4a27-80b4-2082bdb0938b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19478.yaml", "content": "", "creation_timestamp": "2026-08-19T09:00:05.406596Z"}, {"uuid": "5ee9ddf9-de86-4159-a6e3-55bd4564d103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/kindtech.bsky.social/post/3mti6uiatcg2z", "content": "CVE-2026-19490 is a critical authentication bypass in Citrix NetScaler ADC and Gateway, published August 19. If your infrastructure sits behind a NetScaler, patch it today and not tomorrow. Edge appliances are the last thing you want to leave exposed. #Citrix #Security #NetScaler", "creation_timestamp": "2026-08-20T02:23:34.775077Z"}, {"uuid": "e55208fd-5cd3-496b-a8eb-c3add5a4a833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19747", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msyhqyyxdw25", "content": "CVE-2026-19747 - ch7\nTenda routers with certain models are vulnerable to a command injection attack when accessed remotely. This means that an attacker could potentially take control of the router and disrupt its\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ch7 #tenda #CVE #infosec", "creation_timestamp": "2026-08-13T20:20:05.583243Z"}, {"uuid": "baf6b011-1084-44a9-8aad-dadba7aa6132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19487", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/cye5l3eestfcw", "content": "CVE-2026-19487: Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass", "creation_timestamp": "2026-08-13T20:46:34.899216Z"}, {"uuid": "870609fa-3cc3-4eef-935d-70859936c634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19297", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msyl4c6onl2e", "content": "CVE-2026-19297 - langflow oss\nIBM Langflow OSS has a security issue that allows attackers to try many login combinations without being blocked. This could let an attacker guess a user's password and gain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#langflowoss #ibm #CVE #infosec", "creation_timestamp": "2026-08-13T21:20:05.682885Z"}, {"uuid": "0116308b-3c60-425b-a09a-345594685ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19478.yaml", "content": "", "creation_timestamp": "2026-08-21T00:00:06.189132Z"}, {"uuid": "4d97d5ae-22d2-432f-bbbf-af970f21c4d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/VqkK0eXOWhmRJZ90Bh3PqTJte1bxm7THA5YDoOUEdQFD0DQ", "content": "", "creation_timestamp": "2026-08-20T03:00:03.378531Z"}, {"uuid": "d65357d1-6b9f-47eb-be52-88bcb868ae29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19091", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3msyoahso4k2p", "content": "CVE-2026-19091 geodirectory (CVSS Score 8.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-13T22:16:07.815387Z"}, {"uuid": "5083d14d-5fb9-4e69-8ea9-0af8cef13512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/T_XByhyA_HALLjU76evu5RVvsn4zpzLoBf6fuRO_NOvcY2o", "content": "", "creation_timestamp": "2026-08-20T03:00:03.912951Z"}, {"uuid": "1d639b20-a988-4699-9ce1-79eca109a733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19900", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19900.yaml", "content": "", "creation_timestamp": "2026-08-21T00:00:07.754804Z"}, {"uuid": "92c38c8b-fa3a-4443-817a-f149dc0bc9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mtmeiry6js22", "content": "The vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring credentials, user", "creation_timestamp": "2026-08-21T18:15:04.593787Z"}, {"uuid": "3cedd452-89e5-46a9-aec6-b7a4f614ac90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19297", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fdnranjkik2zs", "content": "CVE-2026-19297 - Insufficient Authentication Brute Force Protection on Login Endpoint\nCVE ID : CVE-2026-19297\n \n Published : Aug. 13, 2026, 9:17 p.m. | 54\u00a0minutes ago\n \n Description : IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized acc...", "creation_timestamp": "2026-08-13T22:41:22.159959Z"}, {"uuid": "40a16792-5b57-422d-8808-be916e1b1716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "Telegram/8WvP_FT-f7WzYbsij8a64BMZqLNb4WRxjiDs2Lo6HyIBG_I", "content": "", "creation_timestamp": "2026-08-20T03:00:05.057010Z"}, {"uuid": "04f7eb10-b633-4e4a-8fcb-24c1fc909607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19500", "type": "seen", "source": "Telegram/dEOxkW7Fjs9kyJNCqqh8nNQclw4OnMEUeVB0uRmPUXS8-vI", "content": "", "creation_timestamp": "2026-08-20T03:00:05.611262Z"}, {"uuid": "857196c0-a708-4834-9a11-16127fca4bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19500", "type": "seen", "source": "Telegram/ZdYOxyFIATdPFxnlNJg5JA21M33sERAxplIOqa6OrE983o0", "content": "", "creation_timestamp": "2026-08-20T03:00:05.820955Z"}, {"uuid": "dfcb7f5f-db52-4e2f-9def-ee0e8b18ee33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19501", "type": "seen", "source": "Telegram/dEOxkW7Fjs9kyJNCqqh8nNQclw4OnMEUeVB0uRmPUXS8-vI", "content": "", "creation_timestamp": "2026-08-20T03:00:05.869397Z"}, {"uuid": "28b7350b-1869-4022-8aaa-ba10f98960b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/oR7NLMKFgb1yCNvTgcBxelfsbAhPDwgeIo74_-eUOYy4JNw", "content": "", "creation_timestamp": "2026-08-21T00:00:08.397443Z"}, {"uuid": "7adab18f-79ef-4730-9b0a-3dacd8efb77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19919", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3rz7plu6bhzof", "content": "CVE-2026-19919 - code-projects Online Shopping System Login login.php sql injection\nCVE ID : CVE-2026-19919\n \n Published : Aug. 15, 2026, 11:30 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an ...", "creation_timestamp": "2026-08-16T01:25:19.944139Z"}, {"uuid": "c97b171f-11d5-4d5e-ac92-6243e4dcca1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19924", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5zz4nim225", "content": "CVE-2026-19924 - ac10\nA security issue in the Tenda AC10 router's web server could allow an attacker to bypass authentication remotely. This could potentially give the attacker access to the router's settings or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ac10 #tenda #CVE #infosec", "creation_timestamp": "2026-08-16T01:30:04.024863Z"}, {"uuid": "4c2e89ab-c55a-4147-9d8e-66b40eb6827b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19920", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jt5aznwo5m6yd", "content": "CVE-2026-19920 - code-projects Online Shopping System action.php sql injection\nCVE ID : CVE-2026-19920\n \n Published : Aug. 15, 2026, 11:45 p.m. | 50\u00a0minutes ago\n \n Description : A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown ...", "creation_timestamp": "2026-08-16T01:31:09.125632Z"}, {"uuid": "2cf61775-cb27-46a0-8a49-168aa7d40f2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19500", "type": "published-proof-of-concept", "source": "Telegram/ZdYOxyFIATdPFxnlNJg5JA21M33sERAxplIOqa6OrE983o0", "content": "", "creation_timestamp": "2026-08-21T00:00:10.394182Z"}, {"uuid": "13835e96-5a51-4849-b69f-b5bedd013bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19924", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117102600808622174", "content": "Tenda AC10 (16.03.10.09_multi_TDE01) hit by CRITICAL auth bypass (CVE-2026-19924) via R7WebsSecurityHandler. Public exploit available \u2014 remote compromise possible. Update or restrict access! https://radar.offseq.com/threat/cve-2026-19924-improper-authentication-in-tenda-ac10-b84751472c0f965f #OffSeq #CVE202619924 #Tenda #Vuln", "creation_timestamp": "2026-08-16T01:31:25.201171Z"}, {"uuid": "3cbcb473-3e10-4248-86f2-573014383ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19924", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt623leukj2c", "content": "CRITICAL vuln in Tenda AC10 (16.03.10.09_multi_TDE01): CVE-2026-19924 enables remote improper authentication. Exploit is public. Restrict access & monitor devices. https://radar.offseq.com/threat/cve-2026-19924-improper-authentication-in-tenda-ac10-b84751472c0f965f #OffSeq #CVE202619924 #IoTSecurity", "creation_timestamp": "2026-08-16T01:31:27.251222Z"}, {"uuid": "8a2e0341-31fc-421c-8450-3fb2e888ccb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19921", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7brru5gzewi6y", "content": "CVE-2026-19921 - code-projects Online Shopping System homeaction.php sql injection\nCVE ID : CVE-2026-19921\n \n Published : Aug. 16, 2026, midnight | 35\u00a0minutes ago\n \n Description : A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vuln...", "creation_timestamp": "2026-08-16T01:37:09.285432Z"}, {"uuid": "bc7e039e-15f0-417f-a4f2-0213b983318f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtdyimih6z2x", "content": "\ud83e\udd16 CVE-2026-19478 (CVSS 9.4): critical GitLab CE/EE GraphQL flaw lets unauthenticated attackers modify or delete public projects and user data. Patches released\u2014update now.\nhttps://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "creation_timestamp": "2026-08-18T10:18:55.022402Z"}, {"uuid": "02471820-f2ba-4dd7-bc4e-71ff4ecdcb55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/kindtech.bsky.social/post/3mtican4ylu2g", "content": "GitLab patched CVE-2026-19478, a 9.4 severity GraphQL flaw that let unauthenticated attackers modify or delete public project and user data. Self hosted instances are often the slowest to patch, so check your deployment before the weekend. #GitLab #Security #DevOps", "creation_timestamp": "2026-08-20T03:24:03.505291Z"}, {"uuid": "2611d457-42df-4c51-abe7-63cc2776a7a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19922", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ivsque6ouoqlq", "content": "CVE-2026-19922 - code-projects Online Shopping System checkout.php cross site scripting\nCVE ID : CVE-2026-19922\n \n Published : Aug. 16, 2026, 12:15 a.m. | 20\u00a0minutes ago\n \n Description : A security flaw has been discovered in code-projects Online Shopping System 1.0. Affected ...", "creation_timestamp": "2026-08-16T01:39:09.227237Z"}, {"uuid": "492f12cb-f18c-4552-b02d-59bdfa7658f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/xakep_ru/19903", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GitLab \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0440\u043e\u0447\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f Community Edition (CE) \u0438 Enterprise Edition (EE), \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-19478 (9,4 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS). \u042d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\nhttps://xakep.ru/2026/08/19/cve-2026-19478/", "creation_timestamp": "2026-08-19T10:00:03.387383Z"}, {"uuid": "5585aa18-5759-41cd-b1eb-44789290d959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19681", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mticxxpnfw2y", "content": "\ud83d\udccc CVE-2026-19681 - An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by ... https://www.cyberhub.blog/cves/CVE-2026-19681", "creation_timestamp": "2026-08-20T03:37:06.443381Z"}, {"uuid": "e60a5468-2839-47b4-a0fa-4e669364c1ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19189", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117054167416606582", "content": "CVE-2026-19189 - LPE in PowerISO 9.3.0.0 via scdemu.sys. Improper privilege management, local exploit public. CVSS 7.8. Unpatched - disable driver or update ASAP. #CVE #PowerISO #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19189/", "creation_timestamp": "2026-08-07T12:14:11.002402Z"}, {"uuid": "87f4e0b2-b3ab-4b33-9987-143b71f44ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19924", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mt65sxk7ai2m", "content": "Another Router Falls, And The Internet Crawls Out Of Bed\nPANIC 42% | Lag 0.0h | CVE-2026-19924 affects the Tenda AC10 web server and can let a remote attacker bypass authentication\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-16T02:38:12.420574Z"}, {"uuid": "a76db5b6-e5a6-4897-992f-d4491c7574bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mtie2v3ymn2s", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-60702) Oracle WebLogic Server Takeover via T3 and IIOP\" and \"Emerging Threat: (CVE-2026-19478) GitLab Unauthenticated Project Deletion via #GraphQL Directive\".\n \n#cybersecurity #AttackSurfaceManagement https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-08-20T03:56:38.028257Z"}, {"uuid": "59a25de0-41d2-497c-859c-2d6dee777047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19900", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mt667u2kn52i", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 39 interactions\nCVE-2026-59310: 36 interactions\nCVE-2026-20349: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-14484: 3 interactions\nCVE-2026-19900: 3 interactions\nCVE-2026-65400: 3 interactions\n", "creation_timestamp": "2026-08-16T02:45:25.093139Z"}, {"uuid": "7abfe94c-a56e-4349-9553-57f2d066da4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/117116166005620531", "content": "Las \u00faltimas 24 horas en seguridad inform\u00e1tica revelan una grave falla en GitLab que permit\u00eda borrar proyectos p\u00fablicos sin autenticaci\u00f3n, vulnerabilidades cr\u00edticas en sanitizaci\u00f3n web con DOMPurify, riesgos internos por accesos activos a exempleados, sofisticados ataques hardware en Windows 11 y soluciones SASE para proteger IA y redes. Descubre estos y m\u00e1s detalles en el siguiente listado de noticias sobre seguridad inform\u00e1tica:\n\ud83d\uddde\ufe0f \u00daLTIMAS NOTICIAS EN SEGURIDAD INFORM\u00c1TICA \ud83d\udd12====| \ud83d\udd25 LO QUE DEBES SABER HOY \ufeff\ufeff18/08/26\ufeff\ufeff  \ud83d\udcc6 |==== \n\ud83d\udd0d INVESTIGACI\u00d3N DE VULNERABILIDADES EN IA\n\u00danete a una comunidad activa en Discord dedicada a la investigaci\u00f3n en seguridad aplicada a modelos de lenguaje (LLMs). Aqu\u00ed se comparten t\u00e9cnicas avanzadas de bug bounty, red teaming y herramientas para escaneo autom\u00e1tico, ideales para profesionales que buscan innovar en la protecci\u00f3n contra amenazas basadas en inteligencia artificial. Descubre m\u00e1s sobre esta red especializada en seguridad IA \ud83d\udc49 https://djar.co/wxUdaF\n\u26a0\ufe0f GRAVE FALLA EN GITLAB GRAPHQL PUEDE PERMITIR BORRADO DE PROYECTOS P\u00daBLICOS\nGitLab ha parcheado la vulnerabilidad CVE-2026-19478, con una puntuaci\u00f3n CVSS de 9.4, que expon\u00eda a proyectos p\u00fablicos a modificaciones o eliminaciones sin necesidad de autenticaci\u00f3n. Esta falla en su API GraphQL resalta la importancia cr\u00edtica de mantener actualizadas las plataformas colaborativas para evitar interrupciones y p\u00e9rdidas de informaci\u00f3n. Inf\u00f3rmate sobre esta alerta y c\u00f3mo proteger tus proyectos \ud83d\udc49 https://djar.co/AbJK\n\ud83d\udd10 PELIGRO DE CUENTAS ACTIVAS DE EXEMPLEADOS EN SEGURIDAD CORPORATIVA\nEl mantenimiento de accesos para exempleados representa un riesgo considerable: facilita fraudes, fugas de datos y ataques internos. Este problema com\u00fan en empresas requiere procesos rigurosos de desactivaci\u00f3n y auditor\u00eda constante para evitar brechas que comprometan informaci\u00f3n sensible. Aprende las mejores pr\u00e1cticas para mitigar esta amenaza interna \ud83d\udc49 https://djar.co/NqXQcu\n\u2601\ufe0f CLOUD FLARE ONE: LA PLATAFORMA SASE PARA PROTEGER IA Y REDES\nCloudflare One ofrece una soluci\u00f3n integral SASE (Secure Access Service Edge) que centraliza la seguridad y conectividad para equipos, agentes de inteligencia artificial e infraestructura. Su arquitectura de confianza cero facilita una adopci\u00f3n segura y eficiente en entornos h\u00edbridos y en la nube, clave para organizaciones que integran IA en sus operaciones. Conoce c\u00f3mo esta plataforma puede fortalecer tu seguridad TI \ud83d\udc49 https://djar.co/0Wizt1\n\ud83d\udee1\ufe0f VULNERABILIDAD EN DOMPURIFY PERMITE BYPASS EN SAFARI\nUna falla en DOMPurify versi\u00f3n 3.2.6 y anteriores habilita un bypass de seguridad en navegadores Safari mediante el uso del elemento animateTransform de SMIL. DOMPurify es esencial para la sanitizaci\u00f3n de contenido en la web, por lo que esta vulnerabilidad puede abrir puertas a ataques XSS si no se parchea a tiempo. Descubre los detalles t\u00e9cnicos y recomendaciones para proteger tus aplicaciones \ud83d\udc49 https://djar.co/mLCdY\n\ud83d\udcbb SECUESTRO DE TABLAS IDT EN WINDOWS 11 MEDIANTE DATA ONLY GADGETS\nSe ha demostrado que la t\u00e9cnica DOG (Data Only Gadgets) puede atacar la tabla IDT del procesador en Windows 11, una estructura cr\u00edtica que controla la ejecuci\u00f3n de instrucciones del CPU. Este avance en el secuestro de tablas del n\u00facleo, que afecta mecanismos de seguridad como VBS, HVCI y kCET, subraya la constante evoluci\u00f3n de las amenazas a nivel hardware y la necesidad de medidas avanzadas en defensa de sistemas operativos modernos. Profundiza en esta investigaci\u00f3n y sus implicaciones \ud83d\udc49 https://djar.co/gRJVL", "creation_timestamp": "2026-08-18T11:01:13.317342Z"}, {"uuid": "0ab5417c-bb08-49f1-a39d-8a61c8fcba59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19924", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt6c2gg4qv2n", "content": "Tenda AC10 16.03.10.09_multi_TDE01 \u306e R7WebsSecurityHandler \u306b\u8a8d\u8a3c\u4e0d\u5099\u306e\u8106\u5f31\u6027\u3002\u9060\u9694\u304b\u3089\u306e\u653b\u6483\u304c\u53ef\u80fd\u3002\nCVE-2026-19924 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-08-16T03:53:57.927203Z"}, {"uuid": "5fe9fcbd-3ec3-4e75-9a20-f171579777dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19926", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt6c4glkgf2m", "content": "Evergreen v3.14.11\u307e\u3067\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u5b58\u5728\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u653b\u6483\u306b\u3088\u308a\u3001\u4e0d\u6b63\u306a\u64cd\u4f5c\u304c\u53ef\u80fd\u3068\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19926 CVSS 7.3 | HIGH", "creation_timestamp": "2026-08-16T03:55:05.073564Z"}, {"uuid": "9d7639e3-812e-46f8-af21-658385876211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19501", "type": "published-proof-of-concept", "source": "Telegram/dEOxkW7Fjs9kyJNCqqh8nNQclw4OnMEUeVB0uRmPUXS8-vI", "content": "", "creation_timestamp": "2026-08-21T00:00:10.492013Z"}, {"uuid": "ebc6cb66-5b19-49af-99b3-7e9b514759dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mte4hxk54722", "content": "\ud83d\udce2 GitLab : patch critique corrigeant une injection de code via GraphQL (CVE-2026-19478, CVSS 9.4)\n\nLe 17 ao\u00fbt 2026, GitLab a publi\u00e9 des versions correctives pour ses \u00e9ditions Community (CE) et Enterprise (EE) : 19.2.4, 19.1.6, 19.0.8\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#GitLab #GraphQL #Cyberveille", "creation_timestamp": "2026-08-18T11:30:07.961286Z"}, {"uuid": "2259232c-c800-459f-bf93-a22bc4bd1ed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19500", "type": "published-proof-of-concept", "source": "Telegram/dEOxkW7Fjs9kyJNCqqh8nNQclw4OnMEUeVB0uRmPUXS8-vI", "content": "", "creation_timestamp": "2026-08-21T00:00:10.682185Z"}, {"uuid": "1a11f8ec-e34b-49ba-a0af-afb226489e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19682", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtienmr37a22", "content": "\ud83d\udccc CVE-2026-19682 - A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary com... https://www.cyberhub.blog/cves/CVE-2026-19682", "creation_timestamp": "2026-08-20T04:07:06.815472Z"}, {"uuid": "4677a5d0-98de-4fa9-81fd-390382d76b31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/8WvP_FT-f7WzYbsij8a64BMZqLNb4WRxjiDs2Lo6HyIBG_I", "content": "", "creation_timestamp": "2026-08-21T00:00:11.320327Z"}, {"uuid": "a0fb84a3-be47-48a7-922b-56a8163da1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/VqkK0eXOWhmRJZ90Bh3PqTJte1bxm7THA5YDoOUEdQFD0DQ", "content": "", "creation_timestamp": "2026-08-21T00:00:11.563843Z"}, {"uuid": "e2fed0ec-6252-4ab2-bb2a-a1bfe7e7e3e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jmdoxv2yj4de4", "content": "CVE-2026-19758 - dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal\nCVE ID : CVE-2026-19758\n \n Published : Aug. 13, 2026, 11:30 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This is...", "creation_timestamp": "2026-08-14T00:50:29.113515Z"}, {"uuid": "5e8e34a8-c06f-4449-9c96-92ce946959ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19157", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msirtwdgl727", "content": "CVE-2026-19157 - chrome\nA security flaw in Google Chrome on Android allows a malicious website to potentially break out of the browser's security sandbox and access sensitive information. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#chrome #google #CVE #infosec", "creation_timestamp": "2026-08-07T14:38:05.331947Z"}, {"uuid": "31d088d9-5c1d-4b89-981d-13691a05f913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19761", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/67ybirxxkoxv7", "content": "CVE-2026-19761 - DTStack Taier Upload Controller UploadController.java MultipartFile.getOriginalFilename path traversal\nCVE ID : CVE-2026-19761\n \n Published : Aug. 13, 2026, 11:45 p.m. | 50\u00a0minutes ago\n \n Description : A vulnerability has been found in DTStack Taier 1.4.0. Aff...", "creation_timestamp": "2026-08-14T00:56:28.629624Z"}, {"uuid": "3d1e2af4-0919-45c2-9882-d96792bc3e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19626", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtigdbatsb2y", "content": "\ud83d\udccc CVE-2026-19626 - A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user c... https://www.cyberhub.blog/cves/CVE-2026-19626", "creation_timestamp": "2026-08-20T04:37:06.965420Z"}, {"uuid": "67ac5e6a-88be-4339-89b2-74154ae93491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/T_XByhyA_HALLjU76evu5RVvsn4zpzLoBf6fuRO_NOvcY2o", "content": "", "creation_timestamp": "2026-08-21T00:00:12.036887Z"}, {"uuid": "dfabe8d1-6250-4fc3-9101-37a63e32dc89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19164", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msirtxq2cn2r", "content": "CVE-2026-19164 - chrome\nA security issue in Google Chrome's Codecs feature allows hackers to create a malicious web page that could break out of the browser's security restrictions. This could potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#chrome #google #CVE #infosec", "creation_timestamp": "2026-08-07T14:38:06.485642Z"}, {"uuid": "52bdbf45-edde-4978-9fb4-37461edaaee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19264", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msit6t2ljn26", "content": "CVE-2026-19264 - postiz-app\nAn attacker can access sensitive files on the server and use this information to take control of the Postiz instance without a password. This is a serious risk because it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#postizapp #gitroomhq #CVE #infosec", "creation_timestamp": "2026-08-07T15:02:04.703832Z"}, {"uuid": "caafeea1-6e0e-4418-9f02-48be579cd2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19762", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fgpw3iswn2nqq", "content": "CVE-2026-19762 - DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal\nCVE ID : CVE-2026-19762\n \n Published : Aug. 14, 2026, midnight | 35\u00a0minutes ago\n \n Description : A vulnerability was found in DTStack Taier 1.4.0. Affected by this vulnerabilit...", "creation_timestamp": "2026-08-14T01:02:28.733408Z"}, {"uuid": "0072db05-536a-4d37-a820-c66299d946db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19763", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/htwnlpt2q6ghn", "content": "CVE-2026-19763 - DTStack Taier Cluster Creation ClusterController.java FileUtils.deleteDirectory path traversal\nCVE ID : CVE-2026-19763\n \n Published : Aug. 14, 2026, 12:15 a.m. | 20\u00a0minutes ago\n \n Description : A vulnerability was determined in DTStack Taier 1.4.0. Affected by...", "creation_timestamp": "2026-08-14T01:04:28.771852Z"}, {"uuid": "df9bbfc5-0308-4287-9658-6fdb8ca19603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mte5dizb2k2e", "content": "GitLab\u306b\u91cd\u5927\u306a\u6b20\u9665\u3001\u653b\u6483\u8005\u304c\u516c\u958b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3092\u6539\u3056\u3093\u30fb\u524a\u9664\u53ef\u80fd\u306b(CVE-2026-19478)\n\nGitLab\u306f\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u60aa\u7528\u53ef\u80fd\u306a\u6df1\u523b\u5ea6\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u6b20\u9665\u3092\u542b\u3080\u30012\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002 \u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306f\u3001GitLab Community Edition(CE)\u304a\u3088\u3073Enterprise Edition(EE)\u306e\u30d0\u30fc\u30b8\u30e7\u30f318.2\u304b\u308918.11....", "creation_timestamp": "2026-08-18T11:45:32.215520Z"}, {"uuid": "43d5fc42-3097-4215-82fe-f5f18640c5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mte5wfnbok2v", "content": "Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/08/18/g...\n\n#CVE #vulnerability #cybersecurity", "creation_timestamp": "2026-08-18T11:56:10.158718Z"}, {"uuid": "1b9e0e80-a1d8-4ce7-92a6-7b6f5a4d98f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/m_mWdLfn7AzxtutPwUwFotcuCU2as0PFXRgnVVXbxrPnDrU", "content": "", "creation_timestamp": "2026-08-18T12:00:03.184034Z"}, {"uuid": "1e8344fb-a1cd-4199-b251-325dbd5676ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19714", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117104012482062404", "content": "CVE-2026-19714 (CRITICAL): Simple JWT Login <3.6.8 for WordPress fails to validate Google token audiences. Sites with Google sign-in enabled risk admin impersonation & takeover. Disable Google sign-in or update ASAP. https://radar.offseq.com/threat/cve-2026-19714-cwe-287-improper-authentication-in-simple-jwt-login-2d90d2253c004239 #OffSeq #WordPress #CVE202619714", "creation_timestamp": "2026-08-16T07:30:25.545518Z"}, {"uuid": "a8d5eafa-1c5e-46ff-bc08-4d8a56449607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19714", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mt6o5jsgmx2f", "content": "Simple JWT Login WordPress plugin (pre-3.6.8) has a CRITICAL auth flaw \u2014 Google sign-in lets attackers impersonate admins. Disable Google sign-in or upgrade when patch is confirmed. Details: https://radar.offseq.com/threat/cve-2026-19714-cwe-287-improper-authentication-in-simple-jwt-login-2d90d22...", "creation_timestamp": "2026-08-16T07:30:28.690737Z"}, {"uuid": "14c13788-05f8-4dfb-86f1-bf91414cf0a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19924", "type": "seen", "source": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mt6ocsirlq2s", "content": "Today's CyberGeoDigest \u2014 10 stories\n\nTop: CVE-2026-19924: Tenda AC10 Router Exposes CVSS-10 Authentication Bypass\n\n#InfoSec #CVE #CyberSecurity", "creation_timestamp": "2026-08-16T07:33:23.916268Z"}, {"uuid": "85702927-d8f6-457b-ac12-a98b766523e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19750", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msz4qn7ngu2m", "content": "Tenda CH, CP, TX3 V21.x/V22.x/V25.x/V26.x/V27.x\u306eSSH\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306e\u4e0d\u660e\u306a\u6a5f\u80fd\u306b\u3001\u30cf\u30fc\u30c9\u30b3\u30fc\u30c9\u3055\u308c\u305f\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u4f7f\u7528\u3068\u3044\u3046\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u653b\u6483\u8005\u306f\u3053\u306e\u2026\nCVE-2026-19750 CVSS 8.1 | HIGH", "creation_timestamp": "2026-08-14T02:35:42.076178Z"}, {"uuid": "0a6323f1-b9a9-4168-a760-ce52fa305bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19934", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/g4xgpjq4qlemv", "content": "CVE-2026-19934 - itsourcecode Hospital Management System vieworder.php sql injection\nCVE ID : CVE-2026-19934\n \n Published : Aug. 16, 2026, 6:16 a.m. | 18\u00a0minutes ago\n \n Description : A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an...", "creation_timestamp": "2026-08-16T08:00:54.744167Z"}, {"uuid": "aa6bd8fd-32ec-4e01-b65d-d4df88d06973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jp25vq6k32luz", "content": "CVE-2026-19728 - Extra Product Options Builder for WooCommerce\nCVE ID : CVE-2026-19728\n \n Published : Aug. 16, 2026, 6:16 a.m. | 18\u00a0minutes ago\n \n Description : The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester...", "creation_timestamp": "2026-08-16T08:06:55.116434Z"}, {"uuid": "1b374dbf-b6a3-442f-a629-6b7d70ebcdd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19726", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6meapu5jsdgip", "content": "CVE-2026-19726 - Visualizer\nCVE ID : CVE-2026-19726\n \n Published : Aug. 16, 2026, 6:16 a.m. | 18\u00a0minutes ago\n \n Description : The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, allowing users with the Contributor...", "creation_timestamp": "2026-08-16T08:12:54.341068Z"}, {"uuid": "80c61fab-b2bd-4ae4-a885-15605f3dd97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mte6wf3vue2m", "content": "GitLab released security updates on August 17, 2026, addressing a critical vulnerability (CVE-2026-19478) allowing unauthenticated attackers to delete public projects in its CE and EE software, rated CVSS 9.4. Affected versions include 18.2 to 18.11.11, 19.0 to 19.0.8, 19.1 to 19.1.6, and 19.", "creation_timestamp": "2026-08-18T12:14:01.027415Z"}, {"uuid": "e862b3f3-2173-4d6d-9c80-6d4988628e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19264", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/675k6a4kh2ptu", "content": "CVE-2026-19264 - Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover\nCVE ID : CVE-2026-19264\n \n Published : Aug. 7, 2026, 3:17 p.m. | 38\u00a0minutes ago\n \n Description : Postiz is an open-source social media schedul...", "creation_timestamp": "2026-08-07T16:20:01.389999Z"}, {"uuid": "31d642e7-c14c-4866-babe-ca0196b6d8ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mte6oqsfpa2i", "content": "CVE-2026-19478 - Critical unauthenticated data tampering in GitLab CE/EE. Remote modify/delete of public projects via GraphQL. CVSS 9.4. No patch yet. Harden access & monitor. #CVE #GitLab #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-19478/", "creation_timestamp": "2026-08-18T12:09:43.150747Z"}, {"uuid": "41c27f4c-729e-4a9e-8a9a-132399dd395f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117116435366356396", "content": "CVE-2026-19478 - Critical unauthenticated data tampering in GitLab CE/EE. Remote modify/delete of public projects via GraphQL. CVSS 9.4. No patch yet. Harden access & monitor. #CVE #GitLab #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19478/", "creation_timestamp": "2026-08-18T12:09:44.383313Z"}, {"uuid": "8729dbe9-9bf3-440b-bfe3-cedbbb5265ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19165", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117055340138145623", "content": "A severe vulnerability was disclosed for Google Chrome (CVE-2026-19165) https://vuldb.com/vuln/386798", "creation_timestamp": "2026-08-07T17:12:24.337027Z"}, {"uuid": "72f14a28-698d-45ea-83f7-ad8ba1c1d98b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19228", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtkhpf7lwx24", "content": "\ud83d\udccc CVE-2026-19228 - GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could ... https://www.cyberhub.blog/cves/CVE-2026-19228", "creation_timestamp": "2026-08-21T00:07:06.998612Z"}, {"uuid": "d9a65299-ba73-470d-9f30-56445701326b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19418", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mte6z4psi72h", "content": "\ud83d\udd17 CVE : CVE-2026-15305, CVE-2026-19418", "creation_timestamp": "2026-08-18T12:15:31.090719Z"}, {"uuid": "5670a828-02a2-4216-b847-4f08bca43fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/117139525002330094", "content": "We all know that CVE references age over time, and eventually none of the references exist anymore.  (See also: people who run websites usually don't understand the concept of the World Wide Web)\nCase in point:The recent GitLab CVE-2026-19478 and CVE-2026-19650\nOut of the three references, one of them simply doesn't exist, and one of them is hidden behind a login requirement, after which you're told that you cannot access it.\nWhy wait for references to age out over time when you can make them worthless right at publication time?  \ud83d\ude02", "creation_timestamp": "2026-08-22T14:01:45.140728Z"}, {"uuid": "48b42d28-29e7-44fe-9a55-251cc3aa542f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19650", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/117139525002330094", "content": "We all know that CVE references age over time, and eventually none of the references exist anymore.  (See also: people who run websites usually don't understand the concept of the World Wide Web)\nCase in point:The recent GitLab CVE-2026-19478 and CVE-2026-19650\nOut of the three references, one of them simply doesn't exist, and one of them is hidden behind a login requirement, after which you're told that you cannot access it.\nWhy wait for references to age out over time when you can make them worthless right at publication time?  \ud83d\ude02", "creation_timestamp": "2026-08-22T14:01:45.195252Z"}, {"uuid": "5e6730f1-1d58-4632-a876-823a77181444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mtogt64ztiy2", "content": "We all know that CVE references age over time, and eventually none of the references exist anymore. (See also: people who run websites usually don't understand the concept of the World Wide Web)\n\nCase in point:\nThe recent GitLab CVE-2026-19478 and [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-08-22T14:05:56.245218Z"}, {"uuid": "f73307ff-d198-4388-8b16-9f5a3b22f776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19912", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtwarfndxs2y", "content": "Two unpatched Kaltura server flaws (CVE-2026-19912, CVE-2026-19913) allow attackers to execute code and read files. Learn how to mitigate these risks.\n\n#Kaltura #CyberSecurity #CVE202619912 #CVE202619913 #InfoSec", "creation_timestamp": "2026-08-25T16:34:55.378478Z"}, {"uuid": "9aced82a-c10d-4499-bb5d-61430ec957cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19913", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtwarfndxs2y", "content": "Two unpatched Kaltura server flaws (CVE-2026-19912, CVE-2026-19913) allow attackers to execute code and read files. Learn how to mitigate these risks.\n\n#Kaltura #CyberSecurity #CVE202619912 #CVE202619913 #InfoSec", "creation_timestamp": "2026-08-25T16:34:55.426338Z"}, {"uuid": "e75b3252-2f63-4c2e-9978-6d42090ced58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/xakep_ru/19945", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 GitLab \u0443\u0436\u0435 \u0432\u0437\u044f\u043b\u0438 \u043d\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-19478 \u0432 GitLab, \u043f\u0440\u0438\u0447\u0435\u043c \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0431\u0430\u0433\u0435.\n\nhttps://xakep.ru/2026/08/26/gitlab-attacks/", "creation_timestamp": "2026-08-26T13:00:03.411654Z"}, {"uuid": "9d8fb09c-6226-4379-8c63-8c39145ed922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml", "content": "", "creation_timestamp": "2026-08-28T00:00:09.695286Z"}, {"uuid": "6b228097-b74a-4f37-a98e-7f665f98b5e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml", "content": "", "creation_timestamp": "2026-08-24T15:00:05.948925Z"}, {"uuid": "1460810b-603d-4031-a0f5-e1b7dae388c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19626", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99491", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-19626\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a h00die\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 12:47:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T15:00:04.996171Z"}, {"uuid": "c268ae5b-23fe-4ac4-8fac-7eb35be76742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19913", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtyfmroaju2m", "content": "Kaltura mwEmbed\u306b2\u4ef6\u306e\u672a\u4fee\u6b63\u8106\u5f31\u6027\uff08CVE-2026-19913, CVE-2026-19912\uff09\u304c\u3042\u308a\u3001\u9060\u9694\u306e\u653b\u6483\u8005\u306f\u30d5\u30a1\u30a4\u30eb\u8aad\u53d6\u3084\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3067\u3059\u3002", "creation_timestamp": "2026-08-26T13:07:08.551973Z"}, {"uuid": "45dbea18-44d6-49bc-b712-a106780157d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19912", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtyfmroaju2m", "content": "Kaltura mwEmbed\u306b2\u4ef6\u306e\u672a\u4fee\u6b63\u8106\u5f31\u6027\uff08CVE-2026-19913, CVE-2026-19912\uff09\u304c\u3042\u308a\u3001\u9060\u9694\u306e\u653b\u6483\u8005\u306f\u30d5\u30a1\u30a4\u30eb\u8aad\u53d6\u3084\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3067\u3059\u3002", "creation_timestamp": "2026-08-26T13:07:08.599894Z"}, {"uuid": "ad73cac0-4912-48ca-8504-23462a3f1b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19874", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mttmirm3ic2u", "content": "Metal Gear Online 3 RCE vulnerability CVE-2026-19874 fixed. Update the game to prevent attackers from executing remote code on your system.\n\n#MetalGearOnline3 #CyberSecurity #Vulnerability #CVE202619874", "creation_timestamp": "2026-08-24T15:26:52.147331Z"}, {"uuid": "d634725a-f393-4d96-8b07-774257c04d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mu2scilfqy2t", "content": "Top 3 CVE for last 7 days:\nCVE-2026-69836: 43 interactions\nCVE-2026-73570: 22 interactions\nCVE-2026-19490: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-65641: 8 interactions\nCVE-2026-16812: 5 interactions\nCVE-2026-19632: 5 interactions\n", "creation_timestamp": "2026-08-27T11:59:21.369611Z"}, {"uuid": "b8f0ceff-7cbf-4ee3-b2cf-04dbb53662cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mtonsnhseq2v", "content": "GitLab's 'Future Field' Security Feature Turns Weapon: Emergency Patches for CVE-2026-19478", "creation_timestamp": "2026-08-22T16:07:00.089272Z"}, {"uuid": "b17930cf-1b1d-46f7-a1c2-b0eafa997fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19913", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-27T12:00:04.562871Z"}, {"uuid": "b259cbdc-9fd1-48d8-9012-82665798b3fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19914", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-27T12:00:04.758891Z"}, {"uuid": "163da627-f6e9-4125-a878-f4fb08d871c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mu2scilfqy2t", "content": "Top 3 CVE for last 7 days:\nCVE-2026-69836: 43 interactions\nCVE-2026-73570: 22 interactions\nCVE-2026-19490: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-65641: 8 interactions\nCVE-2026-16812: 5 interactions\nCVE-2026-19632: 5 interactions\n", "creation_timestamp": "2026-08-27T11:59:21.522486Z"}, {"uuid": "d0b85236-bf91-453b-adda-f428698e5d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19912", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-27T12:00:04.607602Z"}, {"uuid": "37128ca1-d35e-4e6e-a37a-0e23b6dbf95a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19914", "type": "seen", "source": "Telegram/1RDfiYvrsmnO1GwdulIpRqcmzx_QFBcCsg-HKcZQ14O2mKw", "content": "", "creation_timestamp": "2026-08-27T12:00:06.006775Z"}, {"uuid": "bc8b8475-7718-4990-8791-cfc998680650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19913", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtyhsgjags2x", "content": "\ud83e\udd16 CVE-2026-19913 & CVE-2026-19912: unpatched unsafe deserialization in Kaltura's mwEmbed video player allows remote unauthenticated file read + RCE via mwEmbedLoader.php (CERT/CC, no fix yet).\nhttps://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.html", "creation_timestamp": "2026-08-26T13:46:05.237815Z"}, {"uuid": "b5a3b543-7b37-4494-81ec-db3348caec0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19912", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtyhsgjags2x", "content": "\ud83e\udd16 CVE-2026-19913 & CVE-2026-19912: unpatched unsafe deserialization in Kaltura's mwEmbed video player allows remote unauthenticated file read + RCE via mwEmbedLoader.php (CERT/CC, no fix yet).\nhttps://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.html", "creation_timestamp": "2026-08-26T13:46:05.297268Z"}, {"uuid": "15fc4f80-db72-4251-832e-8ef55eab779b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-27T12:00:06.971653Z"}, {"uuid": "64794904-0946-49c0-b4a0-631a3f0950f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-27T12:00:04.800309Z"}, {"uuid": "1a6f4f76-c14b-4aa4-baaa-cd02cd46857a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19670", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mttohpmzm52x", "content": "CVE-2026-19670 [MEDIUM] nginx\n\nMalcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /htadmin, /auth, /admin_login, /arkime/api/esadmin, NetBox, upload endpoints) by\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-19670", "creation_timestamp": "2026-08-24T16:02:03.048992Z"}, {"uuid": "645c8dfc-c894-4fd8-8497-07fb6478efc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "seen", "source": "https://bsky.app/profile/ian-bishop.bsky.social/post/3mtykjxlq2c2p", "content": "Critical flaw in TranslatePress WordPress plugin (CVE-2026-19632, CVSS 9.8) exposes 400K+ sites to admin account takeover via leaked password reset\u2026\n\ncybersecuritynews.com/translatepre...", "creation_timestamp": "2026-08-26T14:35:04.380778Z"}, {"uuid": "5a8d6594-afc5-4442-a6d7-2f354fb4e30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/DP79lFx68QWQ614S8M8RHa50ZKS9vH8rAQGB16GYh--ECJk", "content": "", "creation_timestamp": "2026-08-22T17:00:04.492827Z"}, {"uuid": "ed7e153e-988e-4097-9458-c84e890cf374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19442", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mu5d7brzmm2f", "content": "\ud83d\udccc CVE-2026-19442 - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploi... https://www.cyberhub.blog/cves/CVE-2026-19442", "creation_timestamp": "2026-08-28T12:07:06.554959Z"}, {"uuid": "2061baff-e55b-417f-8624-1159a5e5d828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/500", "content": "CVE-2026-19632 - TranslatePress Unauthenticated Account Takeover -> \npoc: https://github.com/DeadExpl0it/CVE-2026-19632-POC", "creation_timestamp": "2026-08-28T22:00:05.136096Z"}, {"uuid": "89d27562-7d00-44a7-9f8a-b2164f818d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wordpress-rilevata-vulnerabilita-nel-plugin-pods", "content": "", "creation_timestamp": "2026-08-28T12:45:05.858281Z"}, {"uuid": "1c230155-f0ae-4d01-9383-fb158e431fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mtwfwdyhls24", "content": "Citrix NetScaler: CVE-2026-19490, Critical Authentication Bypass with CVSS 9.3", "creation_timestamp": "2026-08-25T18:07:10.143946Z"}, {"uuid": "4122f6bd-a23d-48ca-8256-99819a57165b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://www.cert.se/2026/08/cert-se-veckobrev-v35.html", "content": "", "creation_timestamp": "2026-08-28T12:45:10.413848Z"}, {"uuid": "3267e9d9-c3c7-4aa1-a503-0bda448609a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mtov74bf532s", "content": "CVE-2026-19490: Critical Citrix NetScaler Authentication Bypass Exposes Enterprise Gateways\n\n", "creation_timestamp": "2026-08-22T18:19:12.208809Z"}, {"uuid": "9d4fd86f-3e1f-48a3-937c-61d99d532e3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19913", "type": "seen", "source": "https://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.html", "content": "The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library that allow a remote, unauthenticated attacker to read arbitrary files from a server and execute code on it.\n\nThe flaws, tracked as CVE-2026-19913 and CVE-2026-19912, both stem from the same unsafe deserialization in the mwEmbedLoader.php endpoint of the mwEmbed player", "creation_timestamp": "2026-08-26T16:00:49.631026Z"}, {"uuid": "1838a709-4ea1-4578-ab47-74294419e1ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19912", "type": "seen", "source": "https://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.html", "content": "The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library that allow a remote, unauthenticated attacker to read arbitrary files from a server and execute code on it.\n\nThe flaws, tracked as CVE-2026-19913 and CVE-2026-19912, both stem from the same unsafe deserialization in the mwEmbedLoader.php endpoint of the mwEmbed player", "creation_timestamp": "2026-08-26T16:00:49.696435Z"}, {"uuid": "e402ef35-3699-48f2-bbbf-c46a6d1197a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-28T00:00:50.577628Z"}, {"uuid": "d2aa700c-f767-409b-8e41-885b9c6d04c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19295", "type": "published-proof-of-concept", "source": "Telegram/tYXjtXGvZOcVL05bpL_3O2jX-Uki9x_dAhf7v1swcwhwyfI", "content": "", "creation_timestamp": "2026-08-28T00:00:31.189919Z"}, {"uuid": "8f528aed-3f23-495c-8607-1fd0556e64ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99211", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Gitlab-CVE-2026-19478\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a punitdarji\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 12:21:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitlab-CVE-2026-19478\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:04.857391Z"}, {"uuid": "f4d5ab39-d974-4daf-8616-eead333cf6d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/GithubRedTeam/98977", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-19478\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a n0xdaemon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Ruby\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 20:33:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19478: GitLab GraphQL Vulnerability PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:05.048611Z"}, {"uuid": "641187f4-718d-4568-8f1d-f9842da2f515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://t.me/GithubRedTeam/98705", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19598-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DeadExpl0it\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 02:13:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:06.154243Z"}, {"uuid": "c5a34e04-f49c-40f5-81f9-2c0a0b112698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19501", "type": "seen", "source": "https://t.me/GithubRedTeam/98638", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19501-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a typedefabcd1234ntd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-18 15:33:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19501 poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:06.384904Z"}, {"uuid": "063f2614-ba24-4e50-8847-a255248c0f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19874", "type": "seen", "source": "https://t.me/GithubRedTeam/99516", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a mgo3-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a alicealys\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 15:27:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19874\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T17:00:04.947921Z"}, {"uuid": "ef2e5b47-fff6-4f40-a4be-4f017297043a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/GithubRedTeam/98582", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19478-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a davkharrr\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-18 07:23:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19478 PoC . Unauthenticated remote code-injection in GitLab's GraphQL layer \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:06.756577Z"}, {"uuid": "eb898813-1779-4438-8c11-daa6cf577875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/information_security_channel/55770", "content": "Critical GitLab Flaw Exploited Shortly After Disclosure\nhttps://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/\n\nCVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.\nThe post Critical GitLab Flaw Exploited Shortly After Disclosure (https://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-22T19:00:10.310749Z"}, {"uuid": "c1d12a26-f89b-410b-9eba-05d1b32beef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19500", "type": "seen", "source": "https://t.me/GithubRedTeam/98637", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19500-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a typedefabcd1234ntd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-18 15:35:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19500 poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:06.965049Z"}, {"uuid": "06c5b615-4ea2-4607-a681-354adc7e25fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mtp2uw7p6f25", "content": "CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway\n\n", "creation_timestamp": "2026-08-22T20:00:52.357832Z"}, {"uuid": "e8a1e7ef-32c1-4841-885c-9eca9de01df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mtp3457wqk2j", "content": "GitLab CVE-2026-19478 is under active exploitation days after disclosure.\n\nIf GitLab sits in your build chain, patching is now incident response.\n\n#ThreatIntel #CyberSecurity\n\nhttps://threat-intelligence.redeyesecurity.com/blog/gitlab-cve-2026-19478-active-exploitation-2026", "creation_timestamp": "2026-08-22T20:04:55.066920Z"}, {"uuid": "c643002d-82ca-4319-9218-217d2052a26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19685", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttvjzjd6o2t", "content": "\ud83d\udea8 CVE-2026-19685 \u2014 CVSS 9.8 CRITICAL\n\nNetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path director...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19685\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T18:08:36.618323Z"}, {"uuid": "9caa6aa0-c4fe-4014-8f8d-3a4eb062c159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19685", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttwqgvsaf2e", "content": "CVE-2026-19685 - red hat enterprise linux 10\nThe NetworkManager program on Linux does not properly limit a setting that tells the system where to look for trusted Wi\u2011Fi authentication files. This lets a regular user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#redhat #CVE #infosec", "creation_timestamp": "2026-08-24T18:30:05.842224Z"}, {"uuid": "368e66f3-de37-4d13-b03e-e1ef9c1c90ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99812", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19632-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DeadExpl0it\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-26 14:29:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-19632 - TranslatePress \u2013 Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-26T17:00:04.012329Z"}, {"uuid": "f942347b-c34e-46a6-92b1-9e925fcca783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19295", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99985", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-19295\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rmhowe425\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 15:55:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:00:33.715136Z"}, {"uuid": "56e21b57-c7be-4775-8f8e-33d5c18205df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19914", "type": "published-proof-of-concept", "source": "Telegram/1RDfiYvrsmnO1GwdulIpRqcmzx_QFBcCsg-HKcZQ14O2mKw", "content": "", "creation_timestamp": "2026-08-28T00:00:42.810323Z"}, {"uuid": "906c0e92-0cc5-446e-8a0d-c6b7a700dc8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19685", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117151984890850771", "content": "i uSe lInUx bEcAuSe iT'S SeCuRe.\nhttps://access.redhat.com/security/cve/cve-2026-19685\n\nNetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.", "creation_timestamp": "2026-08-24T18:50:26.687377Z"}, {"uuid": "b8435872-a910-4067-977b-c7f0bb248dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1999", "type": "seen", "source": "https://t.me/cve0day/284", "content": "CVE-2026-1999\n\nGitHub Link:\nhttps://github.com/jwde/automerge-test", "creation_timestamp": "2026-08-28T00:00:41.415822Z"}, {"uuid": "98ff28bb-377a-4617-b569-a8dc3b36b91f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-28T00:00:35.596606Z"}, {"uuid": "bee8ad29-1b5f-497d-937d-823b40c0fb69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98582", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19478-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a davkharrr\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-18 07:23:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19478 PoC . Unauthenticated remote code-injection in GitLab's GraphQL layer \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:10.858683Z"}, {"uuid": "3f3f0297-618f-4d6e-8921-220ed3a9ab36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19501", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98638", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19501-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a typedefabcd1234ntd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-18 15:33:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19501 poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:11.533598Z"}, {"uuid": "86c0876e-d32f-47e7-a1e2-c9d1f371e145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19500", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98637", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19500-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a typedefabcd1234ntd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-18 15:35:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19500 poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:07.733193Z"}, {"uuid": "3e01fe1b-81ae-4195-9fa1-01e3e536fa4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98705", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19598-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DeadExpl0it\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-19 02:13:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nProof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:11.783483Z"}, {"uuid": "6a14bbf0-579c-4c79-9887-0db0df402e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98977", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-19478\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a n0xdaemon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Ruby\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 20:33:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19478: GitLab GraphQL Vulnerability PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:31.334022Z"}, {"uuid": "eac286ee-1f95-44cf-993a-c91e4e172acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99211", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Gitlab-CVE-2026-19478\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a punitdarji\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 12:21:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitlab-CVE-2026-19478\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:32.493124Z"}, {"uuid": "71151317-bc67-4acd-a866-6042a0b8a52b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/information_security_channel/55770", "content": "Critical GitLab Flaw Exploited Shortly After Disclosure\nhttps://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/\n\nCVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.\nThe post Critical GitLab Flaw Exploited Shortly After Disclosure (https://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-23T00:00:33.775089Z"}, {"uuid": "941f321d-41fa-4f36-8aff-2427d6fd0026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19874", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtu6kqoq422c", "content": "CVE-2026-19874 - metal gear online 3\nThe game does not check how many player IDs are listed when a player is kicked from a lobby. If a malicious user sends a list that is larger than the game expects, it can overwrite\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#konami #CVE #infosec", "creation_timestamp": "2026-08-24T20:50:04.785838Z"}, {"uuid": "a7c67153-a927-4711-b52f-3fc62a6556b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/24147", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-08-23T00:00:44.202688Z"}, {"uuid": "e7bb1bb1-8109-4ebb-8880-e1629fbde268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/DP79lFx68QWQ614S8M8RHa50ZKS9vH8rAQGB16GYh--ECJk", "content": "", "creation_timestamp": "2026-08-23T00:00:36.528900Z"}, {"uuid": "27f1a850-9ca7-4052-bc6f-af1e757398b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1999", "type": "seen", "source": "Telegram/CZBJvlZ1W3OH6fsaJgVtYfOnMMQCQpGY5IWdZ_FaTQwAkWo", "content": "", "creation_timestamp": "2026-07-20T18:00:06.028010Z"}, {"uuid": "ddd7b3d3-68a2-4d28-8c48-b498adb33199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19843", "type": "seen", "source": "Telegram/0Lzh2WjQOWsuTydOW_ekHZzZKDiwWQ3j_cpMbWJHlr9U_UA", "content": "", "creation_timestamp": "2026-08-24T21:00:05.537710Z"}, {"uuid": "784d6031-fdf5-40b1-b10f-907422cc24a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-23T00:00:46.605128Z"}, {"uuid": "8ebb4da7-d3a3-4f10-ac9d-657d8f759bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1999", "type": "seen", "source": "Telegram/CZBJvlZ1W3OH6fsaJgVtYfOnMMQCQpGY5IWdZ_FaTQwAkWo", "content": "", "creation_timestamp": "2026-07-21T00:00:33.493275Z"}, {"uuid": "26163e20-1199-4a0a-bec5-ade4d7a4a0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-23T00:00:46.426937Z"}, {"uuid": "ce360b31-c111-4212-b668-1a703d60d880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1980", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-1980.yaml", "content": "", "creation_timestamp": "2026-07-21T06:00:07.112510Z"}, {"uuid": "a0fe841f-2b87-47f9-8e55-6d559ea4692a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtywdbqygh2x", "content": "CVE-2026-19598 is trending. Hype score 5, currently #4 on cvemon.\n\nThe Pods \u2013 Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19598", "creation_timestamp": "2026-08-26T18:06:03.847541Z"}, {"uuid": "31c3174a-ff9a-4d5e-bfe5-72acc680787d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19568", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtucllupjp2l", "content": "\ud83d\udfe0 CVE-2026-19568 - High (7.8)\n\nA maliciously crafted SVG file, when parsed through Autodesk 3ds Max, can force a Memory Corrupti...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19568/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-24T22:02:09.273318Z"}, {"uuid": "609c5c3e-4a29-4948-931c-2ea378ae0c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1999", "type": "seen", "source": "https://t.me/cve0day/284", "content": "CVE-2026-1999\n\nGitHub Link:\nhttps://github.com/jwde/automerge-test", "creation_timestamp": "2026-08-27T15:00:12.249154Z"}, {"uuid": "b2b5d014-35fd-40d9-9992-830bae293882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19883", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mtpnynetzn2m", "content": "CVE-2026-19883: fallo en WPeMatico escala a admin\n\n\u00bfUs\u00e1s WPeMatico en WordPress? El CVE-2026-19883 deja que un suscriptor tome control admin de tu sitio. Cheque\u00e1 tu versi\u00f3n y protejete hoy mismo.\n\n#cve202619883 #wpematico #vulnerabilidadwordpress #escaladadeprivilegios #seguridadwordpress", "creation_timestamp": "2026-08-23T01:42:59.105050Z"}, {"uuid": "2c9ebc52-d7e7-400b-8f93-ba1b64f57538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19913", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-28T00:00:48.323941Z"}, {"uuid": "44db3ccd-245d-4c0f-b4af-68c6bfad8323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19912", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-28T00:00:48.358932Z"}, {"uuid": "5f7a426b-c28f-445e-bda3-baa7e213c2ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19914", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-28T00:00:48.631399Z"}, {"uuid": "2d993ca0-d8a9-4a0b-9578-74b34fd981d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "published-proof-of-concept", "source": "Telegram/Qorl8KsupVbzUPX8azz4xQbaY0YHd4AMaNdtiK2dWAxVLZg", "content": "", "creation_timestamp": "2026-08-28T00:00:48.682288Z"}, {"uuid": "276d2c5f-e40e-4e91-b8f9-7ec62018bd9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1999", "type": "seen", "source": "Telegram/CZBJvlZ1W3OH6fsaJgVtYfOnMMQCQpGY5IWdZ_FaTQwAkWo", "content": "", "creation_timestamp": "2026-07-22T00:00:07.524234Z"}, {"uuid": "06c31304-539a-4da3-b93e-4ea76a795eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1980", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-1980.yaml", "content": "", "creation_timestamp": "2026-07-22T00:00:07.004464Z"}, {"uuid": "a47be1cb-8eca-4123-806c-2b5c7cd0ade4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hackmag.com/post/3mu34gfolxs2b", "content": "\ud83d\udfe2 Hackers Are Already Exploiting a Critical GitLab Vulnerability\n\n\ud83d\udde8\ufe0f Researchers at watchTowr reported that hackers have begun exploiting the critical GitLab vulnerability CVE-2026-19478 in\u2026\n\n#news", "creation_timestamp": "2026-08-27T15:00:33.862685Z"}, {"uuid": "3d7af170-5ea7-48fa-bdf2-2770ae61ae18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19449", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtz53qxttn2h", "content": "\ud83d\udccc CVE-2026-19449 - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a vulnerability in cmdnim that may allow an unprivileged local user to executes the payload as root. https://www.cyberhub.blog/cves/CVE-2026-19449", "creation_timestamp": "2026-08-26T20:07:07.522533Z"}, {"uuid": "c4d3ac67-dfa8-4abb-8d1e-32f6000ca83d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19774", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117153126668400005", "content": "The severity is increased for this new vulnerability affecting Linux BlueZ (CVE-2026-19774) https://vuldb.com/vuln/394869", "creation_timestamp": "2026-08-24T23:40:48.331478Z"}, {"uuid": "9e6b99d0-1866-48f4-b8ed-608ca55e3bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-27T16:00:04.850963Z"}, {"uuid": "d29a45a3-d5b6-433a-a9d9-7a45bc4a87aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19843", "type": "published-proof-of-concept", "source": "Telegram/0Lzh2WjQOWsuTydOW_ekHZzZKDiwWQ3j_cpMbWJHlr9U_UA", "content": "", "creation_timestamp": "2026-08-25T00:00:08.146869Z"}, {"uuid": "83d656f9-caf6-42c4-b49e-550ee61c1ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml", "content": "", "creation_timestamp": "2026-08-25T00:00:07.413110Z"}, {"uuid": "58724cc4-db33-4ebb-9a01-2f92dbe3d859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19874", "type": "seen", "source": "https://t.me/GithubRedTeam/99516", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a mgo3-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a alicealys\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 15:27:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19874\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-25T00:00:11.718296Z"}, {"uuid": "5be52c9b-2c86-4128-b97b-fa0a847b306e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99908", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19478\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 06:47:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitLab Code injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:00:58.432252Z"}, {"uuid": "7859461e-0a4b-469c-8f9c-d726324d1431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1980", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-1980.yaml", "content": "", "creation_timestamp": "2026-07-23T00:00:08.002364Z"}, {"uuid": "c8ded32c-478b-4030-8a40-521aecca14a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19626", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99491", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-19626\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a h00die\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 12:47:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-25T00:00:23.474107Z"}, {"uuid": "645f1def-8004-48b5-8aeb-09c85d07f19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19679", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99482", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-19679\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a h00die\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 10:34:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-25T00:00:23.947646Z"}, {"uuid": "2ae3af6b-9f85-496b-808d-488bb9a9a161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/kasperskyb2b/2295", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udeb2\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0433\u0440\u0443\u043f\u043f\u044b Armored Likho, \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0442\u0440\u0451\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0442\u0440\u043e\u044f\u043d\u0446\u0430 BusySnake RAT, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u0440\u043e\u044f\u043d\u0446\u0430 open source, Kharon, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441 AdaptixC2. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c C2 \u043f\u0435\u0440\u0435\u0435\u0445\u0430\u043b\u0438 \u0441 Telegram Bot API \u043d\u0430 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432 CI/CD-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u0430\u0445 GitLab, \u0430 \u0441\u0430\u043c\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u2014 \u0432 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u0410\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0432 \u043a\u043e\u0434\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0418\u0418 \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438.\n\n\ud83d\udd0e \u041a\u043b\u0430\u0441\u0442\u0435\u0440 \u0443\u0433\u0440\u043e\u0437 UAT-10147 \u0432\u0441\u0442\u0440\u043e\u0438\u043b \u0430\u0433\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u0418\u0418 \u0432 \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c. \u0418\u0418 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a. \u0413\u0440\u0443\u043f\u043f\u0430 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0430 \u0441\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0432\u0435\u0436\u0438\u043c\u0438 \u0431\u0430\u0433\u0430\u043c\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Linux, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c QuasarRAT, Gh0stCringe, NoodleRAT \u0438 Meterpreter \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043b\u0435\u0439 \u0432 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440\u0435, \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0438, \u043c\u0435\u0434\u0438\u0430, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0442\u0440\u0430\u0441\u043b\u0438 \u0438 \u0438\u0433\u0440\u043e\u0432\u043e\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0432 \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438, \u0411\u043e\u043b\u0438\u0432\u0438\u0438, \u041a\u0438\u0442\u0430\u0435, \u041a\u0430\u043d\u0430\u0434\u0435 \u0438 \u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435.\n\n\ud83c\udf1a \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 Rust crate \u043d\u0430 crates.io, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 arrayref, \u0432 \u0438\u0442\u043e\u0433\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440. \u0410\u0442\u0430\u043a\u0430 \u0434\u043b\u0438\u043b\u0430\u0441\u044c \u0432\u0441\u0435\u0433\u043e 23 \u043c\u0438\u043d\u0443\u0442\u044b, \u043d\u043e \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043f\u0430\u043a\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0442\u0440\u0451\u0445 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u044f\u0445 \u0441\u0440\u0435\u0434, \u0433\u0434\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f Rust. \u0418\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0430\u0442\u0430\u043a\u0438 \u043f\u0435\u0440\u0435\u0441\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 Sapphire Sleet.\n\n\ud83d\udfe2\u0413\u0440\u0443\u043f\u043f\u0430 Ransom Busters LTD \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u0435\u0442 \u043f\u0438\u0441\u044c\u043c\u0430 \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432 \u0435\u0449\u0451 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0444\u0430\u043a\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u0441\u0443\u043c\u043c\u0443 \u043e\u0442 $20000 \u0434\u043e $60000. \u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e \u0442\u0435 \u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0438 \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435.\n\n\u2757\ufe0f \u0420\u0435\u0434\u043a\u0438\u0439 \u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u2014 \u0412\u041f\u041e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0433\u043e\u043b\u043e\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 (\u043a\u043e\u043d\u0435\u0447\u043d\u043e, Android). \u0412 \u0430\u0442\u0430\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u0438\u043d\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 MQTT-\u0431\u0440\u043e\u043a\u0435\u0440. \u0412 \u043a\u043e\u043d\u0446\u0435 \u043a\u043e\u043d\u0446\u043e\u0432 \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c (!) \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0434\u043b\u044f \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0442 \u0430\u0432\u0442\u043e \u0432 \u0441\u0435\u0442\u044c \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043f\u0440\u043e\u043a\u0441\u0438. \u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 MoYu Group \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439 BADBOX.\n\n\ud83d\udd35\u041d\u043e\u0432\u0430\u044f \u0442\u0430\u043a\u0442\u0438\u043a\u0430 \u0433\u0440\u0443\u043f\u043f\u044b GOFFEE/Paper Werewolf. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u043b\u0438 \u0444\u0430\u0439\u043b\u044b 7-Zip \u0438 Git \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u041f\u041e \u043d\u0430 \u0442\u0440\u043e\u044f\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 ISO-\u043e\u0431\u0440\u0430\u0437\u0430 Windows.\n\n\ud83d\udfe2\u0410\u043d\u0430\u043b\u0438\u0437 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f Android, DragonDoll. \u041e\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Google Chrome, \u0441 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 \u043f\u0440\u0438\u043c\u0430\u043d\u043e\u043a \u043d\u0430 34 \u044f\u0437\u044b\u043a\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0420\u043e\u0441\u0441\u0438\u044e, \u0411\u043b\u0438\u0436\u043d\u0438\u0439 \u0438 \u0414\u0430\u043b\u044c\u043d\u0438\u0439 \u0412\u043e\u0441\u0442\u043e\u043a \u0438 \u0410\u0444\u0440\u0438\u043a\u0443. \n\n\ud83c\udd94 \u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430. \u041e\u043d \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c passkey \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0435, \u0430\u0442\u0430\u043a\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0443\u0447\u0451\u0442\u043a\u0438 Google, Microsoft, iCloud \u0438 LinkedIn. \u0414\u043e\u0441\u0442\u0443\u043f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u043e\u0442\u0437\u044b\u0432\u0430 \u0441\u0435\u0441\u0441\u0438\u0439, \u0430 \u043e\u0442\u0437\u044b\u0432 passkey \u043f\u043e\u043a\u0430 \u0432\u043e\u0448\u0451\u043b \u043d\u0435 \u0432\u043e \u0432\u0441\u0435 \u043f\u043b\u0435\u0439\u0431\u0443\u043a\u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udfe3\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u043e\u0433\u043e \u0412\u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u043e\u0431\u0440\u0430\u043d\u043e \u0438\u0437 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u043d\u0430 \u043c\u043d\u043e\u0433\u0438\u0445 \u044f\u0437\u044b\u043a\u0430\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u044b\u043c\u0430\u043d\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044f \u044d\u043a\u0440\u0430\u043d \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 Windows.\n\n\ud83d\udd35\u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0442\u0438\u043d\u0433\u0430, \u043d\u0430\u0447\u0430\u0432\u0448\u0430\u044f\u0441\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 RubyGems, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u0430\u0441\u044c \u043d\u0430 npm: \u043f\u0430\u043a\u0435\u0442\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 Windows-\u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440 StubMaker. \u0418\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0445\u0443\u043a\u0438 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043f\u0430\u043a\u0435\u0442 \u043d\u0438 \u0440\u0430\u0437\u0443 \u043d\u0435 \u0431\u044b\u043b \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d, \u0432 \u0438\u0442\u043e\u0433\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u0441\u0435\u044f\u0434\u043d\u044b\u0439 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440 \u043d\u0430 Go.\n\n\ud83d\udfe0\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 (CVSS 9.4) \u0432 GitLab CE \u0438 EE. \u0414\u0435\u0444\u0435\u043a\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 GraphQL directive, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 merge. \n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-08-25T00:00:24.318302Z"}, {"uuid": "7b790cea-0eee-4196-9b0b-fb355ff3fecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19672", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3crxac6rksuqk", "content": "[CVE-2026-19672] CPython: tarfile extraction filter bypass allows creation of directories outside the destination", "creation_timestamp": "2026-08-25T23:57:00.101149Z"}, {"uuid": "3237dba7-3374-424a-8ea8-8a94f3a1bef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml", "content": "", "creation_timestamp": "2026-08-26T00:00:07.018868Z"}, {"uuid": "3c88d3d5-bd16-4dea-8d64-535bb91195e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mtqaluyhd22g", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure thehackernews.com/2026/08/gitl...", "creation_timestamp": "2026-08-23T07:15:53.739998Z"}, {"uuid": "d0e8a72f-8c56-4284-b193-f81701d7bba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mtqbauvijk2g", "content": "Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490) - Help Net Security www.helpnetsecurity.com/2026/08/21/c...", "creation_timestamp": "2026-08-23T07:27:38.325706Z"}, {"uuid": "a23b61d8-5ecd-4280-984b-6ce93fd004f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19913", "type": "published-proof-of-concept", "source": "Telegram/ICvZtR0GD12Ljqtd0YsjdvO2wbD2jwjqGxoQJK8tYJSlhQ", "content": "", "creation_timestamp": "2026-08-28T00:01:00.490637Z"}, {"uuid": "9523e3d5-6ec3-4a47-b252-796f2b241778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19912", "type": "published-proof-of-concept", "source": "Telegram/ICvZtR0GD12Ljqtd0YsjdvO2wbD2jwjqGxoQJK8tYJSlhQ", "content": "", "creation_timestamp": "2026-08-28T00:01:00.533093Z"}, {"uuid": "c1bea680-620d-441a-81f4-3dd3cdc4af34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/475", "content": "CVE-2026-19598-PoC ->", "creation_timestamp": "2026-08-26T00:00:10.398625Z"}, {"uuid": "7470f151-dcdc-4833-9329-fa43e7635b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/476", "content": "", "creation_timestamp": "2026-08-26T00:00:10.360585Z"}, {"uuid": "c023af94-a0bb-40d3-81d4-4bccfd2c39c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtqfxvalyw2d", "content": "CVE-2026-19490 is trending. Hype score 1, currently #8 on cvemon.\n\nVulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19490", "creation_timestamp": "2026-08-23T08:52:04.230836Z"}, {"uuid": "35f8ff6a-c801-4d77-aa27-934ce5b7226e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/772a9cf6-451d-498c-ac93-3c264c90738d", "content": "", "creation_timestamp": "2026-08-23T09:00:46.133015Z"}, {"uuid": "8cd576d7-7d22-4d41-b0a5-6b4d0b4e8104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtqgidgnsp2e", "content": "\u26a0\ufe0f PATCH NOW\n\nCitrix patched a critical NetScaler auth bypass (CVE-2026-19490, CVSS 9.3): no login needed on affected Gateway or AAA servers.\n\nNo exploitation confirmed yet, but Citrix edge gear gets hit fast.\n\nPatch, then rotate secrets and kill active sessions.", "creation_timestamp": "2026-08-23T09:01:15.481359Z"}, {"uuid": "4c1171aa-472b-46db-8d21-199c3f8b6c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19437", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mu7477acge23", "content": "\ud83d\udccc CVE-2026-19437 - IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow. https://www.cyberhub.blog/cves/CVE-2026-19437", "creation_timestamp": "2026-08-29T05:07:07.033583Z"}, {"uuid": "199b9485-4508-48db-b6c4-2ce27d003e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtusc5aguv2l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-69836: 43 interactions\nCVE-2026-73570: 21 interactions\nCVE-2026-19478: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-73570: 15 interactions\nCVE-2026-77995: 6 interactions\nCVE-2026-18963: 4 interactions\n", "creation_timestamp": "2026-08-25T02:43:10.795000Z"}, {"uuid": "5c5b17f8-29f5-4982-b40d-ccf330e102f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19296", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100150", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-19296\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rmhowe425\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-28 20:59:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T23:00:04.107734Z"}, {"uuid": "8bf02b9e-cf25-4c4c-a7a8-25c097f73a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19286", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu7g3kjo5m2t", "content": "\ud83d\udd34 CVE-2026-19286 - Critical (9.8)\n\nIBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19286/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T08:04:03.043761Z"}, {"uuid": "85555f4e-e580-4578-855f-8285d91dc4c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19295", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99985", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-19295\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rmhowe425\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 15:55:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T18:00:05.845419Z"}, {"uuid": "0589dca2-10b6-489d-aa38-8c140af5025a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99812", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19632-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DeadExpl0it\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-26 14:29:36\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-19632 - TranslatePress \u2013 Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T00:00:09.809347Z"}, {"uuid": "042080dc-7541-4dc9-96f5-15572728ee58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/xakep_ru/19945", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 GitLab \u0443\u0436\u0435 \u0432\u0437\u044f\u043b\u0438 \u043d\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-19478 \u0432 GitLab, \u043f\u0440\u0438\u0447\u0435\u043c \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0431\u0430\u0433\u0435.\n\nhttps://xakep.ru/2026/08/26/gitlab-attacks/", "creation_timestamp": "2026-08-27T00:00:10.110671Z"}, {"uuid": "97bf1e2a-95a6-409f-9e72-15c4f1c384e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19295", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu7g3rfuhi27", "content": "\ud83d\udd34 CVE-2026-19295 - Critical (9.9)\n\nIBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary opera...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19295/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-29T08:04:09.987700Z"}, {"uuid": "5bec2ee1-3745-4457-bea4-52d9a4a74c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19892", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3nssbl62c5kwt", "content": "CVE-2026-19892 - InfusedWoo Pro\nCVE ID : CVE-2026-19892\n \n Published : Aug. 25, 2026, 4:18 a.m. | 16\u00a0minutes ago\n \n Description : The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. Th...", "creation_timestamp": "2026-08-25T04:41:29.796981Z"}, {"uuid": "b115e47b-744c-466d-b97f-75802f9b6ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19598.yaml", "content": "", "creation_timestamp": "2026-08-27T00:00:10.214835Z"}, {"uuid": "48e3eb3e-172e-49ae-aa57-63936f9f73d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-gitlab", "content": "", "creation_timestamp": "2026-08-25T04:45:03.981659Z"}, {"uuid": "9fd876c9-566d-442b-9d37-15dae3286845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99765", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19632\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a YonLiud\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-26 09:42:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19632 - One-Day PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T00:00:10.416978Z"}, {"uuid": "c0ccfb3c-6ecb-4cae-8e29-f709ad27065b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19271", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzk56z2e22r", "content": "\ud83d\udfe0 CVE-2026-19271 - High (7.5)\n\nImproper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19271/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T00:00:35.590054Z"}, {"uuid": "7f60c504-7df5-43e1-a3df-851cc3618413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19296", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100150", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-19296\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rmhowe425\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-28 20:59:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-29T00:00:07.253393Z"}, {"uuid": "c5b93c6e-ac7f-41d0-bd4d-63bd944c6036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/500", "content": "CVE-2026-19632 - TranslatePress Unauthenticated Account Takeover -> \npoc: https://github.com/DeadExpl0it/CVE-2026-19632-POC", "creation_timestamp": "2026-08-29T00:00:07.390795Z"}, {"uuid": "0b508a31-e671-4f57-a61a-497c079e7764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1980", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-1980.yaml", "content": "", "creation_timestamp": "2026-07-24T00:00:22.472986Z"}, {"uuid": "545bdbd3-f65c-4dcc-85b1-4daaae1b7976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtv23u5pzq2n", "content": "Daily IT Security Digest \u2014 2026-08-25\nVulnerability (CVE-2026-19598) \u2014 Full Site Takeover\n\nAn unauthenticated authorization bypass in the widely-used Pods WordPress plugin (CVE-2026-19598) allows attackers to bypass security checks entirely and gain full administrator access. This gives attackers", "creation_timestamp": "2026-08-25T05:02:49.898679Z"}, {"uuid": "ad67c87e-b8ee-4bcb-93d5-9ef3a4ec119c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtxd5v3mwz2l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-69836: 43 interactions\nCVE-2026-73570: 22 interactions\nCVE-2026-19490: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-18963: 9 interactions\nCVE-2026-55040: 6 interactions\nCVE-2026-63520: 6 interactions\n", "creation_timestamp": "2026-08-26T02:50:21.239575Z"}, {"uuid": "51a179ae-9921-439e-89ae-4d7c60404662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19313", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mu7gsjtnnx2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 43 interactions\nCVE-2026-73570: 20 interactions\nCVE-2026-60004: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-60004: 11 interactions\nCVE-2026-65643: 9 interactions\nCVE-2026-19313: 4 interactions\n", "creation_timestamp": "2026-08-29T08:16:53.656331Z"}, {"uuid": "79b7a887-6893-498f-be54-977aebe797b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19913", "type": "seen", "source": "https://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.html", "content": "The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library that allow a remote, unauthenticated attacker to read arbitrary files from a server and execute code on it.\n\nThe flaws, tracked as CVE-2026-19913 and CVE-2026-19912, both stem from the same unsafe deserialization in the mwEmbedLoader.php endpoint of the mwEmbed player", "creation_timestamp": "2026-08-27T01:00:32.874793Z"}, {"uuid": "ef72f027-edc4-4790-a7f4-844b01e3967a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19912", "type": "seen", "source": "https://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.html", "content": "The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library that allow a remote, unauthenticated attacker to read arbitrary files from a server and execute code on it.\n\nThe flaws, tracked as CVE-2026-19913 and CVE-2026-19912, both stem from the same unsafe deserialization in the mwEmbedLoader.php endpoint of the mwEmbed player", "creation_timestamp": "2026-08-27T01:00:32.936106Z"}, {"uuid": "061c1ce2-fd03-42f2-8b5e-c05259d1fd3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19313", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4gpnimwu2u", "content": "WatchGuard patched CVE-2026-19313 and more Fireware flaws, pre-authentication remote code execution bugs rated CVSS 9.3. Update firewalls now.\n\n#WatchGuard #Fireware #RCE #Firewall #InfoSec", "creation_timestamp": "2026-08-28T03:37:17.541903Z"}, {"uuid": "24b0c848-ef7b-4c1a-8e3a-1d22c339191e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/flspxxfkgtf7q", "content": "CVE-2026-19632 - TranslatePress \u2013 Multilingual\nCVE ID : CVE-2026-19632\n \n Published : Aug. 26, 2026, 3:39 a.m. | 28\u00a0minutes ago\n \n Description : The TranslatePress \u2013 Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Ex...", "creation_timestamp": "2026-08-26T04:34:58.175974Z"}, {"uuid": "995078c7-0aba-4629-a7a4-66aeb5a612e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtqx7ehwoa22", "content": "Critical GitLab vulnerability CVE-2026-19478 lets unauthenticated attackers delete public projects. It is exploited in the wild with public PoC.\n\n#GitLab #CVE202619478 #Vulnerability #InfoSec #CyberSecurity #PatchNow", "creation_timestamp": "2026-08-23T14:00:27.481605Z"}, {"uuid": "e8e9a56b-1606-4360-b79d-630b86ec1623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-860", "content": "", "creation_timestamp": "2026-08-28T16:15:12.445366Z"}, {"uuid": "6bf9c4cc-c35a-4d28-a42c-07e169562645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19295", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mu7ib4qsob2p", "content": "\ud83d\udd34 EXPLOITED\n\nLangflow flaw (CVSS 9.9): any logged-in user who can build a flow runs commands on the server.\n\nIt even slips past the setting teams use to block code execution.\n\nAffects 1.0.0-1.11.1. Public exploit out, patch now. (CVE-2026-19295)", "creation_timestamp": "2026-08-29T08:42:57.078487Z"}, {"uuid": "796a74a9-a7ce-4ff5-9cc5-2bc0578c1515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19892", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtvapa5oog2z", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3InfusedWoo Pro\uff08v5.1.17\u307e\u3067\uff09\u3067\u3001\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027\u3002\u4f4e\u6a29\u9650\u30e6\u30fc\u30b6\u30fc\u304c\u7ba1\u7406\u8005\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u30ea\u30bb\u30c3\u30c8\u30ea\u30f3\u30af\u3092\u751f\u6210\u3057\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4e57\u3063\u53d6\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19892 CVSS 8.8 | HIGH", "creation_timestamp": "2026-08-25T07:01:03.474118Z"}, {"uuid": "e4b7abb1-66c1-4f2c-b25c-a6cb12b693c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-827", "content": "", "creation_timestamp": "2026-08-28T16:45:02.966909Z"}, {"uuid": "65b76ecb-3b72-411b-af19-b7add9966f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19313", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4iggj5as2m", "content": "\ud83d\udea8 CVE-2026-19313 \u2014 CVSS 9.3 CRITICAL\n\nAn heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19313\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T04:07:55.074203Z"}, {"uuid": "aee0330a-6b47-43dd-8064-bb7bd9e26098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19315", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4igotwtf2c", "content": "\ud83d\udea8 CVE-2026-19315 \u2014 CVSS 9.3 CRITICAL\n\nA type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticate...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19315\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T04:08:03.894497Z"}, {"uuid": "8667393c-47d0-4d6f-b2b0-ff74dd057f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19318", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4igxmfmf2p", "content": "\ud83d\udea8 CVE-2026-19318 \u2014 CVSS 9.3 CRITICAL\n\nA stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unau...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19318\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T04:08:12.972241Z"}, {"uuid": "11cd417e-c748-410d-b8d3-98b40fb6e8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mtr6zm4tbb2a", "content": "GitLab security advisory (AV26\n\nThis article focuses heavily on patching specific GitLab versions, but it frames a critical zero-day exploit with CVE-2026-19478 as a generalized risk across all listed versions. The real risk lies in the fact that if the exploitation vector targets underlying dep\u2026", "creation_timestamp": "2026-08-23T16:20:24.087279Z"}, {"uuid": "cca09ef7-a564-42c1-b361-58e0d2567664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19943", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-19943", "content": "", "creation_timestamp": "2026-08-25T08:15:08.533228Z"}, {"uuid": "be1438ec-d98d-4051-acfb-ca158cfa6303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ekuvieuyxgp5p", "content": "CVE-2026-19398 - ASUS BIOS SmiFlash Out-of-Bounds Write Vulnerability\nCVE ID : CVE-2026-19398\n \n Published : Aug. 27, 2026, 2:16 a.m. | 1\u00a0hour, 38\u00a0minutes ago\n \n Description : \u201cunsupported-when-assigned.\u201d An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA...", "creation_timestamp": "2026-08-27T04:10:13.461602Z"}, {"uuid": "aa1112f6-27e5-49fb-b944-7a5ee39e2a2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19892", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-19892", "content": "", "creation_timestamp": "2026-08-25T08:15:10.809758Z"}, {"uuid": "14be86e5-933a-43a4-9802-b9a317ea8e4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19313", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mu4lms523k2v", "content": "Daily IT Security Digest \u2014 2026-08-28\nfirewalls \u2014 a serious risk to network-perimeter security. Organizations using WatchGuard devices should verify exposure and apply firmware updates immediately.\n\n(Sources: [@stemshop on Bluesky](https://stemshop.top/cve/CVE-2026-19313),", "creation_timestamp": "2026-08-28T05:05:10.085545Z"}, {"uuid": "326c25bf-139d-4422-a0ab-2283630ea381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19315", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mu4lmsftyy2v", "content": "Daily IT Security Digest \u2014 2026-08-28\n[stemshop.top/cve/CVE-2026-19315](https://stemshop.top/cve/CVE-2026-19315), [stemshop.top/cve/CVE-2026-61800](https://stemshop.top/cve/CVE-2026-61800), [stemshop.top/cve/CVE-2026-78174](https://stemshop.top/cve/CVE-2026-78174))\n\n## 3. Qilin Ransomware Gang", "creation_timestamp": "2026-08-28T05:05:10.555915Z"}, {"uuid": "80aa5b96-85a8-4488-bd8d-4f8edb5178e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mtrjoba32b23", "content": "A new GitLab flaw (CVE-2026-19478, CVSS 9.4) is actively exploited, allowing attackers to modify or delete public projects without authentication. Stay alert and update immediately.", "creation_timestamp": "2026-08-23T19:30:54.719037Z"}, {"uuid": "09427c26-b711-4ab4-8572-c101465e1109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19565", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/bshzhvvkhkbmr", "content": "CVE-2026-19565: Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey", "creation_timestamp": "2026-08-23T19:54:49.847131Z"}, {"uuid": "f5a99027-2a08-4339-9472-aadf891af4de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/thehackernews/9865", "content": "\ud83d\udd3b Attackers are exploiting a GitLab flaw days after disclosure.\n\nCVE-2026-19478 lets unauthenticated attackers modify or delete public projects and rewrite their data under certain conditions. watchTowr says it saw in-the-wild exploitation against its honeypots.\n\nRunning self-hosted GitLab? Patch now: https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html", "creation_timestamp": "2026-08-23T20:00:05.950706Z"}, {"uuid": "5f544e9d-2bd7-4564-87f4-f5e3ccb00564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/thehackernews/9823", "content": "\u203c\ufe0fCritical GitLab vulnerability could let unauthenticated attackers delete public projects.\n\nCVE-2026-19478 affects self-managed CE and EE under certain conditions. Fixes are in 19.2.4, 19.1.6, 19.0.8, and 18.11.11.\n\nWhat admins need to know: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "creation_timestamp": "2026-08-23T20:00:06.008189Z"}, {"uuid": "1d313331-8e7f-4f22-a83c-014fffb967a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://t.me/thehackernews/9855", "content": "\ud83d\udea8 Critical NetScaler flaw can bypass authentication on certain Gateway and AAA configurations.\n\nCitrix patched CVE-2026-19490 (CVSS 9.3). Exposure depends on the NetScaler version and configuration, with SAML required in some cases.\n\nMore details: https://thehackernews.com/2026/08/critical-netscaler-flaw-can-bypass.html", "creation_timestamp": "2026-08-23T20:00:06.840018Z"}, {"uuid": "f65c08de-c207-4354-b0a8-d5d485d7670d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19565", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4vx7ywkaptj22", "content": "CVE-2026-19565 - Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey\nCVE ID : CVE-2026-19565\n \n Published : Aug. 23, 2026, 7:18 p.m. | 42\u00a0minutes ago\n \n Description : Apa...", "creation_timestamp": "2026-08-23T20:12:41.155883Z"}, {"uuid": "bd79b243-cc75-4410-ad7e-4065b54e10f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mtrpztd7p62c", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "creation_timestamp": "2026-08-23T21:24:45.564990Z"}, {"uuid": "39d8c4af-e305-45df-861a-e433f206d7a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/cibsecurity/90544", "content": "\ud83d\udd8b\ufe0f GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \ud83d\udd8b\ufe0f\n\nA newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr.  The vulnerability in question is CVE202619478 CVSS score 9.4, a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-08-24T00:00:04.218182Z"}, {"uuid": "0ed91806-e0a5-4716-9a8a-7f856d9468df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/thehackernews/9823", "content": "\u203c\ufe0fCritical GitLab vulnerability could let unauthenticated attackers delete public projects.\n\nCVE-2026-19478 affects self-managed CE and EE under certain conditions. Fixes are in 19.2.4, 19.1.6, 19.0.8, and 18.11.11.\n\nWhat admins need to know: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "creation_timestamp": "2026-08-24T00:00:07.047927Z"}, {"uuid": "5d5b1a5f-f524-4bf0-9a02-5d919e650a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/thehackernews/9865", "content": "\ud83d\udd3b Attackers are exploiting a GitLab flaw days after disclosure.\n\nCVE-2026-19478 lets unauthenticated attackers modify or delete public projects and rewrite their data under certain conditions. watchTowr says it saw in-the-wild exploitation against its honeypots.\n\nRunning self-hosted GitLab? Patch now: https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html", "creation_timestamp": "2026-08-24T00:00:07.155602Z"}, {"uuid": "baf12b43-1b6e-43a7-ac7d-23ae86a1dff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9855", "content": "\ud83d\udea8 Critical NetScaler flaw can bypass authentication on certain Gateway and AAA configurations.\n\nCitrix patched CVE-2026-19490 (CVSS 9.3). Exposure depends on the NetScaler version and configuration, with SAML required in some cases.\n\nMore details: https://thehackernews.com/2026/08/critical-netscaler-flaw-can-bypass.html", "creation_timestamp": "2026-08-24T00:00:04.503915Z"}, {"uuid": "6f7e3c8e-7d9d-4a1e-989f-5bd47b9c453f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/information_security_channel/55770", "content": "Critical GitLab Flaw Exploited Shortly After Disclosure\nhttps://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/\n\nCVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.\nThe post Critical GitLab Flaw Exploited Shortly After Disclosure (https://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-24T00:00:09.276424Z"}, {"uuid": "bb06c708-8be4-423a-a34d-bb0e72dc6391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19200", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtsqvgz4hq2m", "content": "Velociraptor\u306everify() VQL\u95a2\u6570\u306b\u8106\u5f31\u6027\u3002NOTEBOOK_EDIT\u6a29\u9650\u3092\u6301\u3064\u653b\u6483\u8005\u306f\u3001\u6b63\u898f\u306e\u6a29\u9650\u306a\u304f\u65e2\u5b58\u306e\u30a2\u30fc\u30c6\u30a3\u30d5\u30a1\u30af\u30c8\u3092\u4e0a\u66f8\u304d\u3067\u304d\u308b\u3002\nCVE-2026-19200 CVSS 8.9 | HIGH", "creation_timestamp": "2026-08-24T07:12:51.691924Z"}, {"uuid": "b0f35c72-8f76-426a-8ed9-77bd4fb40269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19852", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-19852", "content": "", "creation_timestamp": "2026-08-24T08:15:05.976358Z"}, {"uuid": "bc535ce2-e4a9-4cc5-bf2e-6f94e1cd42ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19853", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-19853", "content": "", "creation_timestamp": "2026-08-24T08:15:08.256905Z"}, {"uuid": "8ad971b7-498c-4a04-aa3c-bb3fd8eb0c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19295", "type": "published-proof-of-concept", "source": "Telegram/tYXjtXGvZOcVL05bpL_3O2jX-Uki9x_dAhf7v1swcwhwyfI", "content": "", "creation_timestamp": "2026-08-27T20:00:11.804673Z"}, {"uuid": "dff59772-7a29-4ea9-82eb-a9564fc4578d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "published-proof-of-concept", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-29T00:00:29.357564Z"}, {"uuid": "6dc8ba8c-f220-4394-aa61-6362ae2768fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1999", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/284", "content": "CVE-2026-1999\n\nGitHub Link:\nhttps://github.com/jwde/automerge-test", "creation_timestamp": "2026-08-29T00:00:30.468913Z"}, {"uuid": "50bffd4d-250c-42f7-b8d1-27e5c61a8421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19092", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4vfmgy762j", "content": "CVE-2026-19092\nThe Tutor LMS add\u2011on for WordPress (versions before 4.0.6) lets data sent from a web request replace internal variables while the plugin builds pages. This means a stranger can cause the server to run any\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-28T08:00:06.287141Z"}, {"uuid": "3503ebb2-2985-4b13-a803-cc20ab020126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu2eihqcj426", "content": "Wordfence found CVE-2026-19598, a critical unauthenticated flaw in the Pods WordPress plugin (100,000+ installs) letting attackers reset any password, including the admin's.\n\n#PodsPlugin #CVE202619598 #WordPress #Wordfence #PrivilegeEscalation", "creation_timestamp": "2026-08-27T07:52:09.780345Z"}, {"uuid": "2e8e187f-d403-4703-abbf-417a8b5532df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mu2epr2lsy2u", "content": "CVE-2026-19598: Pods\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u653b\u6483\u8005\u304c\u7ba1\u7406\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u30ea\u30bb\u30c3\u30c8\u53ef\u80fd\u306b\n\nWordPress\u30b5\u30a4\u30c8\u7ba1\u7406\u8005\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u3001\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u30ed\u30b0\u30a4\u30f3\u3059\u3089\u7d4c\u305a\u306b\u5909\u66f4\u3055\u308c\u3066\u3057\u307e\u3046\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002\u4eba\u6c17\u30d7\u30e9\u30b0\u30a4\u30f3Pods\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3092\u6301\u305f\u306a\u3044\u7b2c\u4e09\u8005\u304c\u8907\u6570\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c1\u30a7\u30c3\u30af\u3092\u6b21\u3005\u3068\u56de\u907f\u3057\u3001\u7ba1\u7406\u6a5f\u80fd\u306b\u76f4\u63a5\u5230\u9054\u3067\u304d\u308b\u72b6\u614b\u306b\u306a\u3063\u3066\u3044\u307e\u3057\u305f\u3002Wordfence\u306b\u3088\u308b\u3068...", "creation_timestamp": "2026-08-27T07:56:14.041021Z"}, {"uuid": "42d1dc76-c2f3-418f-bfab-9cb51109a6c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19913", "type": "seen", "source": "Telegram/ICvZtR0GD12Ljqtd0YsjdvO2wbD2jwjqGxoQJK8tYJSlhQ", "content": "", "creation_timestamp": "2026-08-27T08:00:05.869768Z"}, {"uuid": "9ea207f0-a313-4dce-8a01-fb5ebe75412a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19912", "type": "seen", "source": "Telegram/ICvZtR0GD12Ljqtd0YsjdvO2wbD2jwjqGxoQJK8tYJSlhQ", "content": "", "creation_timestamp": "2026-08-27T08:00:05.911637Z"}, {"uuid": "a33b955a-ea8e-4291-b52c-5946c836e523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/476", "content": "", "creation_timestamp": "2026-08-25T12:00:04.193063Z"}, {"uuid": "3822cfbe-f7e3-43f9-a95f-9668df2c93e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/475", "content": "CVE-2026-19598-PoC ->", "creation_timestamp": "2026-08-25T12:00:04.238647Z"}, {"uuid": "2d0538c4-0305-4a0e-94f1-399df64fe45b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mu2ewteicl2w", "content": "GitLab patched a critical bug Aug 17. Researchers exploited it within MINUTES, not days. CVE-2026-19478 (CVSS 9.4): unauth code injection deletes projects. Patch now or block /api/graphql. \n\n\ud83c\uddec\ud83c\udde7  diesec.com/2026/08/gitl...\n\ud83c\udde9\ud83c\uddea  diesec.com/de/2026/08/g... \n\n#GitLab #CyberSecurity", "creation_timestamp": "2026-08-27T08:00:17.774014Z"}, {"uuid": "3dedfa6a-ddad-458d-8a2a-770183776f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/kasperskyb2b/2295", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udeb2\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0433\u0440\u0443\u043f\u043f\u044b Armored Likho, \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0442\u0440\u0451\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0442\u0440\u043e\u044f\u043d\u0446\u0430 BusySnake RAT, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u0440\u043e\u044f\u043d\u0446\u0430 open source, Kharon, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441 AdaptixC2. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c C2 \u043f\u0435\u0440\u0435\u0435\u0445\u0430\u043b\u0438 \u0441 Telegram Bot API \u043d\u0430 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432 CI/CD-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u0430\u0445 GitLab, \u0430 \u0441\u0430\u043c\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u2014 \u0432 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u0410\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0432 \u043a\u043e\u0434\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0418\u0418 \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438.\n\n\ud83d\udd0e \u041a\u043b\u0430\u0441\u0442\u0435\u0440 \u0443\u0433\u0440\u043e\u0437 UAT-10147 \u0432\u0441\u0442\u0440\u043e\u0438\u043b \u0430\u0433\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u0418\u0418 \u0432 \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c. \u0418\u0418 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a. \u0413\u0440\u0443\u043f\u043f\u0430 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0430 \u0441\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0432\u0435\u0436\u0438\u043c\u0438 \u0431\u0430\u0433\u0430\u043c\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Linux, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c QuasarRAT, Gh0stCringe, NoodleRAT \u0438 Meterpreter \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043b\u0435\u0439 \u0432 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440\u0435, \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0438, \u043c\u0435\u0434\u0438\u0430, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0442\u0440\u0430\u0441\u043b\u0438 \u0438 \u0438\u0433\u0440\u043e\u0432\u043e\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0432 \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438, \u0411\u043e\u043b\u0438\u0432\u0438\u0438, \u041a\u0438\u0442\u0430\u0435, \u041a\u0430\u043d\u0430\u0434\u0435 \u0438 \u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435.\n\n\ud83c\udf1a \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 Rust crate \u043d\u0430 crates.io, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 arrayref, \u0432 \u0438\u0442\u043e\u0433\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440. \u0410\u0442\u0430\u043a\u0430 \u0434\u043b\u0438\u043b\u0430\u0441\u044c \u0432\u0441\u0435\u0433\u043e 23 \u043c\u0438\u043d\u0443\u0442\u044b, \u043d\u043e \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043f\u0430\u043a\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0442\u0440\u0451\u0445 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u044f\u0445 \u0441\u0440\u0435\u0434, \u0433\u0434\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f Rust. \u0418\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0430\u0442\u0430\u043a\u0438 \u043f\u0435\u0440\u0435\u0441\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 Sapphire Sleet.\n\n\ud83d\udfe2\u0413\u0440\u0443\u043f\u043f\u0430 Ransom Busters LTD \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u0435\u0442 \u043f\u0438\u0441\u044c\u043c\u0430 \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432 \u0435\u0449\u0451 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0444\u0430\u043a\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u0441\u0443\u043c\u043c\u0443 \u043e\u0442 $20000 \u0434\u043e $60000. \u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e \u0442\u0435 \u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0438 \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435.\n\n\u2757\ufe0f \u0420\u0435\u0434\u043a\u0438\u0439 \u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u2014 \u0412\u041f\u041e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0433\u043e\u043b\u043e\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 (\u043a\u043e\u043d\u0435\u0447\u043d\u043e, Android). \u0412 \u0430\u0442\u0430\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u0438\u043d\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 MQTT-\u0431\u0440\u043e\u043a\u0435\u0440. \u0412 \u043a\u043e\u043d\u0446\u0435 \u043a\u043e\u043d\u0446\u043e\u0432 \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c (!) \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0434\u043b\u044f \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0442 \u0430\u0432\u0442\u043e \u0432 \u0441\u0435\u0442\u044c \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043f\u0440\u043e\u043a\u0441\u0438. \u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 MoYu Group \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439 BADBOX.\n\n\ud83d\udd35\u041d\u043e\u0432\u0430\u044f \u0442\u0430\u043a\u0442\u0438\u043a\u0430 \u0433\u0440\u0443\u043f\u043f\u044b GOFFEE/Paper Werewolf. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u043b\u0438 \u0444\u0430\u0439\u043b\u044b 7-Zip \u0438 Git \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u041f\u041e \u043d\u0430 \u0442\u0440\u043e\u044f\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 ISO-\u043e\u0431\u0440\u0430\u0437\u0430 Windows.\n\n\ud83d\udfe2\u0410\u043d\u0430\u043b\u0438\u0437 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f Android, DragonDoll. \u041e\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Google Chrome, \u0441 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 \u043f\u0440\u0438\u043c\u0430\u043d\u043e\u043a \u043d\u0430 34 \u044f\u0437\u044b\u043a\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0420\u043e\u0441\u0441\u0438\u044e, \u0411\u043b\u0438\u0436\u043d\u0438\u0439 \u0438 \u0414\u0430\u043b\u044c\u043d\u0438\u0439 \u0412\u043e\u0441\u0442\u043e\u043a \u0438 \u0410\u0444\u0440\u0438\u043a\u0443. \n\n\ud83c\udd94 \u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430. \u041e\u043d \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c passkey \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0435, \u0430\u0442\u0430\u043a\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0443\u0447\u0451\u0442\u043a\u0438 Google, Microsoft, iCloud \u0438 LinkedIn. \u0414\u043e\u0441\u0442\u0443\u043f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u043e\u0442\u0437\u044b\u0432\u0430 \u0441\u0435\u0441\u0441\u0438\u0439, \u0430 \u043e\u0442\u0437\u044b\u0432 passkey \u043f\u043e\u043a\u0430 \u0432\u043e\u0448\u0451\u043b \u043d\u0435 \u0432\u043e \u0432\u0441\u0435 \u043f\u043b\u0435\u0439\u0431\u0443\u043a\u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udfe3\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u043e\u0433\u043e \u0412\u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u043e\u0431\u0440\u0430\u043d\u043e \u0438\u0437 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u043d\u0430 \u043c\u043d\u043e\u0433\u0438\u0445 \u044f\u0437\u044b\u043a\u0430\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u044b\u043c\u0430\u043d\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044f \u044d\u043a\u0440\u0430\u043d \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 Windows.\n\n\ud83d\udd35\u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0442\u0438\u043d\u0433\u0430, \u043d\u0430\u0447\u0430\u0432\u0448\u0430\u044f\u0441\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 RubyGems, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u0430\u0441\u044c \u043d\u0430 npm: \u043f\u0430\u043a\u0435\u0442\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 Windows-\u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440 StubMaker. \u0418\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0445\u0443\u043a\u0438 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043f\u0430\u043a\u0435\u0442 \u043d\u0438 \u0440\u0430\u0437\u0443 \u043d\u0435 \u0431\u044b\u043b \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d, \u0432 \u0438\u0442\u043e\u0433\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u0441\u0435\u044f\u0434\u043d\u044b\u0439 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440 \u043d\u0430 Go.\n\n\ud83d\udfe0\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 (CVSS 9.4) \u0432 GitLab CE \u0438 EE. \u0414\u0435\u0444\u0435\u043a\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 GraphQL directive, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 merge. \n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-08-24T10:00:03.796517Z"}, {"uuid": "f8b93b90-adb1-4bfe-a075-2595b581ba0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mty372wtg32x", "content": "Kritieke kwetsbaarheid in populaire WordPress-plugin stelt aanvallers in staat o\n\nEen ernstige beveiligingskwetsbaarheid, met de codenaam CVE-2026-19632 en een CVSS-score van 9.8, is ontdekt in de TranslatePress WordPress-plugin. Deze kwetsbaarheid, die versie 3.3.1 en eerdere versies treft,...", "creation_timestamp": "2026-08-26T10:00:31.048958Z"}, {"uuid": "fef0c32b-357a-4a70-9446-3f0ee5a3bf1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19234", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mu5yynzt3f2m", "content": "\ud83d\udccc CVE-2026-19234 - Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware boo... https://www.cyberhub.blog/cves/CVE-2026-19234", "creation_timestamp": "2026-08-28T18:37:08.609946Z"}, {"uuid": "6441bba1-18b2-4973-93e6-5e1bfd13e723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19401", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mu2g7t33ysfm", "content": "NSD\u306e\u8106\u5f31\u6027\u60c5\u5831\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f \uff08CVE-2026-18664\u3001CVE-2026-18916\u3001CVE-2026-19401\u3001CVE-2026-19538\uff09 https://jprs.jp/tech/security/2026-08-27-nsd.html", "creation_timestamp": "2026-08-27T08:23:07.647748Z"}, {"uuid": "6bd26ca5-b978-4de2-95ce-3d03755359e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19538", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mu2g7t33ysfm", "content": "NSD\u306e\u8106\u5f31\u6027\u60c5\u5831\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f \uff08CVE-2026-18664\u3001CVE-2026-18916\u3001CVE-2026-19401\u3001CVE-2026-19538\uff09 https://jprs.jp/tech/security/2026-08-27-nsd.html", "creation_timestamp": "2026-08-27T08:23:07.690731Z"}, {"uuid": "7ccc0759-8926-45cc-bae7-225ce6c05c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ieoz7errhefg6", "content": "CVE-2026-19949 - All-in-One WP Migration and Backup\nCVE ID : CVE-2026-19949\n \n Published : Aug. 25, 2026, 12:16 p.m. | 18\u00a0minutes ago\n \n Description : The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality i...", "creation_timestamp": "2026-08-25T12:49:47.843052Z"}, {"uuid": "6fe24c1f-c0b8-48e3-9cd3-b40b6ba141b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19042", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu2h2dquda27", "content": "TeamViewer patched CVE-2026-19042, a Linux command injection flaw, and a path traversal bug. Both TeamViewer vulnerabilities enable code execution.\n\n#TeamViewer #CommandInjection #CVE202619042 #PathTraversal #RCE #InfoSec", "creation_timestamp": "2026-08-27T08:37:56.762838Z"}, {"uuid": "9e007a41-7a34-4f63-9966-1f660f58f257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19092", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3uefzlzk2t", "content": "\ud83d\udea8 CVE-2026-19092 \u2014 CVSS 9.8 CRITICAL\n\nThe Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variabl...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19092\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T22:08:52.482119Z"}, {"uuid": "dc977826-b44f-4b20-bd52-a82889f9e45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19286", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100159", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-19286\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rmhowe425\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-28 21:25:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-29T03:00:04.525379Z"}, {"uuid": "8c785858-db72-48ce-b0f8-127dcba995d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "seen", "source": "https://t.me/GithubRedTeam/99765", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19632\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a YonLiud\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-26 09:42:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19632 - One-Day PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-26T11:00:03.498905Z"}, {"uuid": "33a04ee3-6f3f-4417-931a-93231cb59d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtw5vf2mug27", "content": "A critical TranslatePress vulnerability (CVE-2026-19632) lets attackers steal admin reset links and take over 400,000 WordPress sites. Update to 3.3.2 now.\n\n#WordPress #TranslatePress #CyberSecurity #CVE202619632 #WebSecurity", "creation_timestamp": "2026-08-25T15:43:27.356178Z"}, {"uuid": "2e25f63c-d20c-460d-b6e2-68e914ba7b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/GithubRedTeam/99908", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19478\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 06:47:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitLab Code injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T10:00:03.352045Z"}, {"uuid": "54e49873-6afb-430c-9532-759e961c3bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19286", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu6liwcpzg2c", "content": "\ud83d\udea8 CVE-2026-19286 \u2014 CVSS 9.8 CRITICAL\n\nIBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improp...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19286\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-29T00:08:20.390066Z"}, {"uuid": "d41a4052-774e-4fa7-a4f6-d1dfccadf07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19295", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu6ljbjzoj2m", "content": "\ud83d\udea8 CVE-2026-19295 \u2014 CVSS 9.9 CRITICAL\n\nIBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating syste...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19295\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-29T00:08:31.204063Z"}, {"uuid": "442562cf-d40a-44a4-a8a9-cc165752eafe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19679", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99482", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-19679\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a h00die\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 10:34:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T13:00:02.592114Z"}, {"uuid": "51e1bbc3-be7c-4770-8d3e-234386ab9945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19286", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100159", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-CVE-2026-19286\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rmhowe425\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-28 21:25:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-30T00:00:55.814994Z"}, {"uuid": "86414407-fbd9-4f43-a9d4-6ca788e81ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mue52ruxym2i", "content": "Daily IT Security Digest \u2014 2026-08-31\n- **TranslatePress (CVE-2026-19632)**: Critical account takeover flaw allowing unauthenticated attackers to steal administrator password reset links and seize admin accounts. Affected ~400,000 WordPress sites.Both require immediate plugin updates.", "creation_timestamp": "2026-08-31T05:05:51.314684Z"}, {"uuid": "ff46ed62-523c-45ef-9e75-3de67b9c41fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19410", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mueltayv7f2e", "content": "CVE-2026-19410 - google cloud build\nGoogle Cloud Build's GitHub trigger feature could let an attacker run code without review by suppressing webhook checks. This could let malicious code execute in your build\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#googlecloud #CVE #infosec", "creation_timestamp": "2026-08-31T09:30:04.608795Z"}, {"uuid": "d5b9149e-66a2-46dd-802f-8c8db0f46129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19410", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muenvpcwff2p", "content": "\ud83d\udea8 CVE-2026-19410 \u2014 CVSS 9.4 CRITICAL\n\nAn Incorrect Authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19410\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-31T10:07:14.412017Z"}, {"uuid": "c5977285-abc0-429a-bb54-c98499db3e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19626", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3muevmamcxe2h", "content": "\ud83d\udd17 CVE : CVE-2026-19626, CVE-2026-19628, CVE-2026-19629, CVE-2026-19635", "creation_timestamp": "2026-08-31T12:25:06.910141Z"}, {"uuid": "48b643e7-f262-452f-aa19-b8fefd3d5df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19628", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3muevmamcxe2h", "content": "\ud83d\udd17 CVE : CVE-2026-19626, CVE-2026-19628, CVE-2026-19629, CVE-2026-19635", "creation_timestamp": "2026-08-31T12:25:06.980948Z"}, {"uuid": "6f2098af-d514-4712-97bb-17db884f3be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19629", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3muevmamcxe2h", "content": "\ud83d\udd17 CVE : CVE-2026-19626, CVE-2026-19628, CVE-2026-19629, CVE-2026-19635", "creation_timestamp": "2026-08-31T12:25:07.023825Z"}, {"uuid": "674e488d-b5aa-4d7b-8e0a-99b05a0d1f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19635", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3muevmamcxe2h", "content": "\ud83d\udd17 CVE : CVE-2026-19626, CVE-2026-19628, CVE-2026-19629, CVE-2026-19635", "creation_timestamp": "2026-08-31T12:25:07.065047Z"}, {"uuid": "6a7cf069-adc3-459d-a285-aaa0419c2c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19286", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-nuove-vulnerabilita-in-langflow", "content": "", "creation_timestamp": "2026-08-31T12:45:05.004478Z"}, {"uuid": "d8587cc1-8cca-4a24-944b-1aac7bf4eab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19295", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-nuove-vulnerabilita-in-langflow", "content": "", "creation_timestamp": "2026-08-31T12:45:09.479279Z"}, {"uuid": "d39e982a-01cb-4905-8454-6abd619a4b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19616", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/35vjztok5lmwx", "content": "CVE-2026-19616 - Information Disclosure in TBC Technology's KitLogistic\nCVE ID : CVE-2026-19616\n \n Published : Aug. 31, 2026, 1:48 p.m. | 17\u00a0minutes ago\n \n Description : Missing Authorization vulnerability in TBC Technology Inc. KitLogistic allows Accessing Functionality Not P...", "creation_timestamp": "2026-08-31T14:14:56.315054Z"}, {"uuid": "3818970a-3c2a-43d4-a232-f8eb86bb98fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19616", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mufryf3o4g2h", "content": "KitLogistic\u306e\u8a8d\u8a3c\u4e0d\u5099\u306b\u3088\u308a\u3001ACL\u3067\u5236\u9650\u3055\u308c\u306a\u3044\u6a5f\u80fd\u3078\u306e\u30a2\u30af\u30bb\u30b9\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u3002\nCVE-2026-19616 CVSS 7.5 | HIGH", "creation_timestamp": "2026-08-31T20:52:58.973933Z"}, {"uuid": "b7a6a611-4af4-40ed-aef8-2bcfbbf53906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19702", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mufs2w7yrb2v", "content": "Pardus Boot Repair\u306bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u653b\u6483\u8005\u306fOS\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19702 CVSS 7.8 | HIGH", "creation_timestamp": "2026-08-31T20:54:24.261647Z"}, {"uuid": "22bf3373-5c42-480d-be4a-7df925afc61c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19032", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/774lc6qyuagz3", "content": "CVE-2026-19032 - jackson-databind resolves attacker-controlled URI schemes when deserializing java.nio.file.Path\nCVE ID : CVE-2026-19032\n \n Published : Sept. 1, 2026, 3:18 a.m. | 21\u00a0minutes ago\n \n Description : jackson-databind's deserializer for java.nio.file.Path resolves an...", "creation_timestamp": "2026-09-01T04:15:00.093598Z"}, {"uuid": "6cb1baa5-7715-4638-a32c-94e6a301551f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19295", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mugxntftdh2q", "content": "\ud83d\udccc CVE-2026-19295 - IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving ... https://www.cyberhub.blog/cves/CVE-2026-19295", "creation_timestamp": "2026-09-01T08:07:07.374258Z"}, {"uuid": "91e6e486-58a5-4323-bb99-43b953a36e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19286", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mugzdhfswh2q", "content": "\ud83d\udccc CVE-2026-19286 - IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on ... https://www.cyberhub.blog/cves/CVE-2026-19286", "creation_timestamp": "2026-09-01T08:37:07.103947Z"}, {"uuid": "657cbf4f-9b11-4956-b0ea-04dabec38e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19806", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muh5zl2v6u27", "content": "\ud83d\udfe0 CVE-2026-19806 - High (8.8)\n\nThe Support Genix \u2013 Helpdesk, AI Chatbot, Knowledge Base & Customer Support Ticketing System pl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19806/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T10:01:04.543424Z"}, {"uuid": "095878f1-64da-4783-a633-c7ddf4114f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19952", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muh5zrq7ee2i", "content": "\ud83d\udfe0 CVE-2026-19952 - High (7.5)\n\nThe Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion du...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19952/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T10:01:10.821049Z"}, {"uuid": "415059e8-eefc-42ac-b6d6-63ecc526d380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19092", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19092.yaml", "content": "", "creation_timestamp": "2026-09-01T12:00:06.905641Z"}, {"uuid": "33f74f4c-8dbd-4d7f-84c1-e193c2556c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3muhx23vr4q2b", "content": "5 millones de sitios WP afectados por SQL injection\n\nAll-in-One WP Migration vulnerabilidad CVE-2026-19949 expone 5 millones de sitios WordPress. Verific\u00e1 si tu versi\u00f3n est\u00e1 afectada y actualiz\u00e1 en 2 minutos.\n\n#sqlinjection #allinonewpmigration #cve202619949 #wordpressplugins #seguridadwordpress", "creation_timestamp": "2026-09-01T17:28:44.740595Z"}, {"uuid": "4130b34d-8e9f-44cb-bb78-cfe136270f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19132", "type": "seen", "source": "https://bsky.app/profile/ctsd-gmbh.bsky.social/post/3muibinnnqh2n", "content": "CVE-2026-19132 auf psono:\n- Status: Offen\n- Klassifikation: CRITICAL (9.1/10)\n- Alter: >9 Tage (erster Scan: 2026-05-05)\n- Fix: psono 5.0.0\n- Handlung: Fix von Vendor fordern (Bug-Tracker)\n\nhttps://www.ctsd.de/insights/2026-09-ki-claude-4-5-besser-coden-45-g-nstiger.html", "creation_timestamp": "2026-09-01T20:35:51.524456Z"}, {"uuid": "69c65706-e39b-4948-ac88-a939cee18030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19766", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muiglyplmh25", "content": "\ud83d\udea8 CVE-2026-19766 \u2014 CVSS 9.6 CRITICAL\n\nAn authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric C...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19766\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-01T22:07:11.264121Z"}, {"uuid": "368e4e0a-bfe9-4612-9f65-ee384404e4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19766", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muik4glrds2y", "content": "CVE-2026-19766 - fabric composer\nThe software that manages HPE networking devices has a flaw that lets someone without valid credentials run code with full system rights. This could let an attacker take over\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fabriccomposer #CVE #infosec", "creation_timestamp": "2026-09-01T23:10:04.097710Z"}, {"uuid": "23d0b259-f371-4caf-bbad-5006e9e557b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19418", "type": "seen", "source": "https://gist.github.com/alon710/e2dde3eec102d6a754efa55af1c4fe47", "content": "# CVE-2026-19418: CVE-2026-19418: Broken Access Control and Cross-Site Request Forgery in TYPO3 CMS Core\n\n> **CVSS Score:** 7.3\n> **Published:** 2026-09-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-19418\n\n## Summary\nCVE-2026-19418 is a high-severity origin validation vulnerability in TYPO3 CMS that enables Cross-Site Request Forgery (CSRF) and access control bypasses. Due to architectural consolidation of entry points in version 13.0, the core ReferrerEnforcer fails to isolate backend endpoints from the frontend, allowing an attacker with frontend script execution capabilities to perform unauthorized administrative actions.\n\n## TL;DR\nArchitectural unification of TYPO3 entry points broke the referrer-based isolation boundary, allowing frontend scripts (such as those injected via XSS) to make unauthorized administrative requests on behalf of active backend users.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-346, CWE-352\n- **Attack Vector**: Network (requires administrative user session & client-side script execution)\n- **CVSS Score**: 7.3 (High)\n- **EPSS Score**: 0.00213 (Percentile: 11.47%)\n- **Impact**: Full Administrative Compromise / Unauthorized Configuration Changes\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- TYPO3 CMS Backend and Admin/Install Tool (ext:backend, ext:install)\n- **TYPO3 CMS**: >= 13.0.0, < 13.4.34 (Fixed in: `13.4.34 LTS`)\n- **TYPO3 CMS**: >= 14.0.0, < 14.3.6 (Fixed in: `14.3.6 LTS`)\n\n## Mitigation\n\n- Upgrade TYPO3 CMS to fixed versions (13.4.34 LTS / 14.3.6 LTS) immediately.\n- Deploy a strict Content Security Policy (CSP) on the frontend to mitigate XSS risks.\n- Implement WAF rules to validate and restrict administrative route access based on Referer path prefixes.\n\n**Remediation Steps:**\n1. Verify the current running version of TYPO3 CMS via the Backend or command line interface.\n2. Run 'composer update typo3/cms-core' or equivalent update commands to pull down the patch.\n3. Verify that the TYPO3 Core packages are updated to at least 13.4.34 or 14.3.6.\n4. Clear all system caches to ensure the new classes are fully loaded.\n\n## References\n\n- [TYPO3-CORE-SA-2026-021](https://typo3.org/security/advisory/typo3-core-sa-2026-021)\n- [Related Advisory TYPO3-CORE-SA-2020-006 (CVE-2020-11069)](https://typo3.org/security/advisory/typo3-core-sa-2020-006)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-19418) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-01T23:32:21.583638Z"}, {"uuid": "0f7657b8-2bf9-4357-a7fb-1313987285b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19092", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19092.yaml", "content": "", "creation_timestamp": "2026-09-02T00:00:04.341390Z"}, {"uuid": "4002a89e-fd66-4c80-bd1f-927ce3743410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19418", "type": "seen", "source": "https://gist.github.com/alon710/e2dde3eec102d6a754efa55af1c4fe47", "content": "# CVE-2026-19418: CVE-2026-19418: Broken Access Control and Cross-Site Request Forgery in TYPO3 CMS Core\n\n> **CVSS Score:** 7.3\n> **Published:** 2026-09-01\n> **Full Report:** https://cvereports.com/reports/CVE-2026-19418\n\n## Summary\nCVE-2026-19418 is a high-severity origin validation vulnerability in TYPO3 CMS that enables Cross-Site Request Forgery (CSRF) and access control bypasses. Due to architectural consolidation of entry points in version 13.0, the core ReferrerEnforcer fails to isolate backend endpoints from the frontend, allowing an attacker with frontend script execution capabilities to perform unauthorized administrative actions.\n\n## TL;DR\nArchitectural unification of TYPO3 entry points broke the referrer-based isolation boundary, allowing frontend scripts (such as those injected via XSS) to make unauthorized administrative requests on behalf of active backend users.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-346, CWE-352\n- **Attack Vector**: Network (requires administrative user session & client-side script execution)\n- **CVSS Score**: 7.3 (High)\n- **EPSS Score**: 0.00213 (Percentile: 11.47%)\n- **Impact**: Full Administrative Compromise / Unauthorized Configuration Changes\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- TYPO3 CMS Backend and Admin/Install Tool (ext:backend, ext:install)\n- **TYPO3 CMS**: >= 13.0.0, < 13.4.34 (Fixed in: `13.4.34 LTS`)\n- **TYPO3 CMS**: >= 14.0.0, < 14.3.6 (Fixed in: `14.3.6 LTS`)\n\n## Mitigation\n\n- Upgrade TYPO3 CMS to fixed versions (13.4.34 LTS / 14.3.6 LTS) immediately.\n- Deploy a strict Content Security Policy (CSP) on the frontend to mitigate XSS risks.\n- Implement WAF rules to validate and restrict administrative route access based on Referer path prefixes.\n\n**Remediation Steps:**\n1. Verify the current running version of TYPO3 CMS via the Backend or command line interface.\n2. Run 'composer update typo3/cms-core' or equivalent update commands to pull down the patch.\n3. Verify that the TYPO3 Core packages are updated to at least 13.4.34 or 14.3.6.\n4. Clear all system caches to ensure the new classes are fully loaded.\n\n## References\n\n- [TYPO3-CORE-SA-2026-021](https://typo3.org/security/advisory/typo3-core-sa-2026-021)\n- [Related Advisory TYPO3-CORE-SA-2020-006 (CVE-2020-11069)](https://typo3.org/security/advisory/typo3-core-sa-2020-006)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-19418) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-02T00:00:26.962262Z"}, {"uuid": "8f4c268c-84a5-4b24-a54a-821c00008336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19914", "type": "published-proof-of-concept", "source": "Telegram/gaBdUAEEWVgUcYnHku1FjILsSJN1BtvDBCiJZ9Y-qG01X4M", "content": "", "creation_timestamp": "2026-09-02T01:00:04.371303Z"}, {"uuid": "d4ebc3f2-00a6-4e5b-83a4-c0104406f439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19418", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3muiqxbxwdv2r", "content": "TYPO3 has a high-severity access control break in the backend and Install Tool, CVE-2026-19418. The referrer check added for CVE-2020-11069 stopped being effective in v13.0, when the backend moved out of the typo3/ directory to the site's main entry script. #dev", "creation_timestamp": "2026-09-02T01:12:28.179634Z"}, {"uuid": "ee38a631-5bf0-4e09-8296-bf3ad3ba1977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19754", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5whbyhti7sw7h", "content": "CVE-2026-19754 - Baserow 2.3.3 - SQL injection in formula index() JSONB array extraction\nCVE ID : CVE-2026-19754\n \n Published : Sept. 2, 2026, 3:29 a.m. | 39\u00a0minutes ago\n \n Description : Baserow 2.3.3 contains a SQL injection vulnerability in the index() formula function. A lo...", "creation_timestamp": "2026-09-02T05:17:24.716086Z"}, {"uuid": "ebb5d510-fd8a-4c19-bc46-2853f838ca68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19475", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mujwgyfnd422", "content": "Grafana has shipped patch releases across four branches at once, 12.4.10, 13.0.8, 13.1.5 and 13.2.1, all carrying fixes for CVE-2026-12704, CVE-2026-14199 and CVE-2026-19475. The branch you are pinned to determines which of the three you are getting. #dev", "creation_timestamp": "2026-09-02T12:23:23.720457Z"}, {"uuid": "495f0682-fff3-4af5-a7e5-8cce07c6a71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19931", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mujx3y4rb22k", "content": "\ud83d\udd17 CVE : CVE-2026-13608, CVE-2026-18924, CVE-2026-19931, CVE-2026-80229, CVE-2026-80230, CVE-2026-80231, CVE-2026-80255, CVE-2026-82208, CVE-2026-82209, CVE-2026-13608, CVE-2026-18924, CVE-2026-19931, CVE-2026-80229, CVE-2026-80230, CVE-2026-80231, CVE-2026-80255, CVE-2026-82208, CVE-2026-82209", "creation_timestamp": "2026-09-02T12:35:07.338574Z"}, {"uuid": "6619248c-3823-4207-864f-4c941df03ba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19219", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/progress-software-security-advisory-av26-875", "content": "", "creation_timestamp": "2026-09-02T16:15:11.224683Z"}, {"uuid": "f5bf8678-9479-41c9-9e26-7474f384803b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19437", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mukeh6lr7k22", "content": "A critical-severity fix just shipped for Ibm Vios. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-19437", "creation_timestamp": "2026-09-02T16:34:01.877027Z"}, {"uuid": "e66e4c40-5752-407a-b757-384b61d966e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19219", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mukenume3j25", "content": "RadEditor\u306e\u30d5\u30a1\u30a4\u30eb\u30d6\u30e9\u30a6\u30b6\u3067\u3001\u30c0\u30a4\u30a2\u30ed\u30b0\u8981\u6c42\u30d1\u30e9\u30e1\u30fc\u30bf\u306e\u6574\u5408\u6027\u4fdd\u8b77\u304c\u4e0d\u5341\u5206\u306a\u305f\u3081\u3001\u653b\u6483\u8005\u306f\u30d5\u30a9\u30eb\u30c0\u306e\u6539\u5909\u3084\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19219 CVSS 8.1 | HIGH", "creation_timestamp": "2026-09-02T16:37:46.026096Z"}, {"uuid": "ab5cde3b-0220-481a-a5f7-48ebfc62991f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/proxy_bar/3607", "content": "CVE-2026-19478 \u2014 GitLab\n*\n A/B lab + safe PoC", "creation_timestamp": "2026-09-02T18:00:05.396549Z"}, {"uuid": "ddd58267-0615-4a3e-9964-82258ca480fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100813", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19490\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TarPeg007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 15:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause analysis + PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-02T18:00:07.023593Z"}, {"uuid": "415e5c88-0b3e-484b-8f6a-f20eab64f187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19593", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mukjswn5eg25", "content": "CVE-2026-19593 - codex desktop\nWhen a user opens a workspace, Codex Desktop reads the Git settings of any repository in that workspace. If those settings have been maliciously modified, the program can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#codexdesktop #openai #CVE #infosec", "creation_timestamp": "2026-09-02T18:10:05.205317Z"}, {"uuid": "e52c63df-c441-4537-ad9f-ee29c81ae3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "published-proof-of-concept", "source": "Telegram/MDejoZgynr8LlPCfcHLGYynTe4-nNkLjRBMRCz_B_6ANtEs", "content": "", "creation_timestamp": "2026-09-02T20:00:05.823688Z"}, {"uuid": "525cd9e3-3486-4f57-87da-1ba6867a6458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19117", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mukqgaf7rc2o", "content": "\ud83d\udea8 CVE-2026-19117 \u2014 CVSS 9.8 CRITICAL\n\nUnder specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a targe...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19117\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T20:08:15.531927Z"}, {"uuid": "83b7abb7-76d2-4ce2-8069-788b9b49d349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19117", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mukturcdkj2w", "content": "CVE-2026-19117 - secret server (on-prem)\nIf you run the software on your own servers, a flaw can let a malicious person create a fake security key for a user\u2019s account and then sign in as that user.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#secretserver #delinea #CVE #infosec", "creation_timestamp": "2026-09-02T21:10:04.935819Z"}, {"uuid": "b36cf8e2-653f-4a30-909d-72000fbbf98a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19117", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117203638460137783", "content": "Credential managers are so hot right now. Here's Delinea's on-prem offering.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-19117\nsev:CRIT 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\nUnder specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only.", "creation_timestamp": "2026-09-02T21:46:37.436118Z"}, {"uuid": "2adf0417-c532-4bab-89bf-7ef9d05f7e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19949", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117203778448243818", "content": "#WordPress Plugin All-in-One WP Migration and Backup mit #Sicherheitsl\u00fccke CVE-2026-19949\nhttps://borncity.com/blog/2026/09/03/wordpress-plugin-all-in-one-wp-migration-and-backup-mit-sicherheitsluecke-cve-2026-19949/", "creation_timestamp": "2026-09-02T22:22:13.215298Z"}, {"uuid": "39ad2ad0-832a-4b34-b49c-a3d24de1f13d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mukxwf7ul22t", "content": "#WordPress Plugin All-in-One WP Migration and Backup mit #Sicherheitsl\u00fccke CVE-2026-19949\n\nborncity.com/blog/2026/09...", "creation_timestamp": "2026-09-02T22:22:31.020655Z"}, {"uuid": "b58cadb7-f201-4c38-b90d-35f4d39bc96e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19117", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mul26laor523", "content": "\ud83d\udd34 CVE-2026-19117 - Critical (9.8)\n\nUnder specific conditions, an attacker can register an attacker-controlled FIDO2 credential again...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19117/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-02T23:02:55.770110Z"}, {"uuid": "c250d532-816e-4f44-976f-30d3484f6232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "published-proof-of-concept", "source": "Telegram/MDejoZgynr8LlPCfcHLGYynTe4-nNkLjRBMRCz_B_6ANtEs", "content": "", "creation_timestamp": "2026-09-03T00:00:39.508666Z"}, {"uuid": "021ff731-87eb-48fa-9f6e-05ad95e6f9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3607", "content": "CVE-2026-19478 \u2014 GitLab\n*\n A/B lab + safe PoC", "creation_timestamp": "2026-09-03T00:00:40.449984Z"}, {"uuid": "119ade3b-2162-4191-bef7-26157631b2e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100813", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19490\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a TarPeg007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-02 15:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause analysis + PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-03T00:00:41.250827Z"}, {"uuid": "a80f40c7-5592-4035-9234-b69d461da37d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19914", "type": "published-proof-of-concept", "source": "Telegram/gaBdUAEEWVgUcYnHku1FjILsSJN1BtvDBCiJZ9Y-qG01X4M", "content": "", "creation_timestamp": "2026-09-03T00:00:59.868081Z"}, {"uuid": "3d114181-1c94-4d08-ac0f-de20bcbdc0f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19949", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3muljyqi2m52k", "content": "\ud83d\udcf0 Celah Plugin Backup WordPress Ekspos Jutaan Situs pada Serangan Pengambilalihan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/03/celah-plugin-backup-wordpress-cve-2026-19949/\n\n#cybersecurity #keamananSiber #malware #teknologi #vulnerability #wordpress", "creation_timestamp": "2026-09-03T03:45:59.210857Z"}, {"uuid": "5f95e697-f13c-4b81-aaab-53347697b563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "published-proof-of-concept", "source": "Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7Ve_ZEaNBPjsU4IDgEWKiqQ", "content": "", "creation_timestamp": "2026-09-03T08:00:03.960307Z"}, {"uuid": "d508c35c-4ebb-45b9-8050-47ea4d6445fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mum5bwbv6p24", "content": "Kwetsbaarheid in populaire WordPress-plugin dreigt meer dan 5 miljoen sites te c\n\nEen ernstige kwetsbaarheid, geregistreerd als CVE-2026-19949, is ontdekt in de populaire WordPress-plugin All-in-One WP Migration and Backup, die wereldwijd door meer dan 5 miljoen websites wordt gebruikt. Deze...", "creation_timestamp": "2026-09-03T09:31:09.201209Z"}, {"uuid": "8324d38e-8155-44f9-8bca-5fc7e4a08dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mumc2zf52u2i", "content": "CVE-2026-19949 enables unauthenticated attackers to obtain a restore secret key and trigger remote code execution via crafted archive imports.\n", "creation_timestamp": "2026-09-03T10:56:45.906938Z"}, {"uuid": "25867178-82ac-4349-8b81-2f03806a76f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mumcknb47i2e", "content": "\u79fb\u884c\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3001300\u4e07\u4ee5\u4e0a\u306eWordPress\u30b5\u30a4\u30c8\u306b\u5f71\u97ff\n\nWordPress\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696dDefiant\u304c\u3001WordPress\u7528\u30d7\u30e9\u30b0\u30a4\u30f3\u300cAll-in-One WP Migration and Backup\u300d\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u5ea6\u306e\u9ad8\u3044\u8106\u5f31\u6027\u306b\u3088\u308a\u3001300\u4e07\u3092\u8d85\u3048\u308b\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u304c\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c(RCE)\u653b\u6483\u306b\u3055\u3089\u3055\u308c\u3066\u3044\u308b\u3068\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 CVE-2026-19949...", "creation_timestamp": "2026-09-03T11:05:29.909661Z"}, {"uuid": "09f32b80-e177-460e-823e-221ae3ce39a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mumcu5p4622x", "content": "WordPress\u79fb\u884c\u30d7\u30e9\u30b0\u30a4\u30f3\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027(CVE-2026-19949)\u304c\u3042\u308a\u3001300\u4e07\u4ee5\u4e0a\u306e\u30b5\u30a4\u30c8\u304c\u5f71\u97ff\u3092\u53d7\u3051\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u3055\u308c\u308b\u6050\u308c\u304c\u3042\u308b\u3002", "creation_timestamp": "2026-09-03T11:10:49.073135Z"}, {"uuid": "9db61da4-c06d-4207-bf26-f2d143ae5d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mumdfyi3kj2o", "content": "\ud83e\udd16 CVE-2026-19949: 2nd-order SQLi in the All-in-One WP Migration and Backup plugin. Unauth attackers poison trackbacks; SQLi fires during admin restore, leaks the import key -> malicious .wpress -> RCE, full site takeover. ~3.25M sites still\u2026", "creation_timestamp": "2026-09-03T11:20:47.571165Z"}, {"uuid": "046f90ed-f32c-4ec6-92f7-aadff7dfd068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "Telegram/9raSwVD0Zu_yT3HMRfgQapiEJGVRuaKs1TEFe_xlxYqE4sA", "content": "", "creation_timestamp": "2026-09-03T12:00:04.870031Z"}, {"uuid": "0ceaa62f-a26f-464a-add9-0112f19b0e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mumerurqwv25", "content": "CVE-2026-19949 in All-in-One WP Migration and Backup may affect 3.2M WordPress sites. A second-order SQL injection in archive restore could enable RCE via trackbacks; only 35% are patched to 7.110. #WordPress #CVE202619949 #SQLInjection", "creation_timestamp": "2026-09-03T11:45:20.005860Z"}, {"uuid": "6017c739-dec6-496b-a185-d5cde5074741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19092", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19092.yaml", "content": "", "creation_timestamp": "2026-09-03T12:00:07.438923Z"}, {"uuid": "776a11b3-4ee2-4e89-b120-852ce46a5cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/true_secator/8573", "content": "\u0411\u043e\u043b\u0435\u0435 3 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0441\u0430\u0439\u0442\u043e\u0432 WordPress \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b SQL-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 All-in-One WP Migration and Backup.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2026-19949, CVSS 8,8)) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u043e \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 Defian. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0440\u0445\u0438\u0432\u0430 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 Defiant, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u044b, \u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0435\u043d\u0442 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0441\u0441\u044b\u043b\u043e\u043a \u044f\u0434\u0440\u0430 WordPress, \u0434\u0430\u0431\u044b \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043a\u043b\u044e\u0447, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0440\u0445\u0438\u0432\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0438 RCE.\n\n\u041a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0438 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f WordPress \u0443\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0441\u0430\u0439\u0442\u044b \u0432 \u0430\u0440\u0445\u0438\u0432\u044b .wpress \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0430\u0440\u0445\u0438\u0432 \u043d\u0430 \u043b\u044e\u0431\u043e\u043c \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u0438\u043c\u043f\u043e\u0440\u0442\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\nCVE-2026-19949 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0434\u0432\u0430 \u0442\u0440\u0435\u043a\u0431\u044d\u043a\u0430 \u043a \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044e, \u043a\u0430\u0436\u0434\u044b\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u0443\u044e \u043a\u043e\u0441\u0443\u044e \u0447\u0435\u0440\u0442\u0443 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438 URL-\u0430\u0434\u0440\u0435\u0441, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0435. \u0412\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u0441\u044b\u0445 \u0447\u0435\u0440\u0442 \u0438 \u0431\u0435\u0437 \u043e\u0442\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0430\u0440\u0445\u0438\u0432\u0438\u0440\u0443\u0435\u0442, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u0430\u0439\u0442, \u043f\u043b\u0430\u0433\u0438\u043d \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 URL-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u044b \u0442\u0430\u0431\u043b\u0438\u0446 \u0432 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u043c SQL-\u043a\u043e\u0434\u0435. \u041f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 SQL-\u043a\u043e\u0434, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 \u0438\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0438 REST API \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432 \u0441\u0430\u0439\u0442\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u0438\u043c\u043f\u043e\u0440\u0442\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0430\u0440\u0445\u0438\u0432\u0430 .wpress, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043b\u0430\u0433\u0438\u043d, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443, \u043a\u0430\u043a \u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u043e \u0432\u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0430\u0439\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 All-in-One WP Migration and Backup \u0434\u043e 7.109 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 7.110, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 20 \u0430\u0432\u0433\u0443\u0441\u0442\u0430.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e All-in-One WP Migration and Backup - \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f WordPress, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 5 \u043c\u043b\u043d. \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a.\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 3 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0442\u043e\u043b\u044c\u043a\u043e 35% \u0432\u0441\u0435\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.110, \u0447\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 3,2 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0435\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 WordPress.", "creation_timestamp": "2026-09-03T14:00:04.467939Z"}, {"uuid": "f54a7153-7ca8-4e42-b0ef-8a0c0d6bc051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/information_security_channel/55843", "content": "Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability\nhttps://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/\n\nThe high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution.\nThe post Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability (https://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-03T17:00:05.990675Z"}, {"uuid": "b546aa43-88da-4068-bce3-0509d9d81ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19949", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mun4wr2ywi2a", "content": "Critical WordPress vulnerability exposes 3.2 million sites to remote code execution via All-in-One WP\u00a0Migration\n\nCVE-2026-19949 is a second-order SQL injection in All-in-One WP Migration and Backup that leads to unauthenticated RCE.\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-19949-wp-migration-rce/", "creation_timestamp": "2026-09-03T18:57:34.271586Z"}, {"uuid": "d8a3a0a1-f470-4059-bbe3-c83129de017b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/pphm_HackerNews/2986", "content": "\ud83d\udd34 Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability\n\nA high-severity vulnerability in the All-in-One WP Migration and Backup WordPress plugin exposes over 3 million websites to remote code execution (RCE) attacks, WordPress security firm Defiant warns.\n\nTracked as CVE-2026-19949 (CVSS score of 8.8), the security defect is described as a second-order SQL injection issue in the archive restore functionality of the plugin.\n\nThe flaw exists because user-supplied input is insufficiently escaped and existing SQL queries are not sufficiently prepared, Defiant explains.", "creation_timestamp": "2026-09-03T21:00:29.024632Z"}, {"uuid": "b98453a6-c95f-46b9-8944-9b8f81b624ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/YUSQnHRGPoy1hnFlMACvlx_l4ArB_dfPL6N2OZrh3RVUvk4", "content": "", "creation_timestamp": "2026-09-03T22:00:09.637401Z"}, {"uuid": "3248794e-f194-4ad6-86d0-3113b75779ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19092", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19092.yaml", "content": "", "creation_timestamp": "2026-09-04T00:00:07.050026Z"}, {"uuid": "0a04c11a-bc6d-4a22-9798-ca62f8d68321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/YUSQnHRGPoy1hnFlMACvlx_l4ArB_dfPL6N2OZrh3RVUvk4", "content": "", "creation_timestamp": "2026-09-04T00:00:11.491492Z"}, {"uuid": "25fb16f8-b75d-4058-9c0c-a39097dd9ccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/pphm_HackerNews/2986", "content": "\ud83d\udd34 Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability\n\nA high-severity vulnerability in the All-in-One WP Migration and Backup WordPress plugin exposes over 3 million websites to remote code execution (RCE) attacks, WordPress security firm Defiant warns.\n\nTracked as CVE-2026-19949 (CVSS score of 8.8), the security defect is described as a second-order SQL injection issue in the archive restore functionality of the plugin.\n\nThe flaw exists because user-supplied input is insufficiently escaped and existing SQL queries are not sufficiently prepared, Defiant explains.", "creation_timestamp": "2026-09-04T00:00:18.942622Z"}, {"uuid": "9b1963d4-e2e1-4076-a166-fec30e1df46b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/9raSwVD0Zu_yT3HMRfgQapiEJGVRuaKs1TEFe_xlxYqE4sA", "content": "", "creation_timestamp": "2026-09-04T00:00:49.434216Z"}, {"uuid": "9502ee19-1f8a-476b-84ff-e707d85f4917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/information_security_channel/55843", "content": "Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability\nhttps://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/\n\nThe high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution.\nThe post Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability (https://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-04T00:00:42.716508Z"}, {"uuid": "bf9d48e6-6e3b-4c45-9625-d899906eb9ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/true_secator/8573", "content": "\u0411\u043e\u043b\u0435\u0435 3 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0441\u0430\u0439\u0442\u043e\u0432 WordPress \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b SQL-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 All-in-One WP Migration and Backup.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2026-19949, CVSS 8,8)) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u043e \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 Defian. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0440\u0445\u0438\u0432\u0430 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 Defiant, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u044b, \u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0435\u043d\u0442 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0441\u0441\u044b\u043b\u043e\u043a \u044f\u0434\u0440\u0430 WordPress, \u0434\u0430\u0431\u044b \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043a\u043b\u044e\u0447, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0440\u0445\u0438\u0432\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0438 RCE.\n\n\u041a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043c\u0438\u0433\u0440\u0430\u0446\u0438\u0438 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f WordPress \u0443\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0441\u0430\u0439\u0442\u044b \u0432 \u0430\u0440\u0445\u0438\u0432\u044b .wpress \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0430\u0440\u0445\u0438\u0432 \u043d\u0430 \u043b\u044e\u0431\u043e\u043c \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u0438\u043c\u043f\u043e\u0440\u0442\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\nCVE-2026-19949 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0434\u0432\u0430 \u0442\u0440\u0435\u043a\u0431\u044d\u043a\u0430 \u043a \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044e, \u043a\u0430\u0436\u0434\u044b\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u0443\u044e \u043a\u043e\u0441\u0443\u044e \u0447\u0435\u0440\u0442\u0443 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438 URL-\u0430\u0434\u0440\u0435\u0441, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0435. \u0412\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u0441\u044b\u0445 \u0447\u0435\u0440\u0442 \u0438 \u0431\u0435\u0437 \u043e\u0442\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0430\u0440\u0445\u0438\u0432\u0438\u0440\u0443\u0435\u0442, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u0430\u0439\u0442, \u043f\u043b\u0430\u0433\u0438\u043d \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 URL-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u044b \u0442\u0430\u0431\u043b\u0438\u0446 \u0432 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u043c SQL-\u043a\u043e\u0434\u0435. \u041f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 SQL-\u043a\u043e\u0434, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 \u0438\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0438 REST API \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u0432 \u0441\u0430\u0439\u0442\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0433\u043e \u0434\u043b\u044f \u0438\u043c\u043f\u043e\u0440\u0442\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0430\u0440\u0445\u0438\u0432\u0430 .wpress, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043b\u0430\u0433\u0438\u043d, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443, \u043a\u0430\u043a \u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u043e \u0432\u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0430\u0439\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 All-in-One WP Migration and Backup \u0434\u043e 7.109 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 7.110, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 20 \u0430\u0432\u0433\u0443\u0441\u0442\u0430.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e All-in-One WP Migration and Backup - \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f WordPress, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 5 \u043c\u043b\u043d. \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a.\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 3 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u0442\u043e\u043b\u044c\u043a\u043e 35% \u0432\u0441\u0435\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.110, \u0447\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 3,2 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0435\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 WordPress.", "creation_timestamp": "2026-09-04T00:00:46.644195Z"}, {"uuid": "fb21eb5f-b81c-4482-979d-3f4d0ebfcccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "published-proof-of-concept", "source": "Telegram/QsxfNGKa9DD1Ty0sLmAQtevj7Ve_ZEaNBPjsU4IDgEWKiqQ", "content": "", "creation_timestamp": "2026-09-04T00:00:55.551158Z"}, {"uuid": "3729a239-99a5-41be-8846-33f7eb3d7fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/117211553239103462", "content": "Si vous avez utilis\u00e9 (et oubli\u00e9 \ud83d\ude05) All-in-One WP Migration and Backup sur votre #WordPress  c'est peut-\u00eatre le moment d'aller jeter un \u0153il.\nUne vuln\u00e9rabilit\u00e9 assez vilaine, CVE-2026-19949, touche les versions jusqu'\u00e0 7.109.\nUn attaquant peut d\u00e9poser du contenu pi\u00e9g\u00e9 qui reste en attente et devient dangereux lors d'un export/import du site. \u00c0 la cl\u00e9, il peut finir par ex\u00e9cuter du code sur le serveur et prendre le contr\u00f4le du WordPress.\nLe plugin est install\u00e9 sur plus de 5 millions de sites et environ 3,2 millions seraient encore sur une version vuln\u00e9rable.\n\ud83d\udc49 Si vous l'avez utilis\u00e9 un jour pour migrer un site et qu'il tra\u00eene toujours dans vos plugins : v\u00e9rifiez la version et passez au minimum en 7.110.\n\u2b07\ufe0f \"5 Million WordPress Sites Affected by SQL Injection Vulnerability in All-in-One WP Migration and Backup WordPress Plugin\"\ud83d\udc47 https://www.wordfence.com/blog/2026/09/5-million-wordpress-sites-affected-by-sql-injection-vulnerability-in-all-in-one-wp-migration-and-backup-wordpress-plugin\n#CyberVeille", "creation_timestamp": "2026-09-04T07:19:27.079367Z"}, {"uuid": "2a02f50b-7e5e-4a2c-8e2e-f5020dd84340", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d2a96374-0326-48a3-8d7d-ad148aa72408", "content": "", "creation_timestamp": "2026-09-04T12:00:37.677148Z"}, {"uuid": "b9616421-f6ca-4a0f-b229-23975e20046f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9970", "content": "\ud83d\udea8 Unauthenticated attackers could turn Grafana MCP servers into proxies for internal networks and cloud metadata endpoints.\n\nPillar Security research team found affected releases accepted self-generated session IDs in place of authentication, exposing the server's Grafana service account to anyone who could reach it.\n\nA chained SSRF (CVE-2026-19516, CVSS 9.1) then let callers pick the destination, method, headers, and body of outbound requests. The server has passed 1.9 million Docker Hub downloads; Grafana shipped fixes in mcp-grafana v1.1.0.\n\nFull details here: https://thn.news/grafana-mcp-flaws", "creation_timestamp": "2026-09-04T13:00:04.761587Z"}, {"uuid": "40725c4d-4cb1-4c7b-8b31-b815b18dbf53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/", "content": "The high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution.\n\nThe post Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability appeared first on SecurityWeek.", "creation_timestamp": "2026-09-04T13:00:42.472449Z"}, {"uuid": "cac0f9b1-4739-4a46-aba6-545c531825cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mup4rrryzh2l", "content": "\ud83d\udce2 Injection SQL de second ordre non authentifi\u00e9e dans All-in-One WP Migration and Backup (CVE-2026-19949)\n\nCet article d\u00e9taille une vuln\u00e9rabilit\u00e9 critique d\u00e9couverte le 14 ao\u00fbt 2026 dans le plugin WordPress All-in-One\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#WordPress #RemoteCodeExecution #Cyberveille", "creation_timestamp": "2026-09-04T14:00:07.438634Z"}, {"uuid": "daf02889-2823-430b-bf58-30c6ef83536e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mupeg3yd6d2a", "content": "Citrix NetScaler\u306e\u6df1\u523b\u306a\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027(CVE-2026-19490)\u304c\u3001\u653b\u6483\u8005\u306b\u60aa\u7528\u3055\u308c\u59cb\u3081\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-09-04T16:16:44.625709Z"}, {"uuid": "383b7dac-f3db-41d1-b106-402dae33fbea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mupbluzvvl2b", "content": "Attackers have begun targeting a critical-severity Citrix NetScaler auth bypass flaw (CVE-2026-19490) in the wild, according to vulnerability intelligence company Previdian.", "creation_timestamp": "2026-09-04T15:26:17.607222Z"}, {"uuid": "970fc105-08d8-45ce-b920-596f327e93fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19490", "type": "seen", "source": "https://bsky.app/profile/bloggersminds.com/post/3mupbwfmxpc2c", "content": "Critical Citrix NetScaler Auth Bypass (CVE-2026-19490) Exploited in the Wild\n\nWhat is the CVE-2026-19490 vulnerability? The CVE-2026-19490 flaw affects Citrix NetScaler appliances that pro\n\nhttps://bloggersminds.com/post/critical-citrix-netscaler-auth-bypass-cve-2026-19490-exploited-in-the-wild-4881", "creation_timestamp": "2026-09-04T15:32:12.745394Z"}, {"uuid": "727e45b3-e25e-4b62-b926-7a984aaf85f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mupckbblbv22", "content": "\ud83e\udd16 CVE-2026-19490 (critical): auth bypass in Citrix NetScaler now exploited in the wild. Attackers are targeting unpatched appliances \u2014 apply the patch urgently.\nhttps://www.bleepingcomputer.com/news/security/hackers-target-critical-citrix-netscaler-auth-bypass-in-attacks/", "creation_timestamp": "2026-09-04T15:43:16.871143Z"}, {"uuid": "e006051d-009c-49cd-8596-186c93757c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mupdjxdltw2y", "content": "CVE-2026-19490, the critical Citrix NetScaler auth bypass, is now being exploited in the wild.", "creation_timestamp": "2026-09-04T16:00:59.653865Z"}, {"uuid": "f7ec0058-dd04-42b3-ab60-356a7e5531b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/14767", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-09-04T17:00:05.678109Z"}, {"uuid": "18950d43-3e12-4667-9b67-b0310f07e79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19534", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3muphinqjks2w", "content": "\ud83d\udea8 High-severity security fix in undici (6.28.1, 7.29.1, 8.10.2) just released!\n\nPatches CVE-2026-19534: undici vulnerable to Denial of Service via unrequested WebSocket subprotocol\n\ngithub.com/nodejs/undic...", "creation_timestamp": "2026-09-04T17:11:53.553692Z"}, {"uuid": "4d69ef47-67f7-4e20-8283-b1e5a732fd14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19274", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mupijajral2w", "content": "CVE-2026-19274 - observability with instana (agent)\nIf you run IBM Instana Agent versions 1.0.303 to 1.0.323 on a Kubernetes environment, a user who is already logged in can create a specially named agent that overwrites\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-09-04T17:30:04.534249Z"}, {"uuid": "25557b66-f626-46c3-ba54-d831124eb1ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "Telegram/lpcaxohlevWOQx_YAX_9XUMgFve84tVn0viR4d8tnkij6ww", "content": "", "creation_timestamp": "2026-09-04T18:00:03.645045Z"}, {"uuid": "4340e221-700a-482a-bc9f-72a7eadfc34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19274", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mupknjyxry22", "content": "\ud83d\udea8 CVE-2026-19274 \u2014 CVSS 9.6 CRITICAL\n\nIBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19274\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T18:08:16.041144Z"}, {"uuid": "76cbe566-2049-4d08-ba3c-52060f54ba3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101125", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19632\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ghostpels\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-04 18:01:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated account takeover PoC for TranslatePress Multilingual <= 3.3.1 (WordPress)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-04T19:00:05.408244Z"}, {"uuid": "7321495b-6fc0-4c1d-8dd0-a314a1f1a227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/hackers-target-critical-citrix-netscaler-auth-bypass-in-attacks/", "content": "Attackers have begun targeting a critical-severity Citrix NetScaler auth bypass flaw (CVE-2026-19490) in the wild, according to vulnerability intelligence company Previdian. [...]", "creation_timestamp": "2026-09-04T19:00:36.646540Z"}, {"uuid": "f5b1977e-d117-4e22-b841-ce6ca3b89410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mupoflire52t", "content": "Critical Citrix NetScaler auth bypass CVE-2026-19490 is being leveraged in attacks after a public PoC surfaced. Requests matching the exploit were seen from multiple IPs. #Citrix #NetScaler #Belgium", "creation_timestamp": "2026-09-04T19:15:27.934888Z"}, {"uuid": "5e5e6ed7-05b7-47dc-8136-3a6282164ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3muprnkqfbk2w", "content": "~Cybergcca~\nPatch Chrome and NetScaler urgently; CVE-2026-85046 is exploited, while NetScaler flaws enable authentication bypass or denial of service.\n-\nIOCs: CVE-2026-85046, CVE-2026-19490, CVE-2026-19489\n-\n#CVE202619490 #CVE202685046 #ThreatIntel", "creation_timestamp": "2026-09-04T20:13:33.320433Z"}, {"uuid": "c9a3b00f-caee-49fd-a3cd-09bbb8771145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3muprnkqfbk2w", "content": "~Cybergcca~\nPatch Chrome and NetScaler urgently; CVE-2026-85046 is exploited, while NetScaler flaws enable authentication bypass or denial of service.\n-\nIOCs: CVE-2026-85046, CVE-2026-19490, CVE-2026-19489\n-\n#CVE202619490 #CVE202685046 #ThreatIntel", "creation_timestamp": "2026-09-04T20:13:33.357060Z"}, {"uuid": "36fda23f-c6dc-43cd-921a-0496e287ed72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-019-vulnerabilities-impacting-citrix-netscaler-adc-netscaler-gateway-cve-2026-19490-cve-2026-19489", "content": "", "creation_timestamp": "2026-09-04T20:15:03.618142Z"}, {"uuid": "7cb34747-ecb9-4173-8354-cd2bae5f9956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-019-vulnerabilities-impacting-citrix-netscaler-adc-netscaler-gateway-cve-2026-19490-cve-2026-19489", "content": "", "creation_timestamp": "2026-09-04T20:15:05.788839Z"}, {"uuid": "725e59de-4bc2-4096-a828-ab6b70bf92de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mupt25aosk2u", "content": "CVE-2026-19949\u3001\u6570\u767e\u4e07\u4ef6\u306eWordPress\u30b5\u30a4\u30c8\u304c\u8106\u5f31\u306a\u30d0\u30fc\u30b8\u30e7\u30f3\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u3092\u7a3c\u50cd\u4e2d\n\n\u672c\u6765\u306f\u30b5\u30a4\u30c8\u306e\u30c8\u30e9\u30d6\u30eb\u5fa9\u65e7\u3092\u52a9\u3051\u308b\u306f\u305a\u306eWordPress\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30c4\u30fc\u30eb\u304c\u3001\u9006\u306b\u653b\u6483\u306e\u5f15\u304d\u91d1\u306b\u306a\u308a\u304b\u306d\u306a\u3044\u72b6\u6cc1\u3067\u3059\u3002 \u7814\u7a76\u8005\u3089\u306f\u3001All-in-One WP Migration and Backup\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30d0\u30fc\u30b8\u30e7\u30f37.109\u4ee5\u524d\u306b\u5f71\u97ff\u3059\u308b\u6df1\u523b\u5ea6\u306e\u9ad8\u3044SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u6b20\u9665...", "creation_timestamp": "2026-09-04T20:38:29.906525Z"}, {"uuid": "38a5565e-088a-4a17-9dd0-a5f18d256a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19900", "type": "seen", "source": "https://t.me/GithubRedTeam/101130", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-19900-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a on3sk-0x1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-04 18:09:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\ncve-2026-19900-PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-04T22:00:04.420239Z"}, {"uuid": "50a2846f-d849-44b9-94cc-aab141bb75c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19534", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muq35omt4i2o", "content": "\ud83d\udfe0 CVE-2026-19534 - High (7.5)\n\nundici's WebSocket client crashes the whole Node.js process during the opening handshake when a s...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19534/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T23:03:38.293821Z"}, {"uuid": "f5a61e1a-86db-41a6-a36a-b5fe87c4feed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3muq3e4c6oh2n", "content": "Citrix NetScaler auth bypass CVE-2026-19490 is under active probing with public exploit code, per Previdian. Patch to Citrix's builds in CTX696939 now. https://bleepingcomputer.com/news/security/hackers-target-critical-citrix-netscaler-auth-bypass-in-attacks", "creation_timestamp": "2026-09-04T23:07:13.486453Z"}, {"uuid": "e4dd5dc4-6d76-4faa-9c63-0fa9dc24b516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "exploited", "source": "https://t.me/BleepingComputer/25485", "content": "\u200aCritical Citrix NetScaler auth bypass now leveraged in attacks\n\nAttackers have begun targeting a critical-severity Citrix NetScaler auth bypass flaw (CVE-2026-19490) in the wild, according to vulnerability intelligence company Previdian. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-target-critical-citrix-netscaler-auth-bypass-in-attacks/", "creation_timestamp": "2026-09-05T00:00:10.363235Z"}, {"uuid": "c32aec4d-341a-47b0-ab4b-08b501ab1828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19534", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3muq7mu5nkd2f", "content": "Node.js Trips Over a WebSocket and Dies Like a Cheap Bureaucrat\nPANIC 66% | Lag 0.0h | CVE-2026-19534 is a high-severity flaw in undici's WebSocket client that can crash the entire Node.j\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-05T00:23:42.083868Z"}, {"uuid": "35230892-2027-462a-946a-249015836865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-05T01:00:04.478841Z"}, {"uuid": "a388f7a4-daff-4ed0-bd54-44c0f4fac9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19900", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101130", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-19900-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a on3sk-0x1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-04 18:09:19\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\ncve-2026-19900-PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T01:00:14.830987Z"}, {"uuid": "0d74c2c8-5821-467b-8079-7f2f3404b7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9970", "content": "\ud83d\udea8 Unauthenticated attackers could turn Grafana MCP servers into proxies for internal networks and cloud metadata endpoints.\n\nPillar Security research team found affected releases accepted self-generated session IDs in place of authentication, exposing the server's Grafana service account to anyone who could reach it.\n\nA chained SSRF (CVE-2026-19516, CVSS 9.1) then let callers pick the destination, method, headers, and body of outbound requests. The server has passed 1.9 million Docker Hub downloads; Grafana shipped fixes in mcp-grafana v1.1.0.\n\nFull details here: https://thn.news/grafana-mcp-flaws", "creation_timestamp": "2026-09-05T01:00:28.791065Z"}, {"uuid": "1daa2e2b-b048-4894-9d20-7166c4218675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101125", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19632\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ghostpels\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-04 18:01:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated account takeover PoC for TranslatePress Multilingual <= 3.3.1 (WordPress)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T01:00:19.988263Z"}, {"uuid": "e62f2fe8-c75d-4ee5-9dab-ddb7ef80ea5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/14767", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-09-05T01:00:21.657794Z"}, {"uuid": "1ad5e6b0-8c77-49f3-8299-702968e4e04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "published-proof-of-concept", "source": "Telegram/lpcaxohlevWOQx_YAX_9XUMgFve84tVn0viR4d8tnkij6ww", "content": "", "creation_timestamp": "2026-09-05T01:00:21.184857Z"}, {"uuid": "0b104dbd-9b1f-4805-b0f6-9d3b3e8327c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/hackers-target-critical-citrix-netscaler-auth-bypass-in-attacks/", "content": "Attackers have begun targeting a critical-severity Citrix NetScaler auth bypass flaw (CVE-2026-19490) in the wild, according to vulnerability intelligence company Previdian. [...]", "creation_timestamp": "2026-09-05T01:00:37.493835Z"}, {"uuid": "d32a0b85-5a24-40d6-b5e0-979b7f92fcea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/", "content": "The high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution.\n\nThe post Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability appeared first on SecurityWeek.", "creation_timestamp": "2026-09-05T01:00:34.911878Z"}, {"uuid": "4d510702-bebf-4b1d-b614-33a9d808ca3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3muqigl2r7m2n", "content": "Citrix NetScaler \u306e\u8a8d\u8a3c\u56de\u907f\u8106\u5f31\u6027\u3001\u653b\u6483\u3067\u60aa\u7528\u4e2d\n\nCitrix NetScaler \u306e\u91cd\u5927\u306a\u8a8d\u8a3c\u56de\u907f\u8106\u5f31\u6027 CVE-2026-19490 \u304c\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u5224\u660e\u3002\u8106\u5f31\u6027\u30a4\u30f3\u30c6\u30ea\u30b8\u30a7\u30f3\u30b9\u4f01\u696d Previdian \u304c\u78ba\u8a8d\u3002NetScaler \u3092\u904b\u7528\u3059\u308b\u7d44\u7e54\u306e\u81f3\u6025\u306e\u5bfe\u5fdc\u304c\u5fc5\u8981\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-09-05T03:01:15.351734Z"}, {"uuid": "6b5e8aac-83ae-40bc-9a94-0df70fa064f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19766", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muqir3jo4y24", "content": "\ud83d\udccc CVE-2026-19766 - An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allo... https://www.cyberhub.blog/cves/CVE-2026-19766", "creation_timestamp": "2026-09-05T03:07:07.705230Z"}, {"uuid": "b0a8c6d3-d51f-4b9d-b6df-a0416db09e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19766", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3muqir43zam2t", "content": "\ud83d\udccc CVE-2026-19766 - An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allo... https://www.potatohub.blog/cves/CVE-2026-19766", "creation_timestamp": "2026-09-05T03:07:08.711981Z"}, {"uuid": "a770f8fc-f88a-40b3-827f-df26ce1ee830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "seen", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-05T07:00:04.164604Z"}, {"uuid": "f23b2583-c225-40fb-a878-2051a347278a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3muqsfhb43224", "content": "\ud83d\udea8 Citrix NetScaler : auth bypass critique (CVE-2026-19490) exploit\u00e9. Chrome : CVE-2026-85046 activement exploit\u00e9e. https://www.bleepingcomputer.com/news/security/hackers-target-critical-citrix-netscaler-auth-bypass-in-attacks/ https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1112/", "creation_timestamp": "2026-09-05T05:59:34.531808Z"}, {"uuid": "5364294e-398f-4f60-8288-d5ec31264c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3muqte4qxr627", "content": "\ud83e\udd16 CVE-2026-19490: critical Citrix NetScaler auth bypass now exploited in the wild (Previdian). Attackers actively targeting the flaw; apply the patch.\nhttps://www.bleepingcomputer.com/news/security/hackers-target-critical-citrix-netscaler-auth-bypass-in-attacks/", "creation_timestamp": "2026-09-05T06:16:43.990966Z"}, {"uuid": "953d3306-a563-4cc9-b8be-acc67260bdd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3muqtelpajl2k", "content": "Top 3 CVE for last 7 days:\nCVE-2026-83548: 21 interactions\nCVE-2026-82329: 20 interactions\nCVE-2026-83549: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-18577: 6 interactions\nCVE-2026-19490: 6 interactions\nCVE-2026-53412: 6 interactions\n", "creation_timestamp": "2026-09-05T06:16:59.452036Z"}, {"uuid": "ac3ad815-d80e-4b83-b17e-0231d45f3a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3muqvdkmqtq2o", "content": "Ataques ativos est\u00e3o a ser explorados para contornar a autentica\u00e7\u00e3o no Citrix NetScaler, devido a uma falha cr\u00edtica de seguran\u00e7a registada sob CVE-2026-19490. A vulnerabilidade afeta equipamentos configurados como servidor virtual AAA ou Gateway.\n\n", "creation_timestamp": "2026-09-05T06:52:12.573565Z"}, {"uuid": "d0554428-2f28-46d4-aa82-f6df01311f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19900", "type": "seen", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-05T07:00:03.935603Z"}, {"uuid": "8fb16468-123a-45ce-a7de-07379a0258f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3muqxisfb7x24", "content": "Valid, But Never Issued: Session Spoofing and SSRF in Grafana MCP (CVE-2026-19516) #patchmanagement", "creation_timestamp": "2026-09-05T07:30:55.473668Z"}, {"uuid": "9243a5ca-696c-4621-a130-fc3385a83f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19887", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muqz5s5so222", "content": "\ud83d\udfe0 CVE-2026-19887 - High (8.8)\n\nThe Welcart e-Commerce plugin for WordPress is vulnerable to PHP Object Injection in all versions...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19887/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T08:00:34.964421Z"}, {"uuid": "d684567d-1781-4d40-acd5-15dcb6b5ec73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19303", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mur4k45iiv2e", "content": "\ud83d\udfe0 CVE-2026-19303 - High (8.1)\n\nIBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19303/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T09:01:08.690683Z"}, {"uuid": "42e8ab97-8eda-4fbc-a49c-bdac45c34da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19304", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mur4kcw7zx2r", "content": "\ud83d\udfe0 CVE-2026-19304 - High (7.7)\n\nIBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain sensi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19304/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T09:01:15.998747Z"}, {"uuid": "a8ae4373-c8a7-4bed-8666-4255493cba28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19305", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3murdclq67o22", "content": "\ud83d\udfe0 CVE-2026-19305 - High (8.6)\n\nIBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive informati...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19305/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T11:02:12.760213Z"}, {"uuid": "40198ccc-812d-4ea4-aa99-d22874bf381d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19306", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3murgs5sj3k2r", "content": "\ud83d\udfe0 CVE-2026-19306 - High (7.7)\n\nIBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read arbitrary files fr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19306/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T12:04:36.392218Z"}, {"uuid": "fdc5e20a-042f-4285-b7f6-9aa9aec29830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19300", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3murgsek7gx2p", "content": "\ud83d\udfe0 CVE-2026-19300 - High (7.5)\n\nIBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive informati...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19300/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T12:04:43.397937Z"}, {"uuid": "51aba456-d7a6-4f8f-baa7-1314f059cded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19949", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3murkqw3x532c", "content": "All-in-One WP Migration Flaw Hits 3M WordPress Sites https://0daynews.com/articles/2026-09-04-all-in-one-wp-migration-cve-2026-19949-sql-injection", "creation_timestamp": "2026-09-05T13:15:29.640920Z"}, {"uuid": "5f7a1f36-c924-4436-b4f4-a3a68ecb4b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3musl6h4r4k25", "content": "Critical Citrix NetScaler auth bypass now leveraged in attacks\n\nAttackers have begun targeting a critical-severity Citrix NetScaler auth bypass flaw (CVE-2026-19490) in the wild, according to vulnerability intelligence company Previdian. [...]\n#hackernews #news", "creation_timestamp": "2026-09-05T22:55:43.173144Z"}, {"uuid": "5f4a8cde-f756-4982-9385-24bd055c2134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19274", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muslijcbmn2r", "content": "\ud83d\udd34 CVE-2026-19274 - Critical (9.6)\n\nIBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator c...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19274/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T23:01:21.537174Z"}, {"uuid": "ce51ea45-778c-45a5-9a79-1887d8a3ad37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19283", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3musliq75y52r", "content": "\ud83d\udfe0 CVE-2026-19283 - High (7.7)\n\nIBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator c...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19283/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T23:01:28.721380Z"}, {"uuid": "796c13cb-7979-4bec-ad0d-5f808c62c9b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19298", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3musliwz7mp2k", "content": "\ud83d\udfe0 CVE-2026-19298 - High (8.8)\n\nIBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to execute arbi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19298/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-05T23:01:35.769103Z"}, {"uuid": "bc1bde28-606f-494f-a169-04d1593fada4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19632", "type": "published-proof-of-concept", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-06T00:00:53.519257Z"}, {"uuid": "159e07b5-f845-4a06-866c-1e5b8779ee60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19900", "type": "published-proof-of-concept", "source": "Telegram/z32s08izA0c_5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0", "content": "", "creation_timestamp": "2026-09-06T00:00:53.682423Z"}, {"uuid": "bf2926aa-41a3-4f69-868a-e08c23ede9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19516", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-06T00:01:03.572885Z"}, {"uuid": "5948090a-9b91-454e-9a63-9d2135edf8fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19283", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3musqkwmryf2r", "content": "IBM Ships Another Exploit Gift-Wrapped in Enterprise Confidence\nPANIC 64% | Lag 0.0h | IBM Instana Agent Operator versions 1.0.303 through 1.0.323 are affected by CVE-2026-19283, a high-s\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-06T00:32:10.778976Z"}, {"uuid": "c5fcec69-4ed0-4cb2-bd97-c3c7f3ed7c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19949", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3musx66t6ea2b", "content": "All-in-One WP Migration Flaw Hits 3M WordPress Sites \u2014 Unauthenticated SQL injection in All-in-One WP Migration and\u2026 https://0daynews.com/articles/2026-09-04-all-in-one-wp-migration-cve-2026-19949-sql-injection?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-963", "creation_timestamp": "2026-09-06T02:30:19.058117Z"}, {"uuid": "a827e080-a9c8-4ce8-ac2e-c76666c9f00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mut7ngorv72w", "content": "Daily IT Security Digest \u2014 2026-09-06\n# Daily IT Security Digest \u2014 2026-09-06\n\n**1. Citrix NetScaler Critical Auth Bypass Actively Exploited (CVE-2026-19490)**\nThreat actors are actively exploiting a critical authentication bypass in Citrix NetScaler ADC and Gateway appliances that allows", "creation_timestamp": "2026-09-06T05:02:00.772797Z"}, {"uuid": "0203b8c3-2fb4-44c2-a130-61f2e2774b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mutcpqnlqz2p", "content": "\ud83d\udd13 Citrix NetScaler : contournement d'authentification critique (CVE-2026-19490) d\u00e9sormais exploit\u00e9 dans la nature. https://www.bleepingcomputer.com/news/security/hackers-target-critical-citrix-netscaler-auth-bypass-in-attacks/", "creation_timestamp": "2026-09-06T05:56:59.955841Z"}, {"uuid": "3bc9197c-0378-4f66-b65e-e0d3b1406251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19174", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mutcydcswd2q", "content": "CVE-2026-19174 is trending. Hype score 7, currently #5 on cvemon.\n\nInteger overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19174", "creation_timestamp": "2026-09-06T06:01:47.653269Z"}, {"uuid": "b410f5a1-fef7-4438-8f8d-4705f09922d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mutozexru32p", "content": "\ud83d\udccc GitLab Releases Critical Security Updates for GraphQL API Vulnerability (CVE-2026-19478) https://www.cyberhub.blog/article/30817-gitlab-releases-critical-security-updates-for-graphql-api-vulnerability-cve-2026-19478", "creation_timestamp": "2026-09-06T09:37:08.078368Z"}, {"uuid": "8883f5eb-86dd-47cd-93b2-3fc9470021b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19490", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mutryfbzw42i", "content": "Citrix NetScaler Auth Bypass Now Exploited in Wild https://0daynews.com/articles/2026-09-05-citrix-netscaler-cve-2026-19490-exploited?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1072", "creation_timestamp": "2026-09-06T10:30:16.138279Z"}, {"uuid": "f0e3993e-3003-48de-98c3-a5aa9c737a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19858", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muu5rh4ejm2v", "content": "\ud83d\udfe0 CVE-2026-19858 - High (7.5)\n\nThe JetFormBuilder \u2014 Dynamic Blocks Form Builder WordPress plugin before 3.6.5.2 does not perfo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19858/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-06T14:01:08.926992Z"}, {"uuid": "794d6c9d-41ee-4375-8d88-87f1100816f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19633", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muuhrvsj4b2r", "content": "\ud83d\udfe0 CVE-2026-19633 - High (8.8)\n\nPostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19633/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-06T17:00:24.346903Z"}, {"uuid": "951147f5-6d54-4b03-8de5-2017e87fafa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19633", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cr3gxk6hh7vc3", "content": "CVE-2026-19633 - PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries\nCVE ID : CVE-2026-19633\n \n Published : Sept. 6, 2026, 4:16 p.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : PostgreSQL Anonymizer contains a vulnera...", "creation_timestamp": "2026-09-06T17:47:28.822294Z"}, {"uuid": "294445d9-17fb-43af-948b-335b5cce40e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19634", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4f6xrkmaqmrdu", "content": "CVE-2026-19634 - PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSON\nCVE ID : CVE-2026-19634\n \n Published : Sept. 6, 2026, 4:16 p.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : PostgreSQL Anonymizer contains a ...", "creation_timestamp": "2026-09-06T17:55:28.829951Z"}, {"uuid": "157ce5f7-1c46-42d5-b79e-62d81a0efb6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/xe964jSyuZ2TO2raaooyZjlU2hWxY5G_P4QQhWoWmWghG0E", "content": "", "creation_timestamp": "2026-09-06T18:00:05.722471Z"}, {"uuid": "01f399e3-31c1-45be-81e6-c86d0fe795ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19490", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3muus7ywiv62i", "content": "CVE-2026-19490: Citrix NetScaler auth bypass, now under active attack. Patch window was 15 days. Unpatched edge NetScaler is an entry point, not a backlog item.\n\n#ThreatIntel #ICS\nhttps://threat-intelligence.redeyesecurity.com/blog/citrix-netscaler-cve-2026-19490-auth-bypass-exploited-2026", "creation_timestamp": "2026-09-06T20:07:11.365491Z"}, {"uuid": "a60e49cf-d141-4bcb-8e73-ad43c6f937f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19633", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muusumt7pw2n", "content": "PostgreSQL Anonymizer 3.1.4\u672a\u6e80\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u304a\u3044\u3066\u3001\u6a29\u9650\u306e\u306a\u3044\u30e6\u30fc\u30b6\u30fc\u304c\u4efb\u610f\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\nCVE-2026-19633 CVSS 8.8 | HIGH", "creation_timestamp": "2026-09-06T20:18:43.016902Z"}, {"uuid": "66f77277-a427-498f-919e-29845d611a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19490", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3muva4hrzqg2c", "content": "Citrix NetScaler Auth Bypass Now Exploited in Wild \u2014 Attackers are actively targeting CVE-2026-19490, a critical auth bypass\u2026 https://0daynews.com/articles/2026-09-05-citrix-netscaler-cve-2026-19490-exploited?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1073", "creation_timestamp": "2026-09-07T00:15:44.591993Z"}, {"uuid": "6b1fdcab-387a-4b31-b0d4-53a4a3238e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/xe964jSyuZ2TO2raaooyZjlU2hWxY5G_P4QQhWoWmWghG0E", "content": "", "creation_timestamp": "2026-09-07T01:00:07.704424Z"}, {"uuid": "d0ad2d6b-0286-432c-a07e-423f76e6d7b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19490", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3muvzia33vk2c", "content": "\ud83d\udcf0 Celah Kritis Citrix NetScaler Kini Mulai Dieksploitasi dalam Serangan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/07/citrix-netscaler-cve-2026-19490-authentication-bypass/\n\n#citrix #cybersecurity #keamananSiber #netscaler #ransomware #teknologi #vpn #vulnerability #zero-day", "creation_timestamp": "2026-09-07T07:49:42.790653Z"}, {"uuid": "952b8c53-7ca2-44d7-b805-3ea093ef2ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muwlkqnlla2n", "content": "Hackers are actively exploiting CVE-2026-19490, a critical authentication bypass vulnerability in Citrix NetScaler. Update your systems immediately.\n\n#CitrixNetScaler #CyberSecurity #Vulnerability #NetworkSecurity #Infosec", "creation_timestamp": "2026-09-07T13:13:14.800167Z"}, {"uuid": "65f95acb-2e71-43db-96c8-fdd2a1e8242a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19843", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d57vcmzgy5tyw", "content": "CVE-2026-19843 - 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor\nCVE ID : CVE-2026-19843\n \n Published : Sept. 7, 2026, 2:14 p.m. | 39\u00a0minutes ago\n \n Description : A flaw was found in 389-ds-base. The Cockpit 389 Console's LD...", "creation_timestamp": "2026-09-07T15:18:37.773372Z"}, {"uuid": "036daeb6-2091-499d-8497-8538e2e0a73b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0318", "content": "Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway. De kwetsbaarheid met kenmerk CVE-2026-19489 betreft een memory overflow in NetScaler ADC en NetScaler Gateway, wanneer de producten zijn geconfigureerd als SIP ALG binnen een Large Scale NAT (LSN) groep. Deze fout in de geheugenallocatie kan leiden tot onvoorspelbaar gedrag of een denial of service, waardoor de normale werking van het systeem verstoord kan worden.\n\nDe kwetsbaarheid met kenmerk CVE-2026-19490 maakt het voor een aanvaller mogelijk om via een alternatieve route de normale authenticatiemechanismen te omzeilen, om zodoende ongeautoriseerde toegang tot het systeem te verkrijgen. Om kwetsbaar te zijn moeten de producten in combinatie met specifieke versies geconfigureerd zijn als Gateway (VPN-virtuele server, ICA Proxy, CVPN, RDP Proxy), AAA virtual server of configureerd zijn als SAML Identity Provider. Dit laatste is geen gebruikelijke configuratie.\n\n**UPDATE**\n\nEr is Proof of Concept code beschikbaar voor CVE-2026-19490. Het NCSC acht het zeer waarschijnlijk dat op korte termijn misbruik zal plaatsvinden.", "creation_timestamp": "2026-09-07T16:00:41.080607Z"}, {"uuid": "106347d1-80bf-4329-afb5-287ab747b511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0318", "content": "Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway. De kwetsbaarheid met kenmerk CVE-2026-19489 betreft een memory overflow in NetScaler ADC en NetScaler Gateway, wanneer de producten zijn geconfigureerd als SIP ALG binnen een Large Scale NAT (LSN) groep. Deze fout in de geheugenallocatie kan leiden tot onvoorspelbaar gedrag of een denial of service, waardoor de normale werking van het systeem verstoord kan worden.\n\nDe kwetsbaarheid met kenmerk CVE-2026-19490 maakt het voor een aanvaller mogelijk om via een alternatieve route de normale authenticatiemechanismen te omzeilen, om zodoende ongeautoriseerde toegang tot het systeem te verkrijgen. Om kwetsbaar te zijn moeten de producten in combinatie met specifieke versies geconfigureerd zijn als Gateway (VPN-virtuele server, ICA Proxy, CVPN, RDP Proxy), AAA virtual server of configureerd zijn als SAML Identity Provider. Dit laatste is geen gebruikelijke configuratie.\n\n**UPDATE**\n\nEr is Proof of Concept code beschikbaar voor CVE-2026-19490. Het NCSC acht het zeer waarschijnlijk dat op korte termijn misbruik zal plaatsvinden.", "creation_timestamp": "2026-09-07T16:00:41.149132Z"}, {"uuid": "4867352b-0e86-4760-9727-5ec1bd4bb185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://t.me/true_secator/8586", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 (\u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439) \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 0-day \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-85046 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0442\u0438\u043f\u0430 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0432 Chrome. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0442\u0430\u043b\u044c\u044f\u043d\u0441\u043a\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0421\u0430\u043b\u044c\u0432\u0430\u0442\u043e\u0440\u0435 \u0413\u0443\u043b\u0438\u0446\u0438\u0435\u0439. \u042d\u0442\u043e \u0448\u0435\u0441\u0442\u043e\u0439 \u043d\u043e\u043b\u044c \u0432 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Citrix ADC \u0438 NetScaler Gateway.\n\nCVE-2026-19490 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. Previdian \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n3. \u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0434\u0432\u0435 0-day, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 MikroTik \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a SSH-\u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u0438\u0437 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0410\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438 CERT \u041f\u043e\u043b\u044c\u0448\u0438 \u0438 \u041b\u0430\u0442\u0432\u0438\u0438. \u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 MikroTik \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a.\n\n4. \u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0438\u0442 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u043d\u043e\u0432\u0443\u044e 0-day \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432 Adobe Commerce \u0438 Magento. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0444\u043e\u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c \u0432 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u0445.\n\nSansec \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0435\u0435, \u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435 \u043d\u0430\u0448\u043b\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a StyleSmuggler.\n\n5. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 N-able \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b N-central.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10 \u0438\u0437 10. N-able \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438.\n\n\u041f\u0440\u043e\u0434\u0443\u043a\u0442\u044b N-central \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043f\u0440\u043e\u0441\u043e\u043c \u0443 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0442\u0430\u043a\u0436\u0435 \u0441\u0442\u0430\u043b\u0438 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c 0-day \u0430\u0442\u0430\u043a\u0438.\n\n6. \u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Super Forms \u0434\u043b\u044f WordPress. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u0432 \u0438\u044e\u043b\u0435.\n\n7. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 ConnectWise \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f ScreenConnect, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u043e\u0431\u0435\u0449\u0430\u043b\u0430 \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u0442\u044c CVE \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0430\u0442\u0447 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n8. \u0418 \u0435\u0449\u0435 \u043f\u043e \u0418\u0418: \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043d\u043e\u0432\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c OpenAI GPT-6 Astra \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u041a \u0441\u0447\u0430\u0441\u0442\u044c\u044e, \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432 \u0441\u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435.", "creation_timestamp": "2026-09-07T20:00:05.433091Z"}, {"uuid": "dfab6918-d91f-46db-9196-1aedcedf3e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://t.me/true_secator/8586", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 (\u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439) \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 0-day \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-85046 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0442\u0438\u043f\u0430 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0432 Chrome. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0442\u0430\u043b\u044c\u044f\u043d\u0441\u043a\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0421\u0430\u043b\u044c\u0432\u0430\u0442\u043e\u0440\u0435 \u0413\u0443\u043b\u0438\u0446\u0438\u0435\u0439. \u042d\u0442\u043e \u0448\u0435\u0441\u0442\u043e\u0439 \u043d\u043e\u043b\u044c \u0432 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Citrix ADC \u0438 NetScaler Gateway.\n\nCVE-2026-19490 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. Previdian \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n3. \u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0434\u0432\u0435 0-day, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 MikroTik \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a SSH-\u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u0438\u0437 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0410\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438 CERT \u041f\u043e\u043b\u044c\u0448\u0438 \u0438 \u041b\u0430\u0442\u0432\u0438\u0438. \u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 MikroTik \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a.\n\n4. \u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0438\u0442 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u043d\u043e\u0432\u0443\u044e 0-day \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432 Adobe Commerce \u0438 Magento. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0444\u043e\u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c \u0432 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u0445.\n\nSansec \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0435\u0435, \u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435 \u043d\u0430\u0448\u043b\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a StyleSmuggler.\n\n5. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 N-able \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b N-central.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10 \u0438\u0437 10. N-able \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438.\n\n\u041f\u0440\u043e\u0434\u0443\u043a\u0442\u044b N-central \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043f\u0440\u043e\u0441\u043e\u043c \u0443 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0442\u0430\u043a\u0436\u0435 \u0441\u0442\u0430\u043b\u0438 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c 0-day \u0430\u0442\u0430\u043a\u0438.\n\n6. \u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Super Forms \u0434\u043b\u044f WordPress. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u0432 \u0438\u044e\u043b\u0435.\n\n7. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 ConnectWise \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f ScreenConnect, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u043e\u0431\u0435\u0449\u0430\u043b\u0430 \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u0442\u044c CVE \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0430\u0442\u0447 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n8. \u0418 \u0435\u0449\u0435 \u043f\u043e \u0418\u0418: \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043d\u043e\u0432\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c OpenAI GPT-6 Astra \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u041a \u0441\u0447\u0430\u0441\u0442\u044c\u044e, \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432 \u0441\u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435.", "creation_timestamp": "2026-09-08T00:00:27.239818Z"}, {"uuid": "a6da44a4-e5d3-4c03-a237-c4502ff8a8ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://t.me/pentestnotes/239", "content": "CVE-2026-19490 - Auth Bypass \u0432 Citrix NetScaler ADC / Gateway \ud83e\udd64\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVSS 9.3), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e. \u0423\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f (PoC).\n\n\u0420\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u043a\u0430\u043a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 AAA Virtual Server. \u0412 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0445 \u0431\u0438\u043b\u0434\u0430\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043b\u0438\u0447\u0438\u0435 SAML Action.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 SAML HTTP-Redirect binding \u043d\u0430 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /cgi/samlauth, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c unsigned SAMLResponse \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0430\u043b\u0438\u0434\u043d\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e (NSC_AAAC / NSC_TASS).\n\nShodan - 34000 results\n\nFOFA - 1500 results\n\nCensys - 9600 results\n\n\ud83d\udcab @pentestnotes", "creation_timestamp": "2026-09-08T04:00:03.558657Z"}, {"uuid": "db1b994f-2c1b-4871-b3b9-67db8f81e707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "seen", "source": "Telegram/lZfjYaBr4tga3NkXz93XQ8NPzbaiuslN6Z2iWJCbEwZtCw", "content": "", "creation_timestamp": "2026-09-08T04:00:03.687633Z"}, {"uuid": "17f15aa2-0041-4774-b0ac-4404be4a01df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0318", "content": "Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway. De kwetsbaarheid met kenmerk CVE-2026-19489 betreft een memory overflow in NetScaler ADC en NetScaler Gateway, wanneer de producten zijn geconfigureerd als SIP ALG binnen een Large Scale NAT (LSN) groep. Deze fout in de geheugenallocatie kan leiden tot onvoorspelbaar gedrag of een denial of service, waardoor de normale werking van het systeem verstoord kan worden.\n\nDe kwetsbaarheid met kenmerk CVE-2026-19490 maakt het voor een aanvaller mogelijk om via een alternatieve route de normale authenticatiemechanismen te omzeilen, om zodoende ongeautoriseerde toegang tot het systeem te verkrijgen. Om kwetsbaar te zijn moeten de producten in combinatie met specifieke versies geconfigureerd zijn als Gateway (VPN-virtuele server, ICA Proxy, CVPN, RDP Proxy), AAA virtual server of configureerd zijn als SAML Identity Provider. Dit laatste is geen gebruikelijke configuratie.\n\n**UPDATE**\n\nEr is Proof of Concept code beschikbaar voor CVE-2026-19490. Het NCSC acht het zeer waarschijnlijk dat op korte termijn misbruik zal plaatsvinden.", "creation_timestamp": "2026-09-08T01:00:43.942859Z"}, {"uuid": "27f7c8c6-d6b4-462d-bdf8-bcdf9c29b165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0318", "content": "Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway. De kwetsbaarheid met kenmerk CVE-2026-19489 betreft een memory overflow in NetScaler ADC en NetScaler Gateway, wanneer de producten zijn geconfigureerd als SIP ALG binnen een Large Scale NAT (LSN) groep. Deze fout in de geheugenallocatie kan leiden tot onvoorspelbaar gedrag of een denial of service, waardoor de normale werking van het systeem verstoord kan worden.\n\nDe kwetsbaarheid met kenmerk CVE-2026-19490 maakt het voor een aanvaller mogelijk om via een alternatieve route de normale authenticatiemechanismen te omzeilen, om zodoende ongeautoriseerde toegang tot het systeem te verkrijgen. Om kwetsbaar te zijn moeten de producten in combinatie met specifieke versies geconfigureerd zijn als Gateway (VPN-virtuele server, ICA Proxy, CVPN, RDP Proxy), AAA virtual server of configureerd zijn als SAML Identity Provider. Dit laatste is geen gebruikelijke configuratie.\n\n**UPDATE**\n\nEr is Proof of Concept code beschikbaar voor CVE-2026-19490. Het NCSC acht het zeer waarschijnlijk dat op korte termijn misbruik zal plaatsvinden.", "creation_timestamp": "2026-09-08T01:00:44.003830Z"}, {"uuid": "ef5bcad0-537c-41b9-ab4f-2b7ef9dccff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19397", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muy7rzomjt2l", "content": "An ASUS vulnerability (CVE-2026-19397) lets a nearby attacker take over a host, while an Armoury Crate flaw leaks NTLM hashes. Update now.\n\n#ASUS #ArmouryCrate #ControlCenterExpress #CVE202619397 #NTLM #PrivilegeEscalation #PatchNow #Infosec", "creation_timestamp": "2026-09-08T04:47:53.907328Z"}, {"uuid": "a350a7eb-5323-4178-88dc-10a5b9560e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3muyfpls77p25", "content": "Here we go again with NetScaler ADC and Gateway users being delightfully targeted by actively exploited auth bypass bugs CVE-2026-19490 and CVE-2026-19489. Apparently, authenticating properly is just an unnecessary nuisance for attackers hoping to compromise your prized systems. ...\n\nRead full story", "creation_timestamp": "2026-09-08T06:33:54.594231Z"}, {"uuid": "f9e13416-2739-4d04-8689-b4d0d550eb93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19489", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3muyfpls77p25", "content": "Here we go again with NetScaler ADC and Gateway users being delightfully targeted by actively exploited auth bypass bugs CVE-2026-19490 and CVE-2026-19489. Apparently, authenticating properly is just an unnecessary nuisance for attackers hoping to compromise your prized systems. ...\n\nRead full story", "creation_timestamp": "2026-09-08T06:33:54.661201Z"}, {"uuid": "6fa89ebe-9a99-48d4-b3b7-84d619da2c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3muyzmvu7n22x", "content": "Citrix NetScaler auth bypass flaw (CVE-2026-19490) is now under active attack. If you're running NetScaler, prioritize patching this\u2026\n\nhttps://www.bleepingcomputer.com/news/security/hackers-target-critical-citrix-netscaler-auth-bypass-in-attacks/\n\n#cybersecurity #infosec", "creation_timestamp": "2026-09-08T12:30:18.992286Z"}, {"uuid": "a5a07ba4-bad9-4d86-b3d5-af095a657000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "Telegram/yuT2NAUY-P_iQf71KZdH7THqaqJP0LaiU2b3FS1yHkoYVfk", "content": "", "creation_timestamp": "2026-09-08T12:00:04.323575Z"}, {"uuid": "0042f038-0277-4871-9074-900d26469d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19931", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzfvwoeu62j", "content": "CVE-2026-19931 - curl\nThe libcurl library can mistakenly reuse a web connection that was authenticated for one user when another user makes a request without providing credentials. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#curl #bellsoft #UbuntuPro1404LTS #CVE #infosec", "creation_timestamp": "2026-09-08T16:10:06.986557Z"}, {"uuid": "a1983247-6ddc-45fc-9143-4fca949c869f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19626", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/tenable_sc_report_charting_rce_cve_2026_19626.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"h00die\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Tenable Security Center prior to 6.9.0 allows an authenticated,\\n          non-administrative user to achieve code execution as the web service\\n          account (tns) through report generation.\\n\\n          A report definition's inline style is discarded at render (components\\n          rehydrate styles from the Style tables by styleID), so the payload is\\n          delivered through a label instead: a group created with the name\\n          `{=system('CMD')}` is accepted verbatim and becomes a pie sector\\n          label via a user/sumgroup query; `{label}` substitution runs BEFORE\\n          the eval loop, so the payload lands inside the format string and\\n          fires at chart render. Regular org users can create both; report\\n          launch refuses ROLE_ADMIN - this bug class is explicitly non-admin.\\n\\n          Payload constraints: the {=...} regex is non-greedy to the first\\n          closing brace, so the expression may not contain one, and PHP string\\n          interpolation applies; this module therefore injects only\\n          `curl :|bash`\\n          (a bare host:port GETs / and bash reads the served script from\\n          stdin). The served script itself has no such limits, which the\\n          Linux Dropper target exploits with a fetch payload\\n          (cmd/linux/http/...) that downloads and execs a full native payload\\n          (e.g. x64 meterpreter) from the payload adapter's own listener on\\n          FETCH_SRVPORT.\\n\\n          Report definitions are closed to administrators (creation returns\\n          error 163); supply credentials for a regular org user.\\n\\n          Tested against SecurityCenter 6.7.2-14 on RHEL9.\", \"disclosure_date\": \"2026-08-13\", \"fullname\": \"exploit/linux/http/tenable_sc_report_charting_rce_cve_2026_19626\", \"is_install_path\": true, \"mod_time\": \"2026-08-25 09:35:26 +0000\", \"name\": \"Tenable Security Center Report Charting RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/tenable_sc_report_charting_rce_cve_2026_19626.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/tenable_sc_report_charting_rce_cve_2026_19626\", \"references\": [\"URL-https://www.tenable.com/security/tns-2026-22\", \"CVE-2026-19626\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:57.902691Z"}, {"uuid": "1d06e7ed-2c80-402b-bbd8-b54e2eec3016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19681", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/tenable_sc_auditfile_cmdinject_cve_2026_19681.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"h00die\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Tenable Security Center prior to 6.9.0 allows an authenticated user to\\n          achieve command execution as the web service account (tns) via the SCAP\\n          audit file upload flow.\\n\\n          Filesystem::saveTmp() builds staged upload filenames from the raw\\n          client-supplied `context` form parameter (tempnam prefix), which is not\\n          charset-validated. Referencing that staged file in a\\n          POST /rest/auditFile (type=scapLinux, version=1.2) request reaches\\n          AuditFileLib::addSCAPTailoringFile(), where the zip repack command\\n          interpolates the derived path unescaped:\\n\\n          exec(\\\"{$CommandZIP} -9Tj $tmpZipFile $newTailoringFilenameEsc\\\");\\n\\n          basename() strips '/' but not shell metacharacters, so a context like\\n          `p;CMD;` executes CMD through /bin/sh.\\n\\n          Constraints (measured on 6.7.2): the staged-name prefix survives only\\n          ~50 characters of context and may not contain '/' (saveTmp() applies\\n          basename()). This module therefore serves the payload over HTTP and\\n          injects only `curl${IFS}:|bash` (a bare host:port\\n          GETs / and bash reads the served script from stdin). The served script\\n          itself has no such limits, which the Linux Dropper target exploits\\n          with a fetch payload (cmd/linux/http/...) that downloads and execs a\\n          full native payload (e.g. x64 meterpreter) from the payload adapter's\\n          own listener on FETCH_SRVPORT.\\n\\n          Tested against SecurityCenter 6.7.2-14 on RHEL9.\", \"disclosure_date\": \"2026-08-13\", \"fullname\": \"exploit/linux/http/tenable_sc_auditfile_cmdinject_cve_2026_19681\", \"is_install_path\": true, \"mod_time\": \"2026-08-24 14:35:43 +0000\", \"name\": \"Tenable Security Center SCAP Audit File Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/tenable_sc_auditfile_cmdinject_cve_2026_19681.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/tenable_sc_auditfile_cmdinject_cve_2026_19681\", \"references\": [\"CVE-2026-19681\", \"URL-https://www.tenable.com/security/tns-2026-22\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:57.808639Z"}, {"uuid": "143e0126-6ea8-4858-81a2-ca7de3300115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19233", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-15", "content": "", "creation_timestamp": "2026-09-08T16:45:09.518528Z"}, {"uuid": "8fc75d44-4ba0-4129-b7d1-61f8f6d6fd5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19874", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3muzj62qv3n2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19874: A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby dat\u2026\nCVSS 9.1 \u00b7 EPSS 0.7%\nhttps://beta.vulnsea.com/cve/CVE-2026-19874\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-08T17:08:20.949041Z"}, {"uuid": "10dd3032-657b-42ac-b86f-3f3c6e9dba52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19233", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3muz4y5gzph2t", "content": "\ud83d\udd17 CVE : CVE-2026-19233, CVE-2026-8044", "creation_timestamp": "2026-09-08T13:30:16.967220Z"}, {"uuid": "5fefb5e3-e971-46a5-8826-b8f28bcc7f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19232", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv223d3mah2j", "content": "\ud83d\udea8 CVE-2026-19232 \u2014 CVSS 9.9 CRITICAL\n\nAdobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbit...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19232\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:02.059914Z"}, {"uuid": "9e6c8e9b-4879-481d-9d88-bdc15a71e031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19780", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mv25a66bsz2d", "content": "CVE-2026-19780: RCE in Koha Puts Library Management Systems at Risk", "creation_timestamp": "2026-09-08T23:07:26.688391Z"}, {"uuid": "305e97f0-6b74-4526-abb0-d3f57006c068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "Telegram/yuT2NAUY-P_iQf71KZdH7THqaqJP0LaiU2b3FS1yHkoYVfk", "content": "", "creation_timestamp": "2026-09-09T00:00:29.722943Z"}, {"uuid": "5c4b1e33-8d5b-4421-b267-6ca6f1a07c8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19598", "type": "published-proof-of-concept", "source": "Telegram/lZfjYaBr4tga3NkXz93XQ8NPzbaiuslN6Z2iWJCbEwZtCw", "content": "", "creation_timestamp": "2026-09-09T00:00:42.050692Z"}, {"uuid": "0ed7c35c-993d-4b60-85e6-d94bae908076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "exploited", "source": "https://t.me/pentestnotes/239", "content": "CVE-2026-19490 - Auth Bypass \u0432 Citrix NetScaler ADC / Gateway \ud83e\udd64\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVSS 9.3), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e. \u0423\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f (PoC).\n\n\u0420\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u043a\u0430\u043a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 AAA Virtual Server. \u0412 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0445 \u0431\u0438\u043b\u0434\u0430\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043b\u0438\u0447\u0438\u0435 SAML Action.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 SAML HTTP-Redirect binding \u043d\u0430 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /cgi/samlauth, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c unsigned SAMLResponse \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u0430\u043b\u0438\u0434\u043d\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e (NSC_AAAC / NSC_TASS).\n\nShodan - 34000 results\n\nFOFA - 1500 results\n\nCensys - 9600 results\n\n\ud83d\udcab @pentestnotes", "creation_timestamp": "2026-09-09T00:00:42.210068Z"}, {"uuid": "f4b062b4-0ed3-4800-92b3-e41ad7a0e17d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19931", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mv2ac6g4qb25", "content": "Critical CVE landed today in libcurl:\n\nCVE-2026-19931. A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make us\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-19931", "creation_timestamp": "2026-09-09T00:02:14.780193Z"}, {"uuid": "3cc72fb6-82d8-4266-b076-7febc881f0a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19089", "type": "seen", "source": "Telegram/XaMpjSHHxdFz0-yBA1eCpiXEPPhqtMXTtWzkO6WcDw_ZaaU", "content": "", "creation_timestamp": "2026-09-09T04:00:24.910461Z"}, {"uuid": "92bfb525-ddfe-4f87-9b5a-71449b324ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19651", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mv2oyduhsy2t", "content": "IBM Quarkus 3.27.1-3.27.5, 3.33.1-3.33.3\u306f\u3001URL\u30d1\u30e9\u30e1\u30fc\u30bf\u64cd\u4f5c\u306b\u3088\u308b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u53ef\u80fd\u6027\u3002\nCVE-2026-19651 CVSS 7.4 | HIGH", "creation_timestamp": "2026-09-09T04:25:11.047959Z"}, {"uuid": "2849aab3-eaa9-4de7-8786-5e1f8f5ef60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19534", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv2ptclox42o", "content": "CVE-2026-19534: Node.js undici WebSocket client crashes entire process when server replies with an unrequested subprotocol, triggering an uncaught TypeError. CVSS 7.5. No patch yet\u2014upgrade or restrict WebSocket usage immediately. Details: https://www.valtersit.com/cve/CVE-2026-19", "creation_timestamp": "2026-09-09T04:40:16.515452Z"}, {"uuid": "2e7612c6-e860-4d30-ac27-0f0d37759a52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19534", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117239238826486425", "content": "CVE-2026-19534: Node.js undici WebSocket client crashes entire process when server replies with an unrequested subprotocol, triggering an uncaught TypeError. CVSS 7.5. No patch yet\u2014upgrade or restrict WebSocket usage immediately. Details: https://www.valtersit.com/cve/CVE-2026-19", "creation_timestamp": "2026-09-09T04:40:17.281077Z"}, {"uuid": "3f03068d-4b39-48e5-bd58-15b6a3b09885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "seen", "source": "https://t.me/GithubRedTeam/101638", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-AIOWPM-CVE-2026-19949\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 686f6c61\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-08 09:57:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <= 7.109 via regex de replace_table_values. Laboratorio Docker + payload derivado (leak de ai1wm_secret_key por REST anonima) + RCE con importacion anonima.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T05:00:05.492194Z"}, {"uuid": "77d4cac2-a4f6-4cf1-8e4f-791f6bb08156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://t.me/Russian_OSINT/7875", "content": "\u041a\u0430\u043d\u0430\u043b \ud83d\udd28SecAtor \u043f\u0438\u0448\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435:\n\n\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 (\u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439) \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 0-day \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-85046 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0442\u0438\u043f\u0430 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0432 Chrome. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0442\u0430\u043b\u044c\u044f\u043d\u0441\u043a\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0421\u0430\u043b\u044c\u0432\u0430\u0442\u043e\u0440\u0435 \u0413\u0443\u043b\u0438\u0446\u0438\u0435\u0439. \u042d\u0442\u043e \u0448\u0435\u0441\u0442\u043e\u0439 \u043d\u043e\u043b\u044c \u0432 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Citrix ADC \u0438 NetScaler Gateway.\n\nCVE-2026-19490 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. Previdian \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n3. \u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0434\u0432\u0435 0-day, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 MikroTik \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a SSH-\u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u0438\u0437 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0410\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438 CERT \u041f\u043e\u043b\u044c\u0448\u0438 \u0438 \u041b\u0430\u0442\u0432\u0438\u0438. \u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 MikroTik \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a.\n\n4. \u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0438\u0442 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u043d\u043e\u0432\u0443\u044e 0-day \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432 Adobe Commerce \u0438 Magento. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0444\u043e\u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c \u0432 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u0445.\n\nSansec \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0435\u0435, \u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435 \u043d\u0430\u0448\u043b\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a StyleSmuggler.\n\n5. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 N-able \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b N-central.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10 \u0438\u0437 10. N-able \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438.\n\n\u041f\u0440\u043e\u0434\u0443\u043a\u0442\u044b N-central \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043f\u0440\u043e\u0441\u043e\u043c \u0443 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0442\u0430\u043a\u0436\u0435 \u0441\u0442\u0430\u043b\u0438 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c 0-day \u0430\u0442\u0430\u043a\u0438.\n\n6. \u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Super Forms \u0434\u043b\u044f WordPress. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u0432 \u0438\u044e\u043b\u0435.\n\n7. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 ConnectWise \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f ScreenConnect, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u043e\u0431\u0435\u0449\u0430\u043b\u0430 \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u0442\u044c CVE \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0430\u0442\u0447 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n8. \u0418 \u0435\u0449\u0435 \u043f\u043e \u0418\u0418: \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043d\u043e\u0432\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c OpenAI GPT-6 Astra \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u041a \u0441\u0447\u0430\u0441\u0442\u044c\u044e, \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432 \u0441\u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435.", "creation_timestamp": "2026-09-09T08:00:05.708291Z"}, {"uuid": "80c19ad0-7588-4b33-a5de-c5572f60dcb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19089", "type": "seen", "source": "Telegram/S_xvhEYkSfwY-06pFLtOx1--AsX0A_rgUo_9aHBHntliw8A", "content": "", "creation_timestamp": "2026-09-09T10:00:06.046743Z"}, {"uuid": "d545764c-2516-43a3-8aed-b7cd4a266dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19232", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3htw4ckn2y", "content": "CVE-2026-19232 - adobe experience manager as a cloud service\nAdobe Experience Manager can be tricked into giving a low\u2011level attacker higher privileges, allowing them to run code as the logged\u2011in user. This can happen\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-09-09T11:50:05.744138Z"}, {"uuid": "cca459af-e064-4d98-ae87-ae88688a640d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "MISP/b0758cd5-59ee-4799-a0c5-1276d7f06066", "content": "", "creation_timestamp": "2026-09-09T12:15:02.059837Z"}, {"uuid": "66fb69a9-2518-4f0e-a579-c2774cf0ac03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19233", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/akfzmffcqxpyo", "content": "CVE-2026-19233 - Server-Side Request Forgery in Web Server\nCVE ID : CVE-2026-19233\n \n Published : Sept. 9, 2026, 4:29 p.m. | 30\u00a0minutes ago\n \n Description : CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and dis...", "creation_timestamp": "2026-09-09T17:22:50.876586Z"}, {"uuid": "7d729632-dcde-4320-ab5b-8858ec2a91f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19298", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mv44w3p7pu2p", "content": "\ud83d\udccc CVE-2026-19298 - IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to execute arbitrary code due to an authorization bypass in the flow... https://www.cyberhub.blog/cves/CVE-2026-19298", "creation_timestamp": "2026-09-09T18:07:07.461479Z"}, {"uuid": "3ba8cdf8-4594-42a4-a04e-b00c3de143c5", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/29c4e748-68a3-4760-9212-bdb34a5a73ac", "content": "", "creation_timestamp": "2026-09-09T20:00:02.165258Z"}, {"uuid": "06024b74-34f8-4786-9433-ca8f026cf01d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv4dlq7rg52g", "content": "~Cisa~\nCISA added four actively exploited Fortinet, Citrix, Chromium, and Cisco vulnerabilities to its KEV Catalog.\n-\nIOCs: CVE-2025-25249, CVE-2026-19490, CVE-2026-87491\n-\n#CVE #Cybersecurity #ThreatIntel", "creation_timestamp": "2026-09-09T20:06:36.634649Z"}, {"uuid": "7bd81b34-c5d3-4ac1-96de-3676c8d86b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19305", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mv4dmnqonv2e", "content": "\ud83d\udccc CVE-2026-19305 - IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. https://www.cyberhub.blog/cves/CVE-2026-19305", "creation_timestamp": "2026-09-09T20:07:07.097358Z"}, {"uuid": "4e1ccc20-38af-4461-9844-56dced72e278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv4gtqxuxt2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 thr\u2026\nCVSS 9.3 \u00b7 EPSS 3.4% \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-09T21:04:46.312105Z"}, {"uuid": "f026685c-3788-4c4d-bb0c-7b0f37021235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv4kbe2hsn2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.3 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-09T22:06:04.098961Z"}, {"uuid": "857fbf97-e259-41a0-b384-15ac99882354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mv4lxuj64j2v", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-19490: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-19490", "creation_timestamp": "2026-09-09T22:36:33.227388Z"}, {"uuid": "6a3cb9ac-104e-4b3d-ae45-911bff381278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19303", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mv4nojtopj2r", "content": "\ud83d\udccc CVE-2026-19303 - IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files or directories due to improper limit... https://www.cyberhub.blog/cves/CVE-2026-19303", "creation_timestamp": "2026-09-09T23:07:07.946110Z"}, {"uuid": "26bfd12d-edf5-47b0-80fe-108ca3055788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv4non5lnt2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.3 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-09T23:07:10.752775Z"}, {"uuid": "0dee5880-a50a-4004-8886-1cccdf18c8a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19089", "type": "published-proof-of-concept", "source": "Telegram/S_xvhEYkSfwY-06pFLtOx1--AsX0A_rgUo_9aHBHntliw8A", "content": "", "creation_timestamp": "2026-09-10T00:00:44.959494Z"}, {"uuid": "1257f6a4-b5c1-483d-ab2c-742bad774d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://t.me/Russian_OSINT/7875", "content": "\u041a\u0430\u043d\u0430\u043b \ud83d\udd28SecAtor \u043f\u0438\u0448\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435:\n\n\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 (\u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439) \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 0-day \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-85046 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0442\u0438\u043f\u0430 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0432 Chrome. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0442\u0430\u043b\u044c\u044f\u043d\u0441\u043a\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0421\u0430\u043b\u044c\u0432\u0430\u0442\u043e\u0440\u0435 \u0413\u0443\u043b\u0438\u0446\u0438\u0435\u0439. \u042d\u0442\u043e \u0448\u0435\u0441\u0442\u043e\u0439 \u043d\u043e\u043b\u044c \u0432 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Citrix ADC \u0438 NetScaler Gateway.\n\nCVE-2026-19490 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. Previdian \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n3. \u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0434\u0432\u0435 0-day, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 MikroTik \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e\u0441\u0442\u0443\u043f \u043a SSH-\u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u0438\u0437 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439. \u0410\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438 CERT \u041f\u043e\u043b\u044c\u0448\u0438 \u0438 \u041b\u0430\u0442\u0432\u0438\u0438. \u0412 \u0447\u0435\u0442\u0432\u0435\u0440\u0433 MikroTik \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u044d\u0442\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a.\n\n4. \u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0438\u0442 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u043d\u043e\u0432\u0443\u044e 0-day \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432 Adobe Commerce \u0438 Magento. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0444\u043e\u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c \u0432 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u0445.\n\nSansec \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0435\u0435, \u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435 \u043d\u0430\u0448\u043b\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a StyleSmuggler.\n\n5. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 N-able \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b N-central.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10 \u0438\u0437 10. N-able \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438.\n\n\u041f\u0440\u043e\u0434\u0443\u043a\u0442\u044b N-central \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043f\u0440\u043e\u0441\u043e\u043c \u0443 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0442\u0430\u043a\u0436\u0435 \u0441\u0442\u0430\u043b\u0438 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c 0-day \u0430\u0442\u0430\u043a\u0438.\n\n6. \u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Super Forms \u0434\u043b\u044f WordPress. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u0432 \u0438\u044e\u043b\u0435.\n\n7. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 ConnectWise \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f ScreenConnect, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u043e\u0431\u0435\u0449\u0430\u043b\u0430 \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u0442\u044c CVE \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0430\u0442\u0447 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n8. \u0418 \u0435\u0449\u0435 \u043f\u043e \u0418\u0418: \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043d\u043e\u0432\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c OpenAI GPT-6 Astra \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u041a \u0441\u0447\u0430\u0441\u0442\u044c\u044e, \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432 \u0441\u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435.", "creation_timestamp": "2026-09-10T00:00:47.983995Z"}, {"uuid": "a64d748d-1453-4cd6-ae00-fd1cf62760c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19949", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101638", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a POC-AIOWPM-CVE-2026-19949\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 686f6c61\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-08 09:57:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC funcional de CVE-2026-19949 (AIOWPM): SQLi de segundo orden no autenticada en All-in-One WP Migration <= 7.109 via regex de replace_table_values. Laboratorio Docker + payload derivado (leak de ai1wm_secret_key por REST anonima) + RCE con importacion anonima.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:50.662488Z"}, {"uuid": "a125d1a7-ce65-4773-b7ae-8562489de86d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19089", "type": "published-proof-of-concept", "source": "Telegram/XaMpjSHHxdFz0-yBA1eCpiXEPPhqtMXTtWzkO6WcDw_ZaaU", "content": "", "creation_timestamp": "2026-09-10T00:00:53.489432Z"}, {"uuid": "09c0f689-fece-49c7-95c0-7e1cd308e959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "MISP/b0758cd5-59ee-4799-a0c5-1276d7f06066", "content": "", "creation_timestamp": "2026-09-10T00:15:02.843588Z"}, {"uuid": "1cd11380-e4dc-4eef-bf6f-8363fe81410c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv4ukjy3qm2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.3 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-10T01:10:09.686334Z"}, {"uuid": "ac11f364-b197-4163-9e0e-007fb84f5236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19583", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/d4p7no2ywgtvf", "content": "CVE-2026-19583 - Velociraptor Required Permissions bypass by using client monitoring queries\nCVE ID : CVE-2026-19583\n \n Published : Sept. 10, 2026, 3:16 a.m. | 20\u00a0minutes ago\n \n Description : Velociraptor allows some sensitive artifacts to be gated by additional permissions. F...", "creation_timestamp": "2026-09-10T03:40:52.045330Z"}, {"uuid": "a270bff9-b076-4305-b1e7-4f440c2a66f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hiq56e3pwylgs", "content": "CVE-2026-19584 - Velociraptor VQL injection during notebook restore from backup\nCVE ID : CVE-2026-19584\n \n Published : Sept. 10, 2026, 3:17 a.m. | 20\u00a0minutes ago\n \n Description : Velociraptor allows for the creation of notebook backups in its default enabled daily backup featu...", "creation_timestamp": "2026-09-10T04:00:51.799432Z"}, {"uuid": "a4a34580-15c5-45d4-9005-0f01178463bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19583", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv56hy7chv2j", "content": "\ud83d\udea8 CVE-2026-19583 \u2014 CVSS 9.9 CRITICAL\n\nVelociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19583\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-10T04:07:40.976894Z"}, {"uuid": "72579acb-7862-42de-93fd-4162865b0fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv56ttxsj52t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.3 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-10T04:14:19.440422Z"}, {"uuid": "7dcae192-f8a4-4c96-8b81-d49268762654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19583", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117244862440874857", "content": "CVE-2026-19583: CRITICAL vuln in Rapid7 Velociraptor (<0.77.2) allows users w/ artifact scheduling rights to execute privileged artifacts like Linux.Sys.BashShell \u2014 risking full compromise. Restrict permissions, monitor activity. https://radar.offseq.com/threat/cve-2026-19583-cwe-732-incorrect-permission-assignment-for-critical-resource-in-rapid7-velociraptor-f6df828b1d19e549 #OffSeq #Vuln #Infosec", "creation_timestamp": "2026-09-10T04:30:25.391520Z"}, {"uuid": "d47ea9f8-6517-48ff-8faf-fb436724dbe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19583", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv57qojtw424", "content": "Rapid7 Velociraptor (<0.77.2) hit by CRITICAL CVE-2026-19583. Users with monitoring artifact permissions can schedule privileged BashShell, risking full system compromise. Restrict user permissions & monitor activity. https://radar.offseq.com/threat/cve-2026-19583-cwe-732-incorrect-permission-ass...", "creation_timestamp": "2026-09-10T04:30:28.158599Z"}, {"uuid": "154f4ed5-6563-497d-87ae-eb5e40845c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/citrix-products-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T04:45:03.552534Z"}, {"uuid": "8d9b8b54-9ad2-4157-8cc4-1b6b8d51d282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19584", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv5etsdzvx2z", "content": "\ud83d\udfe0 CVE-2026-19584 - High (7.7)\n\nVelociraptor allows for the creation of notebook backups in its default enabled daily backup feat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19584/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-10T06:01:40.985799Z"}, {"uuid": "168f5de2-964c-4071-9d68-ea6f7d9ae094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mv5ghl6bft2o", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-19490: \u26a0\ufe0f CVE-2026-19490: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 3.4%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-19490-vulnerability-in-netscaler-adc-and-netscaler", "creation_timestamp": "2026-09-10T06:30:38.415300Z"}, {"uuid": "270fd5f4-f132-4412-b9c9-b51ceeb1510b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19583", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv5j7yvjzx2w", "content": "CVE-2026-19583 - velociraptor\nIn Velociraptor, the monitoring feature does not enforce the same permission checks as other tasks. This means someone who can set up a monitoring task could also trigger\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#velociraptor #rapid7 #CVE #infosec", "creation_timestamp": "2026-09-10T07:20:04.771875Z"}, {"uuid": "600e2a6c-d4cd-4ff6-a13e-bd6fc48de63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19232", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mv5puj5sca26", "content": "CVE-2026-19232 (CRITICAL) CVSS 9.9: https://experiencedigest.org/2026/09/10/cve-critical-cvss.html", "creation_timestamp": "2026-09-10T09:18:55.231538Z"}, {"uuid": "2d850d6f-c7af-4cd3-96a0-ed4feae6dc6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mv62ros7xl2a", "content": "NetScaler\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u653b\u6483\u3067\u60aa\u7528\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA)\u306f\u6c34\u66dc\u65e5\u3001\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304cNetScaler\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u653b\u6483\u306b\u60aa\u7528\u3057\u3066\u3044\u308b\u3068\u8b66\u544a\u3057\u307e\u3057\u305f\u3002 CVE-2026-19490\uff08CVSS\u30b9\u30b3\u30a29.3)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\uff08SSL VPN\u3001ICA Proxy\u3001CVPN\u3001RDP Proxy)", "creation_timestamp": "2026-09-10T12:34:11.800824Z"}, {"uuid": "5666b1af-7128-4379-8c2c-8fcf6e57da62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv62xlkqx42p", "content": "Threat actors are exploiting a critical NetScaler vulnerability (CVE-2026-19490), prompting CISA to add it to KEV and urge emergency patching within three days.\n", "creation_timestamp": "2026-09-10T12:37:30.382501Z"}, {"uuid": "f8f99e53-a014-4dd9-b50f-5f4b763b4d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mv632dwo2k22", "content": "Threat actors are exploiting a critical NetScaler vulnerability (CVE-2026-19490), prompting CISA to add it to KEV and urge emergency patching within three days.\n", "creation_timestamp": "2026-09-10T12:39:02.732623Z"}, {"uuid": "3d012544-7238-4880-b8bc-c45f7cdabe46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://www.securityweek.com/critical-netscaler-vulnerability-exploited-in-attacks/", "content": "Tracked as CVE-2026-19490, the authentication bypass flaw has been exploited in the wild since at least September 3.\n\nThe post Critical NetScaler Vulnerability Exploited in Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-10T13:00:41.256368Z"}, {"uuid": "21bd5f51-4349-4cf6-a7eb-7a5c82f3dc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv653uquxl2l", "content": "Citrix NetScaler CVE-2026-19490 is being exploited in the wild \u2014 attackers can bypass authentication and take control. Apply vendor fixes now; restrict management access if you cannot. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-10T13:16:07.704754Z"}, {"uuid": "6cc51689-736d-4c93-a609-54206c0123f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://t.me/information_security_channel/55887", "content": "Critical NetScaler Vulnerability Exploited in Attacks\nhttps://www.securityweek.com/critical-netscaler-vulnerability-exploited-in-attacks/\n\nTracked as CVE-2026-19490, the authentication bypass flaw has been exploited in the wild since at least September 3.\nThe post Critical NetScaler Vulnerability Exploited in Attacks (https://www.securityweek.com/critical-netscaler-vulnerability-exploited-in-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-10T14:00:04.665384Z"}, {"uuid": "8e2e32fa-647c-47d7-b53d-f264d3619ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19397", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mv6a32hvfs2y", "content": "CVE-2026-19397: Unauthenticated RCE in ASUS Control Center Express Agent", "creation_timestamp": "2026-09-10T14:08:55.226970Z"}, {"uuid": "56620289-36bf-46f2-bfcd-508eac37d237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19646", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4o6wl3fmdzqop", "content": "CVE-2026-19646 - Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent\nCVE ID : CVE-2026-19646\n \n Published : Sept. 10, 2026, 10:02 p.m. | 27\u00a0minutes ago\n \n Description : IBM Common Licensing Agent 9.0, Agent ...", "creation_timestamp": "2026-09-10T23:00:56.183227Z"}, {"uuid": "2c1d55cc-2003-4f58-af97-bb58d3cad28c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19646", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv76umzkxj2j", "content": "CVE-2026-19646 - common licensing\nThe IBM License Key Server Administration and Reporting Tool and its agent can be fooled into sending users to a web address of an attacker\u2019s choosing because they don\u2019t\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#commonlicensing #ibm #CVE #infosec", "creation_timestamp": "2026-09-10T23:20:05.462745Z"}, {"uuid": "95be51cb-5c30-4523-bcc5-5cdc86c84360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19646", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117249463814841150", "content": "CVE-2026-19646 (CRITICAL, CVSS 9.1) affects IBM Common Licensing 9.0.x & ART 9.0. Improper Host header validation enables remote redirection to attacker domains. No patch yet \u2014 monitor IBM guidance. https://radar.offseq.com/threat/cve-2026-19646-cwe-1149-sei-cert-oracle-secure-coding-standard-for-java-guidelines-15-platform-9a01f253f72c9218 #OffSeq #Vuln #IBM #InfoSec", "creation_timestamp": "2026-09-11T00:00:37.215348Z"}, {"uuid": "6ada3650-c890-4702-8d6a-1b5de85ac12c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "exploited", "source": "https://t.me/information_security_channel/55887", "content": "Critical NetScaler Vulnerability Exploited in Attacks\nhttps://www.securityweek.com/critical-netscaler-vulnerability-exploited-in-attacks/\n\nTracked as CVE-2026-19490, the authentication bypass flaw has been exploited in the wild since at least September 3.\nThe post Critical NetScaler Vulnerability Exploited in Attacks (https://www.securityweek.com/critical-netscaler-vulnerability-exploited-in-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-11T00:00:36.100255Z"}, {"uuid": "0269ed36-67b9-4f2a-ac34-a9e0abe45208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19646", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv7b55fkgf2a", "content": "IBM Common Licensing (9.0 \u2013 9.0.0.2 & ART 9.0) faces a critical CVE-2026-19646 flaw: remote attackers can redirect users via Host header abuse. Patch status unconfirmed \u2014 check IBM advisories for updates. https://radar.offseq.com/threat/cve-2026-19646-cwe-1149-sei-cert-oracle-secure-coding-standa...", "creation_timestamp": "2026-09-11T00:00:38.946748Z"}, {"uuid": "d6f66d89-9d1d-4091-94c0-525f4443b722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19646", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv7bjo7ut52j", "content": "\ud83d\udea8 CVE-2026-19646 \u2014 CVSS 9.1 CRITICAL\n\nIBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19646\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T00:07:38.627680Z"}, {"uuid": "2416cd3f-efcc-44e5-ab19-ee83138cbe1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://www.securityweek.com/critical-netscaler-vulnerability-exploited-in-attacks/", "content": "Tracked as CVE-2026-19490, the authentication bypass flaw has been exploited in the wild since at least September 3.\n\nThe post Critical NetScaler Vulnerability Exploited in Attacks appeared first on SecurityWeek.", "creation_timestamp": "2026-09-11T01:00:35.581293Z"}, {"uuid": "5b554093-ef21-4c06-b4b3-27dacb85a44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19646", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv7rye6rx72d", "content": "Daily IT Security Digest \u2014 2026-09-11\nCVE-2026-19646 (CVSS 9.1) affects IBM Common Licensing and ART 9.0.x via improper Host header validation enabling remote redirection. Organizations should restrict access and monitor for abuse indicators until patches are available.\n\nSources: Mastodon @offseq", "creation_timestamp": "2026-09-11T05:02:11.328937Z"}, {"uuid": "270a9602-7c1d-4e5a-aa3c-a0f33c29635d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv7spx2cmt2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T05:15:26.101023Z"}, {"uuid": "1bbb52df-7426-4ad5-80e0-8dd8332855d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19991", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2k3effdb7ocs5", "content": "CVE-2026-19991 - UsersWP\nCVE ID : CVE-2026-19991\n \n Published : Sept. 11, 2026, 4:17 a.m. | 1\u00a0hour, 18\u00a0minutes ago\n \n Description : The UsersWP plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.2.70 via the upload_file_remove() A...", "creation_timestamp": "2026-09-11T05:39:59.457364Z"}, {"uuid": "0cd29674-76f7-4fca-ad83-d354f7f815c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv7wdhtggx2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T06:19:59.063116Z"}, {"uuid": "6d6973e4-fae2-48a1-8856-97bdcf348dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/trinity.sh/post/3mv7zvpro7y22", "content": "CVE-2026-19490: a CVSS 9.3 auth bypass in NetScaler ADC/Gateway (CWE-288). Unauthenticated attacker reaches protected resources on a Gateway/AAA vserver \u2014 SAML action on newer builds. CISA KEV due Sep 12. https://trinity.sh/posts/2026-09-11-netscaler-saml-auth-bypass-kev/", "creation_timestamp": "2026-09-11T07:23:52.619315Z"}, {"uuid": "93286e39-5850-4082-aa8d-c40a8205e41f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv7yykihoc2g", "content": "\ud83d\udd34 NetScaler CVE-2026-19490 under active attack\n\nCritical CVSS 9.3 authentication bypass affecting NetScaler ADC & Gateway. Public PoC appeared Sept 2, attacks followed the next day, and CISA added it to KEV.\n\nstemshop.top/blog/netscal...\n\n#CVE #CVE202619490 #NetScaler #Citrix #KEV #CyberSecurity", "creation_timestamp": "2026-09-11T07:07:39.965101Z"}, {"uuid": "90f7b755-7273-4477-a465-366267779156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/117251315240037928", "content": "Safely detect Citrix NetScaler SAML auth bypass (CVE-2026-19490) https://github.com/BishopFox/CVE-2026-19490-check", "creation_timestamp": "2026-09-11T07:51:26.949489Z"}, {"uuid": "0a66bbaa-50a6-4637-b52b-2e9d49a2b890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mva3h3jmgjw2", "content": "Safely detect Citrix NetScaler SAML auth bypass (CVE-2026-19490) https://github.com/BishopFox/CVE-2026-19490-check", "creation_timestamp": "2026-09-11T07:51:35.063186Z"}, {"uuid": "747b6da0-28a8-4bd6-92fa-e400bbbc9581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvaat3p2j52t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T09:27:42.009847Z"}, {"uuid": "8b2c1582-1d58-462e-b101-f685ff0b5c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19557", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvabt5rf2k2a", "content": "\u300cChrome\u300d\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8 - \u8106\u5f31\u60275\u4ef6\u3092\u4fee\u6b63\n\nGoogle\u306f\u73fe\u5730\u6642\u95932026\u5e748\u670811\u65e5\u3001\u540c\u793e\u30d6\u30e9\u30a6\u30b6\u300cChrome\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\nWindows\u304a\u3088\u3073macOS\u5411\u3051\u306b\u300cChrome 151.0.7922.138\u300d\u300c\u540c151.0.7922.137\u300d\u3001Linux\u5411\u3051\u306b\u300c\u540c151.0.7922.137\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3082\u306e\u3002\n\n...\n\n\u5177\u4f53\u7684\u306b\u306f\u300cTabStrip\u300d\u306e\u300cCVE-2026-19557\u300d\u3001\u300cExtensions\u300d\u306e\u300cCVE-2026-19558\u300d\u3001\u300cHTML\u300d\u306e\u300cCVE-2026-19559\u300d\u3001\u300cBlink\u300d\u306e\u300cCVE-2026-1956...", "creation_timestamp": "2026-09-11T09:45:39.300137Z"}, {"uuid": "37642d98-d7bd-464e-80c3-6c55718f0dc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19558", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvabt5rf2k2a", "content": "\u300cChrome\u300d\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8 - \u8106\u5f31\u60275\u4ef6\u3092\u4fee\u6b63\n\nGoogle\u306f\u73fe\u5730\u6642\u95932026\u5e748\u670811\u65e5\u3001\u540c\u793e\u30d6\u30e9\u30a6\u30b6\u300cChrome\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\nWindows\u304a\u3088\u3073macOS\u5411\u3051\u306b\u300cChrome 151.0.7922.138\u300d\u300c\u540c151.0.7922.137\u300d\u3001Linux\u5411\u3051\u306b\u300c\u540c151.0.7922.137\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3082\u306e\u3002\n\n...\n\n\u5177\u4f53\u7684\u306b\u306f\u300cTabStrip\u300d\u306e\u300cCVE-2026-19557\u300d\u3001\u300cExtensions\u300d\u306e\u300cCVE-2026-19558\u300d\u3001\u300cHTML\u300d\u306e\u300cCVE-2026-19559\u300d\u3001\u300cBlink\u300d\u306e\u300cCVE-2026-1956...", "creation_timestamp": "2026-09-11T09:45:39.832275Z"}, {"uuid": "d9307d83-1050-4299-80a1-ffc46c9add9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19559", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvabt5rf2k2a", "content": "\u300cChrome\u300d\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8 - \u8106\u5f31\u60275\u4ef6\u3092\u4fee\u6b63\n\nGoogle\u306f\u73fe\u5730\u6642\u95932026\u5e748\u670811\u65e5\u3001\u540c\u793e\u30d6\u30e9\u30a6\u30b6\u300cChrome\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\nWindows\u304a\u3088\u3073macOS\u5411\u3051\u306b\u300cChrome 151.0.7922.138\u300d\u300c\u540c151.0.7922.137\u300d\u3001Linux\u5411\u3051\u306b\u300c\u540c151.0.7922.137\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3082\u306e\u3002\n\n...\n\n\u5177\u4f53\u7684\u306b\u306f\u300cTabStrip\u300d\u306e\u300cCVE-2026-19557\u300d\u3001\u300cExtensions\u300d\u306e\u300cCVE-2026-19558\u300d\u3001\u300cHTML\u300d\u306e\u300cCVE-2026-19559\u300d\u3001\u300cBlink\u300d\u306e\u300cCVE-2026-1956...", "creation_timestamp": "2026-09-11T09:45:39.913631Z"}, {"uuid": "6016b33a-1517-4de3-b7cc-ace6f8ad934d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-1956", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvabt5rf2k2a", "content": "\u300cChrome\u300d\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8 - \u8106\u5f31\u60275\u4ef6\u3092\u4fee\u6b63\n\nGoogle\u306f\u73fe\u5730\u6642\u95932026\u5e748\u670811\u65e5\u3001\u540c\u793e\u30d6\u30e9\u30a6\u30b6\u300cChrome\u300d\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\n\nWindows\u304a\u3088\u3073macOS\u5411\u3051\u306b\u300cChrome 151.0.7922.138\u300d\u300c\u540c151.0.7922.137\u300d\u3001Linux\u5411\u3051\u306b\u300c\u540c151.0.7922.137\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3082\u306e\u3002\n\n...\n\n\u5177\u4f53\u7684\u306b\u306f\u300cTabStrip\u300d\u306e\u300cCVE-2026-19557\u300d\u3001\u300cExtensions\u300d\u306e\u300cCVE-2026-19558\u300d\u3001\u300cHTML\u300d\u306e\u300cCVE-2026-19559\u300d\u3001\u300cBlink\u300d\u306e\u300cCVE-2026-1956...", "creation_timestamp": "2026-09-11T09:45:40.001108Z"}, {"uuid": "0786b9cd-7f08-4127-9ef3-57c0db48aa37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19486", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4cimsmsmy7wyj", "content": "CVE-2026-19486 - SSRF in Gemini Enterprise Agent Platform App Builder\nCVE ID : CVE-2026-19486\n \n Published : Sept. 11, 2026, 8:18 a.m. | 42\u00a0minutes ago\n \n Description : A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Buil...", "creation_timestamp": "2026-09-11T09:57:57.386668Z"}, {"uuid": "d2742e0a-c19d-4f88-a1a6-333fd547497e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/br4inde4d.bsky.social/post/3mvaef25xbs2m", "content": "In my latest blog post examining a NetScaler auth bypass CVE-2026-19490, I break down all the different ways the impact can vary depending on the the appliance configuration \u2013 ranging from DoS to full root compromise.\n\nbishopfox.com/blog/mind-th...", "creation_timestamp": "2026-09-11T10:31:26.766207Z"}, {"uuid": "6b9bb78f-f077-4d54-9406-5aaaaa4e252c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19619", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q", "content": "\ud83d\udd17 CVE : CVE-2024-11222, CVE-2025-14871, CVE-2026-1168, CVE-2026-12910, CVE-2026-13210, CVE-2026-16794, CVE-2026-19619, CVE-2026-3855, CVE-2026-7514, CVE-2026-78252, CVE-2026-79708, CVE-2026-8030, CVE-2026-82837, CVE-2026-85706, CVE-2026-86340, CVE-2026-86341, CVE-2026-87719, CVE-2026-88765", "creation_timestamp": "2026-09-11T14:00:11.434014Z"}, {"uuid": "1fbe27ad-2c6e-43f3-8937-99bcd7f86473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvb4vezjpq2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T17:50:03.779630Z"}, {"uuid": "dfe53fba-93da-4ad6-98e3-58da2637225b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19248", "type": "seen", "source": "https://bsky.app/profile/swedencpp.bsky.social/post/3mvbe7jinou2t", "content": "\ud83c\uddf8\ud83c\uddea SwedenCpp.se #Cpp daily: (24h + upcoming)\n\ud83c\udfa5 3 videos\n\ud83d\udcdd 3 blogs\n\ud83d\ude80 4 releases\n\ud83c\udf99\ufe0f 1 podcast\n\nRandom \ud83d\udcdd pick: Security advisory: CVE-2026-19248: Unbounded ...\nhttps://www.qt.io/blog/security-advisory-cve-2026-19248", "creation_timestamp": "2026-09-11T20:00:58.859961Z"}, {"uuid": "83593f16-5d71-4b0b-a4d7-d72b73a05a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbl2bldtq2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T22:03:18.961928Z"}, {"uuid": "42a7ac53-404b-46f0-a88a-e6505bdb8afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mvbkplx52s2g", "content": "Citrix NetScaler ADC / Gateway CVE-2026-19490 Vulnerability Checker https://packetstorm.news/files/231210 #exploit", "creation_timestamp": "2026-09-11T21:57:20.964123Z"}, {"uuid": "06a97e59-5cdd-4cde-9f0c-907bd8c58da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvbrxzhofk2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T00:07:19.278679Z"}, {"uuid": "2ae0076c-0d26-4cd4-b873-56a85b312f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19232", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvc5p5tskd2y", "content": "\ud83d\udccc CVE-2026-19232 - Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the c... https://www.cyberhub.blog/cves/CVE-2026-19232", "creation_timestamp": "2026-09-12T03:37:07.180030Z"}, {"uuid": "dad3d9c9-721f-40a7-bf7e-50a661d92890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvdkafm6wc2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T16:54:10.727196Z"}, {"uuid": "63ff9659-0ca6-4612-bbe2-4c0023806dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvdnnjibqs27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T17:55:11.448250Z"}, {"uuid": "7f0db7dc-bb38-419d-879c-be6fb4daa8dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvdvangztm2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T20:11:09.764064Z"}, {"uuid": "d2d5505c-fc70-4110-b023-9c7db83bf19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mveupgclfk2c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T05:34:11.651562Z"}, {"uuid": "7e664e99-da4b-4653-a854-a7d08dcdc012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvf7vnu33a2v", "content": "Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490", "creation_timestamp": "2026-09-13T08:54:32.574885Z"}, {"uuid": "ef2135bb-e571-49f2-a89a-67ddacc6b517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvfgfnvh3e2g", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; \u2026\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-19490\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T10:50:51.038880Z"}, {"uuid": "5dc9c968-0ea5-4234-b992-61033de9ceb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "Telegram/D3eLZVc7h2lGu52Jh8ruDiE9lwCScvdIOQI0bH64z2-tgu8", "content": "", "creation_timestamp": "2026-09-14T03:00:15.631602Z"}, {"uuid": "00762633-3568-422b-bb4a-aa32df82cecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19619", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260914", "content": "", "creation_timestamp": "2026-09-14T07:45:24.704947Z"}, {"uuid": "c997d35c-271d-45c7-8439-5abde8555419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19619", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-25", "content": "", "creation_timestamp": "2026-09-14T07:46:04.121362Z"}, {"uuid": "da9910df-751a-4dc4-b91d-abd8358bbbdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19232", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvitqh757i23", "content": "CVE-2026-19232 is trending. Hype score 8, currently #10 on cvemon.\n\nAdobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19232", "creation_timestamp": "2026-09-14T19:27:30.963487Z"}, {"uuid": "4384e829-cbb1-4e0a-8c41-6e8bb627811a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/true_secator/8607", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0432 GitLab \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 GitLab.\n\nWatchTowr \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GitLab \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f.\n\nCVE-2026-85706 (CVSS 10/10) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Community Edition (CE) \u0438 Enterprise Edition (EE) \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 18.7 (\u0434\u043e 19.1.8), 19.2 (\u0434\u043e 19.2.6) \u0438 19.3 (\u0434\u043e 19.3.2).\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443, \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a GitLab \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, WatchTowr \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u044d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u043e\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 GitLab \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438, \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 GraphQL (CVE-2026-19478), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c WatchTowr, \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 HTTP POST-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a URI /api/v4/projects/{id}/repository/commits/, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b file.path, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0421\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b GitLab \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u043e\u0432\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0435\u0449\u0435 17 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2026-87719 (CVSS 9,9/10) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u043e\u043a GraphQL, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u00ab\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u043c \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u0438\u0441\u043a\u0430 \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\u00bb.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 GitLab CE/EE 19.1.8, 19.2.6 \u0438 19.3.2 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0448\u0435\u0441\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c CI/CD, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0438 \u0438 DoS.\n\n\u041f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c GitLab \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443, \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c CI/CD, \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u044b \u0441\u0431\u043e\u0440\u043a\u0438, \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0443 \u0438\u043b\u0438 \u043e\u0442\u0440\u0430\u0432\u043b\u044f\u044f \u0435\u0433\u043e, \u0447\u0442\u043e, \u043a\u0430\u043a \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430, \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u043b\u044e\u0431\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u0430\u043e\u043b\u044c\u044f.", "creation_timestamp": "2026-09-14T23:00:03.112775Z"}, {"uuid": "e378db52-35a0-410e-aba4-33bde67e8efd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "published-proof-of-concept", "source": "Telegram/D3eLZVc7h2lGu52Jh8ruDiE9lwCScvdIOQI0bH64z2-tgu8", "content": "", "creation_timestamp": "2026-09-15T00:00:21.043507Z"}, {"uuid": "2170d644-1ad5-46f5-892e-586af25e7c0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/true_secator/8607", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0432 GitLab \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 GitLab.\n\nWatchTowr \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GitLab \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f.\n\nCVE-2026-85706 (CVSS 10/10) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Community Edition (CE) \u0438 Enterprise Edition (EE) \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 18.7 (\u0434\u043e 19.1.8), 19.2 (\u0434\u043e 19.2.6) \u0438 19.3 (\u0434\u043e 19.3.2).\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443, \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a GitLab \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, WatchTowr \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u044d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u043e\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 GitLab \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438, \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 GraphQL (CVE-2026-19478), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c WatchTowr, \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 HTTP POST-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a URI /api/v4/projects/{id}/repository/commits/, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b file.path, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0421\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b GitLab \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u043e\u0432\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0435\u0449\u0435 17 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2026-87719 (CVSS 9,9/10) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u043e\u043a GraphQL, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u00ab\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u043c \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u0438\u0441\u043a\u0430 \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c\u00bb.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 GitLab CE/EE 19.1.8, 19.2.6 \u0438 19.3.2 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0448\u0435\u0441\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c CI/CD, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0438 \u0438 DoS.\n\n\u041f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c GitLab \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443, \u0441\u0435\u043a\u0440\u0435\u0442\u0430\u043c CI/CD, \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u044b \u0441\u0431\u043e\u0440\u043a\u0438, \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c\u0443 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0443 \u0438\u043b\u0438 \u043e\u0442\u0440\u0430\u0432\u043b\u044f\u044f \u0435\u0433\u043e, \u0447\u0442\u043e, \u043a\u0430\u043a \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430, \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u043b\u044e\u0431\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u0430\u043e\u043b\u044c\u044f.", "creation_timestamp": "2026-09-15T00:00:08.506777Z"}, {"uuid": "b485071b-de65-48ad-a34b-18e3164fa08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19290", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/ibm-security-advisory-av26-922", "content": "", "creation_timestamp": "2026-09-15T16:16:39.076227Z"}, {"uuid": "358585f5-8eda-411d-81ed-d64090bab00e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19780", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvl4oyo3xk2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19780: Koha Eval Code Injection Remote Code Execution Vulnerability\nCVSS 8.8 \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-19780\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-15T17:13:05.890635Z"}, {"uuid": "e9c25a0d-6ea1-4867-90d9-7febe031d4d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19773", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvlda7yvbf2g", "content": "CVE-2026-19773 - libwebsockets\nThe libwebsockets library mishandles certain HTTP/2 headers, letting a remote user send crafted data that writes beyond a memory buffer. This can cause the attacker to execute any\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#libwebsockets #CVE #infosec", "creation_timestamp": "2026-09-15T19:10:06.282069Z"}, {"uuid": "c040dcfc-cafb-4db4-b080-55a8f3668883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19885", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvlgrj64du2g", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19885: OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability\nCVSS 7.8 \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-19885\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-15T20:13:27.115584Z"}, {"uuid": "8b0871a0-275f-4171-b261-1994e25a23af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19290", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvlge4g6lp2i", "content": "~Cybergcca~\nIBM MQ RCE and vulnerabilities affect GNU libextractor, Firefox, and Docker Sandboxes; patch promptly.\n-\nIOCs: CVE-2026-13293, CVE-2026-19290, CVE-2026-91752\n-\n#CVE202613293 #ThreatIntel #Vulnerability", "creation_timestamp": "2026-09-15T20:05:57.881032Z"}, {"uuid": "3d606ad1-8db8-4f2e-9e35-fb253400c5db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19773", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvlgjaxn532p", "content": "\ud83d\udea8 CVE-2026-19773 \u2014 CVSS 9.8 CRITICAL\n\nlibwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. Thi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19773\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T20:08:50.286930Z"}, {"uuid": "e28db3ed-2547-4d36-9074-779663702102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19781", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvlgrhiprk2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19781: Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability\nCVSS 7.8 \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-19781\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-15T20:13:25.910130Z"}, {"uuid": "cc7718c0-4634-40e3-a234-070168d00fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19886", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvlgrkta4a2i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19886: OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability\nCVSS 7.8 \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-19886\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-15T20:13:28.780759Z"}, {"uuid": "a4261104-d03f-457e-8636-1da2256c79d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19773", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvlgrmigsz2q", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-19773: libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability\nCVSS 9.8 \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-19773\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-15T20:13:30.554204Z"}, {"uuid": "69624188-2b8a-4faa-95da-c968a4bc3c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19774", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvlgroc4e426", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-19774: BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability\nCVSS 7.1 \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-19774\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-15T20:13:32.392604Z"}, {"uuid": "cb033615-c17d-4339-99f2-c042e1e3427c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19490", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mvm3ojn7zk2e", "content": "*burp* CISA put Citrix NetScaler CVE-2026-19490 on the KEV list\u2014auth bypass on gateway and AAA virtual servers, exploited in the wild since at least Sept 3. Congrats Earth: your remote-access front door was optional. day259.038", "creation_timestamp": "2026-09-16T02:27:37.496730Z"}, {"uuid": "8a77e2a4-da10-48dc-ad60-c1d5308ec267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19174", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mvmvs6f3ph2m", "content": "Original text: \"A Brilliantly Simple Bug In V8\" \u2014 QED, QED Audit (5 September 2026). Code listings and the CVE table follow the source.\nhttps://core-jmp.org/2026/09/brilliantly-simple-v8-cve-2026-19174/", "creation_timestamp": "2026-09-16T10:14:57.009117Z"}, {"uuid": "1ae82c0b-b6ab-44d5-af0d-f8e474720061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19666", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mvoasfpe4c22", "content": "BIND 9\u306e\u8106\u5f31\u6027(High: CVE-2026-19666, CVE-2026-19667, CVE-2026-76163, CVE-2026-77692, CVE-2026-80274, CVE-2026-81563, CVE-2026-81736, Medium: CVE-2026-19033, \u305d\u306e\u4ed6)\u3068\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3(9.20.29, 9.21.26)\n\n#sios_tech #security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #dns #bind\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-09-16T23:04:36.493902Z"}, {"uuid": "3dcb5af6-09de-4d54-b966-3e1a76d49602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19667", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mvoasfpe4c22", "content": "BIND 9\u306e\u8106\u5f31\u6027(High: CVE-2026-19666, CVE-2026-19667, CVE-2026-76163, CVE-2026-77692, CVE-2026-80274, CVE-2026-81563, CVE-2026-81736, Medium: CVE-2026-19033, \u305d\u306e\u4ed6)\u3068\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3(9.20.29, 9.21.26)\n\n#sios_tech #security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #dns #bind\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-09-16T23:04:36.533599Z"}, {"uuid": "ff98b56a-018c-4a82-940f-b4fdc4cc091d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19033", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mvoasfpe4c22", "content": "BIND 9\u306e\u8106\u5f31\u6027(High: CVE-2026-19666, CVE-2026-19667, CVE-2026-76163, CVE-2026-77692, CVE-2026-80274, CVE-2026-81563, CVE-2026-81736, Medium: CVE-2026-19033, \u305d\u306e\u4ed6)\u3068\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3(9.20.29, 9.21.26)\n\n#sios_tech #security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #dns #bind\n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-09-16T23:04:37.131587Z"}]}